last executing test programs: 5m12.772031415s ago: executing program 1 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x40000000020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xf67d10fbb02e609b, 0x1, 0x0, 0x0, 0x400}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0xecab}}]}, 0x3c}}, 0x0) 5m12.221219329s ago: executing program 1 (id=1226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r6, r5, 0x0) 5m11.151639795s ago: executing program 1 (id=1231): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c001000e7000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = memfd_create(&(0x7f0000000640)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhgY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\x030\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea", 0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x12, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20930}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1007}}}}]}, 0x40}}, 0x0) (async, rerun: 32) sendmmsg$alg(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@iv={0x18}, @iv={0x18}], 0x30, 0x48844}], 0x1, 0x4800) (rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) rmdir(&(0x7f00000001c0)='./file1\x00') (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) 5m11.0626984s ago: executing program 1 (id=1232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x15, 0x0, 0x37) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xcf2, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}]}, 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000020c000/0x4000)=nil, 0x4000, 0xe) mq_unlink(0x0) 5m8.420307248s ago: executing program 1 (id=1238): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000300)) preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000005c0)=""/66, 0x42}], 0x2, 0x3, 0x45b4e1f0) 5m7.77386603s ago: executing program 1 (id=1244): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000000000000000000000000000000000000f01046e6f645a3dbf6460d2c297442c0237fc6225ffffff8005000000000000ff03ff92e91600050000002c93cb3db6c231d119aaa16f75c58fa6889ff3c8f7abc61b59a1d26f0c4af8e293d3f86ccdc66ff57be90000000000000003d5892d8efebb9e05ac0a6bc529607ac68a3813afe79e85636afd6c5d157314cbecf0a1a512347a8c15b320d1e1c010557aaa77165e51603230385e7c270100ac42330044a9083de5bed8e0bd28682294f638c38e25756ab0b07f65dbd624ee955f7da78ee19649373f30e3f7b964f0a266c3ac9e507753a3c403c87bf14a7687259168b45bbd7a1fd8600ea12e00dbfe4c1afeeaaf9d7bb4a75a1c821893f7f47c3c50718cc32b007002007dfa673effeb09b5351f5bde054000"], 0x50d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRESDEC=r0, @ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYRESOCT, @ANYRESDEC=r0], 0x20) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() (async) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sigaltstack(0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$snapshot(r4, 0x0, 0xffffffbf) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x521002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x8, r5, 0x80000}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700014002020a600e41b0000900ac00040211000000160012000a00ff000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee94d93ebc0ec52f44edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af2008b7b55f4d2a6823a45", 0xd8}, {&(0x7f00000004c0)}], 0x2}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700014002020a600e41b0000900ac00040211000000160012000a00ff000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee94d93ebc0ec52f44edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af2008b7b55f4d2a6823a45", 0xd8}, {&(0x7f00000004c0)}], 0x2}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000001c0)="c5", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) 5m7.64921668s ago: executing program 32 (id=1244): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x50d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRESDEC=r0, @ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYRESOCT, @ANYRESDEC=r0], 0x20) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() (async) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sigaltstack(0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$snapshot(r4, 0x0, 0xffffffbf) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x521002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x8, r5, 0x80000}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700014002020a600e41b0000900ac00040211000000160012000a00ff000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee94d93ebc0ec52f44edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af2008b7b55f4d2a6823a45", 0xd8}, {&(0x7f00000004c0)}], 0x2}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700014002020a600e41b0000900ac00040211000000160012000a00ff000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee94d93ebc0ec52f44edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af2008b7b55f4d2a6823a45", 0xd8}, {&(0x7f00000004c0)}], 0x2}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000001c0)="c5", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) 3m30.538307056s ago: executing program 0 (id=1502): socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fchdir(0xffffffffffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x80, r2}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f00000000c0)="4b0003000000", 0x6) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x53, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3m26.806722508s ago: executing program 0 (id=1508): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x2}, 0x18) connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) 3m26.709938388s ago: executing program 0 (id=1511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x7f, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40b340) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x2000000000000077, 0x1}) 3m25.167997124s ago: executing program 0 (id=1513): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) 3m24.08075421s ago: executing program 0 (id=1516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0xb0}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 3m22.74844038s ago: executing program 0 (id=1520): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bb", 0x2d) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getrlimit(0xd, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x1, 0x2) 3m7.134942706s ago: executing program 33 (id=1520): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bb", 0x2d) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getrlimit(0xd, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x1, 0x2) 11.572053157s ago: executing program 5 (id=2127): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x2}) syz_io_uring_setup(0xdf8, &(0x7f0000000240)={0x0, 0x370, 0x4, 0x0, 0x299, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000140)=0x0) r4 = io_uring_setup(0x5de0, &(0x7f0000000440)={0x0, 0x9fbe, 0x400, 0x0, 0xfffffffb}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x21, 0x20000038, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x80, &(0x7f00000002c0)=@in={0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, {0x0, r5}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0x8}) ioctl$KDSKBMETA(r10, 0x4b63, &(0x7f0000000380)=0x4) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r11, 0x4b4d, &(0x7f0000000200)={0x1000ec9, 0x300023}) write$FUSE_INIT(r8, 0x0, 0xffcd) 9.723427191s ago: executing program 5 (id=2136): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) (async, rerun: 64) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8000000000000}}]}}) (async) timerfd_settime(r3, 0x2, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) (async) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 9.431903109s ago: executing program 5 (id=2140): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x1, 0xf0, 0x1}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@empty, @empty, 0x0, "63d132035f225874f41ff64be93a224de7b634b5b464d1034962ec0c6b6948e4", 0x4, 0x4, 0x10000, 0x6e}, 0x3c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000001a80)={0x1, 0x2, @raw_data=[0xf, 0x2, 0x89, 0x5, 0xc14, 0x22c0, 0x48, 0x80000000, 0x7, 0x0, 0x7f, 0x2, 0x1ff, 0x4, 0x9, 0x8000]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r4, 0x5501) dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$UI_DEV_DESTROY(r4, 0x5502) 7.885914342s ago: executing program 3 (id=2142): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x37, 0x1, 0x0, "3ad38e0000000100000080000000ebff0020000c0000000200", 0x42474752}) 7.115531628s ago: executing program 3 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}, 0x1, 0x100000000000000}, 0x0) 7.064167653s ago: executing program 2 (id=2146): r0 = socket$alg(0x26, 0x5, 0x0) creat(0x0, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a471000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8302, 0x0) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) 7.010719415s ago: executing program 5 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x803, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, r3, 0x1, 0x7, 0xb3, 0x78, "8952057d3c3d7d234d6c8fcd8fa745a8ca96eaead5b414ed95d5c627b14495c1b339831f2e716420863214230b05b18a167a6724b73e75a218fddf6a575992", 0x33}, 0x60) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003380)) r5 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r7, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9}}}, 0x24}}, 0x80) syz_usb_control_io(r7, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) 6.804057897s ago: executing program 3 (id=2148): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) read(r3, &(0x7f0000002140)=""/50, 0x32) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000030000000900010073797a3000000000080002400000000228000000000a01040000000000000000030000000900010073797a3000000000080002"], 0x78}}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000001c0)=0xd0) 6.220343849s ago: executing program 4 (id=2149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x30}}, 0x0) 6.111478876s ago: executing program 2 (id=2150): r0 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r6, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r7) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x104, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x9, 0x6}, {0xe}}, [@f_tcindex={{0xc}, {0xd4, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_POLICE={0xb8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x5, 0x1, 0xca0, {0xe, 0x1, 0x5, 0x6, 0x4, 0x1000}, {0x2, 0x2, 0xb, 0x5, 0x0, 0xfffffff7}, 0x7, 0xfffffff9, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x1e45, 0x3, 0x9, {0x4, 0x1, 0x4c06, 0x5ac, 0x6, 0x200}, {0x7, 0x0, 0x8001, 0xf, 0x8, 0x9}, 0x5, 0x281, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x20000000, 0x10, 0xffffff81, 0x80, {0x0, 0x1, 0x6, 0xb, 0x9, 0x2}, {0x4b, 0x2, 0x1000, 0x0, 0xde, 0x1}, 0x5, 0x7, 0x142}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x400d0}, 0x24008040) 6.110932245s ago: executing program 4 (id=2151): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x5, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(0xffffffffffffffff) 5.742641235s ago: executing program 6 (id=2152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0xb0}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="7eb6", 0x2}], 0x1}}], 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {0x0}], 0x2}}], 0x2, 0x0) 5.287766979s ago: executing program 3 (id=2153): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0xa697b3569f93dcde, 0xc6, 0x3c, 0xb7, 0x40, 0x1044, 0x7002, 0xf0ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x9, 0xa0, 0x8, [{{0x9, 0x4, 0xa8, 0x9, 0x0, 0x6, 0xd5, 0x16, 0xb}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000003"]}, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000179000/0x2000)=nil, 0x2000, 0x200000d, 0x4833, r1, 0x6a854000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) dup(0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x5) r7 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0x29}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r8, r8) 5.286979777s ago: executing program 6 (id=2154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x8900, 0x0) io_setup(0x1e91, &(0x7f0000000200)=0x0) r9 = eventfd(0x8) io_submit(r8, 0x1, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/194, 0xc2}, @fda={0x66646185, 0x5, 0x1, 0x4000000000000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x20004004) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000500)={0x3, 0x7, 0x3}) 4.838712282s ago: executing program 6 (id=2155): socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="5000000010003b15000021000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c0002800500060000000000050005000000000008000300c70b000008000a00", @ANYRES32], 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$msr(r2, &(0x7f0000000400)=""/228, 0xe4) 4.332926909s ago: executing program 6 (id=2156): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x2, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.129316705s ago: executing program 6 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r6, 0x0, 0x80, 0x8, 0x4, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@end, @generic={0x43, 0xa, "226687d476089b22"}, @end, @lsrr={0x83, 0xb, 0x5c, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @ssrr={0x89, 0x7, 0x8e, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x5, [{@local, 0x3}]}]}}}}}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xe9) 4.128459066s ago: executing program 2 (id=2158): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x1, 0xf0, 0x1}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@empty, @empty, 0x0, "63d132035f225874f41ff64be93a224de7b634b5b464d1034962ec0c6b6948e4", 0x4, 0x4, 0x10000, 0x6e}, 0x3c) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000001a80)={0x1, 0x2, @raw_data=[0xf, 0x2, 0x89, 0x5, 0xc14, 0x22c0, 0x48, 0x80000000, 0x7, 0x0, 0x7f, 0x2, 0x1ff, 0x4, 0x9, 0x8000]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r4, 0x5501) dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$UI_DEV_DESTROY(r4, 0x5502) 3.578065247s ago: executing program 4 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, r1) 2.759075838s ago: executing program 2 (id=2160): r0 = fanotify_init(0x60, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80202, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) getsockname(r3, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000080)={0x1, 0x5}, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc0100288}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00fa0f", @ANYRES16, @ANYBLOB="000429bd7000fddbdf2586000000050019010c00000005001801210000000800270000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x8054) fanotify_mark(r0, 0x71, 0x8000000, r1, 0x0) 2.678574875s ago: executing program 6 (id=2161): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x11, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x13, 0x4, "55ee53ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xb4a5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x401, 0x2}, &(0x7f0000000200)=0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x6ce3, &(0x7f0000000140)={0x0, 0xac78, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000480)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000440)=0x8) get_mempolicy(&(0x7f00000003c0), &(0x7f0000000400), 