last executing test programs: 5m5.444577421s ago: executing program 0 (id=325): socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) setpgid(r0, r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x401400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80000) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}, 0x240c8004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x40000000000100, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000240)={0x9, 0x6, 0x810, 0x2}) 5m2.346811942s ago: executing program 0 (id=336): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 5m1.445103155s ago: executing program 0 (id=338): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d61737100000000140002800800ea3f0000000208000140000000080900010073797a3000000000090002"], 0x7c}, 0x1, 0x300}, 0x0) 5m1.368899573s ago: executing program 0 (id=339): r0 = socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 5m0.507519031s ago: executing program 0 (id=341): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e23, 0x8, @loopback, 0xc}, {0xa, 0x4e24, 0x40000000, @rand_addr=' \x01\x00'}, 0xffffffffffffffff, {[0x0, 0x38, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1]}}, 0x5c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x1300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket(0x10, 0x80003, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r6, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, r6, 0x3, '\x00', 0x0, r2, 0x0, 0x0, 0x2}, 0x50) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200"], 0x64}}, 0x0) write(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r2], 0x9) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0xd0, 0x1c, 0x20, 0x525, 0xa4a4, 0x2063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0xa7, 0x1, 0x1, 0xa5, 0x98, 0x85, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x20, 0x8, 0x2, 0x4}}]}}]}}]}}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000000)={0x7, 0x0, r2}) 5m0.119052777s ago: executing program 0 (id=343): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xffffffee, 0x2, 0x0, 0x0, 0x0, 0xb, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4m59.844784986s ago: executing program 32 (id=343): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xffffffee, 0x2, 0x0, 0x0, 0x0, 0xb, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m3.11613747s ago: executing program 5 (id=1164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010129bd7000fddbdf2531000000050035000200000005003300030000000a0001007770616e300000000500340081000000050036"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x84) 1m2.470150556s ago: executing program 5 (id=1167): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x40800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m1.532568617s ago: executing program 5 (id=1170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @loopback, 0x2}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000007240)=[{{&(0x7f0000002ec0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000000180)="7e9a3d937c381f0ef46b7eddae5b3b4edf17d880f41ded02dd61234c21263d4d8e8c65afa273b9fafdb1048194c434ffbb986b135e8b403922032b7574db", 0x3e}, {&(0x7f0000002f40)="63cd95ab16ba55f762f14b8d9a4e1514c0a1a32084a9d80e901e41c4c5e92c9b015c6d888f9e670d64c3195d8742f3517ac4651adb6041ce15c57bd444dfc530628aa3f5e697f6c16c0522c1bcb0e1fc7f76c3f72f50a44519c9df0d6eeaf8a9bfe4facf55ae330a136d1932b6a2a15c2080db357479a96ba4b4", 0x7a}, {&(0x7f0000002fc0)="b845c251157cb72ad5a7b73b6492cd14230435709b9f091fefc1271d9172d8b392258a2f5d4f869717eb3b10a46cb5cc4a9b4d2db67dc61274402e92f123ad57606a853e73f0c6f05250a5e9514779f7d9ac55f6c7874cde13aeb5db33fae84fb3d2d58c9e26f2a72fba8913ee5ca15c70963de23b3373c20bfa6b11156db757df7f52aac66eefa96be2eeffcf34b873495c5b6ccdde6a07a2e2252b1e8ca6cb23bd7dec1fa64cc2936668bcbb261ce084885856b45d49c57d772097", 0xbc}, {&(0x7f0000003080)="065df51279d613a681c8c7a16713ccbdb2e73d63b2fb0874d96662bd959529c71bf1c68de380b4c022c48b709de1ce9aec04dc1817c44915975bd7171aaad60bed3c431550d1151f327e6360dee24ce6fd36d07adecec84c334192fa1d23f9d27a6bc06d6b48bc567482463587a4b00507764f65fe19ba11c350210d1aafc124734d77a3206ec3dc7a96cc7c480a4c32d64237205b890a9b6805d1167df5ef073ba92291452ad49e7bfd2767f0ba0d89c966a430bf", 0xb5}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="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", 0x1000}], 0x6, &(0x7f0000007200)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4000004}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/189, 0xbd}, {&(0x7f0000002480)=""/232, 0xe8}, {&(0x7f0000002580)=""/173, 0xad}, {&(0x7f0000002640)=""/105, 0x69}, {&(0x7f00000000c0)=""/33, 0x21}], 0x9, &(0x7f0000002780)=""/86, 0x56}, 0x1}, {{&(0x7f0000002800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000180)}], 0x1, &(0x7f00000028c0)=""/33, 0x21}, 0x3}, {{&(0x7f0000002900)=@ieee802154, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/59, 0x3b}, {&(0x7f00000029c0)=""/90, 0x5a}], 0x2, &(0x7f0000002a80)=""/214, 0xd6}, 0x2}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/215, 0xd7}], 0x1, &(0x7f0000002cc0)=""/193, 0xc1}, 0x2}], 0x4, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 1m0.004497777s ago: executing program 5 (id=1174): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x0, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xb}, {0xa, 0xfff1}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24040080) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket(0x28, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000180)='./file0\x00', 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendfile(r3, r4, 0x0, 0x2000fb) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 55.480284217s ago: executing program 5 (id=1192): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="2b58e5cb84e635e33584549884c5", 0x0, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) pidfd_send_signal(r4, 0x3b, &(0x7f0000000140)={0x23, 0xf, 0x3}, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r3, 0x81000000) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 54.69391387s ago: executing program 5 (id=1199): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt282x\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x4, 0xcc7, 0x8, 0x90, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x725bd8a9, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 53.980833341s ago: executing program 33 (id=1199): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt282x\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x4, 0xcc7, 0x8, 0x90, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x725bd8a9, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 10.229049212s ago: executing program 2 (id=1351): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$loop(&(0x7f0000000100), 0xfd, 0x12fa80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 9.950036213s ago: executing program 2 (id=1353): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x3, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6e3, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x5, 0x4, [0x2, 0x5, 0x8, 0x3], 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x0, "398179"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x3}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x9, "99ad646319"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x1, 0x5e, 0x7, ';', "3d97"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xf9, 0x1, {0x7, 0x25, 0x1, 0x102, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xe, 0x9, {0x7, 0x25, 0x1, 0x2, 0xf, 0x1000}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x74, 0xff, 0xfa, 0x8, 0xf8}, 0x7a, &(0x7f0000000280)={0x5, 0xf, 0x7a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "9d37f912322839a96c91bb7879878b84"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xbc, 0x8, 0x7f7f, 0x5}, @generic={0x4f, 0x10, 0x1, "5ae260eb7b549826a0c70ca2cbbf31afd09d5d9d7094c8b2295807d4f93b359efec6d746e5a0b1e9cee8552652fbf71c0d240db3801ba8277d16c42e24426088a2febe4691b89e30282e0ee9"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0x5}]}, 0x5, [{0x8e, &(0x7f0000000300)=@string={0x8e, 0x3, "bb4f5091cb6e43ca450a9e6375453497e4eb698d11cca0aa47af3a2d25ce598afd0e1310cbb0a00588cb4458c84991dac2aa4e88ef4c46a6829d3749766ecc237f27962385c81a3163bfdaefd9d21240d06c145f43ab4674049ecfbb561f283cdf08ae39e78e3eddbe0e77d501c1ca43943421fb34f707101fd426a8229b55b94f5ba24ae236185fd374c30f"}}, {0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="5203a324de4d6eeb49a7eb289618982058bdaadd61c61f36a94132e21920935daab5893675cd70117d1a23401505ebd6c8376d2994a0825e004f8da6e029c588755e8914346bd662d4bb03e40b5370b52dee"]}, {0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="40037564781b8c262e942027cd718887882b7607755f7c44527301bcfb24f8d8edcf2bf8e097e9b8109a718a07f20adc8b89f7c82d1ca2dbbb8634a2cf5fe0ef"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="b80353044be6a4d56eab2c44b019746ebefd3e89b1db6d143db88401935dbfc1fe245250f9df9edc49003539d43a692288f4ee5cee8eb7c0229e0b1a725efed2d387688adc1cff0419110e66326b0a2893c19b704e107604fcc9ed6dc0b8401beec2c1cd6e8e3ed929effe7546f35eb02947c0b13307266196df96c0cb5c82b467212244888ed59cdd81c7d334d0341e1620fae17217e4b9ead1ff42d69bb99c9070098ff54ee859ede9297f9a7ceb7b09cd8e66b04b6b0ffc3ac530d87200"/200]}]}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x7, 0x3, {r0}, {r4}, 0x10, 0x2}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r6, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100108047e08fb09beeb8dd40102030109021b00010700f0090904"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r7, r8, 0x0) 8.272637878s ago: executing program 1 (id=1358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000, 0x40000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.000846863s ago: executing program 3 (id=1364): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0xf00, 0x80c9}, 0x20000000) 6.339325722s ago: executing program 2 (id=1365): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000240)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x305080, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, 0x0, 0x138) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000002000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) copy_file_range(0xffffffffffffffff, &(0x7f00000000c0)=0xb, 0xffffffffffffffff, &(0x7f0000000280)=0x80000000, 0xb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) 6.140923741s ago: executing program 3 (id=1367): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x3ffffff], [0x0, 0x100003, 0x80000001, 0x0, 0x26c3, 0x0, 0x0, 0x1000], [0x91, 0xfffffffe, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5}, {}, {0x8564, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {}, {0x0, 0x6a}, {0xb6f}], '\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f00002c8000/0x2000)=nil) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4.813111843s ago: executing program 2 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x89, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000005b60000080004000006000008001b"], 0x30}}, 0x0) 4.621804097s ago: executing program 1 (id=1371): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r5, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x1e, 0x0, &(0x7f0000000080)) mq_notify(r3, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000640)) syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109026800020101507f0904000001020d00000a24060001183861f1bc052400060000000f017f000000070004000506241a09000f07240a0708057f0905810300025b02030904010000020dedff0804010102020d0000090582022000fc02e30905030220000208ff"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x92, 0x6, 0x20, 0x5}, 0xb9, &(0x7f0000000180)={0x5, 0xf, 0xb9, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0xe, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x28, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x2}, @generic={0x99, 0x10, 0x2, "842a2b36dfa72e8e11550cf380bc900f2808b08a8ea729ca5ffa9004250893d17496fcf5ad3eff0c2f210a7a849056d3abb90140cf43f4bfe488352ac9a1c394eea344885d569c1cfabbf59e727066e28f128fd269b5ac222bdb7a59e6caf3e900d9680db86cae1d71efbd2d90a5d1fa1fe8abad4d0f75e83107daf6929f8dd6ce98c90f2479b7aafa8f1ebbdf5ddc112c9cb8bc0552"}, @ptm_cap={0x3}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "dbb4def644070ac617aed1ab82682353cf7363262a54f2aa1cd85f210f68e5a146091c03df1d27878215048e3f012784437d5beb930083ad50f57b9f6fc663da5acd00bdee"}}]}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000040)={{0x8, 0x80}, {0x800, 0x81}, 0x7, 0x3}) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='cifs\x00', 0x81820, &(0x7f0000000380)='SMC_PNETID\x00') 4.616626661s ago: executing program 4 (id=1372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000270000000000aaff0200"/51], 0xffe) 4.262747863s ago: executing program 3 (id=1373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000600000000", 0x39}], 0x1) 4.088791016s ago: executing program 4 (id=1375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xfe8, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.086561765s ago: executing program 3 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25250000000e000100"], 0x64}}, 0x30) 3.962312868s ago: executing program 6 (id=1377): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r8 = accept(r6, 0x0, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$F2FS_IOC_COMPRESS_FILE(r9, 0xf518, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) (async) shutdown(r8, 0x0) recvfrom$unix(r8, 0x0, 0x59ea5bdad75e44ff, 0x20, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r11, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = dup(r12) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ERR(r13, 0x4008af22, &(0x7f0000000140)={0x3, r13}) 3.879888046s ago: executing program 6 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0x401}, @generic={0x5, 0xa, "97134cb6ce50e935"}, @fastopen={0x22, 0x2}, @exp_fastopen={0xfe, 0xb, 0xf989, "5d7d0438043979"}, @md5sig={0x13, 0x12, "2d81beae8e1b8eb60abcdc4551439c70"}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) 3.868569967s ago: executing program 4 (id=1379): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$loop(&(0x7f0000000100), 0xfd, 0x12fa80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 3.868350202s ago: executing program 3 (id=1380): ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, 0x0, 0x21) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xa8, 0x30, 0xffff, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ife={0x90, 0x1, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x2000000}, 0x0) 3.752846939s ago: executing program 2 (id=1381): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20db0f25004029000000010902120400000000000905000000cafb1a00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0xffffffffffffff7c, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0x268, 0x33a, 0x128, 0x268, 0x260, 0x460, 0x460, 0x260, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit1={{0x58}, {'gretap0\x00', {0x60, 0x80000001, 0x3f, 0x1, 0x5, 0x1, 0xff, 0x38, 0x70}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x17, 0x9, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x5, &(0x7f0000000200)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0xe209d802a5c55ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x22582) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x8, 0xe, 0x25ed, 0xfffffffe, 0x0, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4000000013) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x581202, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x49, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x800001ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3.707958569s ago: executing program 6 (id=1382): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x1c1d80) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x4, 0x0, 0x0, {0x112, 0x3, 0xd, 0xdb4}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) 3.636796397s ago: executing program 6 (id=1383): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) socket(0xa, 0x5, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000001900)={&(0x7f00000010c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_retopts={{0x10}}], 0x10}, 0x20000010) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0x17) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2.881879031s ago: executing program 4 (id=1384): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, 0x0}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x4000) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000180)={0x3, 0x7}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 1.796254448s ago: executing program 3 (id=1385): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setregid(0xee00, 0xee00) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200890, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 1.781174744s ago: executing program 1 (id=1386): lseek(0xffffffffffffffff, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100f3ffffff9500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 1.708729352s ago: executing program 4 (id=1387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0x9}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0x9}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002]}}}}]}, 0x88}}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x44}}, 0x0) (async) 1.126388059s ago: executing program 1 (id=1388): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000400)="7720fb4957beb8d65890", 0xa, 0x6}]) syz_fuse_handle_req(r2, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x78, 0x0, 0xb, {0x8, 0x1, 0x0, {0x20, 0x7ff, 0xd09, 0xfe63, 0x3, 0x4, 0x4, 0x7, 0x4, 0x6000, 0x7, 0x0, 0x0, 0xcdb, 0x17}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000fc0)={&(0x7f0000000340)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x2d, 0x995a, 0x0, 0x8, 0xd8, 0x5, 0x4, 0x0, 0x0, 0xd7, 0x1}}, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x9}}, 0x0, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x6, {0x1}}, &(0x7f00000005c0)={0x18, 0x0, 0xc, {0x7}}, 0x0, &(0x7f0000000640)={0x60, 0x0, 0x9, {{0x80000001, 0x8, 0x3, 0xd3, 0xdb93, 0x3, 0x4, 0x4}}}, &(0x7f00000006c0)={0x18, 0x0, 0x2, {0x8}}, &(0x7f0000001080)=ANY=[], &(0x7f0000000740)={0x20, 0xffffffffffffffda, 0x5, {0x0, 0x12}}, &(0x7f0000000780)={0x78, 0xfffffffffffffff5, 0xa0d4, {0x7, 0x81, 0x0, {0x6, 0xe2b, 0x400, 0x2, 0x4, 0x1, 0x7fff, 0x8, 0x401, 0xc000, 0x4, 0x0, 0x0, 0x3, 0xc}}}, &(0x7f0000000800)={0x90, 0x0, 0x5, {0x4, 0x1, 0x0, 0x0, 0xffff, 0x9e0, {0x6, 0x7, 0x1ff, 0xffffffffffffffff, 0x7, 0x2, 0x8, 0x1000, 0x6, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x25}}}, &(0x7f0000000980)={0x50, 0x0, 0x0, [{0x2, 0x1, 0x7, 0x12, '-\\-$\xeb%,'}, {0x5, 0x4, 0x3, 0x3, ',[\\'}]}, &(0x7f0000000a80)=ANY=[], &(0x7f0000000c80)={0xa0, 0x0, 0xfffffffffffffffc, {{0x6, 0x2, 0x6, 0x9, 0x2, 0x769, {0x0, 0xfffffffffffffffc, 0xec8, 0x4, 0x3, 0x8, 0x9, 0x31, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x1b8, 0x9}}}}, &(0x7f0000000d40)={0x20, 0x0, 0x7, {0xafba00, 0x0, 0x9, 0x5}}, &(0x7f0000000d80)={0x130, 0x0, 0x0, {0x2, 0x4, 0x0, '\x00', {0x400, 0xf408, 0x4, 0x6, 0x0, 0x0, 0x4000, '\x00', 0x7, 0x3ff, 0x0, 0x2, {0x8001, 0x8000}, {0x7, 0xfdd4}, {0x100000000, 0xd}, {0x1}, 0x6, 0x7f, 0x2, 0x3}}}}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000000)={0x0, 0x80000}) 1.027381453s ago: executing program 6 (id=1389): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000005000000020000000000000709"], 0x0) 937.585724ms ago: executing program 6 (id=1390): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1900, 0xc001, 0x0, 0x0}], 0x1}) 813.343478ms ago: executing program 1 (id=1391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/42, 0x2a}], 0x2, &(0x7f0000001080)=""/243, 0xf3}, 0x40) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0), 0x4001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r3, 0xc0106440, &(0x7f00000012c0)={0x1, 0x8, &(0x7f0000001280)}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x111000, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000001740)={0x0, 0x0, 0xc, 0x15, 0xf8, &(0x7f0000001340)="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"}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001780)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000017c0)={0x3, r6, 0x0, 0xd3, 0x2af3, 0xb8, 0x2, 0x1, 0x2}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001800), 0x400002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001940)={&(0x7f0000001840)=[0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001980)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000001a00)={&(0x7f00000019c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001a80)={&(0x7f0000001a40)=[r6, r8, r6, r6, r9, r6, r10], 0x7, 0x0, 0x0, 0xffffffffffffffff}) r12 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f0000001b40)={{0x8, 0x1, &(0x7f0000001b00)=[{0x1, 0x0, 0x1}]}, 0x8, 0x9, 0x4, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r12, 0xc0086448, &(0x7f0000001b80)={r13}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r12, 0x40045730, &(0x7f0000001bc0)=0xfffff001) write$binfmt_script(r4, &(0x7f0000001c00)={'#! ', './file0', [{0x20, '@'}, {0x20, ':$'}], 0xa, "76295ba1ed00163eaddee27eaa9ca0923ccb71f0a20224440a26cb27a16dc8f8d8d8fde7baa5fe36818110ae02b3b3ec7334ad6ee686f3a4f9"}, 0x49) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000001c80)) sendmsg$NFT_BATCH(r5, &(0x7f0000001f00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x750acec0}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d0dea30}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x74, 0x7, 0x1, 0x0, "a0c5b10ab4d9788bc6b271e1b85a1b4516353da5e9711ea1355f38e719fafbbbe3d4a1a79b96f981186bceb10bf2c850e888de639315772ab55d6f27b0e7d76d3cd2f3bf39abe35aea597dc1c86d6cfa68b7bf64cd217781074571e4b66ae0291fa8263e0c8ead65127fd600786fede7"}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "44bffa592530967f372437b42b3ff3dfa732fe9da3356ccdefe9aa4ee4f08f1983b629f76d374e901bea48dc24617326c85bf1a800d2ee2ec1"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x194}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r14 = syz_open_dev$evdev(&(0x7f0000001f40), 0x5, 0x400000) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001fc0)={0x0, 0x0}) write$evdev(r14, &(0x7f0000002000)=[{{}, 0x5, 0x55, 0x9}, {{0x77359400}, 0x2, 0x4, 0x10}, {{}, 0x4, 0x6, 0x10001}, {{}, 0x11, 0xe294, 0x7}, {{0x77359400}, 0x16, 0x3ea, 0x400}, {{}, 0x11, 0x4bab, 0x5578}, {{r15, r16/1000+60000}, 0x1, 0x6, 0xffffffff}, {{r17, r18/1000+10000}, 0x1f, 0x6, 0xfffffffb}], 0xc0) ioctl$DRM_IOCTL_MODESET_CTL(r7, 0x40086408, &(0x7f00000020c0)={0x699, 0x9}) ioctl$KVM_GET_XSAVE2(r11, 0x9000aecf, &(0x7f0000ffb000/0x4000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000002100)) 536.948259ms ago: executing program 1 (id=1392): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x8, 0xc001, 0x0, 0x0}], 0x1}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 106.810959ms ago: executing program 4 (id=1393): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) chdir(0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="f3420faece66b884000f00d8410fc76980c7442400ee000000c744240200000000ff1c2466baa100ecf2c16e002a48b8ed000000000000000f23d00f21f835200000000f23f80f08b9800000c00f3235000100000f300f13ab09000000", 0x5d}], 0x1, 0xc, 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',dont_measure,fsuuhd=\x00664f027-606b-e022-0481-f3ec6e88,euid=', @ANYRESDEC=0x0, @ANYBLOB=',lazytime,euid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673726f6f743dae38352b6422dc5202f30054e9433d66f278432bdd868af7effd8582e69e6376000104763d07d9458fff8c2c3c1f06ca6c1e45297b9bf159c94304df8f093452596a51000515ff60889cb20f8ac1b30063402b2e4a2c8b2c00"]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000000)=0x401, 0x4) 0s ago: executing program 2 (id=1394): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) kernel console output (not intermixed with test programs): 352.773561][ T5927] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 352.785863][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 352.817949][ T5885] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.831363][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.831590][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 352.854241][ T5885] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 352.888604][ T5927] usb 5-1: config 0 descriptor?? [ 352.908052][ T5885] usb 4-1: Manufacturer: syz [ 352.934699][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 352.990913][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 353.024061][ T5885] usb 4-1: config 0 descriptor?? [ 353.100554][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 353.263435][ T5885] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 353.292228][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 353.346796][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 353.365107][ T30] audit: type=1400 audit(3918890747.043:696): avc: denied { read write } for pid=10117 comm="syz.1.989" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.379933][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 353.390460][ T30] audit: type=1400 audit(3918890747.043:697): avc: denied { open } for pid=10117 comm="syz.1.989" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.421691][ T30] audit: type=1400 audit(3918890747.083:698): avc: denied { ioctl } for pid=10117 comm="syz.1.989" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.463240][ T5862] pwc: Registered as video103. [ 353.501447][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 353.540093][ T5862] usb 2-1: USB disconnect, device number 22 [ 353.637058][T10123] fuse: Bad value for 'fd' [ 353.663727][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 353.699709][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 353.718099][T10125] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 353.718099][T10125] program syz.1.991 not setting count and/or reply_len properly [ 353.743477][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 353.771501][ T5927] usb 5-1: USB disconnect, device number 27 [ 353.918584][ T5129] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 354.012181][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.033079][ T5885] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.042210][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.075450][ T5885] usb 3-1: config 0 descriptor?? [ 354.096149][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 354.225107][T10130] xt_hashlimit: max too large, truncated to 1048576 [ 354.674954][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 354.683874][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 355.025794][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.036060][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 355.044062][ T5927] usb 4-1: USB disconnect, device number 24 [ 355.053567][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 355.130855][T10146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.290980][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 355.377824][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 355.588223][ T5885] pwc: recv_control_msg error -71 req 02 val 2000 [ 355.641615][T10151] can0: slcan on pty28. [ 356.521763][ T5885] pwc: recv_control_msg error -71 req 02 val 2100 [ 356.536310][ T5885] pwc: recv_control_msg error -71 req 04 val 1500 [ 356.547646][ T5885] pwc: recv_control_msg error -71 req 02 val 2500 [ 356.554462][ T5885] pwc: recv_control_msg error -71 req 02 val 2400 [ 356.572066][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 356.603655][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 356.682871][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 356.714058][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 356.737492][T10138] can0 (unregistered): slcan off pty28. [ 356.759422][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 356.810544][ T5885] pwc: Registered as video103. [ 356.820706][T10166] kvm: user requested TSC rate below hardware speed [ 356.880415][T10161] bridge_slave_1: default FDB implementation only supports local addresses [ 356.899448][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 357.187308][ T5885] usb 3-1: USB disconnect, device number 19 [ 357.316163][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 357.753730][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 358.017330][ T5862] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.035730][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.048967][ T5862] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 358.561266][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.653902][ T5862] usb 6-1: config 0 descriptor?? [ 359.080557][ T6386] lec:lec_start_xmit: lec0:No lecd attached [ 359.305660][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 359.314182][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 359.623313][ T5927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 359.628399][ T5129] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 359.641597][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 360.432232][ T5862] usb 6-1: USB disconnect, device number 8 [ 360.590972][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.846123][ T3092] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 360.974506][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.029585][ T5927] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 361.340137][ T5927] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 361.356871][ T3092] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.367186][ T3092] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.385880][ T5927] usb 3-1: Manufacturer: syz [ 361.392954][ T5927] usb 3-1: config 0 descriptor?? [ 361.406680][ T3092] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 361.524812][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 361.533883][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 361.714541][ T5927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 361.732356][ T3092] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 361.752503][ T3092] usb 5-1: Manufacturer: syz [ 361.764218][ T3092] usb 5-1: config 0 descriptor?? [ 362.054319][ T5952] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 362.320868][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.332855][ T5952] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 362.342431][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.384530][ T5952] usb 6-1: config 0 descriptor?? [ 362.495383][ T5952] pwc: Askey VC010 type 2 USB webcam detected. [ 362.738923][ T3092] usb 3-1: USB disconnect, device number 20 [ 362.845152][ T5952] pwc: recv_control_msg error -32 req 02 val 2b00 [ 362.978974][ T5952] pwc: recv_control_msg error -32 req 02 val 2700 [ 362.986279][ T5952] pwc: recv_control_msg error -32 req 02 val 2c00 [ 363.016080][ T5952] pwc: recv_control_msg error -32 req 04 val 1000 [ 363.025864][ T5952] pwc: recv_control_msg error -32 req 04 val 1300 [ 363.039475][T10254] bridge_slave_1: default FDB implementation only supports local addresses [ 363.516153][ T5952] pwc: recv_control_msg error -71 req 02 val 2000 [ 363.523020][ T5952] pwc: recv_control_msg error -71 req 02 val 2100 [ 363.530525][ T5952] pwc: recv_control_msg error -71 req 04 val 1500 [ 363.537588][ T5952] pwc: recv_control_msg error -71 req 02 val 2500 [ 363.545020][ T5952] pwc: recv_control_msg error -71 req 02 val 2400 [ 363.552077][ T5952] pwc: recv_control_msg error -71 req 02 val 2600 [ 363.558910][ T3092] usb 5-1: USB disconnect, device number 28 [ 363.569371][ T5952] pwc: recv_control_msg error -71 req 02 val 2900 [ 363.592837][ T5952] pwc: recv_control_msg error -71 req 02 val 2800 [ 363.609715][ T5952] pwc: recv_control_msg error -71 req 04 val 1100 [ 363.628338][ T5952] pwc: recv_control_msg error -71 req 04 val 1200 [ 363.653145][ T5952] pwc: Registered as video103. [ 363.679647][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 363.716473][ T5952] usb 6-1: USB disconnect, device number 9 [ 363.873244][T10268] overlayfs: missing 'lowerdir' [ 364.295865][ T5952] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 364.295955][ T5817] Bluetooth: hci5: sending frame failed (-49) [ 364.313659][ T5129] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 364.395977][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 364.404072][ C0] lec:lec_tx_timeout: lec0 [ 364.516920][ T3092] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 364.636459][ T5952] usb 5-1: no configurations [ 364.641091][ T5952] usb 5-1: can't read configurations, error -22 [ 364.760626][ T3092] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.781788][ T3092] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.799893][T10286] fuse: Unknown parameter 'group_i00000000000000000000' [ 364.807459][ T5952] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 364.845398][ T3092] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 364.854738][ T5862] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 364.871335][ T3092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.891931][ T3092] usb 6-1: config 0 descriptor?? [ 364.986362][ T5952] usb 5-1: no configurations [ 364.990983][ T5952] usb 5-1: can't read configurations, error -22 [ 365.027083][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 