last executing test programs: 6.367493175s ago: executing program 3 (id=2867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r6, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) read(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1) 5.095973921s ago: executing program 4 (id=2876): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1) 4.749918312s ago: executing program 0 (id=2878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x98}}, 0x0) 4.74967865s ago: executing program 4 (id=2879): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) 4.076302622s ago: executing program 2 (id=2880): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000200), 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.901042147s ago: executing program 4 (id=2882): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) getsockopt$rose(r1, 0x104, 0x4, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.235738884s ago: executing program 0 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.173627722s ago: executing program 1 (id=2886): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 2.930612879s ago: executing program 0 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x4040844}, 0x400c080) 2.930208903s ago: executing program 1 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a3100000000050001000700efff1b0007800c00018008000140ffffffff0c00148008000140ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.813313936s ago: executing program 4 (id=2889): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x0, 0x0, 0x10001}) 2.789533913s ago: executing program 3 (id=2890): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) 2.703945292s ago: executing program 2 (id=2891): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 2.682447171s ago: executing program 1 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000022000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.595388652s ago: executing program 3 (id=2893): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f00000001c0)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000c14010026bd7000fbdbdf2508003d00050000000800110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) syz_emit_ethernet(0x1c1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.571467004s ago: executing program 2 (id=2894): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.424903318s ago: executing program 4 (id=2895): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 2.152470058s ago: executing program 1 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000080)=@tcp6=r1, 0x1}, 0x20) 1.95432239s ago: executing program 1 (id=2897): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.941448812s ago: executing program 4 (id=2898): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a", 0x2}], 0x1) 1.826685692s ago: executing program 0 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.795332844s ago: executing program 1 (id=2900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r6, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) read(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1) 1.746081325s ago: executing program 3 (id=2901): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000200), 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.394588951s ago: executing program 3 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 1.319439486s ago: executing program 3 (id=2903): inotify_add_watch(0xffffffffffffffff, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0xbcdb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x6, 0x0, 0x0) 1.288757463s ago: executing program 2 (id=2904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a3100000000050001000700efff1b0007800c00018008000140ffffffff0c00148008000140ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 654.96809ms ago: executing program 2 (id=2905): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0xc000003, 0x0, 0x0, 0x1, 0x157c}]}) 490.817466ms ago: executing program 2 (id=2906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r6, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) read(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1) 89.307739ms ago: executing program 0 (id=2907): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=2908): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x41, 0x4, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kernel console output (not intermixed with test programs): th="/dev/nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.411072][ T29] audit: type=1400 audit(2000000250.657:2139): avc: denied { ioctl } for pid=13311 comm="syz.1.1662" path="/dev/nbd1" dev="devtmpfs" ino=680 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.491653][ T29] audit: type=1400 audit(2000000250.760:2140): avc: denied { setopt } for pid=13313 comm="syz.2.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 752.562878][ T29] audit: type=1400 audit(2000000250.873:2141): avc: denied { write } for pid=13317 comm="syz.1.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 752.655087][T13324] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1668'. [ 753.011842][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 753.020783][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 753.321864][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 753.478454][ T30] usb 4-1: USB disconnect, device number 35 [ 753.483751][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.517572][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.546446][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 753.557103][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.644006][ T9] usb 3-1: config 0 descriptor?? [ 753.672944][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 754.384275][T13346] kvm: pic: non byte write [ 754.881556][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 754.913160][T13369] net_ratelimit: 27 callbacks suppressed [ 754.913177][T13369] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 754.965558][T13372] netlink: 'syz.3.1685': attribute type 32 has an invalid length. [ 756.244715][ T9] usb 3-1: USB disconnect, device number 34 [ 756.407344][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 756.407360][ T29] audit: type=1400 audit(2000000254.493:2148): avc: denied { create } for pid=13404 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 756.495951][T13406] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1695'. [ 757.499754][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 758.030619][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 758.041394][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 759.084187][ T6532] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 759.095003][ T5814] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 759.255545][ T6532] usb 5-1: Using ep0 maxpacket: 8 [ 759.426519][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.501803][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.678419][ T5814] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 759.704235][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.723564][ T5814] usb 2-1: config 0 descriptor?? [ 759.747804][ T5814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 759.851606][ T6532] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 760.135055][T13453] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1712'. [ 760.520653][T13457] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 760.639378][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 760.651262][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 760.660953][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 760.729997][ T29] audit: type=1400 audit(2000000258.534:2149): avc: denied { setopt } for pid=13466 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 761.556974][ T29] audit: type=1400 audit(2000000259.319:2150): avc: denied { create } for pid=13494 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.621928][ T29] audit: type=1400 audit(2000000259.338:2151): avc: denied { bind } for pid=13494 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.749321][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 762.156505][T13506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1734'. [ 762.483430][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 762.739365][ T6532] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 762.783396][ T6532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.795570][ T6532] usb 5-1: Product: syz [ 762.910998][ T30] usb 2-1: USB disconnect, device number 53 [ 762.923304][ T6532] usb 5-1: config 0 descriptor?? [ 762.965089][ T6532] usb 5-1: can't set config #0, error -71 [ 762.987391][ T6532] usb 5-1: USB disconnect, device number 36 [ 763.141416][ T29] audit: type=1400 audit(2000000260.797:2152): avc: denied { ioctl } for pid=13518 comm="syz.0.1740" path="socket:[35316]" dev="sockfs" ino=35316 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 763.342918][ T29] audit: type=1400 audit(2000000260.984:2153): avc: denied { read write } for pid=13526 comm="syz.1.1743" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 763.415836][ T29] audit: type=1400 audit(2000000261.022:2154): avc: denied { open } for pid=13526 comm="syz.1.1743" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 763.570696][ T29] audit: type=1400 audit(2000000261.022:2155): avc: denied { ioctl } for pid=13526 comm="syz.1.1743" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 764.757996][ T29] audit: type=1400 audit(2000000262.303:2156): avc: denied { create } for pid=13552 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 764.780647][ T29] audit: type=1400 audit(2000000262.303:2157): avc: denied { ioctl } for pid=13552 comm="syz.3.1748" path="socket:[35364]" dev="sockfs" ino=35364 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 764.873674][T13556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=13556 comm=syz.4.1751 [ 764.923741][ T29] audit: type=1400 audit(2000000262.453:2158): avc: denied { getopt } for pid=13561 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 765.048982][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 765.057890][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 765.432424][ T29] audit: type=1400 audit(2000000262.939:2159): avc: denied { ioctl } for pid=13579 comm="syz.2.1761" path="net:[4026533091]" dev="nsfs" ino=4026533091 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 765.444195][T13556] ISOFS: Unable to identify CD-ROM format. [ 765.669641][ T29] audit: type=1400 audit(2000000263.154:2160): avc: denied { setopt } for pid=13589 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 766.532030][ T29] audit: type=1400 audit(2000000263.968:2161): avc: denied { create } for pid=13617 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 766.603914][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 766.624679][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 766.812666][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 766.821611][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 766.902159][T13633] tipc: Can't bind to reserved service type 0 [ 767.957318][ T6532] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 768.082086][T13664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1789'. [ 768.181822][ T6532] usb 2-1: Using ep0 maxpacket: 8 [ 768.208509][T13669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=13669 comm=syz.0.1788 [ 768.400824][T13679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1792'. [ 768.502380][ T6532] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 768.523004][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 768.523015][ T29] audit: type=1400 audit(2000000265.830:2169): avc: denied { read } for pid=13682 comm="syz.4.1796" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 768.560812][T13662] binder: BINDER_SET_CONTEXT_MGR already set [ 768.601212][ T29] audit: type=1400 audit(2000000265.858:2170): avc: denied { open } for pid=13682 comm="syz.4.1796" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 768.662839][T13662] binder: 13657:13662 ioctl 4018620d 200000004a80 returned -16 [ 769.163723][ T6532] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 769.190294][ T6532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.251656][ T6532] usb 2-1: Product: syz [ 769.266568][ T6532] usb 2-1: Manufacturer: syz [ 769.292339][ T6532] usb 2-1: SerialNumber: syz [ 769.578026][ T6532] usb 2-1: config 0 descriptor?? [ 769.697955][ T6532] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 769.707948][ T6532] usb 2-1: setting power ON [ 769.712615][ T6532] dvb-usb: bulk message failed: -22 (2/0) [ 769.748210][ T6532] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 769.761866][ T6532] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 769.772852][ T6532] usb 2-1: media controller created [ 769.818645][ T6532] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.857547][ T6532] usb 2-1: selecting invalid altsetting 6 [ 769.863662][ T6532] usb 2-1: digital interface selection failed (-22) [ 769.870551][ T6532] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 769.917569][ T6532] usb 2-1: setting power OFF [ 769.931912][ T6532] dvb-usb: bulk message failed: -22 (2/0) [ 769.953632][ T6532] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 769.980574][ T6532] (NULL device *): no alternate interface [ 770.120028][T13650] dvb-usb: bulk message failed: -22 (3/0) [ 770.144042][ T29] audit: type=1400 audit(2000000267.345:2171): avc: denied { write } for pid=13696 comm="syz.0.