0x8, &(0x7f0000fff000/0x1000)=nil, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c20c0203010902240001000010000904430002317d5563090502020002020000090582020002000000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000580)={0x0, 0xfffffffffffffe4c, &(0x7f00000005c0)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x9, 0x80, 0x8001, 0x7, 0x40, 0x7fffffff, 0x3]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000004c0)=0x4) 2.168375011s ago: executing program 3 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x30}}, 0x0) 2.167582427s ago: executing program 4 (id=2163): r0 = fanotify_init(0x60, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80202, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) getsockname(r3, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r9, &(0x7f0000000080)={0x1, 0x5}, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc0100288}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00fa0f", @ANYRES16=r6, @ANYBLOB="000429bd7000fddbdf2586000000050019010c00000005001801210000000800270000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x8054) fanotify_mark(r0, 0x71, 0x8000000, r1, 0x0) 2.033280118s ago: executing program 3 (id=2164): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000108000900ffffffff56d83ab5db34ba330dc0e355920b1e6dd740e281d71bb5cfa5388ea6d011a3e09770f30d18ceea32f06f8cfa438e60e82713a0dec04eea65d690866cf444d3fe6110c2ccc9816286bf209ed051d3e405b8184081402ac62415ecebcd45bd221b38a8b5fc796201addad4b9fc35e4247deefbe92efab79214aab508f84c71ed985c6f92972ee5deafeedae2a3c8"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x7) 1.998333849s ago: executing program 4 (id=2165): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "bcceaaba4545b04e69b917c9945696bdd308351c59b24331321c0d22cbe700358571f15b1daff8c0c3069002b95fd75c2bdb10a35d3e178c55f33d6afa0964dd", 0x26}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x4021022) keyctl$read(0xb, r0, 0x0, 0x0) open(0x0, 0x400141042, 0x1d2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r9, 0x4b32, 0x80) 1.947943236s ago: executing program 2 (id=2166): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = io_uring_setup(0x2e34, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) close(r4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r8, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)="05", 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000780)="4ffcec95a747c390077d66b8787db98e213d7131a89a8f2570c07b64df981dce6decd18c5d61b135bd196db0b5731134a7979b4a7c5e42feb53d42f300cdd1f844577091b32b0500000000000000190f34b6068b5e7bd2b2a31cb56dd99ed1595da3e7516ba76f47030092eb5ae0ce960f697a84703078cd1ede59d110ba9b439700dd430a6eb7fc3e6792d9c979af9bf3ad6569b26d8cfaefc44846051d48df6c6acb9ee1aa836a529e8bb1aa639af6f3306cf6fd9dc0000000", 0xba}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}], 0x1}}], 0x3, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x4041) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x26, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x51}, @generic={0xe, 0xf, 0x7, 0x80, 0x5be}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0xa, 0xf4, &(0x7f0000000380)=""/244, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x99, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0x3, 0x2}, {0x0, 0x4, 0x4, 0xa}, {0x2, 0x1, 0xd, 0x2}, {0x3, 0x4, 0x2}, {0x0, 0x1, 0x5, 0x7}, {0x0, 0x4, 0x4, 0xa}], 0x10, 0x0, @void, @value}, 0x94) 1.867898074s ago: executing program 5 (id=2167): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "bcceaaba4545b04e69b917c9945696bdd308351c59b24331321c0d22cbe700358571f15b1daff8c0c3069002b95fd75c2bdb10a35d3e178c55f33d6afa0964dd", 0x26}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x4021022) keyctl$read(0xb, r0, 0x0, 0x0) open(0x0, 0x400141042, 0x1d2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r9, 0x4b32, 0x80) 1.866045821s ago: executing program 2 (id=2168): r0 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r6, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r7) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x104, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x9, 0x6}, {0xe}}, [@f_tcindex={{0xc}, {0xd4, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_POLICE={0xb8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x5, 0x1, 0xca0, {0xe, 0x1, 0x5, 0x6, 0x4, 0x1000}, {0x2, 0x2, 0xb, 0x5, 0x0, 0xfffffff7}, 0x7, 0xfffffff9, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x1e45, 0x3, 0x9, {0x4, 0x1, 0x4c06, 0x5ac, 0x6, 0x200}, {0x7, 0x0, 0x8001, 0xf, 0x8, 0x9}, 0x5, 0x281, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x20000000, 0x10, 0xffffff81, 0x80, {0x0, 0x1, 0x6, 0xb, 0x9, 0x2}, {0x4b, 0x2, 0x1000, 0x0, 0xde, 0x1}, 0x5, 0x7, 0x142}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x400d0}, 0x24008040) 58.807196ms ago: executing program 4 (id=2169): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x5, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(0xffffffffffffffff) 0s ago: executing program 5 (id=2170): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x346f, &(0x7f00000004c0)={0x0, 0x0, 0x40, 0x3, 0x352}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x57, 0x0, 0x4, 0x0, &(0x7f0000000280)="47afcded3e7fba1273643d9c9e832942a4acfda55a02fc5ff82be5e4bebc379a03ab70155a034aa3f413aaae0313de04d29b799e7efb2916d96b951219a378813b11377b8657df8b6d9f366612", 0x2, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x8aa, 0x0, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): _from_iter+0x10/0x10 [ 557.847475][T11698] ? __virt_addr_valid+0x1a4/0x590 [ 557.852593][T11698] ? __virt_addr_valid+0x5e/0x590 [ 557.857612][T11698] ? const_folio_flags.constprop.0+0x56/0x150 [ 557.863675][T11698] ? __phys_addr_symbol+0x30/0x80 [ 557.868698][T11698] ? __check_object_size+0x488/0x710 [ 557.873996][T11698] netlink_sendmsg+0x813/0xd70 [ 557.878769][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.884062][T11698] sock_write_iter+0x4fe/0x5b0 [ 557.888825][T11698] ? __pfx_sock_write_iter+0x10/0x10 [ 557.894115][T11698] ? bpf_lsm_file_permission+0x9/0x10 [ 557.899490][T11698] ? security_file_permission+0x71/0x210 [ 557.905127][T11698] vfs_write+0x5ae/0x1150 [ 557.909458][T11698] ? __pfx_sock_write_iter+0x10/0x10 [ 557.914776][T11698] ? __pfx_vfs_write+0x10/0x10 [ 557.919558][T11698] ? __fget_files+0x40/0x3a0 [ 557.924152][T11698] ksys_write+0x207/0x250 [ 557.928481][T11698] ? __pfx_ksys_write+0x10/0x10 [ 557.933334][T11698] do_syscall_64+0xcd/0x250 [ 557.937840][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.943732][T11698] RIP: 0033:0x7f4017d7e819 [ 557.948140][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.967742][T11698] RSP: 002b:00007f4018c1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.976153][T11698] RAX: ffffffffffffffda RBX: 00007f4017f35fa0 RCX: 00007f4017d7e819 [ 557.984118][T11698] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 557.992083][T11698] RBP: 00007f4018c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 558.000056][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.008035][T11698] R13: 0000000000000000 R14: 00007f4017f35fa0 R15: 00007ffef46ba2f8 [ 558.016016][T11698] [ 558.019136][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.391398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 559.039511][ T5855] IPVS: starting estimator thread 0... [ 559.203434][T11148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 559.258412][T11148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 559.307214][ T5832] syz_tun (unregistering): left promiscuous mode [ 559.307234][T11148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 559.405427][T11148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 559.422652][T11148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 559.430012][T11148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.431467][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 559.574837][T11709] IPVS: using max 33 ests per chain, 79200 per kthread [ 560.471409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 560.579738][T11705] lo speed is unknown, defaulting to 1000 [ 560.647613][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.771446][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 560.771935][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.841628][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.913419][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.924052][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 560.933563][T11705] chnl_net:caif_netlink_parms(): no params data found [ 560.945581][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.956599][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.966762][ T8] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.979831][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 560.986768][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 560.996040][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.015626][ T8] usb 5-1: config 0 descriptor?? [ 561.088562][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.098304][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.105586][T11705] bridge_slave_0: entered allmulticast mode [ 561.112658][T11705] bridge_slave_0: entered promiscuous mode [ 561.136672][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.149560][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.156794][T11705] bridge_slave_1: entered allmulticast mode [ 561.163699][T11705] bridge_slave_1: entered promiscuous mode [ 561.170235][ T1148] bridge_slave_1: left allmulticast mode [ 561.180115][ T1148] bridge_slave_1: left promiscuous mode [ 561.189659][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.209154][ T1148] bridge_slave_0: left allmulticast mode [ 561.214824][ T1148] bridge_slave_0: left promiscuous mode [ 561.220516][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.298018][ T1148] bond1: left promiscuous mode [ 561.513120][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 561.521971][T11148] Bluetooth: hci3: command tx timeout [ 562.077827][ T8] wacom 0003:056A:002A.000B: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 562.090415][ T8] wacom 0003:056A:002A.000B: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.4-1/input0 [ 562.103037][ T8] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:002A.000B/input/input31 [ 562.551602][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 562.789804][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.804236][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.810531][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.833211][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.936457][ T1148] bond0 (unregistering): Released all slaves [ 563.325587][ T1148] bond1 (unregistering): Released all slaves [ 563.349121][T11760] IPVS: Error connecting to the multicast addr [ 563.536426][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.547864][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.587305][T11775] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.593763][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 563.611603][T11148] Bluetooth: hci3: command tx timeout [ 563.627272][ T29] audit: type=1400 audit(1732573666.074:1064): avc: denied { write } for pid=11772 comm="syz.2.1563" path="socket:[34060]" dev="sockfs" ino=34060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 563.869324][ T969] usb 5-1: USB disconnect, device number 36 [ 564.440350][T11705] team0: Port device team_slave_0 added [ 564.481111][T11705] team0: Port device team_slave_1 added [ 564.495666][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1565'. [ 564.555686][T11789] Bluetooth: MGMT ver 1.23 [ 564.622775][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1566'. [ 564.631400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 564.748322][ T29] audit: type=1400 audit(1732573667.234:1065): avc: denied { accept } for pid=11782 comm="syz.3.1564" lport=41201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 565.510375][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.528814][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.581589][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.628871][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.661707][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.671478][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 565.695836][T11148] Bluetooth: hci3: command tx timeout [ 565.710396][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.027584][ T1148] batadv_slave_0: left promiscuous mode [ 566.119125][ T1148] hsr_slave_0: left promiscuous mode [ 566.126174][ T1148] hsr_slave_1: left promiscuous mode [ 566.195521][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.210003][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.243403][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.250824][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.300736][ T1148] veth0_macvtap: left promiscuous mode [ 566.315585][ T1148] veth1_vlan: left promiscuous mode [ 566.321174][ T1148] veth0_vlan: left promiscuous mode [ 566.711485][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 566.785938][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 566.826300][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 567.180583][T11705] hsr_slave_0: entered promiscuous mode [ 567.186819][T11705] hsr_slave_1: entered promiscuous mode [ 567.194044][T11705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.201919][T11705] Cannot create hsr debugfs directory [ 567.231607][T11863] wg2: entered promiscuous mode [ 567.236493][T11863] wg2: entered allmulticast mode [ 567.704367][T11886] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 567.751522][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 567.758899][T11148] Bluetooth: hci3: command tx timeout [ 567.761809][T11705] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 567.797618][T11891] overlayfs: missing 'lowerdir' [ 567.860284][T11705] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 567.969359][ T6307] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 568.181585][ T6307] usb 4-1: Using ep0 maxpacket: 16 [ 568.193895][ T6307] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 568.212098][ T6307] usb 4-1: config 0 has no interface number 0 [ 568.223925][T11705] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.236112][ T6307] usb 4-1: config 0 interface 161 has no altsetting 0 [ 568.266545][T11705] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.791394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 568.841074][ T6307] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 568.877886][ T6307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.906641][ T6307] usb 4-1: Product: syz [ 568.910835][ T6307] usb 4-1: Manufacturer: syz [ 569.001522][ T6307] usb 4-1: SerialNumber: syz [ 569.065453][ T6307] usb 4-1: config 0 descriptor?? [ 569.148597][ T6307] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 569.229790][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.262516][ T6307] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 569.300836][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.350367][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.357517][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.420117][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.428048][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.454761][T11148] Bluetooth: hci1: Malformed LE Event: 0x0d [ 