365.027099][ T5952] usb usb5-port1: attempt power cycle [ 365.080959][ T5862] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 365.095112][ T5862] usb 2-1: config 0 has no interface number 0 [ 365.120941][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 365.130685][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.147184][ T5862] usb 2-1: Product: syz [ 365.151381][ T5862] usb 2-1: Manufacturer: syz [ 365.165880][ T5862] usb 2-1: SerialNumber: syz [ 365.172765][ T5862] usb 2-1: config 0 descriptor?? [ 365.188060][ T5862] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 365.215962][ T5862] dw2102: su3000_power_ctrl: 1, initialized 0 [ 365.222322][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 365.233074][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.257031][ T5862] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 365.276367][ T5862] usb 2-1: media controller created [ 365.282136][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.301827][ T5862] dw2102: i2c transfer failed. [ 365.315792][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.335715][ T5862] dw2102: i2c transfer failed. [ 365.345984][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.356914][ T5862] dw2102: i2c transfer failed. [ 365.361765][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.375871][ T5862] dw2102: i2c transfer failed. [ 365.375877][ T5952] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 365.380670][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.380686][ T5862] dw2102: i2c transfer failed. [ 365.438854][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 365.446901][ T5952] usb 5-1: no configurations [ 365.451680][ T5952] usb 5-1: can't read configurations, error -22 [ 365.455709][ T5862] dw2102: i2c transfer failed. [ 365.467492][ T5862] dvb-usb: MAC address: 02:02:02:02:02:02 [ 365.495981][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.508785][ T3092] usbhid 6-1:0.0: can't add hid device: -71 [ 365.515425][ T3092] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 365.530527][ T3092] usb 6-1: USB disconnect, device number 10 [ 365.549948][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 365.562721][ T5862] dw2102: command 0x0e transfer failed. [ 365.572825][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 365.582945][ T5862] dw2102: command 0x0e transfer failed. [ 365.597536][ T5952] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 365.701595][ T5952] usb 5-1: no configurations [ 365.710135][ T5952] usb 5-1: can't read configurations, error -22 [ 365.756286][ T5952] usb usb5-port1: unable to enumerate USB device [ 365.896227][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 365.901956][ T5862] dw2102: command 0x0e transfer failed. [ 365.931230][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 365.956147][T10291] FAULT_INJECTION: forcing a failure. [ 365.956147][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 365.995772][ T5862] dw2102: command 0x0e transfer failed. [ 366.001341][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 366.007761][T10291] CPU: 1 UID: 0 PID: 10291 Comm: syz.3.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.007787][T10291] Tainted: [L]=SOFTLOCKUP [ 366.007792][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.007802][T10291] Call Trace: [ 366.007808][T10291] [ 366.007814][T10291] dump_stack_lvl+0x100/0x190 [ 366.007845][T10291] should_fail_ex.cold+0x5/0xa [ 366.007868][T10291] _copy_from_user+0x2e/0xd0 [ 366.007891][T10291] copy_msghdr_from_user+0x9f/0x4f0 [ 366.007913][T10291] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 366.007946][T10291] ___sys_sendmsg+0x106/0x1e0 [ 366.007967][T10291] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.008017][T10291] __sys_sendmsg+0x170/0x220 [ 366.008043][T10291] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.008084][T10291] do_syscall_64+0x106/0xf80 [ 366.008110][T10291] ? clear_bhb_loop+0x40/0x90 [ 366.008131][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.008149][T10291] RIP: 0033:0x7f6a8099c629 [ 366.008164][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.008180][T10291] RSP: 002b:00007f6a818ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.008197][T10291] RAX: ffffffffffffffda RBX: 00007f6a80c15fa0 RCX: 00007f6a8099c629 [ 366.008209][T10291] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 366.008219][T10291] RBP: 00007f6a818ad090 R08: 0000000000000000 R09: 0000000000000000 [ 366.008229][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.008239][T10291] R13: 00007f6a80c16038 R14: 00007f6a80c15fa0 R15: 00007fffdc724b08 [ 366.008263][T10291] [ 366.185680][ T5862] dw2102: command 0x51 transfer failed. [ 366.361303][ T5862] DVB: Unable to find symbol ds3000_attach() [ 366.367327][ T5862] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 366.473297][T10298] syzkaller0: entered promiscuous mode [ 366.495015][T10298] syzkaller0: entered allmulticast mode [ 366.527438][ T5862] rc_core: IR keymap rc-su3000 not found [ 366.533077][ T5862] Registered IR keymap rc-empty [ 366.541965][ T5862] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 366.587381][ T5862] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input31 [ 366.632161][ T5862] dvb-usb: schedule remote query interval to 150 msecs. [ 366.653249][ T5862] dw2102: su3000_power_ctrl: 0, initialized 1 [ 366.659416][ T5862] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 366.691493][ T5862] usb 2-1: USB disconnect, device number 23 [ 366.743188][ T5862] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 366.835858][ T5927] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 366.997124][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.007960][ T5927] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 367.040795][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.661886][ T5927] usb 6-1: config 0 descriptor?? [ 367.683295][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 368.010310][T10315] netlink: 'syz.4.1035': attribute type 23 has an invalid length. [ 368.101879][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 368.331417][T10307] bridge_slave_1: default FDB implementation only supports local addresses [ 368.344963][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 368.349526][T10317] fuse: Bad value for 'fd' [ 368.362309][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 368.469567][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 368.686433][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 368.997618][ T5927] pwc: recv_control_msg error -71 req 02 val 2000 [ 369.076134][ T5927] pwc: recv_control_msg error -71 req 02 val 2100 [ 369.122434][ T5927] pwc: recv_control_msg error -71 req 04 val 1500 [ 369.162044][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 369.171281][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 369.441129][ T5862] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 369.479620][ T5927] pwc: recv_control_msg error -71 req 02 val 2500 [ 369.500309][ T5927] pwc: recv_control_msg error -71 req 02 val 2400 [ 369.531010][ T5927] pwc: recv_control_msg error -71 req 02 val 2600 [ 369.565190][ T5927] pwc: recv_control_msg error -71 req 02 val 2900 [ 369.585391][ T5927] pwc: recv_control_msg error -71 req 02 val 2800 [ 369.611785][ T5927] pwc: recv_control_msg error -71 req 04 val 1100 [ 369.638961][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 369.665721][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 369.671168][ T5927] pwc: Registered as video103. [ 369.684186][ T5862] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 369.699292][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 369.714740][ T5862] usb 2-1: config 0 has no interface number 0 [ 369.746030][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 369.815936][ T5927] usb 6-1: USB disconnect, device number 11 [ 369.825966][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.833973][ T5862] usb 2-1: Product: syz [ 369.925697][ T5862] usb 2-1: Manufacturer: syz [ 369.930325][ T5862] usb 2-1: SerialNumber: syz [ 369.964470][ T5862] usb 2-1: config 0 descriptor?? [ 369.983164][ T5862] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 370.097723][ T5862] dw2102: su3000_power_ctrl: 1, initialized 0 [ 370.103796][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 370.125944][ T5885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 370.136978][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.176250][ T5862] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 370.190866][ T5862] usb 2-1: media controller created [ 370.202434][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.215653][ T5862] dw2102: i2c transfer failed. [ 370.377084][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.385680][ T5862] dw2102: i2c transfer failed. [ 370.396963][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 370.402515][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.409078][T10342] syzkaller0: entered promiscuous mode [ 370.415066][ T5862] dw2102: i2c transfer failed. [ 370.419953][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.508882][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.519000][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 370.519026][T10342] syzkaller0: entered allmulticast mode [ 370.559347][ T5862] dw2102: i2c transfer failed. [ 370.616295][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.628740][ T5862] dw2102: i2c transfer failed. [ 370.629704][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 370.654861][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 370.711856][ T5885] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 370.895452][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 370.901792][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.909821][ T5862] dw2102: i2c transfer failed. [ 370.914569][ T5885] usb 5-1: Product: syz [ 370.918925][ T5862] dvb-usb: MAC address: 02:02:02:02:02:02 [ 370.933741][ T5885] usb 5-1: Manufacturer: syz [ 370.943712][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.952302][ T5885] usb 5-1: SerialNumber: syz [ 370.958413][ T5885] usb 5-1: config 0 descriptor?? [ 371.000515][T10348] loop5: detected capacity change from 0 to 7 [ 371.008692][T10348] Dev loop5: unable to read RDB block 7 [ 371.024430][T10348] loop5: unable to read partition table [ 371.034849][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 371.061511][ T5862] dw2102: command 0x0e transfer failed. [ 371.067723][T10348] loop5: partition table beyond EOD, truncated [ 371.083979][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 371.099879][T10348] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 371.110426][ T5862] dw2102: command 0x0e transfer failed. [ 371.192039][ T5885] usb 5-1: USB disconnect, device number 33 [ 371.415996][T10357] loop3: detected capacity change from 0 to 7 [ 371.425050][ C0] blk_print_req_error: 30 callbacks suppressed [ 371.425066][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.440823][ C0] buffer_io_error: 30 callbacks suppressed [ 371.440840][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.464409][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.473996][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.488077][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.497669][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.507144][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.516716][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.525793][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.535345][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.544737][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.554315][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.562649][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.572224][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.580148][T10357] ldm_validate_partition_table(): Disk read failed. [ 371.591311][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.600895][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.612029][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.621615][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.630308][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.639886][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.656356][T10357] Dev loop3: unable to read RDB block 0 [ 371.670652][T10357] loop3: unable to read partition table [ 371.677174][T10357] loop3: partition table beyond EOD, truncated [ 371.683388][T10357] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 371.727023][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 371.774397][ T5862] dw2102: command 0x0e transfer failed. [ 371.988656][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 372.207528][ T5862] dw2102: command 0x0e transfer failed. [ 372.263454][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 372.345706][ T5862] dw2102: command 0x51 transfer failed. [ 372.421146][ T5862] DVB: Unable to find symbol ds3000_attach() [ 372.459480][ T5862] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 372.600565][T10373] loop3: detected capacity change from 0 to 7 [ 372.612009][T10373] ldm_validate_partition_table(): Disk read failed. [ 372.651229][T10373] Dev loop3: unable to read RDB block 0 [ 372.666436][T10373] loop3: unable to read partition table [ 372.673059][T10373] loop3: partition table beyond EOD, truncated [ 372.679588][T10373] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 373.028053][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.043989][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.081497][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 373.537582][T10381] syzkaller0: entered promiscuous mode [ 373.543062][T10381] syzkaller0: entered allmulticast mode [ 373.575847][ T5862] rc_core: IR keymap rc-su3000 not found [ 374.155977][ T5862] Registered IR keymap rc-empty [ 374.161450][ T5862] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 374.232945][ T5862] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input33 [ 374.279316][ T5862] dvb-usb: schedule remote query interval to 150 msecs. [ 374.305377][ T5862] dw2102: su3000_power_ctrl: 0, initialized 1 [ 374.335908][ T5862] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 374.359968][ T5862] usb 2-1: USB disconnect, device number 24 [ 374.579841][T10386] bridge_slave_1: default FDB implementation only supports local addresses [ 374.601706][ T5862] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 375.248732][ T30] audit: type=1400 audit(3918890768.843:699): avc: denied { getopt } for pid=10396 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 375.706669][T10412] SET target dimension over the limit! [ 375.727464][T10413] fuse: Unknown parameter 'group_i00000000000000000000' [ 375.958846][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 377.486224][T10441] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 377.550821][T10441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.585879][ T3092] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 377.737487][ T3092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.762362][ T3092] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 377.802106][ T3092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.832888][ T3092] usb 2-1: config 0 descriptor?? [ 378.395894][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 378.404080][ C0] lec:lec_tx_timeout: lec0 [ 378.819039][ T3092] waltop 0003:172F:0501.0006: unbalanced delimiter at end of report description [ 378.916696][T10455] loop3: detected capacity change from 0 to 7 [ 378.940365][ C0] blk_print_req_error: 30 callbacks suppressed [ 378.940383][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.956170][ C0] buffer_io_error: 30 callbacks suppressed [ 378.956185][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 378.978538][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.988144][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.587590][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 379.597241][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.606176][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 379.615746][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.628002][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 379.637597][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.646376][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 379.655999][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.664807][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 379.674440][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 379.758284][ T3092] waltop 0003:172F:0501.0006: probe with driver