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 770.160178][T13650] dvb-usb: bulk message failed: -22 (4/0) [ 770.232156][T13650] cxusb: i2c read failed [ 770.999654][T13722] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1806'. [ 771.451018][T13724] netlink: 'syz.2.1807': attribute type 21 has an invalid length. [ 771.744511][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 771.753451][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 771.994383][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 772.279592][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 772.310636][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.342065][ T9] usb 4-1: Product: syz [ 772.358152][ T9] usb 4-1: Manufacturer: syz [ 772.367244][ T9] usb 4-1: SerialNumber: syz [ 772.381924][ T9] usb 4-1: config 0 descriptor?? [ 772.413734][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 772.864933][ T9] gspca_sunplus: reg_w_riv err -71 [ 772.886760][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 772.905530][ T29] audit: type=1400 audit(2000000269.927:2172): avc: denied { create } for pid=13751 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 772.939404][ T9] usb 4-1: USB disconnect, device number 36 [ 772.977529][ T29] audit: type=1400 audit(2000000269.927:2173): avc: denied { write } for pid=13751 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 773.287391][T13760] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1817'. [ 773.789444][T13754] binder: BINDER_SET_CONTEXT_MGR already set [ 773.800812][T13754] binder: 13749:13754 ioctl 4018620d 200000004a80 returned -16 [ 773.809656][ T29] audit: type=1400 audit(2000000270.750:2174): avc: denied { create } for pid=13769 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 774.032003][ T29] audit: type=1400 audit(2000000270.750:2175): avc: denied { write } for pid=13769 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 774.138617][T13776] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1820'. [ 775.314924][ T6532] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 775.393234][ T6532] usb 2-1: USB disconnect, device number 54 [ 775.479840][ T29] audit: type=1400 audit(2000000272.340:2176): avc: denied { connect } for pid=13794 comm="syz.4.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 775.911421][T13804] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1831'. [ 776.438635][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.236077][T13824] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 777.344228][ T29] audit: type=1400 audit(2000000274.080:2177): avc: denied { write } for pid=13820 comm="syz.1.1837" name="arp" dev="proc" ino=4026533322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 777.899814][ T29] audit: type=1400 audit(2000000274.566:2178): avc: denied { setopt } for pid=13832 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 778.954883][T13861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=13861 comm=syz.3.1849 [ 779.020516][T13849] binder: BINDER_SET_CONTEXT_MGR already set [ 779.058015][T13861] ISOFS: Unable to identify CD-ROM format. [ 779.125362][T13849] binder: 13841:13849 ioctl 4018620d 200000004a80 returned -16 [ 779.234687][T13880] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1859'. [ 781.903799][T13909] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 781.916580][T13909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1867'. [ 782.088407][T13911] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1868'. [ 782.297406][T13920] tmpfs: Bad value for 'mpol' [ 782.447846][ T29] audit: type=1400 audit(2000000278.860:2179): avc: denied { read write } for pid=13921 comm="syz.2.1873" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 782.519730][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 782.565955][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 782.580362][ T29] audit: type=1400 audit(2000000278.879:2180): avc: denied { open } for pid=13921 comm="syz.2.1873" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 782.610606][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 782.619644][ T29] audit: type=1400 audit(2000000278.897:2181): avc: denied { setattr } for pid=13921 comm="syz.2.1873" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 782.619798][ T29] audit: type=1400 audit(2000000278.925:2182): avc: denied { mount } for pid=13921 comm="syz.2.1873" name="/" dev="ramfs" ino=36599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 782.760951][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 782.859906][T13935] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1877'. [ 782.963695][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 782.972649][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 784.438332][T13976] binder: 13965:13976 ioctl c0306201 0 returned -14 [ 784.633116][T13986] __nla_validate_parse: 3 callbacks suppressed [ 784.633128][T13986] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1894'. [ 784.923366][T10649] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 785.094387][T10649] usb 2-1: Using ep0 maxpacket: 8 [ 785.121280][T10649] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 785.158984][T10649] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 785.211670][T10649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.232869][T10649] usb 2-1: Product: syz [ 785.246519][T10649] usb 2-1: Manufacturer: syz [ 785.261424][T10649] usb 2-1: SerialNumber: syz [ 785.289613][T10649] usb 2-1: config 0 descriptor?? [ 785.307505][T10649] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 785.335503][T10649] usb 2-1: setting power ON [ 785.345477][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 785.368100][T10649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.451669][T10649] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 785.479854][T10649] usb 2-1: media controller created [ 785.503177][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.535309][T10649] usb 2-1: selecting invalid altsetting 6 [ 785.541327][T10649] usb 2-1: digital interface selection failed (-22) [ 785.548677][T10649] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 785.561631][T10649] usb 2-1: setting power OFF [ 785.567979][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 785.573902][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 785.690351][T10649] (NULL device *): no alternate interface [ 786.159191][T13977] dvb-usb: bulk message failed: -22 (3/0) [ 786.186055][T13977] dvb-usb: bulk message failed: -22 (4/0) [ 786.194780][T13977] cxusb: i2c read failed [ 786.775791][T14013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 786.857651][T14020] netlink: 'syz.2.1902': attribute type 4 has an invalid length. [ 787.063086][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 787.071944][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 787.303981][ T29] audit: type=1400 audit(2000000283.396:2183): avc: denied { create } for pid=14031 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 787.363181][T14034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.374214][ T29] audit: type=1400 audit(2000000283.425:2184): avc: denied { ioctl } for pid=14031 comm="syz.2.1907" path="socket:[37114]" dev="sockfs" ino=37114 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 787.622855][T14040] binder: 14035:14040 ioctl c0306201 0 returned -14 [ 789.049898][ T5814] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 789.271414][ T5814] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.297237][ T5814] usb 5-1: config 2 interface 0 has no altsetting 0 [ 789.311693][ T5814] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 789.342380][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.353677][ T5814] usb 5-1: SerialNumber: syz [ 789.440384][T14084] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 789.447025][T14084] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 789.497856][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 789.603776][ T5814] ims_pcu 5-1:2.0: Missing CDC union descriptor [ 789.624634][ T5814] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 789.646992][ T5814] usb 5-1: USB disconnect, device number 37 [ 789.764710][T14103] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 789.919869][T14104] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1935'. [ 790.268437][T10649] usb 2-1: USB disconnect, device number 55 [ 790.507345][T14115] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1939'. [ 791.062130][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 791.096011][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 791.115070][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 791.137149][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 791.155198][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 791.190701][T14141] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 791.613938][T14156] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1952'. [ 791.638947][T14155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1956'. [ 791.936489][T10649] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 792.156275][T10649] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 792.193149][T10649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.203137][T10649] usb 3-1: Product: syz [ 792.211724][T10649] usb 3-1: Manufacturer: syz [ 792.220473][T10649] usb 3-1: SerialNumber: syz [ 792.294409][T10649] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 792.379137][ T29] audit: type=1400 audit(2000000288.148:2185): avc: denied { firmware_load } for pid=6532 comm="kworker/1:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 792.414030][ T6532] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 792.503394][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 792.524533][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 792.534300][ T29] audit: type=1400 audit(2000000288.289:2186): avc: denied { getopt } for pid=14178 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 792.928542][ T5814] usb 3-1: USB disconnect, device number 35 [ 793.539987][ T6532] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 793.576386][ T6532] ath9k_htc: Failed to initialize the device [ 793.598793][ T29] audit: type=1400 audit(2000000289.290:2187): avc: denied { create } for pid=14205 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 793.620766][ T5814] usb 3-1: ath9k_htc: USB layer deinitialized [ 793.627502][ T29] audit: type=1400 audit(2000000289.318:2188): avc: denied { setopt } for pid=14205 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 793.786239][ T29] audit: type=1400 audit(2000000289.467:2189): avc: denied { connect } for pid=14211 comm="syz.3.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 793.869304][ T29] audit: type=1400 audit(2000000289.533:2190): avc: denied { getopt } for pid=14217 comm="syz.1.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 793.965069][T14222] Driver unsupported XDP return value 0 on prog (id 293) dev N/A, expect packet loss! [ 793.984719][ T29] audit: type=1400 audit(2000000289.645:2191): avc: denied { setopt } for pid=14220 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 794.888931][ T29] audit: type=1400 audit(2000000290.496:2192): avc: denied { setopt } for pid=14236 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 795.094743][ T29] audit: type=1400 audit(2000000290.683:2193): avc: denied { ioctl } for pid=14247 comm="syz.1.1991" path="socket:[38091]" dev="sockfs" ino=38091 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 796.935696][T14270] __nla_validate_parse: 8 callbacks suppressed [ 796.935714][T14270] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1996'. [ 797.421072][ T29] audit: type=1400 audit(2000000292.853:2194): avc: denied { read write } for pid=14274 comm="syz.3.1999" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 799.687112][T10649] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 799.749182][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 799.758671][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 799.758689][ T29] audit: type=1400 audit(2000000295.033:2197): avc: denied { ioctl } for pid=14314 comm="syz.3.2013" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 799.890182][T10649] usb 2-1: device descriptor read/64, error -32 [ 799.903229][T14322] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 799.953370][ T29] audit: type=1400 audit(2000000295.229:2198): avc: denied { create } for pid=14325 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.017453][ T29] audit: type=1400 audit(2000000295.276:2199): avc: denied { connect } for pid=14325 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.218615][T10649] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 800.229078][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 801.363195][T10649] usb 2-1: device descriptor read/64, error -32 [ 801.560707][T10649] usb usb2-port1: attempt power cycle [ 801.572041][T14345] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2022'. [ 801.757578][T14355] comedi comedi0: Minor 47 could not be opened [ 802.933968][T14375] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2034'. [ 804.405146][T14391] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2037'. [ 804.632923][T14397] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2040'. [ 804.642026][T14397] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2040'. [ 804.725729][T10649] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 805.537673][T10649] usb 3-1: Using ep0 maxpacket: 8 [ 807.260713][T10649] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 807.285077][T10649] usb 3-1: can't read configurations, error -71 [ 807.723429][T14439] dlm: Unknown command passed to DLM device : 0 [ 807.723429][T14439] [ 807.956388][T14448] netlink: 'syz.1.2057': attribute type 32 has an invalid length. [ 807.994900][T14450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2055'. [ 808.250568][T10649] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 808.433737][T10649] usb 3-1: Using ep0 maxpacket: 8 [ 808.469682][T10649] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 808.888204][T10649] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 808.914427][T10649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.922446][T10649] usb 3-1: Product: syz [ 808.956469][T10649] usb 3-1: Manufacturer: syz [ 808.961561][T10649] usb 3-1: SerialNumber: syz [ 808.979471][T10649] usb 3-1: config 0 descriptor?? [ 809.119801][T10649] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 809.138013][T10649] usb 3-1: setting power ON [ 809.148248][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 809.170571][T10649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.217943][T10649] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 809.262120][T10649] usb 3-1: media controller created [ 809.489901][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.527243][T10649] usb 3-1: selecting invalid altsetting 6 [ 809.547407][T10649] usb 3-1: digital interface selection failed (-22) [ 809.569252][T10649] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 