569.639822][T11705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.650424][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.831558][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 570.511062][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.589663][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'. [ 570.871397][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 570.972137][T11705] veth0_vlan: entered promiscuous mode [ 571.000462][T11705] veth1_vlan: entered promiscuous mode [ 571.044027][T11705] veth0_macvtap: entered promiscuous mode [ 571.093428][T11705] veth1_macvtap: entered promiscuous mode [ 571.110339][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.121369][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.141359][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.161686][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.188967][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.201346][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.214277][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.227274][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.256670][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.274332][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.372241][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.716498][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.727240][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.737765][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.748773][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.758832][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.768571][ T29] audit: type=1400 audit(1732573674.254:1066): avc: denied { mount } for pid=11941 comm="syz.3.1620" name="/" dev="rpc_pipefs" ino=34429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 571.769517][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.802778][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.813452][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.823594][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.834261][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.845632][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.870109][ T969] usb 4-1: USB disconnect, device number 32 [ 571.911528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 571.973835][ T29] audit: type=1400 audit(1732573674.294:1067): avc: denied { unmount } for pid=11941 comm="syz.3.1620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 571.996845][T11705] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.015391][T11705] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.026603][T11705] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.069942][T11705] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.227105][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.311416][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.400854][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.409167][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.425257][T11949] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 572.447780][T11951] No control pipe specified [ 572.457017][T11951] netlink: 'syz.3.1623': attribute type 7 has an invalid length. [ 572.519101][ T29] audit: type=1400 audit(1732573675.004:1068): avc: denied { mounton } for pid=11705 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 572.572817][T11958] netlink: 'syz.3.1625': attribute type 25 has an invalid length. [ 572.598532][T11958] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 572.628339][T11958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.879890][ T969] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 572.951392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 573.314441][ T969] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 573.323598][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.332049][ T969] usb 7-1: Product: syz [ 573.336366][ T969] usb 7-1: Manufacturer: syz [ 573.340939][ T969] usb 7-1: SerialNumber: syz [ 573.351533][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 573.374288][ T969] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 573.382346][ T969] dvb-usb: bulk message failed: -22 (3/0) [ 573.412726][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.423271][ T969] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 573.439843][ T969] usb 7-1: media controller created [ 573.450816][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.471847][T11969] block nbd3: NBD_DISCONNECT [ 573.481432][ T8] usb 5-1: device descriptor read/64, error -71 [ 573.495402][ T969] DVB: Unable to find symbol mt352_attach() [ 573.504662][ T969] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 573.517011][ T969] dvb-usb: bulk message failed: -22 (3/0) [ 573.551938][T11972] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1627'. [ 573.568881][T11969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64000 sclass=netlink_route_socket pid=11969 comm=syz.3.1627 [ 573.585509][ T969] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 573.600876][ T969] usb 7-1: USB disconnect, device number 2 [ 573.620011][ T969] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 573.721456][ T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 573.861694][ T8] usb 5-1: device descriptor read/64, error -71 [ 573.991463][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 574.056925][T11980] syz.3.1629 (11980): drop_caches: 2 [ 574.064714][T11980] syz.3.1629 (11980): drop_caches: 2 [ 574.506171][ T8] usb usb5-port1: attempt power cycle [ 574.861568][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 574.882202][ T8] usb 5-1: device descriptor read/8, error -71 [ 575.031406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 575.121402][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 575.151876][ T8] usb 5-1: device descriptor read/8, error -71 [ 575.271821][ T8] usb usb5-port1: unable to enumerate USB device [ 575.301579][ T5855] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 575.481478][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 576.061071][ T5855] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 576.071486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 576.126108][ T5855] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.144977][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.171463][ T5855] usb 7-1: Product: syz [ 576.182040][ T5855] usb 7-1: Manufacturer: syz [ 576.190946][ T5855] usb 7-1: SerialNumber: syz [ 576.938962][T12004] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.046757][ T5888] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 577.098407][ T5855] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 577.106062][ T5855] usb 7-1: unit 6 not found! [ 577.111397][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 577.119552][ T5855] usb 7-1: USB disconnect, device number 3 [ 577.217679][T12018] io-wq is not configured for unbound workers [ 577.251519][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 577.289841][ T5888] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 577.313453][ T5888] usb 3-1: config 0 has no interface number 0 [ 577.326973][ T5888] usb 3-1: config 0 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.351184][ T5888] usb 3-1: config 0 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.482940][ T5888] usb 3-1: config 0 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.582590][ T5888] usb 3-1: config 0 interface 68 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 577.597484][ T5888] usb 3-1: config 0 interface 68 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 577.835790][ T5888] usb 3-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice=cc.0e [ 577.861415][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.871452][ T5888] usb 3-1: Product: syz [ 577.879712][ T5888] usb 3-1: Manufacturer: syz [ 577.894590][ T5888] usb 3-1: SerialNumber: syz [ 577.915092][ T5888] usb 3-1: config 0 descriptor?? [ 577.937763][T12002] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 578.152326][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 578.205134][ T5888] whiteheat 3-1:0.68: required endpoints missing [ 578.221815][ T5888] usb 3-1: USB disconnect, device number 52 [ 579.191598][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 580.216108][T12062] 9pnet: Found fid 0 not clunked [ 580.231481][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 581.098133][ T5855] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 581.271450][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 581.318402][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 581.363630][ T5855] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 581.388329][ T5855] usb 3-1: config 0 has no interface number 0 [ 581.397266][ T5855] usb 3-1: config 0 interface 161 has no altsetting 0 [ 581.412936][ T5855] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 581.429848][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.444960][ T5855] usb 3-1: Product: syz [ 581.454883][ T5855] usb 3-1: Manufacturer: syz [ 581.465873][ T5855] usb 3-1: SerialNumber: syz [ 581.476852][ T5855] usb 3-1: config 0 descriptor?? [ 581.486163][ T5855] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 581.500238][ T5855] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 582.311495][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 582.701432][ T5855] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 583.351422][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 583.837846][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 583.929066][ T5855] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 583.938262][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.946693][ T5855] usb 4-1: Product: syz [ 583.951255][ T5855] usb 4-1: Manufacturer: syz [ 583.956273][ T5855] usb 4-1: SerialNumber: syz [ 583.967604][ T5855] usb 4-1: config 0 descriptor?? [ 583.981417][ T5855] smsusb:smsusb_probe: board id=2, interface number 0 [ 583.988644][ T5855] smsusb:smsusb_probe: Device initialized with return code -19 [ 583.991270][ T29] audit: type=1400 audit(1732573686.474:1069): avc: denied { write } for pid=12089 comm="syz.5.1659" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 584.020143][ T29] audit: type=1400 audit(1732573686.474:1070): avc: denied { write } for pid=12089 comm="syz.5.1659" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 584.298304][ T5855] usb 4-1: USB disconnect, device number 33 [ 584.391468][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 584.473058][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1661'. [ 584.487157][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 585.121548][ T5888] usb 3-1: USB disconnect, device number 53 [ 585.163243][T12104] overlayfs: workdir and upperdir must reside under the same mount [ 585.261521][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 585.283825][ T47] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 585.306081][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.314908][ T47] usb 6-1: Product: syz [ 585.340242][ T47] usb 6-1: Manufacturer: syz [ 585.351621][ T47] usb 6-1: SerialNumber: syz [ 585.372160][ T47] usb 6-1: config 0 descriptor?? [ 585.431394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 585.603907][T12093] syzkaller0: entered allmulticast mode [ 585.645198][ T47] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 585.891474][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 586.041441][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 586.057024][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 586.082041][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.096950][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.113780][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.269920][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.283754][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 586.292933][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.471527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 586.757683][ T47] usb write operation failed. (-71) [ 586.768139][ T47] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 586.791611][T12122] netlink: 'syz.6.1667': attribute type 4 has an invalid length. [ 586.798554][ T47] dvbdev: DVB: registering new adapter (Terratec H7) [ 586.820208][ T47] usb 6-1: media controller created [ 586.843116][ T47] usb read operation failed. (-71) [ 586.849223][ T47] usb write operation failed. (-71) [ 586.878815][ T47] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 586.909019][ T25] usb 4-1: usb_control_msg returned -32 [ 586.931926][ T47] usb 6-1: USB disconnect, device number 8 [ 586.938787][ T25] usbtmc 4-1:16.0: can't read capabilities [ 587.511401][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 588.071207][ T29] audit: type=1400 audit(1732573690.554:1071): avc: denied { ioctl } for pid=12134 comm="syz.6.1670" path="socket:[35193]" dev="sockfs" ino=35193 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 588.551500][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 589.165855][ T8] usb 4-1: USB disconnect, device number 34 [ 589.591397][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 589.761525][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 590.211420][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 590.217935][ T47] usb 7-1: config 0 has an invalid interface number: 204 but max is 0 [ 590.247447][ T47] usb 7-1: config 0 has no interface number 0 [ 590.270713][ T47] usb 7-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 590.311565][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.331668][ T47] usb 7-1: Product: syz [ 590.339980][ T47] usb 7-1: Manufacturer: syz [ 590.368101][ T47] usb 7-1: SerialNumber: syz [ 590.390539][ T47] usb 7-1: config 0 descriptor?? [ 590.439758][ T47] flexcop_usb: set interface failed. [ 590.461430][ T47] b2c2_flexcop_usb 7-1:0.204: probe with driver b2c2_flexcop_usb failed with error -22 [ 590.631474][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 590.726293][T12183] xt_nfacct: accounting object `syz0' does not exists [ 590.843269][T12183] syz.2.1681: attempt to access beyond end of device [ 590.843269][T12183] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 591.671415][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 592.591544][ T29] audit: type=1400 audit(1732573695.074:1072): avc: denied { setopt } for pid=12203 comm="syz.2.