waltop failed with error -22 [ 379.903282][T10455] ldm_validate_partition_table(): Disk read failed. [ 380.068812][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 380.078408][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 380.088316][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 380.097930][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 380.106350][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 380.115905][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 380.123839][T10455] Dev loop3: unable to read RDB block 0 [ 380.132035][T10455] loop3: unable to read partition table [ 380.137885][T10455] loop3: partition table beyond EOD, truncated [ 380.147938][T10455] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 380.636205][ T5885] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 380.766976][ T791] usb 2-1: USB disconnect, device number 25 [ 380.855881][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 380.873743][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.893970][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 380.925207][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.954287][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 380.989542][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 381.025695][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 381.035362][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 381.131365][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 381.178111][ T5885] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 381.215683][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.266449][ T5885] usb 3-1: Product: syz [ 381.276654][ T5885] usb 3-1: Manufacturer: syz [ 381.305670][ T5885] usb 3-1: SerialNumber: syz [ 381.322326][ T5885] usb 3-1: config 0 descriptor?? [ 381.336647][T10465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 381.343843][T10465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 381.378157][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.437740][T10488] SET target dimension over the limit! [ 381.904460][T10494] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 381.943275][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 381.956050][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 382.211641][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.216061][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 382.263248][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 382.332535][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.407201][T10493] ceph: No mds server is up or the cluster is laggy [ 382.578108][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.637293][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.867292][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 382.894967][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 382.971149][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 382.980178][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 383.820629][T10515] fuse: Unknown parameter 'group_i00000000000000000000' [ 383.953162][ T5952] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 384.186756][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.209758][ T5952] usb 5-1: not running at top speed; connect to a high speed hub [ 384.261500][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.289253][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.349070][ T791] usb 3-1: USB disconnect, device number 21 [ 384.363583][ T5952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.473213][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.483788][ T5952] usb 5-1: Product: syz [ 384.492112][ T5952] usb 5-1: Manufacturer: syz [ 384.498277][ T5952] usb 5-1: SerialNumber: syz [ 385.545812][ T5129] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 385.767200][ T5952] usb 5-1: 0:2 : does not exist [ 385.860439][T10540] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 385.883409][ T5952] usb 5-1: USB disconnect, device number 34 [ 385.965383][ T5932] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 385.973888][ T30] audit: type=1400 audit(3918890779.593:700): avc: denied { create } for pid=10537 comm="syz.1.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 386.215909][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 387.181379][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.377453][T10551] fuse: Bad value for 'fd' [ 387.384099][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.548065][T10551] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 387.548065][T10551] program syz.5.1098 not setting count and/or reply_len properly [ 387.815961][ T5932] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 388.170369][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.187702][ T5932] usb 3-1: Product: syz [ 388.192014][ T5932] usb 3-1: Manufacturer: syz [ 388.198677][T10552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.288442][ T5932] usb 3-1: SerialNumber: syz [ 388.299166][ T5932] usb 3-1: config 0 descriptor?? [ 388.736978][ T5932] usb 3-1: USB disconnect, device number 22 [ 388.743193][ T5885] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 389.397801][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 389.411907][ T5885] usb 6-1: config 1 has an invalid interface number: 89 but max is 0 [ 389.508850][ T5885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.586340][ T5885] usb 6-1: config 1 has no interface number 0 [ 389.896402][T10581] overlayfs: missing 'lowerdir' [ 389.922476][T10583] tipc: Enabled bearer , priority 0 [ 389.937390][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 389.989821][ T5885] usb 6-1: config 1 interface 89 has no altsetting 0 [ 390.015521][T10584] tipc: Resetting bearer [ 390.052320][ T5885] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=50.bb [ 390.076803][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.098274][ T5885] usb 6-1: Product: syz [ 390.105097][ T5885] usb 6-1: Manufacturer: syz [ 390.112866][ T5885] usb 6-1: SerialNumber: syz [ 390.120276][T10582] tipc: Disabling bearer [ 390.139725][T10586] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1109'. [ 390.166379][T10586] nbd: must specify at least one socket [ 390.328639][ T5885] qmi_wwan 6-1:1.89: bogus CDC Union: master=0, slave=1 [ 391.306953][ T5885] qmi_wwan 6-1:1.89: probe with driver qmi_wwan failed with error -22 [ 391.327905][ T5885] usb 6-1: USB disconnect, device number 12 [ 391.535156][T10594] loop3: detected capacity change from 0 to 7 [ 391.551140][ C0] blk_print_req_error: 10 callbacks suppressed [ 391.551157][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.566920][ C0] buffer_io_error: 10 callbacks suppressed [ 391.566935][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.589474][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.599081][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.665639][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.675253][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.709727][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.719343][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.728752][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.738318][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.756902][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.766497][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.785854][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.795505][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.804532][T10594] ldm_validate_partition_table(): Disk read failed. [ 391.811878][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.821555][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.830685][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.840275][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.851303][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 391.860873][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 391.872473][T10594] Dev loop3: unable to read RDB block 0 [ 391.880730][T10594] loop3: unable to read partition table [ 391.888751][T10594] loop3: partition table beyond EOD, truncated [ 391.895459][T10594] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 392.757535][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1115'. [ 392.865738][ T24] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 393.095807][ T5932] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.176635][T10612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.186000][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.196264][ T24] usb 2-1: config 0 has no interfaces? [ 393.201958][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.322374][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.342192][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 393.408479][T10615] can0: slcan on pty28. [ 393.512197][ T5932] usb 6-1: config 0 has an invalid interface number: 167 but max is 0 [ 393.521064][ T5932] usb 6-1: config 0 has no interface number 0 [ 393.535749][ T5932] usb 6-1: config 0 interface 167 has no altsetting 0 [ 393.557670][ T24] usb 2-1: config 0 descriptor?? [ 393.565432][ T5932] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 393.675345][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.710443][ T5932] usb 6-1: Product: syz [ 393.724891][ T5932] usb 6-1: Manufacturer: syz [ 393.734068][ T5932] usb 6-1: SerialNumber: syz [ 393.759124][ T5932] usb 6-1: config 0 descriptor?? [ 393.877361][T10608] can0 (unregistered): slcan off pty28. [ 393.983358][ T5932] usbtest 6-1:0.167: couldn't get endpoints, -22 [ 393.995541][T10627] fuse: Unknown parameter 'group_i00000000000000000000' [ 394.004606][ T5932] usbtest 6-1:0.167: probe with driver usbtest failed with error -22 [ 394.047032][ T5932] usb 6-1: USB disconnect, device number 13 [ 394.247828][T10636] loop3: detected capacity change from 0 to 7 [ 395.076518][T10636] ldm_validate_partition_table(): Disk read failed. [ 395.492656][ T791] usb 2-1: USB disconnect, device number 26 [ 395.516584][T10636] Dev loop3: unable to read RDB block 0 [ 395.847827][T10636] loop3: unable to read partition table [ 395.859957][T10636] loop3: partition table beyond EOD, truncated [ 395.888930][T10636] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 396.083189][T10656] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 396.448598][ T5862] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 396.620999][T10656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.665741][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 396.677163][ T5862] usb 2-1: config 1 has an invalid interface number: 89 but max is 0 [ 396.686943][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.712548][ T5862] usb 2-1: config 1 has no interface number 0 [ 396.719908][ T5862] usb 2-1: config 1 interface 89 has no altsetting 0 [ 396.729095][ T5862] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=50.bb [ 396.756926][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1126'. [ 396.775707][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.795262][ T5862] usb 2-1: Product: syz [ 396.805367][ T5862] usb 2-1: Manufacturer: syz [ 396.832067][ T5862] usb 2-1: SerialNumber: syz [ 397.344679][ T5862] qmi_wwan 2-1:1.89: bogus CDC Union: master=0, slave=1 [ 397.358526][T10684] fuse: Unknown parameter 'group_i00000000000000000000' [ 397.900575][ T5862] qmi_wwan 2-1:1.89: probe with driver qmi_wwan failed with error -22 [ 397.919069][ T5862] usb 2-1: USB disconnect, device number 27 [ 398.146971][T10696] tipc: Enabling of bearer rejected, failed to enable media [ 398.617275][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 398.716054][ T5932] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 398.901428][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 398.982871][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 399.089861][ T5932] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.160385][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.220057][ T30] audit: type=1400 audit(3918890792.903:701): avc: denied { shutdown } for pid=10703 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.258863][ T5932] usb 6-1: Product: syz [ 399.417383][T10705] loop7: detected capacity change from 0 to 1 [ 399.547080][ T5932] usb 6-1: Manufacturer: syz [ 399.551755][ T5932] usb 6-1: SerialNumber: syz [ 399.558191][T10705] loop7: detected capacity change from 1 to 0 [ 399.578229][ T30] audit: type=1400 audit(3918890793.083:702): avc: denied { ioctl } for pid=10703 comm="syz.4.1135" path="socket:[27158]" dev="sockfs" ino=27158 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.654753][ T5932] usb 6-1: config 0 descriptor?? [ 399.925972][ T5862] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 399.987327][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 400.136617][T10714] gfs2: error -5 reading superblock [ 400.154571][ T30] audit: type=1400 audit(3918890793.773:703): avc: denied { ioctl } for pid=10697 comm="syz.5.1127" path="/155/file0" dev="tmpfs" ino=829 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.446193][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 400.464017][ T5862] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 400.617023][ T5862] usb 4-1: config 0 has no interface number 0 [ 400.677264][ T5862] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 400.686881][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.888040][ T5862] usb 4-1: Product: syz [ 400.907218][ T5862] usb 4-1: Manufacturer: syz [ 401.042800][ T5862] usb 4-1: SerialNumber: syz [ 401.069931][ T5862] usb 4-1: config 0 descriptor?? [ 401.525420][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1138'. [ 401.595699][ T5885] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 401.634089][T10729] netlink: 'syz.4.1139': attribute type 10 has an invalid length. [ 401.644879][ T5862] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.667185][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.819338][T10732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.828170][ T5885] usb 2-1: Invalid ep0 maxpacket: 64 [ 401.949310][ T5932] usb 6-1: USB disconnect, device number 14 [ 401.965751][ T5885] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 402.055314][T10729] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 402.067154][T10729] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 402.067178][T10729] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 402.359541][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1142'. [ 402.368610][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 402.380562][T10737] fuse: Unknown parameter 'group_i00000000000000000000' [ 402.469656][T10739] netlink: 'syz.5.1142': attribute type 19 has an invalid length. [ 402.508201][T10739] netlink: 'syz.5.1142': attribute type 20 has an invalid length. [ 402.908194][ T3092] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 403.456662][ T3092] usb 3-1: Using ep0 maxpacket: 8 [ 403.616880][ T3092] usb 3-1: config 1 has an invalid interface number: 89 but max is 0 [ 403.657447][ T3092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.677751][ T3092] usb 3-1: config 1 has no interface number 0 [ 403.689052][ T3092] usb 3-1: config 1 interface 89 has no altsetting 0 [ 403.711650][ T3092] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=50.bb [ 403.722887][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.731120][ T3092] usb 3-1: Product: syz [ 403.735313][ T3092] usb 3-1: Manufacturer: syz [ 403.739992][ T3092] usb 3-1: SerialNumber: syz [ 403.875750][T10750] mkiss: ax0: crc mode is auto. [ 404.309014][ T3092] qmi_wwan 3-1:1.89: bogus CDC Union: master=0, slave=1 [ 404.346447][ T3092] qmi_wwan 3-1:1.89: probe with driver qmi_wwan failed with error -22 [ 404.376563][ T3092] usb 3-1: USB disconnect, device number 23 [ 404.469988][ T5862] usb 4-1: qt2_attach - failed to power on unit: -71 [ 404.606993][ T5862] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 404.642800][T10762] SET target dimension over the limit! [ 404.664471][ T5862] usb 4-1: USB disconnect, device number 25 [ 404.686305][T10764] tipc: Enabled bearer , priority 0 [ 404.760309][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 404.801764][T10764] tipc: Resetting bearer [ 405.001196][T10763] tipc: Disabling bearer [ 406.677049][T10784] fuse: Unknown parameter 'group_i00000000000000000000' [ 406.684695][T10783] binder: 10782:10783 ioctl c0306201 2000000001c0 returned -14 [ 406.847357][T10788] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 407.800198][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 408.235923][ T3092] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 409.243639][T10815] SET target dimension over the limit! [ 409.296720][ T3092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 409.306994][ T3092] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 409.449317][ T3092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 409.577115][ T3092] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 409.831514][ T3092] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 409.840844][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.880648][ T3092] usb 2-1: Product: syz [ 409.926204][ T3092] usb 2-1: Manufacturer: syz [ 409.930795][ T3092] usb 2-1: SerialNumber: syz [ 409.996536][ T3092] usb 2-1: config 0 descriptor?? [ 410.856365][ T3092] usb 2-1: can't set config #0, error -71 [ 410.863506][ T3092] usb 2-1: USB disconnect, device number 30 [ 411.061744][ T30] audit: type=1400 audit(3918890804.613:704): avc: denied { write } for pid=10836 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 412.230859][ T30] audit: type=1400 audit(3918890805.893:705): avc: denied { append } for pid=10834 comm="syz.5.1170" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 412.451230][T10847] loop5: detected capacity change from 0 to 7 [ 412.472116][T10847] Dev loop5: unable to read RDB block 7 [ 412.487075][T10847] loop5: unable to read partition table [ 412.632439][T10847] loop5: partition table beyond EOD, truncated [ 413.312699][T10847] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 413.571000][ T30] audit: type=1400 audit(3918890807.253:706): avc: denied { shutdown } for pid=10863 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 414.719894][T10883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.742283][T10883] FAULT_INJECTION: forcing a failure. [ 414.742283][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 414.755197][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.3.