809.569266][T14434] dvb-usb: bulk message failed: -22 (3/0) [ 809.594889][T10649] usb 3-1: setting power OFF [ 809.605028][T14434] dvb-usb: bulk message failed: -22 (4/0) [ 809.611469][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 809.628253][T14434] cxusb: i2c read failed [ 809.629328][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 809.646954][ T29] audit: type=1400 audit(2000000304.293:2200): avc: denied { setopt } for pid=14471 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 809.672205][T10649] (NULL device *): no alternate interface [ 809.696002][T14474] syzkaller0: entered promiscuous mode [ 809.707354][T14474] syzkaller0: entered allmulticast mode [ 810.948078][T14495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2073'. [ 810.977531][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 811.038862][T10649] usb 3-1: USB disconnect, device number 37 [ 811.654708][T14513] syzkaller0: entered promiscuous mode [ 811.673601][T14517] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 811.682532][T14513] syzkaller0: entered allmulticast mode [ 811.814792][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2085'. [ 811.827317][ T5132] Bluetooth: hci4: SCO packet too small [ 811.841542][T14522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2085'. [ 811.873741][T14522] vlan0: entered promiscuous mode [ 812.001964][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 812.240305][T14534] netlink: zone id is out of range [ 812.245556][T14534] netlink: zone id is out of range [ 812.251268][T14534] netlink: zone id is out of range [ 812.256447][T14534] netlink: zone id is out of range [ 812.261897][T14534] netlink: zone id is out of range [ 812.267040][T14534] netlink: zone id is out of range [ 812.278516][T14534] netlink: zone id is out of range [ 812.288581][T14534] netlink: zone id is out of range [ 812.294127][T14534] netlink: zone id is out of range [ 812.299319][T14534] netlink: zone id is out of range [ 812.371323][T14539] geneve2: entered allmulticast mode [ 812.526221][T14550] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2096'. [ 813.554569][ T29] audit: type=1400 audit(2000000307.941:2201): avc: denied { bind } for pid=14555 comm="syz.4.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 813.576477][T14556] syzkaller0: entered promiscuous mode [ 813.581984][T14556] syzkaller0: entered allmulticast mode [ 813.651351][T14562] program syz.4.2104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.904058][T14581] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2110'. [ 814.337829][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 815.968841][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 816.186398][ T9] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 816.466108][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 816.506929][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.545138][ T9] usb 5-1: Product: syz [ 816.564606][ T9] usb 5-1: Manufacturer: syz [ 816.578198][ T9] usb 5-1: SerialNumber: syz [ 816.600868][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 816.637039][ T5814] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 816.910837][T14601] random: crng reseeded on system resumption [ 816.917153][ T29] audit: type=1400 audit(2000000311.094:2202): avc: denied { write } for pid=14594 comm="syz.4.2117" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 817.359797][ T9] usb 5-1: USB disconnect, device number 38 [ 817.380835][ T29] audit: type=1400 audit(2000000311.094:2203): avc: denied { open } for pid=14594 comm="syz.4.2117" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 817.786393][ T5814] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 817.793559][ T5814] ath9k_htc: Failed to initialize the device [ 817.830138][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 817.832179][ T29] audit: type=1400 audit(2000000311.954:2204): avc: denied { append } for pid=14653 comm="syz.3.2140" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 818.156886][ T29] audit: type=1400 audit(2000000312.254:2205): avc: denied { create } for pid=14670 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 818.222955][ T29] audit: type=1400 audit(2000000312.263:2206): avc: denied { setopt } for pid=14670 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 818.532200][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 818.560572][T14690] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2150'. [ 818.855368][ T5814] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 818.933771][ T29] audit: type=1400 audit(2000000312.983:2207): avc: denied { create } for pid=14697 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 819.000170][ T29] audit: type=1400 audit(2000000313.049:2208): avc: denied { sqpoll } for pid=14699 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 819.051773][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2159'. [ 819.058411][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 819.120388][ T5814] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 819.131378][ T29] audit: type=1400 audit(2000000313.170:2209): avc: denied { connect } for pid=14708 comm="syz.3.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 819.197721][ T5814] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 819.206788][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.261543][ T5814] usb 2-1: Product: syz [ 819.265757][ T5814] usb 2-1: Manufacturer: syz [ 819.270352][ T5814] usb 2-1: SerialNumber: syz [ 819.305075][ T5814] usb 2-1: config 0 descriptor?? [ 819.318102][ T5814] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 819.400679][ T5814] usb 2-1: setting power ON [ 819.405223][ T5814] dvb-usb: bulk message failed: -22 (2/0) [ 819.488850][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.529166][ T5814] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 819.832583][ T5814] usb 2-1: media controller created [ 819.875854][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.991683][ T5814] usb 2-1: selecting invalid altsetting 6 [ 820.015246][ T5814] usb 2-1: digital interface selection failed (-22) [ 820.034310][ T5814] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 820.059060][T14689] dvb-usb: bulk message failed: -22 (3/0) [ 820.068704][ T5814] usb 2-1: setting power OFF [ 820.082015][T14689] dvb-usb: bulk message failed: -22 (4/0) [ 820.131514][T14689] cxusb: i2c read failed [ 820.135795][ T5814] dvb-usb: bulk message failed: -22 (2/0) [ 820.150328][ T5814] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 820.184227][ T5814] (NULL device *): no alternate interface [ 820.217279][ T29] audit: type=1400 audit(2000000314.190:2210): avc: denied { read } for pid=14733 comm="syz.3.2170" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 820.249751][ T29] audit: type=1400 audit(2000000314.190:2211): avc: denied { open } for pid=14733 comm="syz.3.2170" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 820.416387][T10649] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 820.695537][T10649] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 820.711738][T10649] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 820.724683][T10649] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 820.735038][T10649] usb 5-1: config 220 has no interface number 2 [ 820.743267][T10649] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 820.756628][T10649] usb 5-1: config 220 interface 0 has no altsetting 0 [ 820.763572][T10649] usb 5-1: config 220 interface 76 has no altsetting 0 [ 820.778173][T10649] usb 5-1: config 220 interface 1 has no altsetting 0 [ 820.797373][T10649] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 820.806924][T10649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.815096][T10649] usb 5-1: Product: syz [ 820.819477][T10649] usb 5-1: Manufacturer: syz [ 820.824438][T10649] usb 5-1: SerialNumber: syz [ 820.982795][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 821.022280][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 821.147700][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 821.160169][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.169440][ T9] usb 3-1: Product: syz [ 821.169809][T10649] usb 5-1: selecting invalid altsetting 0 [ 821.183903][ T9] usb 3-1: Manufacturer: syz [ 821.189596][ T9] usb 3-1: SerialNumber: syz [ 821.202081][T10649] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 821.221932][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 821.230493][T10649] uvcvideo 5-1:220.0: No valid video chain found. [ 821.243569][T11209] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 821.269504][T10649] usb 5-1: selecting invalid altsetting 0 [ 821.292384][T10649] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 821.328012][T10649] usb 5-1: USB disconnect, device number 39 [ 821.811648][ T9] usb 3-1: USB disconnect, device number 38 [ 821.982231][ T5814] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 822.050711][T10649] usb 2-1: USB disconnect, device number 59 [ 822.153564][T14780] syzkaller0: entered promiscuous mode [ 822.159228][T14780] syzkaller0: entered allmulticast mode [ 822.444925][T11209] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 822.471850][T11209] ath9k_htc: Failed to initialize the device [ 822.478332][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 826.460194][T14850] net_ratelimit: 13 callbacks suppressed [ 826.460213][T14850] openvswitch: netlink: Duplicate or invalid key (type 0). [ 826.499075][T14850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.549259][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 826.576633][T14857] netlink: 'syz.1.2214': attribute type 16 has an invalid length. [ 826.595420][T14857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2214'. [ 828.395231][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 828.395290][ T29] audit: type=1400 audit(2000000321.832:2213): avc: denied { accept } for pid=14905 comm="syz.4.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 829.751180][T14943] syzkaller0: entered promiscuous mode [ 829.768825][T14943] syzkaller0: entered allmulticast mode [ 830.247765][T14954] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2249'. [ 830.270026][T14954] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 830.832539][ T29] audit: type=1400 audit(2000000324.114:2214): avc: denied { write } for pid=14965 comm="syz.3.2254" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 830.911775][T14968] syz.4.2255: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 830.947097][T14968] CPU: 0 UID: 0 PID: 14968 Comm: syz.4.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.947130][T14968] Tainted: [L]=SOFTLOCKUP [ 830.947138][T14968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.947150][T14968] Call Trace: [ 830.947156][T14968] [ 830.947163][T14968] dump_stack_lvl+0x100/0x190 [ 830.947208][T14968] warn_alloc.cold+0x95/0x1c1 [ 830.947242][T14968] ? __pfx_warn_alloc+0x10/0x10 [ 830.947280][T14968] ? kasan_save_stack+0x3f/0x50 [ 830.947311][T14968] ? kasan_save_stack+0x30/0x50 [ 830.947336][T14968] ? kasan_save_track+0x14/0x30 [ 830.947365][T14968] ? xskq_create+0xfb/0x1d0 [ 830.947393][T14968] __vmalloc_node_range_noprof+0x1252/0x1530 [ 830.947423][T14968] ? xskq_create+0xfb/0x1d0 [ 830.947458][T14968] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 830.947491][T14968] ? xskq_create+0xfb/0x1d0 [ 830.947517][T14968] vmalloc_user_noprof+0x9e/0xe0 [ 830.947538][T14968] ? xskq_create+0xfb/0x1d0 [ 830.947563][T14968] xskq_create+0xfb/0x1d0 [ 830.947591][T14968] xsk_setsockopt+0x743/0xab0 [ 830.947618][T14968] ? __pfx_xsk_setsockopt+0x10/0x10 [ 830.947652][T14968] ? find_held_lock+0x2b/0x80 [ 830.947676][T14968] ? __fget_files+0x215/0x3d0 [ 830.947700][T14968] ? selinux_socket_setsockopt+0x6a/0x80 [ 830.947720][T14968] ? __pfx_xsk_setsockopt+0x10/0x10 [ 830.947748][T14968] do_sock_setsockopt+0xf3/0x1d0 [ 830.947774][T14968] __sys_setsockopt+0x195/0x220 [ 830.947798][T14968] __x64_sys_setsockopt+0xbd/0x160 [ 830.947815][T14968] ? do_syscall_64+0x95/0xf80 [ 830.947834][T14968] ? lockdep_hardirqs_on+0x78/0x100 [ 830.947852][T14968] do_syscall_64+0x106/0xf80 [ 830.947871][T14968] ? clear_bhb_loop+0x40/0x90 [ 830.947893][T14968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.947912][T14968] RIP: 0033:0x7ff051d9c799 [ 830.947928][T14968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.947945][T14968] RSP: 002b:00007ff052c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 830.947962][T14968] RAX: ffffffffffffffda RBX: 00007ff052015fa0 RCX: 00007ff051d9c799 [ 830.947974][T14968] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 830.947984][T14968] RBP: 00007ff051e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 830.947994][T14968] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.948004][T14968] R13: 00007ff052016038 R14: 00007ff052015fa0 R15: 00007ffc1595db28 [ 830.948029][T14968] [ 830.948036][T14968] Mem-Info: [ 831.199654][T14968] active_anon:59791 inactive_anon:18630 isolated_anon:0 [ 831.199654][T14968] active_file:21122 inactive_file:40994 isolated_file:0 [ 831.199654][T14968] unevictable:768 dirty:212 writeback:0 [ 831.199654][T14968] slab_reclaimable:11155 slab_unreclaimable:101525 [ 831.199654][T14968] mapped:38310 shmem:71134 pagetables:1415 [ 831.199654][T14968] sec_pagetables:0 bounce:0 [ 831.199654][T14968] kernel_misc_reclaimable:0 [ 831.199654][T14968] free:1227871 free_pcp:8621 free_cma:0 [ 831.246455][T14968] Node 0 active_anon:241764kB inactive_anon:74520kB active_file:84388kB inactive_file:163772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155740kB dirty:848kB writeback:0kB shmem:285700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11780kB pagetables:5540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 831.321134][T14968] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 831.484136][T14968] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB [ 831.515694][T14968] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 831.522622][T14968] Node 0 DMA32 free:951820kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244664kB inactive_anon:74520kB active_file:84388kB inactive_file:163772kB unevictable:1536kB writepending:848kB zspages:2380kB present:3129332kB managed:2537192kB mlocked:0kB bounce:0kB free_pcp:31512kB local_pcp:20272kB