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 592.651367][ T47] usb 7-1: USB disconnect, device number 4 [ 592.711501][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 593.751414][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 594.791455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 595.269191][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 595.511699][ T5855] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 595.678880][ T5855] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.694952][ T5855] usb 7-1: config 0 has no interface number 0 [ 595.701409][ T5888] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 595.822585][ T5855] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.831421][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 595.917208][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 595.917507][ T5855] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.002018][ T5855] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 596.078634][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.088583][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 596.097884][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.106017][ T5888] usb 3-1: Product: syz [ 596.112075][ T5855] usb 7-1: config 0 descriptor?? [ 596.117086][ T5888] usb 3-1: Manufacturer: syz [ 596.122062][ T5888] usb 3-1: SerialNumber: syz [ 596.129553][ T5888] usb 3-1: config 0 descriptor?? [ 596.142714][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 596.150123][ T25] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 596.159079][ T25] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 596.177797][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 596.186871][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 596.204745][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 596.217563][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 596.232710][ T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 596.241920][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.303877][ T25] usb 5-1: config 0 descriptor?? [ 596.508839][ T5888] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 596.521419][ T5888] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 596.528918][ T5888] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 596.540213][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 596.802305][ T29] audit: type=1400 audit(1732573699.274:1073): avc: denied { getopt } for pid=12236 comm="syz.6.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 596.830244][ T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 596.871471][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 596.959067][ T29] audit: type=1400 audit(1732573699.274:1074): avc: denied { accept } for pid=12236 comm="syz.6.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 596.998147][ T25] usb 5-1: USB disconnect, device number 41 [ 597.007982][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.017830][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.023310][ T25] usblp0: removed [ 597.025204][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.036140][ T29] audit: type=1400 audit(1732573699.284:1075): avc: denied { ioctl } for pid=12236 comm="syz.6.1695" path="socket:[35423]" dev="sockfs" ino=35423 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 597.060855][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.068125][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.075499][ T5855] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 597.083992][ T5888] usb 3-1: USB disconnect, device number 54 [ 597.090840][ T5855] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 597.104362][ T5855] hid_prodikeys: hid-prodikeys: failed to find output report [ 597.104362][ T5855] [ 597.122659][ T5855] usb 7-1: USB disconnect, device number 5 [ 597.691460][T12273] lo speed is unknown, defaulting to 1000 [ 597.911399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 598.184716][ T5855] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 598.193603][T12272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.266168][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 598.405176][ T5855] usb 3-1: device descriptor read/64, error -71 [ 598.488276][T12283] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 598.723938][ T5855] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 598.931466][ T5855] usb 3-1: device descriptor read/64, error -71 [ 598.951493][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 598.991446][ T6307] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 599.054454][ T5855] usb usb3-port1: attempt power cycle [ 599.141390][ T6307] usb 7-1: Using ep0 maxpacket: 8 [ 599.150541][ T6307] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.159868][ T6307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.168260][ T6307] usb 7-1: Product: syz [ 599.172897][ T6307] usb 7-1: Manufacturer: syz [ 599.177549][ T6307] usb 7-1: SerialNumber: syz [ 599.193309][ T6307] usb 7-1: config 0 descriptor?? [ 599.408629][ T6307] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.421937][ T5855] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 599.473429][ T5855] usb 3-1: device descriptor read/8, error -71 [ 599.725615][ T5855] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 599.752384][ T5855] usb 3-1: device descriptor read/8, error -71 [ 599.871473][ T5855] usb usb3-port1: unable to enumerate USB device [ 599.979540][T12297] netlink: 'syz.4.1714': attribute type 4 has an invalid length. [ 599.991407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 600.171631][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 600.261686][T11148] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 600.262983][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.411461][ T25] usb 6-1: device descriptor read/64, error -71 [ 600.421919][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.651450][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 600.811917][ T25] usb 6-1: device descriptor read/64, error -71 [ 600.899962][ T5855] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 600.943342][ T25] usb usb6-port1: attempt power cycle [ 601.031450][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 601.071674][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 601.124905][ T5855] usb 3-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 601.140762][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.149347][ T5855] usb 3-1: Product: syz [ 601.153793][ T5855] usb 3-1: Manufacturer: syz [ 601.158403][ T5855] usb 3-1: SerialNumber: syz [ 601.168278][ T5855] usb 3-1: config 0 descriptor?? [ 601.176359][ T5855] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 601.291458][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 601.312500][ T25] usb 6-1: device descriptor read/8, error -71 [ 601.329972][ T6307] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 601.341066][ T6307] usb 7-1: USB disconnect, device number 6 [ 601.431460][ T5888] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 601.551492][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 601.572008][ T25] usb 6-1: device descriptor read/8, error -71 [ 601.601549][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 601.608472][ T5888] usb 5-1: config 0 has an invalid interface number: 218 but max is 0 [ 601.616765][ T5888] usb 5-1: config 0 has no interface number 0 [ 601.625281][ T5888] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 601.634550][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.642676][ T5888] usb 5-1: Product: syz [ 601.646954][ T5888] usb 5-1: Manufacturer: syz [ 601.651626][ T5888] usb 5-1: SerialNumber: syz [ 601.657768][ T5888] usb 5-1: config 0 descriptor?? [ 601.685750][ T25] usb usb6-port1: unable to enumerate USB device [ 601.883580][ T25] usb 5-1: USB disconnect, device number 42 [ 601.890369][ T29] audit: type=1400 audit(1732573704.374:1076): avc: denied { write } for pid=12311 comm="syz.4.1720" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 601.991138][ T5855] gspca_sonixj: reg_r err -32 [ 601.999107][ T5855] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 602.071389][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 602.396908][ T5855] usb 3-1: USB disconnect, device number 59 [ 602.692214][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 602.881547][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 602.941217][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 603.031575][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.061445][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.077747][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.087924][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.106846][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 603.116103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.130556][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.185999][ T29] audit: type=1400 audit(1732573705.674:1077): avc: denied { ioctl } for pid=12331 comm="syz.4.1726" path="socket:[35606]" dev="sockfs" ino=35606 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 603.511496][ T47] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 603.521911][ T29] audit: type=1400 audit(1732573705.994:1078): avc: denied { create } for pid=12345 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 603.668179][T12352] syz.5.1731 (12352): drop_caches: 2 [ 603.681454][T12352] syz.5.1731 (12352): drop_caches: 2 [ 604.151425][ T29] audit: type=1400 audit(1732573706.004:1079): avc: denied { setopt } for pid=12345 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 604.151993][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 604.241531][ T47] usb 3-1: device descriptor read/64, error -71 [ 604.452594][ T6307] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 604.622387][ T47] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 605.191500][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 605.490151][ T47] usb 3-1: device descriptor read/64, error -71 [ 605.760060][ T5855] usb 7-1: USB disconnect, device number 7 [ 605.925254][ T47] usb usb3-port1: attempt power cycle [ 605.927939][T12371] lo speed is unknown, defaulting to 1000 [ 605.948177][ T6307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.959228][ T6307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.972162][ T6307] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 605.981206][ T6307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.991198][ T6307] usb 4-1: config 0 descriptor?? [ 606.231394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 606.341739][ T47] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 606.543745][ T47] usb 3-1: device descriptor read/8, error -71 [ 606.636883][ T6307] usb 4-1: can't set config #0, error -71 [ 606.649732][ T6307] usb 4-1: USB disconnect, device number 35 [ 606.797158][T12381] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 607.271452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 608.201700][T12395] overlayfs: missing 'lowerdir' [ 608.311390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 609.050963][T12405] syz.5.1743 (12405): drop_caches: 2 [ 609.058896][T12405] syz.5.1743 (12405): drop_caches: 2 [ 609.351458][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 610.291402][T12418] syz.6.1745 (12418): drop_caches: 2 [ 610.302028][T12418] syz.6.1745 (12418): drop_caches: 2 [ 610.391391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 611.431500][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 611.455293][ T29] audit: type=1400 audit(1732573713.854:1080): avc: denied { ioctl } for pid=12424 comm="syz.6.1748" path="socket:[36683]" dev="sockfs" ino=36683 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 611.530411][ T6307] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 611.613334][ T5886] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 611.681504][ T6307] usb 3-1: device descriptor read/64, error -71 [ 611.784298][ T5886] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 611.794292][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.813629][ T5886] usb 6-1: config 0 descriptor?? [ 611.921541][ T6307] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 612.036441][ T5886] kaweth 6-1:0.0: Firmware present in device. [ 612.061479][ T6307] usb 3-1: device descriptor read/64, error -71 [ 612.172376][ T6307] usb usb3-port1: attempt power cycle [ 612.233979][ T5886] kaweth 6-1:0.0: Statistics collection: 0 [ 612.368002][ T5886] kaweth 6-1:0.0: Multicast filter limit: 0 [ 612.374350][ T5886] kaweth 6-1:0.0: MTU: 0 [ 612.378625][ T5886] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 612.471398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 612.671755][ T6307] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 612.693489][ T6307] usb 3-1: device descriptor read/8, error -71 [ 612.993793][ T6307] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 613.029496][ T6307] usb 3-1: device descriptor read/8, error -71 [ 613.511465][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 613.679088][T12445] syz.6.1753 (12445): drop_caches: 2 [ 613.687206][ T6307] usb usb3-port1: unable to enumerate USB device [ 613.688279][T12445] syz.6.1753 (12445): drop_caches: 2 [ 614.347520][T12459] syz.2.1757 (12459): drop_caches: 2 [ 614.354524][T12459] syz.2.1757 (12459): drop_caches: 2 [ 614.551507][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 615.250713][ T29] audit: type=1326 audit(1732573717.694:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8457e819 code=0x0 [ 615.591461][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 616.631393][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 616.882797][ T8] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 616.927833][ T29] audit: type=1400 audit(1732573719.414:1082): avc: denied { map } for pid=12478 comm="syz.2.1764" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 617.065443][ T8] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 617.081524][ T5855] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 617.089220][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.130778][ T8] usb 7-1: Product: syz [ 617.151375][ T8] usb 7-1: Manufacturer: syz [ 617.156690][ T8] usb 7-1: SerialNumber: syz [ 617.194241][ T8] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 617.215806][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 617.256982][ T5848] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 617.263237][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 617.279840][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 617.305643][ T5855] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 617.366460][T12487] syz.2.1766 (12487): drop_caches: 2 [ 617.373673][T12487] syz.2.1766 (12487): drop_caches: 2 [ 617.671457][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 617.873666][ T5855] usb 5-1: config 0 has no interface number 0 [ 617.879840][ T5855] usb 5-1: config 0 interface 161 has no altsetting 0 [ 617.888550][ T8] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 617.902100][ T8] usb 7-1: media controller created [ 617.909117][ T5855] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 617.918410][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.937834][ T5855] usb 5-1: Product: syz [ 617.958842][ T5855] usb 5-1: Manufacturer: syz [ 617.983282][ T5855] usb 5-1: SerialNumber: syz [ 617.993759][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.008380][ T5855] usb 5-1: config 0 descriptor?? [ 618.022661][ T5855] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 618.049064][ T5855] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 618.431556][ T5855] usb 5-1: USB disconnect, device number 43 [ 618.450656][T12500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12500 comm=syz.3.1768 [ 618.473625][ T5848] Bluetooth: hci4: Malformed LE Event: 0x0d [ 618.507353][ T8] DVB: Unable to find symbol mt352_attach() [ 618.538473][ T8] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 618.578368][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 618.602567][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 618.646734][ T8] usb 7-1: USB disconnect, device number 8 [ 618.711424][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 618.732845][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 618.860484][ T969] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 619.351529][ T969] usb 3-1: device descriptor read/64, error -71 [ 619.375383][ T29] audit: type=1400 audit(1732573721.754:1083): avc: denied { ioctl } for pid=12504 comm="syz.3.1770" path="socket:[36962]" dev="sockfs" ino=36962 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 619.611439][ T969] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 619.688351][T12513] netlink: 'syz.6.1771': attribute type 4 has an invalid length. [ 619.751490][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 620.154429][ T5886] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 620.221424][ T969] usb 3-1: device descriptor read/64, error -71 [ 620.292105][T12522] FAULT_INJECTION: forcing a failure. [ 620.292105][T12522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.297642][ T5886] usb 6-1: USB disconnect, device number 13 [ 620.336595][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.5.1775 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 620.347004][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 620.357037][T12522] Call Trace: [ 620.360290][T12522] [ 620.363201][T12522] dump_stack_lvl+0x16c/0x1f0 [ 620.367863][T12522] should_fail_ex+0x497/0x5b0 [ 620.372541][T12522] _copy_to_user+0x32/0xd0 [ 620.376978][T12522] simple_read_from_buffer+0xd0/0x160 [ 620.382377][T12522] proc_fail_nth_read+0x198/0x270 [ 620.387389][T12522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.392925][T12522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.398453][T12522] vfs_read+0x1df/0xbe0 [ 620.402592][T12522] ? __fget_files+0x1fc/0x3a0 [ 620.407249][T12522] ? __pfx___mutex_lock+0x10/0x10 [ 620.412252][T12522] ? __pfx_vfs_read+0x10/0x10 [ 620.416913][T12522] ? __fget_files+0x206/0x3a0 [ 620.421573][T12522] ksys_read+0x12b/0x250 [ 620.425794][T12522] ? __pfx_ksys_read+0x10/0x10 [ 620.430544][T12522] do_syscall_64+0xcd/0x250 [ 620.435032][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.440908][T12522] RIP: 0033:0x7f4017d7d25c [ 620.445302][T12522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 620.465148][T12522] RSP: 002b:00007f4018bfb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.473538][T12522] RAX: ffffffffffffffda RBX: 00007f4017f36080 RCX: 00007f4017d7d25c [ 620.481495][T12522] RDX: 000000000000000f RSI: 00007f4018bfb0a0 RDI: 0000000000000005 [ 620.489446][T12522] RBP: 00007f4018bfb090 R08: 0000000000000000 R09: 0000000000000000 [ 620.497398][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.505354][T12522] R13: 0000000000000001 R14: 00007f4017f36080 R15: 00007ffef46ba2f8 [ 620.513324][T12522] [ 620.791386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 621.084676][ T969] usb usb3-port1: attempt power cycle [ 621.224019][T12527] netlink: 'syz.4.1773': attribute type 4 has an invalid length. [ 621.734665][ T29] audit: type=1400 audit(1732573724.194:1084): avc: denied { map } for pid=12532 comm="syz.4.1778" path="socket:[36797]" dev="sockfs" ino=36797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 621.767760][T12536] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1778'. [ 621.784978][T12533] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1778'. [ 621.831456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 621.906887][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 622.538772][T12543] input: syz0 as /devices/virtual/input/input35 [ 622.561656][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 622.733644][T12546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12546 comm=syz.4.1780 [ 622.850141][ T5886] usb 6-1: config 3 has an invalid interface number: 33 but max is 0 [ 622.858569][ T5886] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 622.868771][ T5886] usb 6-1: config 3 has no interface number 0 [ 622.874917][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 622.974907][ T5886] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 623.271698][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.279821][ T5886] usb 6-1: Product: syz [ 623.284404][ T5886] usb 6-1: Manufacturer: syz [ 623.301702][ T5886] usb 6-1: SerialNumber: syz [ 623.565256][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.591087][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.911466][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 624.234744][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.241152][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.288091][T12561] ptrace attach of "./syz-executor exec"[10504] was attempted by "./syz-executor exec"[12561] [ 624.951405][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 625.236234][T12571] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 625.307680][T12572] syz.6.1786 (12572): drop_caches: 2 [ 625.313463][T12572] syz.6.1786 (12572): drop_caches: 2 [ 625.991469][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 627.007050][T12584] FAULT_INJECTION: forcing a failure. [ 627.007050][T12584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.031398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 627.041829][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.3.1790 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 627.052266][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.062326][T12584] Call Trace: [ 627.065611][T12584] [ 627.068544][T12584] dump_stack_lvl+0x16c/0x1f0 [ 627.073230][T12584] should_fail_ex+0x497/0x5b0 [ 627.077910][T12584] core_sys_select+0x4cf/0xb80 [ 627.082675][T12584] ? __pfx_core_sys_select+0x10/0x10 [ 627.087974][T12584] ? set_user_sigmask+0x217/0x2a0 [ 627.092997][T12584] ? __pfx_set_user_sigmask+0x10/0x10 [ 627.098373][T12584] do_pselect.constprop.0+0x1a0/0x1f0 [ 627.103738][T12584] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 627.109635][T12584] __x64_sys_pselect6+0x183/0x240 [ 627.114656][T12584] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 627.120203][T12584] do_syscall_64+0xcd/0x250 [ 627.124705][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.130595][T12584] RIP: 0033:0x7f6e8457e819 [ 627.135000][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.154600][T12584] RSP: 002b:00007f6e85342038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 627.163007][T12584] RAX: ffffffffffffffda RBX: 00007f6e84735fa0 RCX: 00007f6e8457e819 [ 627.170970][T12584] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000040 [ 627.178928][T12584] RBP: 00007f6e85342090 R08: 0000000020000040 R09: 0000000000000000 [ 627.186888][T12584] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 627.194850][T12584] R13: 0000000000000000 R14: 00007f6e84735fa0 R15: 00007fff2387c308 [ 627.202823][T12584] [ 627.238422][ T5886] usb 6-1: USB disconnect, device number 14 [ 627.616815][T12597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12597 comm=syz.5.1793 [ 628.071491][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 628.080695][ T47] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 628.321422][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 628.328183][ T47] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 628.397402][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 628.429292][ T47] usb 3-1: config 0 has no interface number 0 [ 628.437509][ T47] usb 3-1: config 0 interface 161 has no altsetting 0 [ 628.460149][ T47] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 628.469282][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.477364][ T47] usb 3-1: Product: syz [ 628.664998][ T47] usb 3-1: Manufacturer: syz [ 628.669631][ T47] usb 3-1: SerialNumber: syz [ 629.111394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 629.228504][ T47] usb 3-1: config 0 descriptor?? [ 629.249990][ T47] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 629.280155][ T47] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 629.308157][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 629.337678][ T8] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 629.347362][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.357161][ T8] usb 4-1: Product: syz [ 629.366306][ T8] usb 4-1: Manufacturer: syz [ 629.372515][ T8] usb 4-1: SerialNumber: syz [ 629.403600][ T8] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 629.481514][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 629.552589][ T25] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 629.570326][ T25] usb 5-1: config 0 has no interface number 0 [ 629.634257][ T25] usb 5-1: config 0 interface 161 has no altsetting 0 [ 629.666378][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 629.756659][ T25] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 629.840435][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.853558][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.869060][ T25] usb 5-1: Product: syz [ 629.883769][ T8] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 629.886053][ T25] usb 5-1: Manufacturer: syz [ 629.901488][ T8] usb 4-1: media controller created [ 630.040271][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.091187][ T5886] usb 3-1: USB disconnect, device number 71 [ 630.111556][ T25] usb 5-1: SerialNumber: syz [ 630.121871][ T8] DVB: Unable to find symbol mt352_attach() [ 630.127871][ T8] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 630.137864][ T25] usb 5-1: config 0 descriptor?? [ 630.143114][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 630.151457][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 630.161796][ T25] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 630.175619][ T25] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 630.211866][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 630.234172][ T8] usb 4-1: USB disconnect, device number 36 [ 630.432295][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 630.513621][T11148] Bluetooth: hci4: Malformed LE Event: 0x0d [ 630.789624][ T6307] usb 5-1: USB disconnect, device number 44 [ 631.191386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 632.231484][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.271399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.878900][T12659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12659 comm=syz.6.1807 [ 634.321452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 635.351387][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 635.481633][ T6307] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 635.715009][ T6307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 635.869054][ T6307] usb 5-1: not running at top speed; connect to a high speed hub [ 636.401454][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 636.502492][ T6307] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 636.511185][ T6307] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 636.519228][ T6307] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 636.528494][ T6307] usb 5-1: config 129 has no interface number 1 [ 636.534974][ T6307] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 636.548302][ T6307] usb 5-1: config 129 interface 135 has no altsetting 0 [ 636.631545][ T6307] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 636.640946][ T6307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.649021][ T6307] usb 5-1: Product: syz [ 636.653456][ T6307] usb 5-1: Manufacturer: syz [ 636.658039][ T6307] usb 5-1: SerialNumber: syz [ 636.937017][ T6307] au0828: au0828: Device initialization failed. [ 636.943304][ T6307] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 637.126539][T12699] bridge0: port 3(erspan0) entered blocking state [ 637.133307][T12699] bridge0: port 3(erspan0) entered disabled state [ 637.140434][T12699] erspan0: entered allmulticast mode [ 637.150871][T12699] erspan0: entered promiscuous mode [ 637.431462][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 637.803575][ T6307] usb 5-1: USB disconnect, device number 45 [ 638.190145][ T29] audit: type=1400 audit(1732573740.674:1085): avc: denied { read } for pid=12711 comm="syz.4.1822" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 638.213355][ T29] audit: type=1400 audit(1732573740.704:1086): avc: denied { open } for pid=12711 comm="syz.4.1822" path="/342/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 638.471471][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 638.647574][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 639.511399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 639.597944][T12729] can0: slcan on ptm0. [ 640.524343][T12728] can0 (unregistered): slcan off ptm0. [ 640.551461][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 641.601407][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 641.635142][T12753] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 641.991484][ T6307] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 642.153044][ T6307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57344, setting to 64 [ 642.165278][ T6307] usb 5-1: New USB device found, idVendor=046d, idProduct=fb98, bcdDevice=7a.d4 [ 642.175473][ T6307] usb 5-1: New USB device strings: Mfr=55, Product=0, SerialNumber=0 [ 642.184823][ T6307] usb 5-1: Manufacturer: syz [ 642.210398][ T6307] usb 5-1: config 0 descriptor?? [ 642.512582][ T8] kernel write not supported for file /1191/net/psched (pid: 8 comm: kworker/0:0) [ 642.631578][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 642.782285][T12768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12768 comm=syz.3.1836 [ 643.001461][ T47] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 643.171501][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 643.179513][ T47] usb 3-1: config 128 has an invalid interface number: 241 but max is 0 [ 643.189712][ T47] usb 3-1: config 128 has no interface number 0 [ 643.200680][ T47] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=51.96 [ 643.211658][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.220003][ T47] usb 3-1: Product: syz [ 643.224792][ T47] usb 3-1: Manufacturer: syz [ 643.230612][ T47] usb 3-1: SerialNumber: syz [ 643.444847][ T47] qmi_wwan 3-1:128.241: bogus CDC Union: master=0, slave=0 [ 643.488707][ T6307] usbhid 5-1:0.0: can't add hid device: -71 [ 643.501664][ T6307] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 643.525109][ T6307] usb 5-1: USB disconnect, device number 46 [ 643.533533][T12775] FAULT_INJECTION: forcing a failure. [ 643.533533][T12775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.572286][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.3.1839 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 643.582747][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 643.592822][T12775] Call Trace: [ 643.596104][T12775] [ 643.599039][T12775] dump_stack_lvl+0x16c/0x1f0 [ 643.603731][T12775] should_fail_ex+0x497/0x5b0 [ 643.608425][T12775] _copy_to_user+0x32/0xd0 [ 643.612859][T12775] simple_read_from_buffer+0xd0/0x160 [ 643.618247][T12775] proc_fail_nth_read+0x198/0x270 [ 643.623287][T12775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.628854][T12775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.634411][T12775] vfs_read+0x1df/0xbe0 [ 643.638561][T12775] ? __fget_files+0x1fc/0x3a0 [ 643.643232][T12775] ? __pfx___mutex_lock+0x10/0x10 [ 643.648252][T12775] ? __pfx_vfs_read+0x10/0x10 [ 643.652928][T12775] ? __fget_files+0x206/0x3a0 [ 643.657605][T12775] ksys_read+0x12b/0x250 [ 643.661840][T12775] ? __pfx_ksys_read+0x10/0x10 [ 643.666608][T12775] do_syscall_64+0xcd/0x250 [ 643.671109][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.677001][T12775] RIP: 0033:0x7f6e8457d25c [ 643.681409][T12775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 643.701011][T12775] RSP: 002b:00007f6e85342030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.709421][T12775] RAX: ffffffffffffffda RBX: 00007f6e84735fa0 RCX: 00007f6e8457d25c [ 643.717384][T12775] RDX: 000000000000000f RSI: 00007f6e853420a0 RDI: 0000000000000007 [ 643.725346][T12775] RBP: 00007f6e85342090 R08: 0000000000000000 R09: 0000000000000000 [ 643.733311][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.741276][T12775] R13: 0000000000000000 R14: 00007f6e84735fa0 R15: 00007fff2387c308 [ 643.749254][T12775] [ 643.752663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 643.803560][ T47] qmi_wwan 3-1:128.241: probe with driver qmi_wwan failed with error -22 [ 643.881181][T12779] netlink: 'syz.6.1840': attribute type 4 has an invalid length. [ 644.791620][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.959421][T12795] bridge0: port 3(erspan0) entered blocking state [ 644.966683][T12795] bridge0: port 3(erspan0) entered disabled state [ 644.974509][T12795] erspan0: entered allmulticast mode [ 644.987074][T12795] erspan0: entered promiscuous mode [ 644.994249][T12795] bridge0: port 3(erspan0) entered blocking state [ 645.000724][T12795] bridge0: port 3(erspan0) entered forwarding state [ 645.831415][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 646.871472][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 647.921393][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 647.966424][ T8] usb 3-1: USB disconnect, device number 72 [ 648.951468][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 649.369047][T12821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=12821 comm=syz.2.1849 [ 649.693860][ T29] audit: type=1400 audit(1732573752.114:1087): avc: denied { write } for pid=12814 comm="syz.6.1850" dev="sockfs" ino=38222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 649.771488][ T47] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 649.931508][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 649.991386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 650.106195][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 650.115307][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.130062][ T47] usb 4-1: config 0 descriptor?? [ 650.137371][ T47] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 650.148597][ T47] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.210589][ T47] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 650.226609][ T47] usb 4-1: media controller created [ 650.317232][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 650.689618][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1858'. [ 650.911345][ C0] hrtimer: interrupt took 36013 ns [ 650.940291][T12854] xt_CT: No such helper "netbios-ns" [ 651.031477][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 651.067990][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.205623][ T47] usb 4-1: selecting invalid altsetting 1 [ 651.211413][ T47] set interface failed [ 651.211824][ T47] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 651.226342][ T47] error writing reg: 0xff, val: 0x00 [ 651.422228][ T47] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 652.071428][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 652.228498][ T969] usb 4-1: USB disconnect, device number 37 [ 652.585791][T12877] netlink: 'syz.6.1864': attribute type 4 has an invalid length. [ 652.891451][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 653.018158][ T29] audit: type=1804 audit(1732573755.504:1088): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1863" name="/newroot/409/bus/bus" dev="overlay" ino=2228 res=1 errno=0 [ 653.020235][T12887] Invalid ELF header magic: != ELF [ 653.111473][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 653.111728][T12890] FAULT_INJECTION: forcing a failure. [ 653.111728][T12890] name failslab, interval 1, probability 0, space 0, times 0 [ 653.131573][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.6.1868 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 653.141999][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 653.152042][T12890] Call Trace: [ 653.155313][T12890] [ 653.158318][T12890] dump_stack_lvl+0x16c/0x1f0 [ 653.162995][T12890] should_fail_ex+0x497/0x5b0 [ 653.167669][T12890] ? fs_reclaim_acquire+0xae/0x150 [ 653.172773][T12890] should_failslab+0xc2/0x120 [ 653.177444][T12890] __kmalloc_noprof+0xcb/0x400 [ 653.182223][T12890] iter_file_splice_write+0x1cd/0x10b0 [ 653.187685][T12890] ? __pfx___lock_acquire+0x10/0x10 [ 653.192882][T12890] ? __pfx_iter_file_splice_write+0x10/0x10 [ 653.198775][T12890] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 653.204408][T12890] ? splice_direct_to_actor+0x346/0xa40 [ 653.209959][T12890] ? __pfx_iter_file_splice_write+0x10/0x10 [ 653.215846][T12890] direct_splice_actor+0x18f/0x6c0 [ 653.220949][T12890] splice_direct_to_actor+0x346/0xa40 [ 653.226320][T12890] ? __pfx_direct_splice_actor+0x10/0x10 [ 653.231950][T12890] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 653.237846][T12890] ? __pfx___might_resched+0x10/0x10 [ 653.243130][T12890] do_splice_direct+0x178/0x250 [ 653.247981][T12890] ? __pfx_do_splice_direct+0x10/0x10 [ 653.253352][T12890] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 653.259252][T12890] do_sendfile+0xaed/0xe30 [ 653.263666][T12890] ? __pfx_do_sendfile+0x10/0x10 [ 653.268599][T12890] ? __fget_files+0x206/0x3a0 [ 653.273273][T12890] __x64_sys_sendfile64+0x1da/0x220 [ 653.278468][T12890] ? ksys_write+0x1ba/0x250 [ 653.282963][T12890] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 653.288683][T12890] do_syscall_64+0xcd/0x250 [ 653.293188][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.299080][T12890] RIP: 0033:0x7fea6a97e819 [ 653.303488][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.323088][T12890] RSP: 002b:00007fea6b6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 653.331492][T12890] RAX: ffffffffffffffda RBX: 00007fea6ab36160 RCX: 00007fea6a97e819 [ 653.339454][T12890] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 653.347417][T12890] RBP: 00007fea6b6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 653.355377][T12890] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000002 [ 653.363338][T12890] R13: 0000000000000000 R14: 00007fea6ab36160 R15: 00007ffff82ec518 [ 653.371310][T12890] [ 653.858888][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 654.151404][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 654.291568][ T29] audit: type=1400 audit(1732573756.764:1089): avc: denied { mount } for pid=12884 comm="syz.2.1866" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 654.431389][ T25] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 654.439656][ T25] usb 5-1: config 0 has no interface number 0 [ 654.446074][ T25] usb 5-1: config 0 interface 161 has no altsetting 0 [ 654.546802][ T25] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 654.562951][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.570966][ T25] usb 5-1: Product: syz [ 654.575369][ T25] usb 5-1: Manufacturer: syz [ 654.580769][ T25] usb 5-1: SerialNumber: syz [ 654.729056][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1871'. [ 655.104423][ T25] usb 5-1: config 0 descriptor?? [ 655.110626][ T29] audit: type=1400 audit(1732573757.284:1090): avc: denied { read } for pid=12900 comm="syz.6.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 655.191467][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 655.246859][ T25] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 655.329913][ T25] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 655.374669][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 655.960548][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1874'. [ 656.058518][ T25] usb 5-1: USB disconnect, device number 47 [ 656.231392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 656.568933][T12917] syz.2.1875: attempt to access beyond end of device [ 656.568933][T12917] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 656.628324][T12917] syz.2.1875: attempt to access beyond end of device [ 656.628324][T12917] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 656.642715][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 656.652830][T12917] syz.2.1875: attempt to access beyond end of device [ 656.652830][T12917] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 656.684468][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 656.697319][T12917] syz.2.1875: attempt to access beyond end of device [ 656.697319][T12917] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 656.740852][T12917] syz.2.1875: attempt to access beyond end of device [ 656.740852][T12917] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 656.759012][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 656.769173][T12917] syz.2.1875: attempt to access beyond end of device [ 656.769173][T12917] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 656.778729][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1880'. [ 656.791967][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 656.806063][T12917] syz.2.1875: attempt to access beyond end of device [ 656.806063][T12917] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 656.819365][T12917] syz.2.1875: attempt to access beyond end of device [ 656.819365][T12917] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 656.835647][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 656.846126][T12917] syz.2.1875: attempt to access beyond end of device [ 656.846126][T12917] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 656.861424][ T6307] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 656.869004][ T25] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 656.876093][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 656.890654][T12917] syz.2.1875: attempt to access beyond end of device [ 656.890654][T12917] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 656.906683][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 656.916771][T12917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 656.926806][T12917] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 657.233399][ T5886] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 657.263775][ T6307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.274084][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 657.281356][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.300815][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 657.313710][ T6307] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 657.540159][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.557496][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.610325][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.640079][ T6307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 657.682779][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.713867][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.756241][ T6307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 657.766368][ T47] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 657.775807][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 657.797964][ T6307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 657.817185][ T5886] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 657.826664][ T25] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 657.845572][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.861747][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.880227][ T6307] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 657.890950][ T5886] usb 7-1: config 0 descriptor?? [ 657.901345][ T6307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 657.909453][ T6307] usb 4-1: Product: syz [ 657.921888][ T25] usb 5-1: config 0 descriptor?? [ 657.929939][ T6307] usb 4-1: Manufacturer: syz [ 657.939290][ T47] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 657.958866][ T6307] usb 4-1: SerialNumber: syz [ 657.963828][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.980533][ T6307] usb 4-1: config 0 descriptor?? [ 657.985972][ T47] usb 3-1: Product: syz [ 657.990197][ T47] usb 3-1: Manufacturer: syz [ 658.007955][ T47] usb 3-1: SerialNumber: syz [ 658.019711][ T47] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 658.081165][T12942] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 658.198786][ T6307] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 658.210149][ T6307] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 658.311431][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 658.350071][ T5886] playstation 0003:054C:0BA0.000D: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0 [ 658.406784][ T6307] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 658.421355][ T6307] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 658.424059][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.453254][ T6307] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 658.501789][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.548420][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'. [ 658.598807][ T5886] playstation 0003:054C:0BA0.000D: Failed to retrieve feature with reportID 18: -71 [ 658.618819][ T6307] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 658.641597][ T6307] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 658.648852][ T5886] playstation 0003:054C:0BA0.000D: Failed to retrieve DualShock4 pairing info: -71 [ 658.658424][ T5886] playstation 0003:054C:0BA0.000D: Failed to get MAC address from DualShock4 [ 658.667440][ T5886] playstation 0003:054C:0BA0.000D: Failed to create dualshock4. [ 658.680321][ T6307] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 658.699213][ T6307] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 658.733075][ T29] audit: type=1400 audit(2000000000.059:1091): avc: denied { accept } for pid=12946 comm="syz.5.