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.755222][T10883] Tainted: [L]=SOFTLOCKUP [ 414.755226][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.755232][T10883] Call Trace: [ 414.755236][T10883] [ 414.755240][T10883] dump_stack_lvl+0x100/0x190 [ 414.755261][T10883] should_fail_ex.cold+0x5/0xa [ 414.755279][T10883] ? alloc_pipe_info+0x1ec/0x590 [ 414.755296][T10883] should_failslab+0xc2/0x120 [ 414.755311][T10883] __kmalloc_noprof+0xe0/0x850 [ 414.755327][T10883] alloc_pipe_info+0x1ec/0x590 [ 414.755344][T10883] splice_direct_to_actor+0x78f/0xa30 [ 414.755361][T10883] ? __lock_acquire+0x4a5/0x2630 [ 414.755377][T10883] ? __pfx_direct_splice_actor+0x10/0x10 [ 414.755396][T10883] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 414.755417][T10883] do_splice_direct+0x174/0x240 [ 414.755433][T10883] ? __pfx_do_splice_direct+0x10/0x10 [ 414.755448][T10883] ? avc_policy_seqno+0x9/0x20 [ 414.755462][T10883] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 414.755479][T10883] ? bpf_lsm_file_permission+0x9/0x10 [ 414.755492][T10883] ? security_file_permission+0x76/0x210 [ 414.755504][T10883] ? rw_verify_area+0xce/0x6d0 [ 414.755519][T10883] do_sendfile+0xadc/0xe20 [ 414.755536][T10883] ? __pfx_do_sendfile+0x10/0x10 [ 414.755549][T10883] ? __fget_files+0x21f/0x3d0 [ 414.755569][T10883] __x64_sys_sendfile64+0x1d8/0x220 [ 414.755585][T10883] ? ksys_write+0x1ac/0x250 [ 414.755602][T10883] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 414.755635][T10883] do_syscall_64+0x106/0xf80 [ 414.755653][T10883] ? clear_bhb_loop+0x40/0x90 [ 414.755666][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.755677][T10883] RIP: 0033:0x7f6a8099c629 [ 414.755686][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.755696][T10883] RSP: 002b:00007f6a8188c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 414.755707][T10883] RAX: ffffffffffffffda RBX: 00007f6a80c16090 RCX: 00007f6a8099c629 [ 414.755714][T10883] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 414.755719][T10883] RBP: 00007f6a8188c090 R08: 0000000000000000 R09: 0000000000000000 [ 414.755725][T10883] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000001 [ 414.755731][T10883] R13: 00007f6a80c16128 R14: 00007f6a80c16090 R15: 00007fffdc724b08 [ 414.755745][T10883] [ 415.143411][T10883] can0: slcan on pty26. [ 415.240063][T10886] FAULT_INJECTION: forcing a failure. [ 415.240063][T10886] name failslab, interval 1, probability 0, space 0, times 0 [ 415.412963][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.4.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.412991][T10886] Tainted: [L]=SOFTLOCKUP [ 415.412997][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.413007][T10886] Call Trace: [ 415.413012][T10886] [ 415.413019][T10886] dump_stack_lvl+0x100/0x190 [ 415.413048][T10886] should_fail_ex.cold+0x5/0xa [ 415.413070][T10886] should_failslab+0xc2/0x120 [ 415.413093][T10886] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 415.413112][T10886] ? skb_clone+0x190/0x400 [ 415.413140][T10886] skb_clone+0x190/0x400 [ 415.413163][T10886] netlink_deliver_tap+0xaed/0xcc0 [ 415.413195][T10886] netlink_unicast+0x650/0x870 [ 415.413215][T10886] ? __pfx_netlink_unicast+0x10/0x10 [ 415.413241][T10886] netlink_sendmsg+0x8b0/0xda0 [ 415.413271][T10886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.413286][T10886] ? __might_fault+0x60/0x140 [ 415.413314][T10886] ____sys_sendmsg+0xa54/0xc30 [ 415.413334][T10886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.413362][T10886] ___sys_sendmsg+0x190/0x1e0 [ 415.413383][T10886] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.413434][T10886] __sys_sendmsg+0x170/0x220 [ 415.413460][T10886] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.413498][T10886] do_syscall_64+0x106/0xf80 [ 415.413523][T10886] ? clear_bhb_loop+0x40/0x90 [ 415.413546][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.413563][T10886] RIP: 0033:0x7fcb2f39c629 [ 415.413577][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.413593][T10886] RSP: 002b:00007fcb30270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.413611][T10886] RAX: ffffffffffffffda RBX: 00007fcb2f615fa0 RCX: 00007fcb2f39c629 [ 415.413622][T10886] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 415.413631][T10886] RBP: 00007fcb30270090 R08: 0000000000000000 R09: 0000000000000000 [ 415.413642][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.413651][T10886] R13: 00007fcb2f616038 R14: 00007fcb2f615fa0 R15: 00007fff831c5518 [ 415.413674][T10886] [ 416.217950][T10900] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.303746][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 416.436650][T10877] can0 (unregistered): slcan off pty26. [ 416.487414][ T30] audit: type=1400 audit(3918890810.163:707): avc: denied { write } for pid=10902 comm="syz.4.1188" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 416.775202][T10914] netlink: 'syz.3.1190': attribute type 3 has an invalid length. [ 416.884864][T10916] FAULT_INJECTION: forcing a failure. [ 416.884864][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 416.925811][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.2.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.925839][T10916] Tainted: [L]=SOFTLOCKUP [ 416.925845][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.925855][T10916] Call Trace: [ 416.925860][T10916] [ 416.925866][T10916] dump_stack_lvl+0x100/0x190 [ 416.925900][T10916] should_fail_ex.cold+0x5/0xa [ 416.925921][T10916] ? tomoyo_realpath_from_path+0xb6/0x690 [ 416.925938][T10916] should_failslab+0xc2/0x120 [ 416.925962][T10916] __kmalloc_noprof+0xe0/0x850 [ 416.925987][T10916] tomoyo_realpath_from_path+0xb6/0x690 [ 416.926011][T10916] tomoyo_path_number_perm+0x23c/0x580 [ 416.926035][T10916] ? tomoyo_path_number_perm+0x22e/0x580 [ 416.926062][T10916] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 416.926113][T10916] ? find_held_lock+0x2b/0x80 [ 416.926134][T10916] ? __fget_files+0x215/0x3d0 [ 416.926159][T10916] ? hook_file_ioctl_common+0x146/0x410 [ 416.926185][T10916] ? __fget_files+0x21f/0x3d0 [ 416.926215][T10916] security_file_ioctl+0xd3/0x230 [ 416.926244][T10916] __x64_sys_ioctl+0xb7/0x210 [ 416.926268][T10916] do_syscall_64+0x106/0xf80 [ 416.926293][T10916] ? clear_bhb_loop+0x40/0x90 [ 416.926314][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.926331][T10916] RIP: 0033:0x7fda5439c629 [ 416.926346][T10916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.926362][T10916] RSP: 002b:00007fda55189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.926380][T10916] RAX: ffffffffffffffda RBX: 00007fda54615fa0 RCX: 00007fda5439c629 [ 416.926392][T10916] RDX: 0000200000000040 RSI: 00000000c040565e RDI: 0000000000000003 [ 416.926402][T10916] RBP: 00007fda55189090 R08: 0000000000000000 R09: 0000000000000000 [ 416.926412][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.926422][T10916] R13: 00007fda54616038 R14: 00007fda54615fa0 R15: 00007ffdfb8420f8 [ 416.926447][T10916] [ 416.926454][T10916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.207836][ T30] audit: type=1400 audit(3918890810.883:708): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 418.150234][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.297362][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.447804][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.694510][ T30] audit: type=1400 audit(3918890812.373:709): avc: denied { watch watch_reads } for pid=10955 comm="syz.4.1203" path="pipe:[28710]" dev="pipefs" ino=28710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 419.173114][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.181776][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.190908][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.205922][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 420.200482][ T5817] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 420.226599][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.297091][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1204'. [ 420.614424][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'. [ 420.732162][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.115947][ T13] bridge_slave_1: left allmulticast mode [ 421.128777][ T13] bridge_slave_1: left promiscuous mode [ 421.141072][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.157125][ T13] bridge_slave_0: left allmulticast mode [ 421.167596][ T13] bridge_slave_0: left promiscuous mode [ 421.180050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.260055][ T3092] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 421.369300][ T13] gretap0 (unregistering): left allmulticast mode [ 421.429170][ T3092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.441733][ T3092] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 421.467734][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.476505][ T3092] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 421.484555][ T3092] usb 5-1: Manufacturer: syz [ 421.492349][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.507522][ T3092] usb 5-1: config 0 descriptor?? [ 421.516300][ T13] bond0 (unregistering): Released all slaves [ 421.783213][ T13] tipc: Left network mode [ 421.793273][T10994] fuse: Unknown parameter 'group_i00000000000000000000' [ 422.317185][ T5819] Bluetooth: hci5: command tx timeout [ 422.642606][T10962] chnl_net:caif_netlink_parms(): no params data found [ 422.906214][ T791] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 423.119988][ T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.200815][ T791] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 423.324182][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.556561][ T791] usb 3-1: config 0 descriptor?? [ 423.621502][ T791] pwc: Askey VC010 type 2 USB webcam detected. [ 423.839493][ T13] hsr_slave_0: left promiscuous mode [ 423.945731][ T13] hsr_slave_1: left promiscuous mode [ 423.958307][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.989336][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.026278][ T13] veth1_macvtap: left promiscuous mode [ 424.031972][ T13] veth0_macvtap: left promiscuous mode [ 424.096388][ T791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 424.109526][ T791] pwc: recv_control_msg error -32 req 02 val 2700 [ 424.110999][ T13] veth1_vlan: left promiscuous mode [ 424.116643][ T791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 424.133064][ T791] pwc: recv_control_msg error -32 req 04 val 1000 [ 424.138633][ T13] veth0_vlan: left promiscuous mode [ 424.161745][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1218'. [ 424.395938][ T5819] Bluetooth: hci5: command tx timeout [ 424.547938][ T791] pwc: recv_control_msg error -71 req 02 val 2000 [ 424.567496][ T791] pwc: recv_control_msg error -71 req 02 val 2100 [ 424.574462][ T791] pwc: recv_control_msg error -71 req 04 val 1500 [ 424.582113][ T791] pwc: recv_control_msg error -71 req 02 val 2500 [ 424.591713][ T791] pwc: recv_control_msg error -71 req 02 val 2400 [ 424.600031][ T791] pwc: recv_control_msg error -71 req 02 val 2600 [ 424.608391][ T791] pwc: recv_control_msg error -71 req 02 val 2900 [ 424.618708][ T791] pwc: recv_control_msg error -71 req 02 val 2800 [ 424.626898][ T791] pwc: recv_control_msg error -71 req 04 val 1100 [ 424.633791][ T791] pwc: recv_control_msg error -71 req 04 val 1200 [ 424.649230][ T791] pwc: Registered as video103. [ 424.674590][ T791] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 424.710228][ T791] usb 3-1: USB disconnect, device number 24 [ 424.852600][ T13] team0 (unregistering): Port device team_slave_1 removed [ 424.881046][ T13] team0 (unregistering): Port device team_slave_0 removed [ 425.292343][T11053] fuse: Unknown parameter 'group_i00000000000000000000' [ 425.308129][ T6386] lec:lec_start_xmit: lec0:No lecd attached [ 425.382601][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.394424][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.403144][T10962] bridge_slave_0: entered allmulticast mode [ 425.432243][T10962] bridge_slave_0: entered promiscuous mode [ 425.452984][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.474260][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.484937][T11059] binder: 11058:11059 ioctl c0306201 2000000001c0 returned -14 [ 425.492663][T10962] bridge_slave_1: entered allmulticast mode [ 425.495274][T10962] bridge_slave_1: entered promiscuous mode [ 425.601038][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.623103][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.974582][T10962] team0: Port device team_slave_0 added [ 426.163009][T10962] team0: Port device team_slave_1 added [ 426.241285][ T3092] uclogic 0003:256C:006D.0007: v1 frame probing failed: -71 [ 426.267715][ T3092] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 426.289876][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.307796][ T3092] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 426.320456][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.363582][ T3092] usb 5-1: USB disconnect, device number 35 [ 426.454942][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.485765][ T5819] Bluetooth: hci5: command tx timeout [ 426.543405][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.567630][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.666598][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.754972][T11092] fuse: Unknown parameter 'group_i00000000000000000000' [ 426.758121][T10962] hsr_slave_0: entered promiscuous mode [ 426.771247][T10962] hsr_slave_1: entered promiscuous mode [ 426.778406][T10962] debugfs: 'hsr0' already exists in 'hsr' [ 426.785307][T10962] Cannot create hsr debugfs directory [ 426.876248][ T791] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 426.886216][ T5863] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 427.013649][T10962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.024947][T10962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.035298][T10962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.043907][ T791] usb 4-1: Using ep0 maxpacket: 16 [ 427.047160][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.053211][ T791] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 427.064044][ T5863] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 427.072076][ T791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 427.092063][T10962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 427.098702][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.099540][ T791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 427.123480][ T791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 427.134022][ T791] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 427.154000][ T5863] usb 3-1: config 0 descriptor?? [ 427.160973][ T791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.170387][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.185131][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 427.188219][ T791] usb 4-1: SerialNumber: syz [ 427.192260][ T5885] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 427.218028][T11076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.227412][T11076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.275279][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.299818][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.312860][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.320022][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.350907][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.358073][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.368340][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.388358][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.402231][ T5885] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 427.428110][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.469289][ T791] usb 4-1: USB disconnect, device number 26 [ 427.481345][ T5885] usb 5-1: config 0 descriptor?? [ 427.549350][T11121] loop3: detected capacity change from 0 to 7 [ 427.559649][ C1] blk_print_req_error: 30 callbacks suppressed [ 427.559667][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.575433][ C1] buffer_io_error: 30 callbacks suppressed [ 427.575446][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.595686][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.605301][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.616822][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.622711][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 427.626432][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.630705][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.650485][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.663411][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.673037][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.685989][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.695584][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.714694][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.724313][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.732242][T11121] ldm_validate_partition_table(): Disk read failed. [ 427.744424][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.754068][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.762324][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.771937][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.785833][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.795427][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 427.807797][T11121] Dev loop3: unable to read RDB block 0 [ 427.815949][T11121] loop3: unable to read partition table [ 427.822277][T11121] loop3: partition table beyond EOD, truncated [ 427.829267][T11121] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 428.606968][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.608059][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 428.620787][ T5819] Bluetooth: hci5: command tx timeout [ 428.623980][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 428.633418][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 429.085501][ T5885] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 429.214956][ T5863] pwc: recv_control_msg error -71 req 02 val 2000 [ 429.317463][ T5863] pwc: recv_control_msg error -71 req 02 val 2100 [ 429.346174][ T5885] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 429.457626][ T5863] pwc: recv_control_msg error -71 req 04 val 1500 [ 429.516510][ T5863] pwc: recv_control_msg error -71 req 02 val 2500 [ 429.587932][ T5885] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 429.598501][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 429.707439][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 429.736141][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 429.750543][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 429.770953][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 429.837963][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 429.871553][ T5863] pwc: Registered as video103. [ 429.901987][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 429.967584][ T30] audit: type=1400 audit(3918890823.643:710): avc: denied { ioctl } for pid=11145 comm="syz.2.1238" path="socket:[28398]" dev="sockfs" ino=28398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.276827][ T5863] usb 3-1: USB disconnect, device number 25 [ 430.395806][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 430.403857][ C0] lec:lec_tx_timeout: lec0 [ 430.486425][T11156] fuse: Bad value for 'fd' [ 430.578004][T11164] fuse: Unknown parameter 'group_i00000000000000000000' [ 430.720494][T11165] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 430.720494][T11165] program syz.1.1239 not setting count and/or reply_len properly [ 431.023587][ T5885] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 431.049292][ T5885] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 431.106790][ T5885] usb 5-1: USB disconnect, device number 36 [ 431.141727][T10962] veth0_vlan: entered promiscuous mode [ 431.229465][T10962] veth1_vlan: entered promiscuous mode [ 431.335424][T10962] veth0_macvtap: entered promiscuous mode [ 431.445225][T10962] veth1_macvtap: entered promiscuous mode [ 431.496339][ T5862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 431.509839][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.598755][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.647126][ T5862] usb 4-1: device descriptor read/64, error -71 [ 431.660513][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.753685][T11195] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 431.773029][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.057407][T11195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.073160][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.119859][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.169422][T11195] bond2: (slave gretap1): making interface the new active one [ 432.178822][T11195] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 432.225713][ T5862] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 432.335700][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.343841][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.435355][ T5862] usb 4-1: device descriptor read/64, error -71 [ 432.571420][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 432.580422][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 432.913510][ T5862] usb usb4-port1: attempt power cycle [ 433.321960][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.350434][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.360879][ T5862] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 433.413289][ T5862] usb 4-1: device descriptor read/8, error -71 [ 433.448325][T11215] tipc: Enabling of bearer rejected, failed to enable media [ 433.590688][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 433.671175][ T5862] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 433.718859][ T5862] usb 4-1: device descriptor read/8, error -71 [ 433.728211][T11229] fuse: Unknown parameter 'group_i00000000000000000000' [ 433.856074][ T5862] usb usb4-port1: unable to enumerate USB device [ 434.399160][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.405537][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.538334][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 435.037493][ T5819] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 435.971038][T11251] fuse: Bad value for 'fd' [ 436.169316][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 436.178288][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 437.265747][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 437.415756][T11268] tipc: Enabling of bearer rejected, failed to enable media [ 437.476302][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 437.528543][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 437.566381][ T24] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 437.606859][ T24] usb 3-1: config 0 has no interfaces? [ 437.643066][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.755783][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.787055][ T24] usb 3-1: config 0 descriptor?? [ 438.262306][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 438.979706][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 439.477417][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.545651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.553692][ C0] lec:lec_tx_timeout: lec0 [ 439.560637][T11302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.730285][T11302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.755431][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.796743][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.146529][T11292] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 440.155004][T11292] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 441.342358][ T5862] usb 3-1: USB disconnect, device number 26 [ 441.369667][T11319] tipc: Enabling of bearer rejected, failed to enable media [ 441.524611][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 441.817920][T11341] SET target dimension over the limit! [ 441.936375][ T30] audit: type=1400 audit(3918890835.623:711): avc: denied { ioctl } for pid=11338 comm="syz.4.1280" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.996341][ T5863] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 442.046790][ T30] audit: type=1400 audit(3918890835.713:712): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.178334][ T30] audit: type=1400 audit(3918890835.723:713): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.300260][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 442.309246][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 442.621526][ T30] audit: type=1400 audit(3918890835.723:714): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.652329][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.728267][ T5863] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 442.775651][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.785666][ T30] audit: type=1400 audit(3918890835.773:715): avc: denied { execmem } for pid=11344 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 442.829978][ T5863] usb 5-1: config 0 descriptor?? [ 442.853331][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 442.991458][ T30] audit: type=1400 audit(3918890835.963:716): avc: denied { allowed } for pid=11344 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 443.214714][T11359] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1283'. [ 443.242533][ T30] audit: type=1400 audit(3918890835.973:717): avc: denied { create } for pid=11344 comm="syz.2.1281" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.318452][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 443.337703][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 443.365887][ T30] audit: type=1400 audit(3918890835.973:718): avc: denied { map } for pid=11344 comm="syz.2.1281" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.395899][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 443.405079][T11360] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1283'. [ 443.435921][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 443.456933][ T30] audit: type=1400 audit(3918890835.973:719): avc: denied { read write } for pid=11344 comm="syz.2.1281" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.486124][ T30] audit: type=1400 audit(3918890835.983:720): avc: denied { create } for pid=11344 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 443.511792][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 443.518930][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'. [ 443.528221][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 443.596630][T11370] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1284'. [ 443.768015][T11361] ceph: No mds server is up or the cluster is laggy [ 443.786302][ T791] libceph: connect (1)[c::]:6789 error -101 [ 443.792644][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 443.798662][ T5932] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 443.888320][ T5863] pwc: recv_control_msg error -71 req 02 val 2000 [ 443.896194][ T5863] pwc: recv_control_msg error -71 req 02 val 2100 [ 443.925755][ T5863] pwc: recv_control_msg error -71 req 04 val 1500 [ 443.978182][ T5863] pwc: recv_control_msg error -71 req 02 val 2500 [ 444.008447][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 444.008651][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.016220][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 444.075975][ T5932] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.105709][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 444.117654][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 444.129160][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.142233][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 444.169752][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 444.196035][ T5863] pwc: Registered as video103. [ 444.217050][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 444.237916][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 444.249639][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.288669][ T5932] usb 3-1: Product: syz [ 444.292853][ T5932] usb 3-1: Manufacturer: syz [ 444.319386][ T5863] usb 5-1: USB disconnect, device number 37 [ 444.322754][ T5932] usb 3-1: SerialNumber: syz [ 444.370560][ T5932] hub 3-1:1.0: bad descriptor, ignoring hub [ 444.435749][ T5932] hub 3-1:1.0: probe with driver hub failed with error -5 [ 444.666476][ T5932] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 445.237437][ T5862] usb 3-1: USB disconnect, device number 27 [ 445.324055][T11394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1288'. [ 445.345164][ T5862] usblp0: removed [ 445.510529][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.613214][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.784617][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 445.806007][T11409] syzkaller0: entered promiscuous mode [ 445.811464][T11409] syzkaller0: entered allmulticast mode [ 445.818811][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1291'. [ 445.838588][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1291'. [ 445.869931][T11409] 0: reclassify loop, rule prio 0, protocol 800 [ 446.102161][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 446.396226][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.444975][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 446.475871][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 446.525928][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.579435][ T24] usb 4-1: config 0 descriptor?? [ 446.826522][ T5932] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 447.000936][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.033648][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.162774][ T5932] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 447.232882][ T5932] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 447.318794][ T5932] usb 2-1: Manufacturer: syz [ 447.347714][ T24] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 447.439560][ T5932] usb 2-1: config 0 descriptor?? [ 447.895683][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 447.895698][ T30] audit: type=1400 audit(3918890841.473:774): avc: denied { connect } for pid=11417 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.998160][ T30] audit: type=1400 audit(3918890841.483:775): avc: denied { name_connect } for pid=11417 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 448.025999][ T24] usb 4-1: USB disconnect, device number 31 [ 448.075745][ T30] audit: type=1400 audit(3918890841.543:776): avc: denied { listen } for pid=11417 comm="syz.1.1294" lport=35173 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.139305][ T30] audit: type=1400 audit(3918890841.553:777): avc: denied { accept } for pid=11417 comm="syz.1.1294" lport=35173 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.177737][ T30] audit: type=1400 audit(3918890841.613:778): avc: denied { setopt } for pid=11417 comm="syz.1.1294" lport=35173 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 448.259014][T11433] loop3: detected capacity change from 0 to 7 [ 448.270326][ C0] blk_print_req_error: 10 callbacks suppressed [ 448.270345][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.286086][ C0] buffer_io_error: 10 callbacks suppressed [ 