free_cma:0kB [ 831.659044][T14968] lowmem_reserve[]: 0 0 1 1 1 [ 831.908818][T14968] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.009424][T14968] lowmem_reserve[]: 0 0 0 0 0 [ 832.015793][T14968] Node 1 Normal free:3941688kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.058530][T14968] lowmem_reserve[]: 0 0 0 0 0 [ 832.063297][T14968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 832.078013][T14968] Node 0 DMA32: 70*4kB (ME) 2499*8kB (UME) 1420*16kB (UME) 704*32kB (UME) 433*64kB (UME) 297*128kB (UME) 127*256kB (UME) 101*512kB (UME) 37*1024kB (UME) 32*2048kB (UME) 155*4096kB (UM) = 953776kB [ 832.102168][T14968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 832.121263][T14968] Node 1 Normal: 2*4kB (UM) 6*8kB (UE) 16*16kB (UME) 8*32kB (UE) 6*64kB (UE) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 959*4096kB (M) = 3941688kB [ 832.147823][T14968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.157754][T14968] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 832.167417][T14968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.177265][T14968] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 832.190471][T14968] 132964 total pagecache pages [ 832.195241][T14968] 3 pages in swap cache [ 832.200299][T14968] Free swap = 121824kB [ 832.204488][T14968] Total swap = 124996kB [ 832.212341][T14968] 2097051 pages RAM [ 832.216185][T14968] 0 pages HighMem/MovableOnly [ 832.222359][T14968] 430876 pages reserved [ 832.226529][T14968] 0 pages cma reserved [ 832.499170][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 832.644414][T14998] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2262'. [ 832.795980][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 832.817801][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 832.831084][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 832.843296][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.865903][ T9] usb 2-1: Product: syz [ 832.870728][ T9] usb 2-1: Manufacturer: syz [ 832.877718][ T9] usb 2-1: SerialNumber: syz [ 832.907274][ T9] usb 2-1: config 0 descriptor?? [ 832.917131][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 832.927406][ T9] usb 2-1: setting power ON [ 832.938425][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 832.990759][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 833.002404][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 833.011783][ T9] usb 2-1: media controller created [ 833.153199][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.468646][ T9] usb 2-1: selecting invalid altsetting 6 [ 833.480243][ T9] usb 2-1: digital interface selection failed (-22) [ 833.500788][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 833.514276][T14983] dvb-usb: bulk message failed: -22 (3/0) [ 833.525394][T14983] dvb-usb: bulk message failed: -22 (4/0) [ 833.531116][T14983] cxusb: i2c read failed [ 833.544759][ T9] usb 2-1: setting power OFF [ 833.560207][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 833.576238][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 833.610847][ T9] (NULL device *): no alternate interface [ 834.538431][T11209] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 834.741662][T11209] usb 5-1: Using ep0 maxpacket: 8 [ 834.751474][T11209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.779511][T11209] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 834.795694][T11209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.828550][T11209] usb 5-1: Product: syz [ 834.844677][T11209] usb 5-1: Manufacturer: syz [ 834.862982][T11209] usb 5-1: SerialNumber: syz [ 834.894286][T11209] usb 5-1: config 0 descriptor?? [ 834.919407][T11209] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 834.950008][T11209] usb 5-1: selecting invalid altsetting 1 [ 834.994199][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2273'. [ 835.279805][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 835.397648][T10649] usb 5-1: USB disconnect, device number 40 [ 835.413005][ T9] usb 2-1: USB disconnect, device number 60 [ 836.031799][T15047] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2274'. [ 836.343578][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.602873][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2280'. [ 837.148205][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2282'. [ 837.643256][ T29] audit: type=1400 audit(2000000330.485:2215): avc: denied { create } for pid=15073 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 837.665956][ T29] audit: type=1400 audit(2000000330.503:2216): avc: denied { setopt } for pid=15073 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 838.056801][T15089] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2291'. [ 838.110147][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2293'. [ 838.130909][T10649] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 838.526045][T10649] usb 2-1: Using ep0 maxpacket: 8 [ 838.527820][T10649] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.529884][T10649] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 838.529911][T10649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.529931][T10649] usb 2-1: Product: syz [ 838.529945][T10649] usb 2-1: Manufacturer: syz [ 838.529960][T10649] usb 2-1: SerialNumber: syz [ 838.532392][T10649] usb 2-1: config 0 descriptor?? [ 838.625567][T10649] msi2500 2-1:0.0: Registered as swradio24 [ 838.625582][T10649] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 838.740102][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 838.863964][T11209] usb 2-1: USB disconnect, device number 61 [ 838.903707][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 838.922099][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 838.940832][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 838.956943][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.966740][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 838.974831][ T9] usb 3-1: SerialNumber: syz [ 838.988424][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2299'. [ 839.161981][ T29] audit: type=1400 audit(2000000331.906:2217): avc: denied { setopt } for pid=15115 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 839.233378][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 839.250535][ T9] usb 3-1: USB disconnect, device number 39 [ 839.604958][T15126] dlm: no locking on control device [ 841.321103][ T29] audit: type=1400 audit(2000000333.917:2218): avc: denied { append } for pid=15149 comm="syz.4.2313" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 841.764405][ T5132] Bluetooth: hci2: unexpected event for opcode 0x080c [ 841.894184][T10649] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 842.000999][ T6532] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 842.123764][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 842.300148][T10649] usb 5-1: Using ep0 maxpacket: 8 [ 842.407552][ T6532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.450036][ T6532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.460512][ T6532] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 842.479499][ T6532] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 842.491997][ T6532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.639772][ T6532] usb 2-1: config 0 descriptor?? [ 842.671390][T10649] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 842.786561][T15193] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 842.821356][T10649] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 842.834709][T15193] veth0_vlan: entered allmulticast mode [ 842.845403][T10649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.994833][T10649] usb 5-1: Product: syz [ 842.999611][T10649] usb 5-1: Manufacturer: syz [ 843.004411][T10649] usb 5-1: SerialNumber: syz [ 843.033289][T10649] usb 5-1: config 0 descriptor?? [ 843.041514][T15193] veth0_vlan: left promiscuous mode [ 843.055776][T10649] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 843.061699][T15193] veth0_vlan: entered promiscuous mode [ 843.071708][T10649] usb 5-1: setting power ON [ 843.080399][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 843.080606][T15193] team0: Device veth0_vlan failed to register rx_handler [ 843.089360][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 843.105388][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 843.117386][T10649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 843.130347][T10649] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 843.138927][T10649] usb 5-1: media controller created [ 843.155918][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 843.168987][ T6532] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 4/5 [ 843.202226][ T6532] kovaplus 0003:1E7D:2D50.0006: parse failed [ 843.208292][ T6532] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 843.220134][T10649] usb 5-1: selecting invalid altsetting 6 [ 843.225881][T10649] usb 5-1: digital interface selection failed (-22) [ 843.251261][T10649] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 843.278239][ T29] audit: type=1400 audit(2000000335.760:2219): avc: denied { bind } for pid=15210 comm="syz.3.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 843.301320][T10649] usb 5-1: setting power OFF [ 843.306139][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 843.317311][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 843.327756][T10649] (NULL device *): no alternate interface [ 843.389823][ T6532] usb 2-1: USB disconnect, device number 62 [ 843.483202][T15215] dvb-usb: bulk message failed: -22 (3/0) [ 843.490224][T15215] dvb-usb: bulk message failed: -22 (4/0) [ 843.555928][T15215] cxusb: i2c read failed [ 844.302749][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2344'. [ 845.329780][ T29] audit: type=1400 audit(2000000337.678:2220): avc: denied { ioctl } for pid=15239 comm="syz.1.2347" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 845.366285][ T5132] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 845.366318][ T5132] Bluetooth: hci4: Dropping invalid advertising data [ 845.381453][ T5132] Bluetooth: hci4: Malformed LE Event: 0x02 [ 845.400192][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 845.426221][T10649] usb 5-1: USB disconnect, device number 41 [ 845.798648][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 845.807754][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 847.238866][T10649] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 847.367489][ T29] audit: type=1400 audit(2000000339.586:2221): avc: denied { connect } for pid=15278 comm="syz.3.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 847.420864][T10649] usb 3-1: Using ep0 maxpacket: 16 [ 847.451185][T10649] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 847.542901][T10649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.557979][T10649] usb 3-1: Product: syz [ 847.632314][T10649] usb 3-1: Manufacturer: syz [ 847.851080][T10649] usb 3-1: SerialNumber: syz [ 848.591656][T10649] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 848.628342][T10649] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 848.674118][T10649] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 848.710734][T10649] usb 3-1: media controller created [ 848.782415][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.938435][T10649] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 849.213833][ T5814] usb 3-1: USB disconnect, device number 40 [ 849.834104][T10649] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 849.902498][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 850.007790][T10649] usb 2-1: Using ep0 maxpacket: 8 [ 850.020469][T15331] nbd: must specify a device to reconfigure [ 850.027398][T10649] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 850.052477][T10649] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 850.082734][T10649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.101686][T10649] usb 2-1: Product: syz [ 850.112484][T10649] usb 2-1: Manufacturer: syz [ 850.137135][T10649] usb 2-1: SerialNumber: syz [ 850.157219][T10649] usb 2-1: config 0 descriptor?? [ 850.186040][T10649] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 850.310954][T10649] usb 2-1: setting power ON [ 850.315520][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 850.777838][T10649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.809735][ T6532] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 850.817308][T10649] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 850.851149][T10649] usb 2-1: media controller created [ 850.885881][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.940600][T10649] usb 2-1: selecting invalid altsetting 6 [ 850.963546][T10649] usb 2-1: digital interface selection failed (-22) [ 850.972628][T10649] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 851.048597][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 851.057519][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 851.274008][T10649] usb 2-1: setting power OFF [ 851.282251][ T6532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 851.376210][T10649] dvb-usb: bulk message failed: -22 (2/0) [ 851.381970][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 851.402262][ T6532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.423143][T10649] (NULL device *): no alternate interface [ 851.434042][ T6532] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 851.467766][ T6532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.498913][ T6532] usb 3-1: config 0 descriptor?? [ 852.026580][ T6532] aquacomputer_d5next 0003:0C70:F0B6.0007: unknown main item tag 0x3 [ 852.039054][ T6532] aquacomputer_d5next 0003:0C70:F0B6.