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 658.735195][ T5886] playstation 0003:054C:0BA0.000D: probe with driver playstation failed with error -71 [ 658.780932][ T5886] usb 7-1: USB disconnect, device number 9 [ 658.841870][ T6307] usb 4-1: USB disconnect, device number 38 [ 659.351516][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 659.358732][T12942] usb 3-1: Service connection timeout for: 256 [ 659.387217][T12942] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 659.428285][T12942] ath9k_htc: Failed to initialize the device [ 659.439291][T12942] usb 3-1: ath9k_htc: USB layer deinitialized [ 659.654042][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 659.712703][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.718479][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 660.391684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 660.405490][ T969] usb 3-1: USB disconnect, device number 73 [ 660.410954][ T25] usb 5-1: USB disconnect, device number 48 [ 660.436102][T12961] vivid-004: disconnect [ 660.500230][T12960] vivid-004: reconnect [ 660.541486][ T6307] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 660.585404][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1891'. [ 660.627161][T12969] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1891'. [ 660.742616][ T6307] usb 7-1: Using ep0 maxpacket: 32 [ 660.778090][ T6307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.354190][ T6307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.364062][ T6307] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 661.377049][ T6307] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 661.386250][ T6307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.441490][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 661.502494][ T6307] usb 7-1: config 0 descriptor?? [ 662.078772][ T6307] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000E/input/input36 [ 662.142799][T12988] vivid-000: disconnect [ 662.169562][T12988] vivid-000: reconnect [ 662.425136][T12951] loop7: detected capacity change from 0 to 10 [ 662.471389][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 662.479332][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 662.484953][ T6307] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000E/input/input37 [ 662.598448][ T6307] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 662.700725][ T6307] usb 7-1: USB disconnect, device number 10 [ 662.701448][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 662.713019][ T8] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 662.721234][ T8] usb 4-1: config 0 has no interface number 0 [ 662.730178][ T8] usb 4-1: config 0 interface 161 has no altsetting 0 [ 662.752144][ T8] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 662.771374][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.800040][ T8] usb 4-1: Product: syz [ 662.809670][ T8] usb 4-1: Manufacturer: syz [ 662.824807][ T8] usb 4-1: SerialNumber: syz [ 662.842131][ T8] usb 4-1: config 0 descriptor?? [ 662.851068][ T8] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 663.274753][ T8] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 663.291427][T11148] Bluetooth: hci1: Malformed LE Event: 0x0d [ 663.371876][ T8] usb 4-1: USB disconnect, device number 39 [ 663.521483][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 663.622510][T13012] syz.6.1900 (13012): drop_caches: 2 [ 663.633634][T13012] syz.6.1900 (13012): drop_caches: 2 [ 664.034899][T13014] syz.5.1901 (13014): drop_caches: 2 [ 664.043221][T13014] syz.5.1901 (13014): drop_caches: 2 [ 664.519228][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 664.561440][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 664.671771][ T5886] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 665.281406][T13025] netlink: 'syz.5.1905': attribute type 4 has an invalid length. [ 665.325937][ T5886] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 665.331436][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 665.342661][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.359231][ T5886] usb 3-1: Product: syz [ 665.601029][ T5886] usb 3-1: Manufacturer: syz [ 665.605738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 665.634674][ T5886] usb 3-1: SerialNumber: syz [ 665.721598][ T8] usb 7-1: device descriptor read/64, error -71 [ 665.802570][ T5886] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 665.831561][ T6307] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 666.526121][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 666.631392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 666.704752][ T8] usb 7-1: device descriptor read/64, error -71 [ 666.934568][ T6307] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 666.942346][ T6307] ath9k_htc: Failed to initialize the device [ 666.951599][ T8] usb usb7-port1: attempt power cycle [ 666.966293][T13039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.671467][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 667.967791][T13047] FAULT_INJECTION: forcing a failure. [ 667.967791][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.981098][T13047] CPU: 1 UID: 0 PID: 13047 Comm: syz.3.1911 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 667.991524][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.001581][T13047] Call Trace: [ 668.004864][T13047] [ 668.007803][T13047] dump_stack_lvl+0x16c/0x1f0 [ 668.012510][T13047] should_fail_ex+0x497/0x5b0 [ 668.017213][T13047] _copy_from_user+0x2e/0xd0 [ 668.021821][T13047] copy_msghdr_from_user+0x99/0x160 [ 668.027032][T13047] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 668.032867][T13047] ___sys_sendmsg+0xff/0x1e0 [ 668.037472][T13047] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.042692][T13047] ? __pfx_lock_release+0x10/0x10 [ 668.047725][T13047] ? trace_lock_acquire+0x146/0x1e0 [ 668.052944][T13047] ? __fget_files+0x206/0x3a0 [ 668.057639][T13047] __sys_sendmsg+0x16e/0x220 [ 668.062240][T13047] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.067380][T13047] do_syscall_64+0xcd/0x250 [ 668.071893][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.077795][T13047] RIP: 0033:0x7f6e8457e819 [ 668.082199][T13047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.101802][T13047] RSP: 002b:00007f6e85342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.110213][T13047] RAX: ffffffffffffffda RBX: 00007f6e84735fa0 RCX: 00007f6e8457e819 [ 668.118176][T13047] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000007 [ 668.126138][T13047] RBP: 00007f6e85342090 R08: 0000000000000000 R09: 0000000000000000 [ 668.134100][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.142062][T13047] R13: 0000000000000000 R14: 00007f6e84735fa0 R15: 00007fff2387c308 [ 668.150034][T13047] [ 668.459146][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 668.475547][ T6307] usb 3-1: ath9k_htc: USB layer deinitialized [ 668.711456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 668.722215][ T8] usb 7-1: device descriptor read/8, error -71 [ 668.783441][ T29] audit: type=1400 audit(2000000010.189:1092): avc: denied { setattr } for pid=13058 comm="syz.3.1913" path="socket:[38752]" dev="sockfs" ino=38752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.957470][T13063] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 668.967312][ T8] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 668.993390][ T8] usb 7-1: device descriptor read/8, error -71 [ 669.001520][ T5886] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 669.079269][T13066] bridge_slave_0: left allmulticast mode [ 669.085953][T13066] bridge_slave_0: left promiscuous mode [ 669.092478][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.102161][ T8] usb usb7-port1: unable to enumerate USB device [ 669.103272][T13066] bridge_slave_1: left allmulticast mode [ 669.118872][T13066] bridge_slave_1: left promiscuous mode [ 669.125475][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.141488][ T5886] usb 5-1: device descriptor read/64, error -71 [ 669.150758][T13066] bond0: (slave bond_slave_0): Releasing backup interface [ 669.177494][T13066] bond0: (slave bond_slave_1): Releasing backup interface [ 669.234530][T13066] team0: Port device team_slave_0 removed [ 669.260415][T13066] team0: Port device team_slave_1 removed [ 669.266989][T13066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.275061][T13066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.284975][T13066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.293846][T13066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.410955][ T5886] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 669.508348][ T5885] usb 3-1: USB disconnect, device number 74 [ 669.751468][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 670.225118][ T5886] usb 5-1: device descriptor read/64, error -71 [ 670.626904][ T5886] usb usb5-port1: attempt power cycle [ 670.791386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 671.001444][ T5886] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 671.049975][ T5886] usb 5-1: device descriptor read/8, error -71 [ 671.067466][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 671.090886][T13087] block nbd0: not configured, cannot reconfigure [ 671.210105][T13090] input: syz0 as /devices/virtual/input/input38 [ 671.831458][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 672.182103][T13093] netlink: 'syz.5.1923': attribute type 4 has an invalid length. [ 672.871390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 673.141540][ T5886] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 673.173374][ T5886] usb 5-1: device descriptor read/8, error -71 [ 673.283081][ T5886] usb usb5-port1: unable to enumerate USB device [ 673.921494][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 674.318437][T13114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13114 comm=syz.3.1927 [ 674.817741][T13117] tmpfs: Bad value for 'mpol' [ 674.951398][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 675.009543][T13116] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1928'. [ 675.887776][T13128] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 675.985557][ T29] audit: type=1400 audit(2000000017.389:1093): avc: denied { setopt } for pid=13125 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 676.011487][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 676.184269][T13137] input: syz0 as /devices/virtual/input/input39 [ 676.946840][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 677.020679][ T29] audit: type=1400 audit(2000000018.429:1094): avc: denied { read } for pid=13120 comm="syz.3.1931" dev="sockfs" ino=38865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 677.042038][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 678.071467][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 678.275772][ T969] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 678.494698][T13155] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 679.110296][ T969] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 679.122165][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 679.131392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 679.133148][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 679.150095][ T969] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.193379][ T969] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.208696][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.220879][ T969] usb 7-1: config 0 descriptor?? [ 679.610978][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 679.822926][ T969] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 679.846965][ T969] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 679.939241][ T969] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 679.943223][ T25] usb 6-1: device descriptor read/64, error -71 [ 680.151455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 680.241461][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 680.391632][ T25] usb 6-1: device descriptor read/64, error -71 [ 680.502767][ T25] usb usb6-port1: attempt power cycle [ 680.552796][T11148] Bluetooth: hci0: command tx timeout [ 680.855958][T13181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.201558][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 681.919872][T13182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1946'. [ 681.945532][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 682.055690][ T25] usb 6-1: device descriptor read/8, error -71 [ 682.241498][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 682.278685][ T5855] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 682.636741][T11148] Bluetooth: hci3: command 0x0405 tx timeout [ 683.271415][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 684.311476][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 684.841596][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 685.106115][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 685.351395][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 685.708883][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.715329][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.979720][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.988457][ T8] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 685.996930][ T8] usb 3-1: config 127 has no interface number 0 [ 686.003328][ T8] usb 3-1: config 127 interface 25 has no altsetting 0 [ 686.017307][ T8] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 686.026546][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.038669][ T8] usb 3-1: Product: syz [ 686.049260][ T8] usb 3-1: Manufacturer: syz [ 686.055029][ T8] usb 3-1: SerialNumber: syz [ 686.265252][T13218] netlink: 5312 bytes leftover after parsing attributes in process `syz.5.1958'. [ 686.401490][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 686.719149][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 686.821430][ T5885] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 687.051901][ T5885] usb 4-1: no configurations [ 687.056721][ T5885] usb 4-1: can't read configurations, error -22 [ 687.073365][ T8] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 687.142883][ T8] usb 3-1: device reset changed ep0 maxpacket size! [ 687.157807][ T8] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 687.167617][ T8] usb 3-1: USB disconnect, device number 75 [ 687.216924][ T5885] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 687.290535][T13243] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 687.301650][ T8] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 687.349390][ T969] usb 7-1: USB disconnect, device number 15 [ 687.431401][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 687.452027][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 687.531866][ T5885] usb 4-1: no configurations [ 687.536733][ T5885] usb 4-1: can't read configurations, error -22 [ 687.544172][ T5885] usb usb4-port1: attempt power cycle [ 687.921712][ T5885] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 687.969865][ T5885] usb 4-1: no configurations [ 687.998763][ T5885] usb 4-1: can't read configurations, error -22 [ 688.058740][T13206] devtmpfs: Cannot enable quota on remount [ 688.422089][ T5885] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 688.438448][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 688.446916][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 688.455193][ T8] usb 3-1: can't read configurations, error -71 [ 688.471690][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 688.488280][ T5885] usb 4-1: no configurations [ 688.493254][ T5885] usb 4-1: can't read configurations, error -22 [ 688.499828][ T5885] usb usb4-port1: unable to enumerate USB device [ 688.846776][ T5885] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 689.291471][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 689.312293][ T5885] usb 6-1: config 0 has an invalid interface number: 91 but max is 0 [ 689.511573][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 690.226357][ T5885] usb 6-1: config 0 has no interface number 0 [ 690.240047][ T5885] usb 6-1: config 0 interface 91 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 690.283036][ T5885] usb 6-1: config 0 interface 91 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 690.301400][ T5885] usb 6-1: config 0 interface 91 has no altsetting 0 [ 690.309854][ T5885] usb 6-1: New USB device found, idVendor=045e, idProduct=046c, bcdDevice=6b.b6 [ 690.319588][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.331365][ T5885] usb 6-1: Product: syz [ 690.335541][ T5885] usb 6-1: Manufacturer: syz [ 690.340137][ T5885] usb 6-1: SerialNumber: syz [ 690.346571][ T5885] usb 6-1: config 0 descriptor?? [ 690.357766][T13256] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 690.365055][T13256] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 690.561460][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 690.801589][T13323] 9pnet_fd: Insufficient options for proto=fd [ 691.591388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 692.175817][T13339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.232448][ T5885] ipaq 