448.286100][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.308158][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.317759][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.329034][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.338623][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.346827][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.356391][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.366069][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.375637][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.384156][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.393728][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.404062][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.413649][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.425872][T11433] ldm_validate_partition_table(): Disk read failed. [ 448.436009][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.445572][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.455645][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.465210][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.473908][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 448.483499][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 448.492876][T11433] Dev loop3: unable to read RDB block 0 [ 448.500601][T11433] loop3: unable to read partition table [ 448.506952][T11433] loop3: partition table beyond EOD, truncated [ 448.513183][T11433] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 448.766754][ T5932] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 448.867034][ T5932] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 448.888193][ T30] audit: type=1400 audit(3918890841.633:779): avc: denied { write } for pid=11417 comm="syz.1.1294" lport=35173 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 448.911952][ T5932] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 448.920297][ T5932] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 448.928057][ T5932] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 448.937719][ T30] audit: type=1400 audit(3918890841.683:780): avc: denied { read } for pid=11431 comm="syz.2.1298" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.972449][ T5932] usb 2-1: USB disconnect, device number 31 [ 448.983408][T11437] netlink: 'syz.3.1300': attribute type 29 has an invalid length. [ 448.994797][T11437] netlink: 'syz.3.1300': attribute type 29 has an invalid length. [ 449.007266][T11437] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1300'. [ 449.048071][T11437] unsupported nla_type 58 [ 449.052843][ T30] audit: type=1400 audit(3918890841.683:781): avc: denied { open } for pid=11431 comm="syz.2.1298" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.121798][ T30] audit: type=1400 audit(3918890841.683:782): avc: denied { create } for pid=11431 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.152043][ T30] audit: type=1400 audit(3918890841.683:783): avc: denied { bind } for pid=11431 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.285762][T11442] ipvlan1: entered promiscuous mode [ 450.883657][T11476] netlink: 'syz.6.1306': attribute type 1 has an invalid length. [ 450.955474][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 450.995332][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 451.004578][T11481] netlink: 'syz.3.1310': attribute type 19 has an invalid length. [ 451.035688][T11481] netlink: 'syz.3.1310': attribute type 20 has an invalid length. [ 451.176271][ T5932] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 451.585722][ T5932] usb 3-1: device descriptor read/64, error -71 [ 451.845832][ T5932] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 451.945942][ T5862] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 452.146201][ T5932] usb 3-1: device descriptor read/64, error -71 [ 452.191787][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.204338][ T5862] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.214398][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.230115][ T5862] usb 2-1: config 0 descriptor?? [ 452.249395][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 452.266045][ T5932] usb usb3-port1: attempt power cycle [ 452.396379][ T3092] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 452.626698][ T5932] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 452.678360][ T5932] usb 3-1: device descriptor read/8, error -71 [ 452.792951][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.957758][ T5932] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 452.958591][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.982291][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 452.989650][ T5862] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.017079][ T5932] usb 3-1: device descriptor read/8, error -71 [ 453.039131][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 453.039147][ T30] audit: type=1400 audit(3918890846.723:807): avc: denied { ioctl } for pid=11507 comm="syz.4.1317" path="socket:[30987]" dev="sockfs" ino=30987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.073018][T11508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.132633][ T3092] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.136015][ T5932] usb usb3-port1: unable to enumerate USB device [ 453.144031][ T3092] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.157793][ T3092] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 453.177077][ T3092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.206053][ T3092] usb 4-1: config 0 descriptor?? [ 453.231940][T11515] FAULT_INJECTION: forcing a failure. [ 453.231940][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.271522][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.6.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.271541][T11515] Tainted: [L]=SOFTLOCKUP [ 453.271545][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.271551][T11515] Call Trace: [ 453.271555][T11515] [ 453.271559][T11515] dump_stack_lvl+0x100/0x190 [ 453.271581][T11515] should_fail_ex.cold+0x5/0xa [ 453.271595][T11515] _copy_from_user+0x2e/0xd0 [ 453.271610][T11515] video_usercopy+0xe71/0x1740 [ 453.271630][T11515] ? __pfx___video_do_ioctl+0x10/0x10 [ 453.271647][T11515] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 453.271658][T11515] ? __pfx_video_usercopy+0x10/0x10 [ 453.271683][T11515] v4l2_ioctl+0x1bd/0x250 [ 453.271693][T11515] ? __pfx_v4l2_ioctl+0x10/0x10 [ 453.271703][T11515] __x64_sys_ioctl+0x18e/0x210 [ 453.271718][T11515] do_syscall_64+0x106/0xf80 [ 453.271734][T11515] ? clear_bhb_loop+0x40/0x90 [ 453.271750][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.271761][T11515] RIP: 0033:0x7f80f5d9c629 [ 453.271770][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.271780][T11515] RSP: 002b:00007f80f6c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.271792][T11515] RAX: ffffffffffffffda RBX: 00007f80f6015fa0 RCX: 00007f80f5d9c629 [ 453.271798][T11515] RDX: 0000200000000040 RSI: 00000000c040565e RDI: 0000000000000003 [ 453.271804][T11515] RBP: 00007f80f6c69090 R08: 0000000000000000 R09: 0000000000000000 [ 453.271810][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.271816][T11515] R13: 00007f80f6016038 R14: 00007f80f6015fa0 R15: 00007ffc6dad2da8 [ 453.271829][T11515] [ 453.467104][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 453.526178][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 453.555954][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 453.563816][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 453.575736][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 453.585971][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 453.603908][ T30] audit: type=1400 audit(3918890847.273:808): avc: denied { open } for pid=11516 comm="syz.4.1319" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 453.634618][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 453.677838][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 453.725933][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 453.743549][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 453.779819][ T5862] pwc: Registered as video103. [ 453.787787][T11503] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 453.820610][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 453.962857][T11532] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1322'. [ 454.089592][ T5932] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 454.091354][ T3092] uclogic 0003:5543:0522.000B: item fetching failed at offset 0/3 [ 454.221108][ T5862] usb 2-1: USB disconnect, device number 32 [ 454.274149][ T3092] uclogic 0003:5543:0522.000B: parse failed [ 454.345706][ T3092] uclogic 0003:5543:0522.000B: probe with driver uclogic failed with error -22 [ 454.386290][ T3092] usb 4-1: USB disconnect, device number 32 [ 454.551482][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.562758][ T5932] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.575499][ T5932] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 454.590940][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.591774][ T30] audit: type=1400 audit(3918890848.203:809): avc: denied { create } for pid=11538 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.605719][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 454.661986][ T5932] usb 5-1: config 0 descriptor?? [ 454.815670][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 454.827829][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 454.855396][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 454.891172][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.009139][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 455.022116][ T30] audit: type=1400 audit(3918890848.713:810): avc: denied { append } for pid=11526 comm="syz.4.1320" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.047638][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.048131][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 455.057895][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.109891][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 455.142740][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 455.173021][ T30] audit: type=1400 audit(3918890848.853:811): avc: denied { create } for pid=11548 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.174823][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 455.218190][ T24] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 455.227645][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.236058][ T24] usb 7-1: Product: syz [ 455.240503][ T24] usb 7-1: Manufacturer: syz [ 455.245187][ T24] usb 7-1: SerialNumber: syz [ 455.334334][T11551] SET target dimension over the limit! [ 455.357692][ T24] usb 7-1: config 0 descriptor?? [ 455.375330][ T30] audit: type=1400 audit(3918890848.983:812): avc: denied { read write } for pid=11548 comm="syz.3.1327" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.405675][T11536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 455.413134][T11536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 455.439773][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.447301][ T30] audit: type=1400 audit(3918890848.983:813): avc: denied { open } for pid=11548 comm="syz.3.1327" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.506014][ T30] audit: type=1400 audit(3918890848.993:814): avc: denied { connect } for pid=11548 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.577431][ T30] audit: type=1400 audit(3918890849.013:815): avc: denied { ioctl } for pid=11548 comm="syz.3.1327" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 456.041455][ T30] audit: type=1400 audit(3918890849.013:816): avc: denied { accept } for pid=11548 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.349609][T11559] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 456.372781][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.381541][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.392833][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.401715][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.634674][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1330'. [ 456.735075][ T5819] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 457.321544][ T24] usb 5-1: USB disconnect, device number 38 [ 457.437353][ T791] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 457.735668][ T791] usb 2-1: Using ep0 maxpacket: 32 [ 457.791287][ T5932] usb 7-1: USB disconnect, device number 2 [ 457.805410][ T791] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 457.821027][ T791] usb 2-1: config 0 has no interface number 0 [ 457.848176][ T791] usb 2-1: config 0 interface 167 has no altsetting 0 [ 457.916652][ T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 457.957025][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.987802][ T791] usb 2-1: Product: syz [ 457.992286][ T791] usb 2-1: Manufacturer: syz [ 458.079264][ T791] usb 2-1: SerialNumber: syz [ 458.088490][ T791] usb 2-1: config 0 descriptor?? [ 458.205213][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 458.205244][ T30] audit: type=1400 audit(3918890851.883:845): avc: denied { setopt } for pid=11578 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 458.913889][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.922491][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.925677][ T5862] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 458.933240][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.948928][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.956796][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.966640][ C1] raw-gadget.5 gadget.1: ignoring, device is not running [ 458.974567][ T791] usbtest 2-1:0.167: couldn't get endpoints, -22 [ 458.981692][ T791] usbtest 2-1:0.167: probe with driver usbtest failed with error -22 [ 459.009511][ T791] usb 2-1: USB disconnect, device number 33 [ 459.290427][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.328608][ T5862] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.376107][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.437739][ T5862] usb 3-1: config 0 descriptor?? [ 459.466704][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 459.517248][ T30] audit: type=1400 audit(3918890853.203:846): avc: denied { ioctl } for pid=11593 comm="syz.6.1342" path="socket:[31195]" dev="sockfs" ino=31195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.517777][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1342'. [ 459.761131][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 459.783911][ T30] audit: type=1400 audit(3918890853.463:847): avc: denied { mounton } for pid=11599 comm="syz.3.1343" path="/273/bus" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 459.808407][ T30] audit: type=1400 audit(3918890853.473:848): avc: denied { unlink } for pid=11599 comm="syz.3.1343" name="#16" dev="tmpfs" ino=1478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.815765][ T3092] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 459.835362][ T30] audit: type=1400 audit(3918890853.473:849): avc: denied { mount } for pid=11599 comm="syz.3.1343" name="/" dev="overlay" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.866187][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 459.873186][ T30] audit: type=1400 audit(3918890853.553:850): avc: denied { execute } for pid=11599 comm="syz.3.1343" name="file2" dev="tmpfs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 459.880944][T11602] gre1: entered promiscuous mode [ 459.916696][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 459.918532][ T30] audit: type=1400 audit(3918890853.583:851): avc: denied { execute_no_trans } for pid=11599 comm="syz.3.1343" path="/273/bus/file2" dev="overlay" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 459.979136][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 459.983892][T11605] netlink: 496 bytes leftover after parsing attributes in process `syz.3.1345'. [ 459.995483][ T5862] pwc: recv_control_msg error -32 req 04 val 1000 [ 460.014128][ T30] audit: type=1400 audit(3918890853.603:852): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 460.084773][ T3092] usb 7-1: unable to get BOS descriptor or descriptor too short [ 460.108503][ T3092] usb 7-1: not running at top speed; connect to a high speed hub [ 460.257646][ T3092] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.676494][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 460.695552][ T3092] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.704750][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 460.713986][T11592] bridge_slave_1: default FDB implementation only supports local