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 852.264163][ T6532] usb 3-1: USB disconnect, device number 41 [ 852.355485][T15363] fido_id[15363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 852.724537][T15374] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2385'. [ 853.154296][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 853.163278][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 855.569311][T10649] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 855.679876][T11209] usb 2-1: USB disconnect, device number 63 [ 855.914842][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2419'. [ 856.330174][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 856.822203][T15479] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2427'. [ 857.801355][T15497] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2433'. [ 857.993838][T11209] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 858.197343][T11209] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 858.228050][T11209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.247181][T11209] usb 4-1: Product: syz [ 858.255981][T11209] usb 4-1: Manufacturer: syz [ 858.284653][T11209] usb 4-1: SerialNumber: syz [ 858.315529][T11209] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 858.339204][ T5814] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.494793][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 859.010953][T10649] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 859.039232][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 859.086875][T11209] usb 4-1: USB disconnect, device number 37 [ 859.159756][T15520] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2438'. [ 859.181347][T10649] usb 2-1: device descriptor read/64, error -32 [ 859.458321][ T6532] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 859.465991][T10649] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 859.490108][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 859.565279][ T5814] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 859.572267][ T5814] ath9k_htc: Failed to initialize the device [ 859.608424][T11209] usb 4-1: ath9k_htc: USB layer deinitialized [ 859.641257][T10649] usb 2-1: device descriptor read/64, error -32 [ 859.647627][ T6532] usb 5-1: Using ep0 maxpacket: 16 [ 859.669059][ T6532] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 859.678288][ T6532] usb 5-1: config 127 has no interface number 0 [ 859.688822][ T6532] usb 5-1: config 127 interface 124 has no altsetting 0 [ 859.707494][ T6532] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 859.718793][ T6532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.727599][ T6532] usb 5-1: Product: syz [ 859.731879][ T6532] usb 5-1: Manufacturer: syz [ 859.739744][ T6532] usb 5-1: SerialNumber: syz [ 859.768670][T10649] usb usb2-port1: attempt power cycle [ 859.960667][ T29] audit: type=1400 audit(2000000351.353:2222): avc: denied { getopt } for pid=15540 comm="syz.0.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 859.962128][T15542] tmpfs: Invalid uid '0x00000000ffffffff' [ 861.018629][T10649] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 861.407871][ T29] audit: type=1400 audit(2000000352.719:2223): avc: denied { connect } for pid=15555 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 861.818552][T10649] usb 2-1: device not accepting address 66, error -71 [ 861.876128][ T6532] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 862.233557][T15575] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2460'. [ 862.341739][ T6532] usb 5-1: failed to restore interface 124 altsetting 11 (error=-71) [ 862.579890][ T6532] usb 5-1: USB disconnect, device number 42 [ 862.639544][T15577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2463'. [ 864.755050][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 865.369767][T15615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=15615 comm=syz.4.2473 [ 865.446842][T15621] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2474'. [ 866.168517][T15626] ISOFS: Unable to identify CD-ROM format. [ 867.291436][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2483'. [ 868.032196][ T29] audit: type=1400 audit(2000000358.902:2224): avc: denied { create } for pid=15663 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 868.080551][ T29] audit: type=1400 audit(2000000358.911:2225): avc: denied { write } for pid=15663 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 868.233198][T15678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 868.239743][T15678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 868.303989][T15678] vhci_hcd vhci_hcd.0: Device attached [ 868.329778][T15680] vhci_hcd: connection closed [ 868.329932][ T193] vhci_hcd vhci_hcd.3: stop threads [ 868.356612][ T193] vhci_hcd vhci_hcd.3: release socket [ 868.761305][ T193] vhci_hcd vhci_hcd.3: disconnect device [ 868.904638][ T5814] usb 40-1: enqueue for inactive port 0 [ 869.030442][T15693] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2499'. [ 869.906425][ T5814] usb usb40-port1: attempt power cycle [ 870.909794][ T5814] usb usb40-port1: unable to enumerate USB device [ 871.273846][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 871.919058][T15741] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2511'. [ 872.736395][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 873.168465][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 873.487066][ T9] usb 5-1: config 0 has no interface number 0 [ 873.516988][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 873.692554][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.018901][T11209] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 874.028531][ T9] usb 5-1: config 0 descriptor?? [ 874.077807][ T9] usb 5-1: selecting invalid altsetting 1 [ 874.137677][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 874.148723][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 874.187799][T11209] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 874.224830][T11209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.322655][T11209] usb 3-1: config 0 descriptor?? [ 874.719147][T11209] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 874.730778][ T9] DVB: Unable to find symbol cx22700_attach() [ 874.933477][T11209] [drm:udl_init] *ERROR* Selecting channel failed [ 874.952360][ T9] DVB: Unable to find symbol tda10046_attach() [ 874.991864][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 875.046294][T11209] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 875.054437][ T9] usb 5-1: USB disconnect, device number 43 [ 875.074776][T11209] [drm] Initialized udl on minor 2 [ 875.113873][T11209] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 875.138198][T15805] syzkaller0: entered promiscuous mode [ 875.163126][T15805] syzkaller0: entered allmulticast mode [ 875.165284][T11209] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 875.210899][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 875.223868][T11209] usb 3-1: USB disconnect, device number 42 [ 875.232101][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 875.299632][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 876.028697][T11209] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 876.835407][T15840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2537'. [ 877.639040][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 877.893727][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2542'. [ 878.058850][T11209] usb 3-1: Using ep0 maxpacket: 8 [ 878.266132][T11209] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 878.319866][T15869] vim2m vim2m.0: vidioc_s_fmt queue busy [ 878.349945][T11209] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 878.387899][T11209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.442137][T11209] usb 3-1: Product: syz [ 878.475268][T11209] usb 3-1: Manufacturer: syz [ 878.607451][T11209] usb 3-1: SerialNumber: syz [ 878.636789][T11209] usb 3-1: config 0 descriptor?? [ 879.277312][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2553'. [ 880.027479][T11209] usb 3-1: can't set config #0, error -71 [ 880.055765][T11209] usb 3-1: USB disconnect, device number 43 [ 880.391913][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 880.483541][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 880.510791][T15906] binder: 15887:15906 ioctl 4018620d 0 returned -22 [ 880.989526][T11209] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 881.135163][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2566'. [ 881.268641][T11209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 881.293918][T11209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 881.322944][T11209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 881.340553][T11209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 881.350895][T11209] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 881.360275][T11209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.370904][T11209] usb 3-1: config 0 descriptor?? [ 881.631392][T11209] hdpvr 3-1:0.0: firmware version 0x3c dated íôH"Lëžlršߧ·•LɈPªÇmÏg"Áý̓‡_­-h÷•eÎ/} [ 881.706849][T11209] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 881.730167][ T29] audit: type=1400 audit(2000000371.726:2226): avc: denied { bind } for pid=15942 comm="syz.0.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.752230][ T29] audit: type=1400 audit(2000000371.745:2227): avc: denied { setopt } for pid=15942 comm="syz.0.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 882.366282][T11209] hdpvr 3-1:0.0: Could not setup controls [ 882.381677][T11209] hdpvr 3-1:0.0: registering videodev failed [ 882.389668][ T30] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 882.398986][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 882.406650][T11209] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 882.519245][T11209] usb 3-1: USB disconnect, device number 44 [ 882.613369][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 882.705779][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 882.803349][ T30] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 882.842701][ T30] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 882.855005][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.868976][ T30] usb 2-1: Product: syz [ 882.873343][ T30] usb 2-1: Manufacturer: syz [ 882.879097][ T30] usb 2-1: SerialNumber: syz [ 882.904829][ T30] usb 2-1: config 0 descriptor?? [ 882.930040][ T30] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 882.942315][ T30] usb 2-1: setting power ON [ 882.953653][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 883.017727][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 883.027664][ T30] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 883.037107][ T30] usb 2-1: media controller created [ 883.124562][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 883.161729][ T30] usb 2-1: selecting invalid altsetting 6 [ 883.167551][ T30] usb 2-1: digital interface selection failed (-22) [ 883.212762][ T30] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 883.241321][T15945] dvb-usb: bulk message failed: -22 (3/0) [ 883.247818][ T30] usb 2-1: setting power OFF [ 883.254151][T15945] dvb-usb: bulk message failed: -22 (4/0) [ 883.274488][T15945] cxusb: i2c read failed [ 883.284375][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 883.308404][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 883.420674][ T30] (NULL device *): no alternate interface [ 883.490029][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2589'. [ 883.854039][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 885.047239][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 885.083952][ T5132] Bluetooth: hci1: unexpected event for opcode 0x203d [ 885.090267][ T30] usb 2-1: USB disconnect, device number 68 [ 885.126846][ T29] audit: type=1400 audit(2000000374.897:2228): avc: denied { read write } for pid=16020 comm="syz.2.2597" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 885.182802][ T29] audit: type=1400 audit(2000000374.897:2229): avc: denied { open } for pid=16020 comm="syz.2.2597" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 885.219839][ T29] audit: type=1400 audit(2000000374.925:2230): avc: denied { ioctl } for pid=16020 comm="syz.2.2597" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 886.432469][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 886.772295][T16057] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2610'. [ 887.547628][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'. [ 887.865122][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 887.874328][T16067] binder: 16056:16067 ioctl 4018620d 0 returned -22 [ 888.648686][ T30] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 888.891689][ T30] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 888.900190][ T30] usb 3-1: config 0 has no interface number 0 [ 888.906363][ T30] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 888.917785][ T30] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 888.929722][ T30] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 888.998976][T16094] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2623'. [ 889.355581][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.415731][ T5132] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 889.424354][ T5132] Bluetooth: hci1: Injecting HCI hardware error event [ 889.434818][ T5132] Bluetooth: hci1: hardware error 0x00 [ 889.495289][ T30] usb 3-1: config 0 descriptor?? [ 889.517011][T16074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 889.558077][ T30] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 889.636403][T16101] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2622'. [ 889.774467][ T30] usb 3-1: USB disconnect, device number 45 [ 890.001338][T10649] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 890.172501][T10649] usb 4-1: Using ep0 maxpacket: 8 [ 890.215307][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 890.240823][T10649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 890.256561][T10649] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 890.269085][T10649] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 890.291977][T10649] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 890.301399][T10649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.309927][T10649] usb 4-1: Product: syz [ 890.316393][T10649] usb 4-1: Manufacturer: syz [ 890.321596][T10649] usb 4-1: SerialNumber: syz [ 890.488619][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 890.525175][ T9] usb 2-1: config 0 has no interface number 0 [ 890.532718][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 890.542665][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.559445][ T9] usb 2-1: config 0 descriptor?? [ 890.591706][ T9] usb 2-1: selecting invalid altsetting 1 [ 890.600241][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 890.606590][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 