addresses [ 460.752123][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 460.798924][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 460.809821][ T3092] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.825293][ T3092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.826316][T11612] can0: slcan on pty22. [ 460.833585][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 460.851507][ T3092] usb 7-1: Product: syz [ 460.856932][ T30] audit: type=1400 audit(3918890854.523:853): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 460.896659][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 460.965008][ T3092] usb 7-1: Manufacturer: syz [ 460.974330][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 460.985287][ T3092] usb 7-1: SerialNumber: syz [ 461.018174][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.043517][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.379290][T11621] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1342'. [ 461.988394][T11601] can0 (unregistered): slcan off pty22. [ 462.125289][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.135788][ T3092] usb 7-1: 0:2 : does not exist [ 462.157088][ T5862] pwc: Registered as video103. [ 462.162680][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 462.185071][ T3092] usb 7-1: USB disconnect, device number 3 [ 462.329811][ T5862] usb 3-1: USB disconnect, device number 32 [ 462.339653][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.374373][T11630] tipc: Enabled bearer , priority 0 [ 462.396243][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 462.546733][T11637] tipc: Resetting bearer [ 462.694451][T11629] tipc: Disabling bearer [ 462.697233][ T30] audit: type=1400 audit(3918890856.373:854): avc: denied { create } for pid=11640 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.937371][T11652] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1355'. [ 462.947760][ T5862] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 464.073468][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 464.080380][ T5862] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.180255][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 464.250935][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.316070][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 464.372911][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 464.411456][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 464.462494][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 464.484461][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 464.484473][ T30] audit: type=1400 audit(3918890858.153:857): avc: denied { name_bind } for pid=11668 comm="syz.4.1359" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 464.525423][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 464.584158][ T30] audit: type=1400 audit(3918890858.243:858): avc: denied { create } for pid=11668 comm="syz.4.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 464.604818][ T5862] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 464.622721][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.813959][ T5862] usb 3-1: Product: syz [ 464.830699][ T5862] usb 3-1: Manufacturer: syz [ 464.881803][ T5862] usb 3-1: SerialNumber: syz [ 464.929006][T11676] xt_hashlimit: max too large, truncated to 1048576 [ 465.027176][ T5862] usb 3-1: config 0 descriptor?? [ 465.094390][T11639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.127580][T11639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.178512][ T5862] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.052854][ T30] audit: type=1400 audit(3918890860.733:859): avc: denied { bind } for pid=11693 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.582172][ T30] audit: type=1400 audit(3918890860.733:860): avc: denied { write } for pid=11693 comm="syz.2.1365" path="socket:[31284]" dev="sockfs" ino=31284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.650710][ T30] audit: type=1400 audit(3918890860.733:861): avc: denied { map } for pid=11693 comm="syz.2.1365" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.654852][ T5862] usb 3-1: USB disconnect, device number 33 [ 467.747745][ T30] audit: type=1400 audit(3918890860.733:862): avc: denied { ioctl } for pid=11693 comm="syz.2.1365" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.842652][ T30] audit: type=1400 audit(3918890860.733:863): avc: denied { set_context_mgr } for pid=11693 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 467.876208][T11722] FAULT_INJECTION: forcing a failure. [ 467.876208][T11722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.955796][T11722] CPU: 1 UID: 0 PID: 11722 Comm: syz.6.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.955824][T11722] Tainted: [L]=SOFTLOCKUP [ 467.955830][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.955839][T11722] Call Trace: [ 467.955845][T11722] [ 467.955851][T11722] dump_stack_lvl+0x100/0x190 [ 467.955883][T11722] should_fail_ex.cold+0x5/0xa [ 467.955907][T11722] _copy_from_user+0x2e/0xd0 [ 467.955929][T11722] copy_msghdr_from_user+0x9f/0x4f0 [ 467.955951][T11722] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 467.955981][T11722] ___sys_sendmsg+0x106/0x1e0 [ 467.956001][T11722] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.956049][T11722] __sys_sendmsg+0x170/0x220 [ 467.956075][T11722] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.956112][T11722] do_syscall_64+0x106/0xf80 [ 467.956138][T11722] ? clear_bhb_loop+0x40/0x90 [ 467.956159][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.956176][T11722] RIP: 0033:0x7f80f5d9c629 [ 467.956191][T11722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.956207][T11722] RSP: 002b:00007f80f6c48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.956224][T11722] RAX: ffffffffffffffda RBX: 00007f80f6016090 RCX: 00007f80f5d9c629 [ 467.956236][T11722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 467.956253][T11722] RBP: 00007f80f6c48090 R08: 0000000000000000 R09: 0000000000000000 [ 467.956263][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.956273][T11722] R13: 00007f80f6016128 R14: 00007f80f6016090 R15: 00007ffc6dad2da8 [ 467.956296][T11722] [ 467.960708][ T30] audit: type=1400 audit(3918890860.903:864): avc: denied { kexec_image_load } for pid=11699 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 468.195998][ T30] audit: type=1400 audit(3918890861.393:865): avc: denied { call } for pid=11711 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 468.215049][ T30] audit: type=1400 audit(3918890861.393:866): avc: denied { transfer } for pid=11711 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 468.236719][ T791] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 468.294478][T11728] netlink: 'syz.3.1373': attribute type 4 has an invalid length. [ 468.379673][T11731] fuse: Unknown parameter 'group_i00000000000000000000' [ 468.389211][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 468.400657][ T791] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 468.415641][ T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.429095][T11733] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1376'. [ 468.457978][ T791] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.467823][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.491365][ T791] usb 2-1: Product: syz [ 468.500739][ T791] usb 2-1: Manufacturer: syz [ 468.515982][ T791] usb 2-1: SerialNumber: syz [ 468.748610][T11721] smc: net device bond0 applied user defined pnetid SYZ2 [ 468.757554][T11721] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1371'. [ 468.892803][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.903469][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.975666][ T5933] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 469.093111][T11721] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.105553][T11721] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.273220][T11721] .` (unregistering): Released all slaves [ 469.276290][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 469.387821][ T5933] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 469.396973][ T5933] usb 3-1: config 0 has no interfaces? [ 469.407246][ T5933] usb 3-1: New USB device found, idVendor=0fdb, idProduct=0025, bcdDevice=29.40 [ 469.425120][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.521656][ T5933] usb 3-1: config 0 descriptor?? [ 469.644999][ T8922] Bluetooth: Error in BCSP hdr checksum [ 470.263385][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 470.263404][ T30] audit: type=1400 audit(3918890863.943:874): avc: denied { write } for pid=11747 comm="syz.2.1381" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 470.281195][ T791] usb 2-1: 0:2 : does not exist [ 470.588423][ T791] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 470.606034][ T791] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 470.619987][ T791] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 470.633929][ T791] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 470.664500][ T791] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 470.695057][ T791] usb 2-1: USB disconnect, device number 34 [ 471.024400][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.285774][ T5819] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 471.529297][T11779] fuse: Unknown parameter 'group_i00000000000000000000' [ 471.695387][ T30] audit: type=1400 audit(3918890865.373:875): avc: denied { read } for pid=11786 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 471.730988][T11771] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 471.739589][ T30] audit: type=1400 audit(3918890865.393:876): avc: denied { write } for pid=11786 comm="syz.1.1391" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 471.763292][T11771] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 471.786490][ T791] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 471.857400][ T30] audit: type=1400 audit(3918890865.543:877): avc: denied { create } for pid=11769 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 471.965757][ T791] usb 7-1: Using ep0 maxpacket: 32 [ 471.980086][ T791] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 472.027286][ T791] usb 7-1: config 0 has no interface number 0 [ 472.073675][ T791] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 472.089503][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.098671][ T791] usb 7-1: Product: syz [ 472.103475][ T791] usb 7-1: Manufacturer: syz [ 472.156197][ T791] usb 7-1: SerialNumber: syz [ 472.208256][ T791] usb 7-1: config 0 descriptor?? [ 472.215738][ T5933] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 472.226942][ T791] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 472.241809][ T791] dw2102: su3000_power_ctrl: 1, initialized 0 [ 472.271850][ T791] dvb-usb: bulk message failed: -22 (2/0) [ 472.301613][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.336715][ T791] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 472.365912][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 472.378419][ T5933] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 472.387260][ T791] usb 7-1: media controller created [ 472.392523][ T791] dvb-usb: bulk message failed: -22 (6/0) [ 472.398886][ T5933] usb 2-1: config 0 has no interface number 0 [ 472.406824][ T791] dw2102: i2c transfer failed. [ 472.424832][ T5862] usb 3-1: USB disconnect, device number 34 [ 472.459807][ T5933] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 472.479087][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.488527][ T5933] usb 2-1: Product: syz [ 472.488604][T11784] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 472.492769][ T5933] usb 2-1: Manufacturer: syz [ 472.504742][T11784] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 472.504764][T11784] CPU: 0 UID: 0 PID: 11784 Comm: syz.6.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.504791][T11784] Tainted: [L]=SOFTLOCKUP [ 472.504798][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.511676][ T5933] usb 2-1: SerialNumber: syz [ 472.517733][T11784] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 472.517760][T11784] Code: b3 08 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 472.529976][ T5933] usb 2-1: config 0 descriptor?? [ 472.532964][T11784] RSP: 0000:ffffc9000373fc10 EFLAGS: 00010246 [ 472.532984][T11784] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90005451000 [ 472.546839][ T30] audit: type=1400 audit(3918890866.203:878): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 472.547560][T11784] RDX: 0000000000000000 RSI: ffffffff87ffe670 RDI: ffff88807a60c5a8 [ 472.553431][ T30] audit: type=1400 audit(3918890866.203:879): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.572991][T11784] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 472.573003][T11784] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 472.573013][T11784] R13: ffff8880380b5b02 R14: 0000000000000000 R15: ffff8880380b5b00 [ 472.573024][T11784] FS: 00007f80f6c696c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 472.573041][T11784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.573052][T11784] CR2: 00007fda55145690 CR3: 0000000061f66000 CR4: 00000000003526f0 [ 472.573063][T11784] Call Trace: [ 472.573068][T11784] [ 472.573076][T11784] ? mark_held_locks+0x40/0x70 [ 472.573106][T11784] __i2c_transfer+0x5d9/0x17f0 [ 472.573126][T11784] ? __pfx___i2c_transfer+0x10/0x10 [ 472.573146][T11784] i2c_transfer+0x15f/0x380 [ 472.573162][T11784] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 472.573181][T11784] i2cdev_ioctl+0x19d/0x830 [ 472.573197][T11784] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 472.729967][T11784] ? selinux_file_ioctl+0x139/0x290 [ 472.735149][T11784] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 472.740152][T11784] __x64_sys_ioctl+0x18e/0x210 [ 472.744898][T11784] do_syscall_64+0x106/0xf80 [ 472.749474][T11784] ? clear_bhb_loop+0x40/0x90 [ 472.754143][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.760012][T11784] RIP: 0033:0x7f80f5d9c629 [ 472.764401][T11784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.783985][T11784] RSP: 002b:00007f80f6c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.792374][T11784] RAX: ffffffffffffffda RBX: 00007f80f6015fa0 RCX: 00007f80f5d9c629 [ 472.800322][T11784] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 472.808274][T11784] RBP: 00007f80f5e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 472.816221][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.824172][T11784] R13: 00007f80f6016038 R14: 00007f80f6015fa0 R15: 00007ffc6dad2da8 [ 472.832121][T11784] [ 472.835115][T11784] Modules linked in: [ 472.840016][T11784] ---[ end trace 0000000000000000 ]--- [ 472.846565][ T30] audit: type=1400 audit(3918890866.203:880): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.866527][T11784] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 472.875438][ T5933] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 472.877370][ T30] audit: type=1400 audit(3918890866.203:881): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.885244][ T5933] dw2102: su3000_power_ctrl: 1, initialized 0 [ 472.949028][T11784] Code: b3 08 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 472.979801][T11784] RSP: 0000:ffffc9000373fc10 EFLAGS: 00010246 [ 472.986537][T11784] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90005451000 [ 472.994233][ T5933] dvb-usb: bulk message failed: -22 (2/0) [ 473.016919][T11784] RDX: 0000000000000000 RSI: ffffffff87ffe670 RDI: ffff88807a60c5a8 [ 473.023460][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.024999][ T30] audit: type=1400 audit(3918890866.203:882): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 473.046372][ T5933] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 473.055161][T11784] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 473.072093][T11784] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 473.085819][T11784] R13: ffff8880380b5b02 R14: 0000000000000000 R15: ffff8880380b5b00 [ 473.109407][ T30] audit: type=1400 audit(3918890866.203:883): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 473.119480][T11796] fuse: Unknown parameter 'euid<00000000000000000000' [ 473.139655][T11784] FS: 00007f80f6c696c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 473.149626][T11784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.150670][ T5933] usb 2-1: media controller created [ 473.156493][T11784] CR2: 000000110c2fa139 CR3: 0000000061f66000 CR4: 00000000003526f0 [ 473.169752][T11784] Kernel panic - not syncing: Fatal exception [ 473.176101][T11784] Kernel Offset: disabled [ 473.180397][T11784] Rebooting in 86400 seconds..