890.642503][T10649] snd-ua101 4-1:1.1: sample format descriptor not found [ 890.654427][T10649] snd-ua101 4-1:1.0: invalid num_altsetting [ 890.673677][T10649] usb 4-1: USB disconnect, device number 38 [ 890.807946][ T9] DVB: Unable to find symbol cx22700_attach() [ 890.875059][T16128] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2634'. [ 891.383631][ T9] DVB: Unable to find symbol tda10046_attach() [ 891.390109][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 891.404251][ T9] usb 2-1: USB disconnect, device number 69 [ 891.743920][ T5132] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 892.810982][T16157] binder: 16147:16157 ioctl c0306201 0 returned -14 [ 893.782486][T16180] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2645'. [ 893.797409][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 894.503690][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 897.390219][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 897.878969][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 897.914640][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.934888][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.976368][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 898.007064][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.043575][ T9] usb 2-1: config 0 descriptor?? [ 898.843701][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 898.870016][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 898.896845][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 898.922518][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 898.951855][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 898.992485][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 899.030931][ T9] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 899.054493][ T9] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 899.175231][ T9] usb 2-1: USB disconnect, device number 70 [ 899.300632][T16255] fido_id[16255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 899.402502][T16263] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2668'. [ 900.169652][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 900.476092][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.535299][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.906630][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 900.936110][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 900.979308][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.033986][ T9] usb 5-1: config 0 descriptor?? [ 901.680124][ T9] uclogic 0003:28BD:0055.0009: interface is invalid, ignoring [ 902.089277][T16311] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2683'. [ 902.319019][T10649] usb 5-1: USB disconnect, device number 44 [ 902.512738][T16319] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2685'. [ 902.575648][T16322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2686'. [ 903.173714][T16337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=16337 comm=syz.2.2688 [ 903.243942][T16337] ISOFS: Unable to identify CD-ROM format. [ 904.539892][T16356] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2696'. [ 905.898396][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 906.186961][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 906.221960][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 906.349429][ T30] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 906.977220][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 907.014999][ T30] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 907.037248][ T30] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 907.048872][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.079132][ T30] usb 4-1: Product: syz [ 907.083324][ T30] usb 4-1: Manufacturer: syz [ 907.088448][ T30] usb 4-1: SerialNumber: syz [ 907.102372][ T30] usb 4-1: config 0 descriptor?? [ 907.211594][ T30] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 907.223966][T11209] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 907.236884][ T30] usb 4-1: setting power ON [ 907.241389][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 907.335369][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 907.420166][ T30] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 907.430941][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 907.446085][ T30] usb 4-1: media controller created [ 907.456156][T11209] usb 5-1: Using ep0 maxpacket: 32 [ 907.472691][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.512792][T11209] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 907.526454][ T9] usb 2-1: Product: syz [ 907.530640][ T9] usb 2-1: Manufacturer: syz [ 907.533200][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.549618][T11209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.558922][T16403] dvb-usb: bulk message failed: -22 (3/0) [ 907.564634][T16403] dvb-usb: bulk message failed: -22 (4/0) [ 907.576167][T16403] cxusb: i2c read failed [ 907.631692][ T9] usb 2-1: SerialNumber: syz [ 907.655243][ T30] usb 4-1: selecting invalid altsetting 6 [ 907.675813][T11209] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 907.692334][ T9] usb 2-1: config 0 descriptor?? [ 907.796852][ T30] usb 4-1: digital interface selection failed (-22) [ 907.816805][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.829071][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 907.841214][ T9] usb 2-1: setting power ON [ 908.350217][T11209] gspca_nw80x: reg_w err -110 [ 908.359656][T11209] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 908.363351][ T30] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 908.384723][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 908.444850][ T30] usb 4-1: setting power OFF [ 908.456289][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.464769][ T29] audit: type=1400 audit(2000000396.739:2231): avc: denied { setopt } for pid=16413 comm="syz.2.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.489197][ T30] dvb-usb: bulk message failed: -22 (2/0) [ 908.505090][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 908.597195][ T30] (NULL device *): no alternate interface [ 908.633039][ T29] audit: type=1400 audit(2000000396.889:2232): avc: denied { connect } for pid=16416 comm="syz.2.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 908.670460][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 908.732887][ T9] usb 2-1: media controller created [ 908.765572][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.785534][ T29] audit: type=1400 audit(2000000396.945:2233): avc: denied { write } for pid=16416 comm="syz.2.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 908.862396][ T9] usb 2-1: selecting invalid altsetting 6 [ 908.875013][ T9] usb 2-1: digital interface selection failed (-22) [ 908.890262][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 908.915960][ T9] usb 2-1: setting power OFF [ 908.927876][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 908.941707][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 908.980610][ T9] (NULL device *): no alternate interface [ 909.030603][T11209] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 909.058496][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 909.122600][ T9] usb 2-1: USB disconnect, device number 71 [ 909.252117][T11209] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 909.263683][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 909.290262][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 909.333754][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 909.356429][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 909.371482][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 909.464681][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 909.482224][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 909.492719][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 909.503955][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 909.513424][T16435] fuse: Bad value for 'fd' [ 909.520432][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 909.948319][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 909.959286][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 909.970647][ T30] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 909.984829][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 909.995344][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.006482][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 910.015410][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.024972][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.036217][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 910.049536][ T30] usb 4-1: USB disconnect, device number 39 [ 910.089899][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.106102][T10649] usb 5-1: USB disconnect, device number 45 [ 910.498482][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.613378][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 910.682319][T11209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 910.747136][T11209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 910.848748][ T29] audit: type=1400 audit(2000000398.909:2234): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.10 dest=38910 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 911.342574][T11209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 911.379353][T11209] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 911.439087][T11209] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 911.478639][T11209] usb 3-1: Product: syz [ 911.508845][T11209] usb 3-1: Manufacturer: syz [ 911.524741][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 911.554356][T11209] usb 3-1: SerialNumber: syz [ 911.654429][T11209] usb 3-1: config 0 descriptor?? [ 911.821153][T11209] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 912.463224][T10649] usb 3-1: USB disconnect, device number 46 [ 912.520672][T10649] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 913.946471][T16506] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2742'. [ 914.756718][T16513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2745'. [ 915.520571][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 916.231876][T16542] fuse: Unknown parameter 'group_id00000000000000000000' [ 916.450011][T11209] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 916.460715][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 916.970628][ T29] audit: type=1400 audit(2000000404.690:2235): avc: denied { connect } for pid=16557 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 917.003178][T11209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.027515][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 917.047582][T11209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.063450][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.075050][T11209] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 917.084259][ T9] usb 2-1: Product: syz [ 917.091357][ T9] usb 2-1: Manufacturer: syz [ 917.096176][T11209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.105269][ T9] usb 2-1: SerialNumber: syz [ 917.132728][T11209] usb 4-1: config 0 descriptor?? [ 917.370571][T16566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=16566 comm=syz.0.2761 [ 918.025302][T16573] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2765'. [ 918.085240][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 918.099822][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 918.129817][T11209] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 918.141968][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 918.155067][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 918.182501][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 918.221186][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 918.235517][T11209] steelseries 0003:1038:12B6.000A: hid_hw_raw_request() failed with -71 [ 918.284896][T11209] usb 4-1: USB disconnect, device number 40 [ 918.293544][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 918.346320][T16582] fido_id[16582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 918.349548][ T9] usb 2-1: USB disconnect, device number 72 [ 918.796516][T16593] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2768'. [ 919.060886][T10649] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 919.231861][ T29] audit: type=1400 audit(2000000406.776:2236): avc: denied { mount } for pid=16594 comm="syz.1.2771" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 919.275069][T10649] usb 4-1: Using ep0 maxpacket: 8 [ 919.360007][T10649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.543005][T10649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.646760][T10649] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 919.678491][T10649] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 919.687548][T10649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.712700][T10649] usb 4-1: config 0 descriptor?? [ 919.980402][ T29] audit: type=1400 audit(2000000407.505:2237): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 920.213961][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x4 [ 920.227386][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x6 [ 920.255936][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.294585][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.334394][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.441557][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.469707][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.909801][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 920.934876][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.958221][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 920.987409][T10649] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 921.052793][T10649] elecom 0003:056E:00FE.000B: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 921.113907][T10649] usb 4-1: USB disconnect, device number 41 [ 921.378810][T16639] fido_id[16639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 922.941631][ T29] audit: type=1400 audit(2000000410.265:2238): avc: denied { bind } for pid=16664 comm="syz.4.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 923.004297][ T29] audit: type=1400 audit(2000000410.274:2239): avc: denied { setopt } for pid=16664 comm="syz.4.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 923.067542][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 923.095325][ T29] audit: type=1400 audit(2000000410.368:2240): avc: denied { ioctl } for pid=16668 comm="syz.4.2793" path="socket:[45806]" dev="sockfs" ino=45806 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 923.270389][ T29] audit: type=1400 audit(2000000410.461:2241): avc: denied { connect } for pid=16672 comm="syz.2.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 923.751582][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 923.761595][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.774505][T16682] syzkaller0: entered promiscuous mode [ 923.791345][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.791352][T16682] syzkaller0: entered allmulticast mode [ 923.795613][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 923.869269][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 923.895206][ T9] usb 4-1: Product: syz [ 923.906248][ T9] usb 4-1: Manufacturer: syz [ 923.920582][ T9] usb 4-1: SerialNumber: syz [ 923.942423][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 923.964438][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 924.080178][ T29] audit: type=1400 audit(2000000411.341:2242): avc: denied { read } for pid=5165 comm="acpid" name="mouse1" dev="devtmpfs" ino=3807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 924.181059][ T29] audit: type=1400 audit(2000000411.341:2243): avc: denied { open } for pid=5165 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 924.243362][ T29] audit: type=1400 audit(2000000411.341:2244): avc: denied { ioctl } for pid=5165 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3807 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 924.564729][T11209] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 924.885919][T10649] usb 4-1: USB disconnect, device number 42 [ 924.891917][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 925.008248][T10649] appletouch 4-1:1.0: input: appletouch disconnected [ 925.045316][T11209] usb 5-1: Using ep0 maxpacket: 32 [ 925.065401][T11209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.394452][T11209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.425913][T11209] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 925.447453][T11209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.482380][T11209] usb 5-1: config 0 descriptor?? [ 925.804299][T16710] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2806'. [ 925.977480][T11209] zydacron 0003:13EC:0006.000C: item fetching failed at offset 0/2 [ 926.028923][T11209] zydacron 0003:13EC:0006.000C: parse failed [ 926.047200][T11209] zydacron 0003:13EC:0006.000C: probe with driver zydacron failed with error -22 [ 926.266438][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 926.589957][T10649] usb 5-1: USB disconnect, device number 46 [ 926.738761][T16709] binder: 16703:16709 ioctl c0306201 0 returned -14 [ 926.861692][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 927.236739][T11209] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 927.627761][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 928.054851][T11209] usb 2-1: Using ep0 maxpacket: 16 [ 928.101715][T11209] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 928.112374][T11209] usb 2-1: config 0 has no interface number 0 [ 928.212131][T11209] usb 2-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.252339][T11209] usb 2-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.264781][ T29] audit: type=1400 audit(2000000415.260:2245): avc: denied { connect } for pid=16748 comm="syz.4.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 928.294714][T11209] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 928.299812][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2813'. [ 928.327274][ T29] audit: type=1400 audit(2000000415.279:2246): avc: denied { create } for pid=16748 comm="syz.4.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 928.334110][T11209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.394708][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 928.424386][T11209] usb 2-1: config 0 descriptor?? [ 928.451049][ T29] audit: type=1400 audit(2000000415.288:2247): avc: denied { read write } for pid=16748 comm="syz.4.2814" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.735018][ T29] audit: type=1400 audit(2000000415.288:2248): avc: denied { open } for pid=16748 comm="syz.4.2814" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.928491][ T29] audit: type=1400 audit(2000000415.288:2249): avc: denied { ioctl } for pid=16748 comm="syz.4.2814" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.979467][ T29] audit: type=1400 audit(2000000415.288:2250): avc: denied { create } for pid=16748 comm="syz.4.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.022055][ T29] audit: type=1400 audit(2000000415.288:2251): avc: denied { read write } for pid=16748 comm="syz.4.2814" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.074467][T11209] hid_parser_main: 49 callbacks suppressed [ 929.074481][T11209] uclogic 0003:5543:0781.000D: unknown main item tag 0x0 [ 929.117055][ T29] audit: type=1400 audit(2000000415.288:2252): avc: denied { open } for pid=16748 comm="syz.4.2814" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.173153][T11209] uclogic 0003:5543:0781.000D: unknown main item tag 0x0 [ 929.267136][T16765] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2818'. [ 929.339440][ T29] audit: type=1400 audit(2000000415.288:2253): avc: denied { append } for pid=16748 comm="syz.4.2814" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.341314][T11209] uclogic 0003:5543:0781.000D: unknown main item tag 0x0 [ 929.396225][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 929.452321][ T29] audit: type=1400 audit(2000000415.288:2254): avc: denied { create } for pid=16747 comm="syz.2.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 929.452343][T11209] uclogic 0003:5543:0781.000D: unknown main item tag 0x0 [ 929.565979][ T29] audit: type=1400 audit(2000000415.288:2255): avc: denied { create } for pid=16747 comm="syz.2.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 929.570974][T11209] uclogic 0003:5543:0781.000D: unknown main item tag 0x0 [ 929.608305][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 929.620321][T16772] tipc: Started in network mode [ 929.639138][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 929.651367][T16772] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 929.660060][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 929.676802][T11209] uclogic 0003:5543:0781.000D: hidraw0: USB HID v0.40 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input13 [ 929.701841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.729483][ T9] usb 4-1: Product: syz [ 929.743138][T11209] usb 2-1: USB disconnect, device number 73 [ 929.754019][T16772] tipc: Enabled bearer , priority 10 [ 929.757168][ T9] usb 4-1: Manufacturer: syz [ 929.803928][ T9] usb 4-1: SerialNumber: syz [ 929.857834][ T9] usb 4-1: config 0 descriptor?? [ 929.881804][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 929.891492][T16773] fido_id[16773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 929.927411][ T9] usb 4-1: setting power ON [ 929.959773][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 930.228387][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.241923][T16779] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2820'. [ 930.287473][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 930.315131][ T9] usb 4-1: media controller created [ 930.378025][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.416704][ T9] usb 4-1: selecting invalid altsetting 6 [ 930.429249][ T9] usb 4-1: digital interface selection failed (-22) [ 930.446595][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 930.458330][ T9] usb 4-1: setting power OFF [ 930.462924][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 930.470216][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 930.479868][ T9] (NULL device *): no alternate interface [ 930.504677][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 930.609832][T16782] binder: 16777:16782 ioctl c0306201 0 returned -14 [ 930.849073][T10649] tipc: Node number set to 9480874 [ 930.946457][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 931.365159][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 932.076210][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 932.114236][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 932.142469][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 932.170437][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 932.197893][T10649] usb 4-1: USB disconnect, device number 43 [ 932.222481][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 932.535060][T16818] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2832'. [ 932.959178][T16831] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2836'. [ 933.757992][T11209] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 933.934416][T11209] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 933.999700][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 933.999715][ T29] audit: type=1400 audit(2000000420.620:2308): avc: denied { create } for pid=16837 comm="syz.0.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 934.042222][T11209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 934.123851][T11209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 934.164016][ T29] audit: type=1400 audit(2000000420.685:2309): avc: denied { write } for pid=16837 comm="syz.0.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 934.197976][T11209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 934.223520][T11209] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 934.262454][T16852] netlink: 'syz.0.2841': attribute type 1 has an invalid length. [ 934.292323][T16852] netlink: 'syz.0.2841': attribute type 1 has an invalid length. [ 934.295013][ T29] audit: type=1400 audit(2000000420.695:2310): avc: denied { create } for pid=16837 comm="syz.0.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 934.343156][T11209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.395475][T16852] netlink: 'syz.0.2841': attribute type 8 has an invalid length. [ 934.428646][T11209] usb 4-1: Product: syz [ 934.489961][T11209] usb 4-1: Manufacturer: syz [ 934.515472][T11209] usb 4-1: SerialNumber: syz [ 934.542790][ T29] audit: type=1400 audit(2000000420.695:2311): avc: denied { ioctl } for pid=16837 comm="syz.0.2839" path="socket:[46427]" dev="sockfs" ino=46427 ioctlcmd=0x8b06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 934.584021][T11209] usb 4-1: config 0 descriptor?? [ 934.632467][T11209] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 934.663568][ T29] audit: type=1400 audit(2000000420.769:2312): avc: denied { create } for pid=16849 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 934.775366][ T29] audit: type=1400 audit(2000000420.797:2313): avc: denied { setopt } for pid=16849 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 934.875189][T11209] usb 4-1: USB disconnect, device number 44 [ 934.882402][ T29] audit: type=1400 audit(2000000420.966:2314): avc: denied { getopt } for pid=16849 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 934.956400][ T29] audit: type=1400 audit(2000000421.424:2315): avc: denied { ioctl } for pid=16864 comm="syz.2.2846" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 935.865524][T16884] __nla_validate_parse: 7 callbacks suppressed [ 935.865559][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 936.274437][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 936.327353][ T29] audit: type=1400 audit(2000000422.799:2316): avc: denied { read } for pid=16892 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 936.382544][ T29] audit: type=1400 audit(2000000422.846:2317): avc: denied { write } for pid=16892 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 936.484421][T10649] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 936.658169][T10649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.677024][T10649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.689178][T10649] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 936.708858][T10649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.720962][ T30] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 936.734296][T10649] usb 2-1: config 0 descriptor?? [ 936.893579][ T30] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 936.905771][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.914585][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2862'. [ 936.914661][ T30] usb 3-1: Product: syz [ 936.933558][ T30] usb 3-1: Manufacturer: syz [ 936.938247][ T30] usb 3-1: SerialNumber: syz [ 936.952549][ T30] usb 3-1: config 0 descriptor?? [ 936.970400][ T30] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 937.002814][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.014107][ T30] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 937.026919][ T30] usb 3-1: media controller created [ 937.186694][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.197758][T10649] cypress 0003:04B4:DE64.000E: item fetching failed at offset 1/3 [ 937.208603][T10649] cypress 0003:04B4:DE64.000E: parse failed [ 937.221614][T10649] cypress 0003:04B4:DE64.000E: probe with driver cypress failed with error -22 [ 937.257796][T16896] dvb-usb: bulk message failed: -22 (7/0) [ 937.265134][T16914] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2864'. [ 937.293848][ T30] DVB: Unable to find symbol mt352_attach() [ 937.351713][ T30] DVB: Unable to find symbol nxt6000_attach() [ 937.357920][ T30] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 937.379393][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 937.457367][ T30] dvb-usb: schedule remote query interval to 1000 msecs. [ 937.466248][ T30] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 937.486711][T11209] usb 2-1: USB disconnect, device number 74 [ 937.543564][ T30] dvb-usb: bulk message failed: -22 (7/0) [ 937.549719][ T30] dvb-usb: bulk message failed: -22 (7/0) [ 937.602877][ T30] usb 3-1: USB disconnect, device number 47 [ 937.638327][T16929] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 937.689217][T16929] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 937.699914][T16932] fuse: Bad value for 'fd' [ 938.204301][ T30] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 938.284942][T16936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2871'. [ 938.665723][T11209] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 938.815211][T16949] fuse: Bad value for 'fd' [ 938.988218][T16951] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2877'. [ 939.565193][T11209] usb 4-1: Using ep0 maxpacket: 8 [ 939.586949][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 939.622488][T11209] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 939.631082][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 939.631104][ T29] audit: type=1400 audit(2000000425.886:2333): avc: denied { create } for pid=16963 comm="syz.4.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 939.777489][ T29] audit: type=1400 audit(2000000426.008:2334): avc: denied { bind } for pid=16963 comm="syz.4.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 939.819593][ T29] audit: type=1400 audit(2000000426.026:2335): avc: denied { write } for pid=16963 comm="syz.4.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 939.891131][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 940.137847][T11209] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 940.147395][T11209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.599929][T11209] usb 4-1: Product: syz [ 940.619506][T11209] usb 4-1: Manufacturer: syz [ 940.640073][T11209] usb 4-1: SerialNumber: syz [ 940.648794][T11209] usb 4-1: config 0 descriptor?? [ 940.691366][T11209] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 940.734510][T11209] usb 4-1: setting power ON [ 940.757870][T11209] dvb-usb: bulk message failed: -22 (2/0) [ 940.797185][T11209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.854708][T11209] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 940.867557][T11209] usb 4-1: media controller created [ 940.891003][T11209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.063347][T16992] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2888'. [ 941.106148][T11209] usb 4-1: selecting invalid altsetting 6 [ 941.111915][T11209] usb 4-1: digital interface selection failed (-22) [ 941.161058][ T29] audit: type=1400 audit(2000000427.317:2336): avc: denied { setopt } for pid=16999 comm="syz.3.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 941.188304][T11209] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 941.222708][T11209] usb 4-1: setting power OFF [ 941.227330][T11209] dvb-usb: bulk message failed: -22 (2/0) [ 941.273504][T11209] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 941.421465][T11209] (NULL device *): no alternate interface [ 941.781571][T11209] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 941.818445][T11209] usb 4-1: USB disconnect, device number 45 [ 942.166637][ T29] audit: type=1400 audit(2000000428.253:2337): avc: denied { watch watch_reads } for pid=17024 comm="syz.0.2899" path="/673" dev="tmpfs" ino=3546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 942.203314][T17030] syzkaller0: entered promiscuous mode [ 942.209439][T17030] syzkaller0: entered allmulticast mode [ 942.214329][T10649] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 942.236482][T17034] fuse: Bad value for 'fd' [ 942.440259][T10649] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 942.467879][ T29] audit: type=1400 audit(2000000428.533:2338): avc: denied { setopt } for pid=17035 comm="syz.3.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 942.491879][T10649] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 942.522935][T10649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.563195][T10649] usb 5-1: Product: syz [ 942.577970][T11209] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 942.598383][T10649] usb 5-1: Manufacturer: syz [ 942.612799][T10649] usb 5-1: SerialNumber: syz [ 942.731178][T10649] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 942.830505][T17044] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2904'. [ 943.172377][T11209] usb 2-1: Using ep0 maxpacket: 8 [ 943.246712][ T29] audit: type=1400 audit(2000000429.253:2339): avc: denied { append } for pid=17045 comm="syz.2.2905" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 943.351369][T11209] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 943.363439][T11209] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 943.372735][T11209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.383728][T11209] usb 2-1: Product: syz [ 943.403116][T11209] usb 2-1: Manufacturer: syz [ 943.415155][T10649] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 943.447105][T11209] usb 2-1: SerialNumber: syz [ 943.452826][T10649] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 943.486517][T11209] usb 2-1: config 0 descriptor?? [ 943.497227][T10649] usb 5-1: media controller created [ 943.509586][T11209] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 943.517627][T11209] usb 2-1: setting power ON [ 943.522430][T11209] dvb-usb: bulk message failed: -22 (2/0) [ 943.538290][T11209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.559282][T11209] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 943.571990][T11209] usb 2-1: media controller created [ 943.592892][T11209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.645568][T11209] usb 2-1: selecting invalid altsetting 6 [ 943.654738][T10649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.684719][T11209] usb 2-1: digital interface selection failed (-22) [ 943.700148][T11209] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 943.738624][T11209] usb 2-1: setting power OFF [ 943.743763][T11209] dvb-usb: bulk message failed: -22 (2/0) [ 943.750096][T11209] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 943.759745][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 943.778125][T11209] (NULL device *): no alternate interface [ 943.863009][T17055] ------------[ cut here ]------------ [ 943.874716][T17055] usb 5-1: BOGUS control dir, pipe 80002f80 doesn't match bRequestType c0 [ 943.883300][T17055] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.1.2900/17055 [ 943.893687][T17055] Modules linked in: [ 943.897807][T17055] CPU: 1 UID: 0 PID: 17055 Comm: syz.1.2900 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.908826][T17055] Tainted: [L]=SOFTLOCKUP [ 943.913136][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.923227][T17055] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 943.928885][T17055] Code: d2 74 5d 48 89 54 24 40 e8 3f 79 b8 fa 4c 89 ef e8 67 c3 de fe 48 89 c6 48 8d 3d 7d ff 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 13 79 b8 fa 89 ee bf ff 00 00 00 [ 943.948602][T17055] RSP: 0018:ffffc9001c8477c0 EFLAGS: 00010283 [ 943.954652][T17055] RAX: ffffffff8c80b520 RBX: ffff88802c5d7600 RCX: 0000000080002f80 [ 943.962761][T17055] RDX: ffff888026542e20 RSI: ffffffff8c80b520 RDI: ffffffff90e63950 [ 943.970764][T17055] RBP: ffff88805969e058 R08: 00000000000000c0 R09: 0000000000000000 [ 943.978797][T17055] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c1052a0 [ 943.986745][T17055] R13: ffff88805969e0b0 R14: 0000000080002f80 R15: 00000000000000c0 [ 943.994733][T17055] FS: 00007fddc9abb6c0(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 944.003665][T17055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.010320][T17055] CR2: 0000200000213030 CR3: 0000000092bf6000 CR4: 00000000003526f0 [ 944.018285][T17055] Call Trace: [ 944.021573][T17055] [ 944.024483][T17055] ? __init_swait_queue_head+0xca/0x150 [ 944.030010][T17055] usb_start_wait_urb+0x106/0x4c0 [ 944.035063][T17055] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 944.040599][T17055] ? __asan_memset+0x23/0x50 [ 944.045241][T17055] usb_control_msg+0x326/0x4a0 [ 944.049992][T17055] ? __pfx_usb_control_msg+0x10/0x10 [ 944.055314][T17055] ? look_up_lock_class+0x55/0x120 [ 944.060407][T17055] gl861_ctrl_msg+0x1a5/0x4a0 [ 944.065286][T17055] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 944.070471][T17055] ? __lock_acquire+0x4a5/0x2630 [ 944.075501][T17055] gl861_i2c_master_xfer+0x545/0x690 [ 944.080789][T17055] __i2c_transfer+0x5d9/0x17f0 [ 944.085563][T17055] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 944.091361][T17055] ? __pfx___i2c_transfer+0x10/0x10 [ 944.096565][T17055] ? rt_mutex_slowtrylock+0x93/0x100 [ 944.101832][T17055] i2c_transfer+0x15f/0x380 [ 944.106317][T17055] i2c_transfer_buffer_flags+0x10c/0x190 [ 944.112012][T17055] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 944.118185][T17055] ? selinux_file_permission+0x8f/0x6d0 [ 944.123760][T17055] i2cdev_read+0x111/0x2b0 [ 944.128174][T17055] ? __pfx_i2cdev_read+0x10/0x10 [ 944.133093][T17055] vfs_read+0x1e4/0xb30 [ 944.137232][T17055] ? __pfx_vfs_read+0x10/0x10 [ 944.141952][T17055] ? find_held_lock+0x2b/0x80 [ 944.146610][T17055] ? __fget_files+0x215/0x3d0 [ 944.151368][T17055] ? __fget_files+0x215/0x3d0 [ 944.156028][T17055] ? __fget_files+0x21f/0x3d0 [ 944.160722][T17055] ksys_read+0x12a/0x250 [ 944.164948][T17055] ? __pfx_ksys_read+0x10/0x10 [ 944.169699][T17055] do_syscall_64+0x106/0xf80 [ 944.174294][T17055] ? clear_bhb_loop+0x40/0x90 [ 944.178953][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.184849][T17055] RIP: 0033:0x7fddc8b9c799 [ 944.189239][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.208875][T17055] RSP: 002b:00007fddc9abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.217288][T17055] RAX: ffffffffffffffda RBX: 00007fddc8e16270 RCX: 00007fddc8b9c799 [ 944.225261][T17055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 944.233210][T17055] RBP: 00007fddc8c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 944.241202][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.249179][T17055] R13: 00007fddc8e16308 R14: 00007fddc8e16270 R15: 00007fff3518c498 [ 944.257161][T17055] [ 944.260160][T17055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 944.267415][T17055] CPU: 1 UID: 0 PID: 17055 Comm: syz.1.2900 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.278323][T17055] Tainted: [L]=SOFTLOCKUP [ 944.282643][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.292682][T17055] Call Trace: [ 944.295942][T17055] [ 944.298854][T17055] dump_stack_lvl+0x100/0x190 [ 944.303530][T17055] vpanic+0x552/0x970 [ 944.307500][T17055] ? __pfx_vpanic+0x10/0x10 [ 944.311981][T17055] panic+0xd1/0xe0 [ 944.315698][T17055] ? __pfx_panic+0x10/0x10 [ 944.320114][T17055] check_panic_on_warn.cold+0x19/0x34 [ 944.325480][T17055] ? usb_submit_urb+0x1573/0x1910 [ 944.330494][T17055] __warn.cold+0x191/0x348 [ 944.334893][T17055] __report_bug+0x296/0x3d0 [ 944.339394][T17055] ? usb_submit_urb+0x1573/0x1910 [ 944.344405][T17055] ? __pfx___report_bug+0x10/0x10 [ 944.349422][T17055] ? mark_held_locks+0x40/0x70 [ 944.354178][T17055] report_bug_entry+0xe1/0x290 [ 944.358929][T17055] ? usb_submit_urb+0x157e/0x1910 [ 944.363946][T17055] handle_bug+0x1cd/0x2a0 [ 944.368254][T17055] exc_invalid_op+0x17/0x50 [ 944.372735][T17055] asm_exc_invalid_op+0x1a/0x20 [ 944.377560][T17055] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 944.383174][T17055] Code: d2 74 5d 48 89 54 24 40 e8 3f 79 b8 fa 4c 89 ef e8 67 c3 de fe 48 89 c6 48 8d 3d 7d ff 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 13 79 b8 fa 89 ee bf ff 00 00 00 [ 944.402773][T17055] RSP: 0018:ffffc9001c8477c0 EFLAGS: 00010283 [ 944.408820][T17055] RAX: ffffffff8c80b520 RBX: ffff88802c5d7600 RCX: 0000000080002f80 [ 944.416768][T17055] RDX: ffff888026542e20 RSI: ffffffff8c80b520 RDI: ffffffff90e63950 [ 944.424727][T17055] RBP: ffff88805969e058 R08: 00000000000000c0 R09: 0000000000000000 [ 944.432677][T17055] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c1052a0 [ 944.440644][T17055] R13: ffff88805969e0b0 R14: 0000000080002f80 R15: 00000000000000c0 [ 944.448603][T17055] ? __init_swait_queue_head+0xca/0x150 [ 944.454134][T17055] usb_start_wait_urb+0x106/0x4c0 [ 944.459144][T17055] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 944.464689][T17055] ? __asan_memset+0x23/0x50 [ 944.469272][T17055] usb_control_msg+0x326/0x4a0 [ 944.474014][T17055] ? __pfx_usb_control_msg+0x10/0x10 [ 944.479277][T17055] ? look_up_lock_class+0x55/0x120 [ 944.484364][T17055] gl861_ctrl_msg+0x1a5/0x4a0 [ 944.489049][T17055] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 944.494247][T17055] ? __lock_acquire+0x4a5/0x2630 [ 944.499172][T17055] gl861_i2c_master_xfer+0x545/0x690 [ 944.504443][T17055] __i2c_transfer+0x5d9/0x17f0 [ 944.509193][T17055] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 944.514984][T17055] ? __pfx___i2c_transfer+0x10/0x10 [ 944.520162][T17055] ? rt_mutex_slowtrylock+0x93/0x100 [ 944.525442][T17055] i2c_transfer+0x15f/0x380 [ 944.529924][T17055] i2c_transfer_buffer_flags+0x10c/0x190 [ 944.535537][T17055] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 944.541673][T17055] ? selinux_file_permission+0x8f/0x6d0 [ 944.547289][T17055] i2cdev_read+0x111/0x2b0 [ 944.551695][T17055] ? __pfx_i2cdev_read+0x10/0x10 [ 944.556620][T17055] vfs_read+0x1e4/0xb30 [ 944.560763][T17055] ? __pfx_vfs_read+0x10/0x10 [ 944.565428][T17055] ? find_held_lock+0x2b/0x80 [ 944.570090][T17055] ? __fget_files+0x215/0x3d0 [ 944.574744][T17055] ? __fget_files+0x215/0x3d0 [ 944.579412][T17055] ? __fget_files+0x21f/0x3d0 [ 944.584068][T17055] ksys_read+0x12a/0x250 [ 944.588297][T17055] ? __pfx_ksys_read+0x10/0x10 [ 944.593047][T17055] do_syscall_64+0x106/0xf80 [ 944.597614][T17055] ? clear_bhb_loop+0x40/0x90 [ 944.602282][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.608152][T17055] RIP: 0033:0x7fddc8b9c799 [ 944.612544][T17055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.632128][T17055] RSP: 002b:00007fddc9abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.640516][T17055] RAX: ffffffffffffffda RBX: 00007fddc8e16270 RCX: 00007fddc8b9c799 [ 944.648562][T17055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 944.656572][T17055] RBP: 00007fddc8c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 944.664537][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.672490][T17055] R13: 00007fddc8e16308 R14: 00007fddc8e16270 R15: 00007fff3518c498 [ 944.680458][T17055] [ 944.683803][T17055] Kernel Offset: disabled [ 944.688112][T17055] Rebooting in 86400 seconds..