6-1:0.91: PocketPC PDA converter detected [ 692.239207][ T5885] usb 6-1: active config #0 != 1 ?? [ 692.248458][ T5885] usb 6-1: USB disconnect, device number 19 [ 692.314556][T13343] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 692.592684][T13346] IPv6: NLM_F_CREATE should be specified when creating new route [ 692.641487][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 693.681385][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 694.711479][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 695.523712][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1993'. [ 695.751391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 695.801534][ T8] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 695.954080][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 695.995962][ T8] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 696.004747][ T8] usb 4-1: config 0 has no interface number 0 [ 696.010922][ T8] usb 4-1: config 0 interface 161 has no altsetting 0 [ 696.027767][ T8] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 696.037035][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.054315][ T8] usb 4-1: Product: syz [ 696.070148][ T8] usb 4-1: Manufacturer: syz [ 696.088003][ T8] usb 4-1: SerialNumber: syz [ 696.100308][ T8] usb 4-1: config 0 descriptor?? [ 696.114754][ T8] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 696.148802][ T8] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 696.342451][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0d [ 696.356686][ T8] usb 4-1: USB disconnect, device number 44 [ 696.791467][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 697.309125][T13393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.831389][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 698.789752][T13406] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 698.881486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 699.167832][T13410] overlayfs: missing 'lowerdir' [ 699.573963][T13423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13423 comm=syz.4.2005 [ 699.911413][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 700.338367][T13431] input: syz0 as /devices/virtual/input/input40 [ 700.951473][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 701.991409][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 702.087281][T13447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13447 comm=syz.2.2012 [ 702.507825][T13459] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 702.648555][T13461] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 702.874073][ T29] audit: type=1400 audit(2000000044.289:1095): avc: denied { ioctl } for pid=13462 comm="syz.2.2016" path="socket:[40403]" dev="sockfs" ino=40403 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 703.041485][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 703.784657][T13477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13477 comm=syz.2.2019 [ 704.071401][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 704.897961][T13485] input: syz0 as /devices/virtual/input/input41 [ 705.121491][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 705.831548][ T5885] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 705.841547][T13498] input: syz1 as /devices/virtual/input/input42 [ 705.981614][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 705.999624][ T5885] usb 7-1: New USB device found, idVendor=0421, idProduct=9a40, bcdDevice=65.5d [ 706.009097][ T29] audit: type=1400 audit(2000000047.419:1096): avc: denied { read } for pid=13503 comm="syz.3.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 706.126502][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.134819][ T5885] usb 7-1: Product: syz [ 706.138999][ T5885] usb 7-1: Manufacturer: syz [ 706.143958][ T5885] usb 7-1: SerialNumber: syz [ 706.152191][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 706.161223][ T5885] usb 7-1: config 0 descriptor?? [ 706.167688][ T5885] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 706.182336][T13505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 706.238314][T13505] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 706.471412][ T969] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 706.629468][ T969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 706.643090][ T969] usb 3-1: config 8 has an invalid interface number: 2 but max is 0 [ 706.667790][ T969] usb 3-1: config 8 has no interface number 0 [ 706.715117][ T969] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 706.759217][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.847970][ T969] usb 3-1: Product: syz [ 706.891294][ T969] usb 3-1: Manufacturer: syz [ 706.931268][ T969] usb 3-1: SerialNumber: syz [ 707.201500][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 707.272488][ T969] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 707.365186][ T969] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 707.410560][ T969] usb 3-1: USB disconnect, device number 78 [ 708.025781][T13523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13523 comm=syz.3.2033 [ 708.231388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 708.291303][ T5885] usb 7-1: USB disconnect, device number 16 [ 708.650126][T13531] input: syz0 as /devices/virtual/input/input44 [ 709.271513][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 710.311400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 710.878829][T13555] Invalid ELF header magic: != ELF [ 710.911131][ T29] audit: type=1804 audit(2000000052.259:1097): pid=13555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2041" name="/newroot/160/bus/bus" dev="overlay" ino=883 res=1 errno=0 [ 711.351449][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 711.413993][T13562] 9pnet_fd: Insufficient options for proto=fd [ 711.732978][ T969] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 712.391377][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 713.351721][T13574] Invalid ELF header magic: != ELF [ 713.358545][ T29] audit: type=1804 audit(2000000054.759:1098): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2046" name="/newroot/395/bus/bus" dev="overlay" ino=2139 res=1 errno=0 [ 713.431499][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 713.820834][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 714.062863][ T969] usb 7-1: config 0 has an invalid interface number: 161 but max is 0 [ 714.071059][ T969] usb 7-1: config 0 has no interface number 0 [ 714.082817][ T969] usb 7-1: config 0 interface 161 has no altsetting 0 [ 714.109128][ T969] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 714.122244][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.130631][ T969] usb 7-1: Product: syz [ 714.140789][ T969] usb 7-1: Manufacturer: syz [ 714.260639][ T969] usb 7-1: SerialNumber: syz [ 714.274506][ T969] usb 7-1: config 0 descriptor?? [ 714.344963][ T969] ums-jumpshot 7-1:0.161: USB Mass Storage device detected [ 714.358639][ T969] ums-jumpshot 7-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 714.481383][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 714.559737][ T969] usb 7-1: USB disconnect, device number 17 [ 714.948078][ T5855] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 715.152131][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 715.392371][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.419986][ T5855] usb 4-1: config 0 has no interfaces? [ 715.435719][ T5855] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 715.451415][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.462735][ T5855] usb 4-1: Product: syz [ 715.466886][ T5855] usb 4-1: Manufacturer: syz [ 715.488503][ T5855] usb 4-1: SerialNumber: syz [ 715.507258][ T5855] usb 4-1: config 0 descriptor?? [ 715.521451][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 715.723709][ T5855] usb 4-1: USB disconnect, device number 45 [ 716.561380][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 716.666017][T13616] netlink: 'syz.3.2059': attribute type 4 has an invalid length. [ 716.996566][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2058'. [ 717.591443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 718.186879][T13626] virtio-fs: tag <(null)> not found [ 718.628572][ T29] audit: type=1326 audit(2000000060.039:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 718.661375][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 718.684352][ T29] audit: type=1326 audit(2000000060.079:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 718.887492][ T29] audit: type=1326 audit(2000000060.079:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 719.561852][ T29] audit: type=1326 audit(2000000060.079:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 719.585441][ T29] audit: type=1326 audit(2000000060.079:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 719.609165][ T29] audit: type=1326 audit(2000000060.079:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 719.633170][ T29] audit: type=1326 audit(2000000060.079:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 719.671479][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 719.711776][T13659] input: syz1 as /devices/virtual/input/input46 [ 720.711477][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 721.114095][ T29] audit: type=1400 audit(2000000062.529:1106): avc: denied { getopt } for pid=13688 comm="syz.6.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 721.336788][ T29] audit: type=1326 audit(2000000062.749:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 721.360285][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.401228][ T29] audit: type=1326 audit(2000000062.749:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a97e819 code=0x7ffc0000 [ 721.751746][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 722.702178][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2086'. [ 722.791505][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 722.984494][T13721] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 723.631465][ T5855] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 723.831464][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 723.871780][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 723.893891][ T5855] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 724.686496][ T5855] usb 5-1: config 0 has no interface number 0 [ 724.692647][ T5855] usb 5-1: config 0 interface 161 has no altsetting 0 [ 724.881381][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 724.982679][ T5855] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 724.992233][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.000261][ T5855] usb 5-1: Product: syz [ 725.011446][ T5855] usb 5-1: Manufacturer: syz [ 725.021425][ T5855] usb 5-1: SerialNumber: syz [ 725.052171][ T5855] usb 5-1: config 0 descriptor?? [ 725.082935][ T5855] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 725.104325][ T5855] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 725.289681][ T5855] usb 5-1: USB disconnect, device number 53 [ 725.341582][ T5885] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 725.512210][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 725.530896][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.545868][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.558879][ T5885] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 725.571389][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.619272][ T5885] usb 6-1: config 0 descriptor?? [ 725.911456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 726.275878][T13771] input: syz1 as /devices/virtual/input/input49 [ 726.961382][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 727.004554][T13784] Invalid ELF header magic: != ELF [ 727.403635][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 727.404041][ T29] audit: type=1804 audit(2000000068.409:1127): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2109" name="/newroot/458/bus/bus" dev="overlay" ino=2494 res=1 errno=0 [ 727.433063][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.985371][T13790] Invalid ELF header magic: != ELF [ 727.996319][ T29] audit: type=1804 audit(2000000069.389:1128): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2110" name="/newroot/459/bus/bus" dev="overlay" ino=2508 res=1 errno=0 [ 728.001455][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 728.882178][ T5885] usbhid 6-1:0.0: can't add hid device: -71 [ 728.891511][ T5885] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 728.975962][ T5885] usb 6-1: USB disconnect, device number 20 [ 729.031388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 729.541504][ T5855] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 729.791505][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 729.798255][ T5855] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 729.806543][ T5855] usb 3-1: config 0 has no interface number 0 [ 729.812709][ T5855] usb 3-1: config 0 interface 161 has no altsetting 0 [ 729.880929][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 730.071489][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 730.364766][ T5855] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 730.373986][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.382453][ T5855] usb 3-1: Product: syz [ 730.387028][ T5855] usb 3-1: Manufacturer: syz [ 730.391794][ T5855] usb 3-1: SerialNumber: syz [ 730.401228][ T5855] usb 3-1: config 0 descriptor?? [ 730.418107][ T5855] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 730.431228][T13816] input: syz1 as /devices/virtual/input/input50 [ 730.440960][ T5855] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 730.757001][ T5855] usb 3-1: USB disconnect, device number 79 [ 731.111572][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 731.173401][T13832] Invalid ELF header magic: != ELF [ 731.628028][ T29] audit: type=1804 audit(2000000072.569:1129): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2122" name="/newroot/107/bus/bus" dev="overlay" ino=582 res=1 errno=0 [ 731.693493][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 732.161451][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 732.347054][T13841] netlink: 'syz.3.2125': attribute type 4 has an invalid length. [ 732.791792][T13846] netlink: 'syz.2.2124': attribute type 4 has an invalid length. [ 733.191396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 734.231465][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 734.653207][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 734.908057][T13885] netlink: 'syz.2.2134': attribute type 4 has an invalid length. [ 735.271510][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 736.311483][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 736.537324][T13892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18252 sclass=netlink_route_socket pid=13892 comm=syz.3.2137 [ 736.585727][T13903] syz.4.2139 (13903): drop_caches: 2 [ 736.591629][T13903] syz.4.2139 (13903): drop_caches: 2 [ 736.806836][T13906] input: syz1 as /devices/virtual/input/input51 [ 737.042730][T13915] sp0: Synchronizing with TNC [ 737.068149][T13915] sp0: Found TNC [ 737.351385][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 738.391451][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 738.913745][ T5855] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 739.161558][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 739.182367][ T5855] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 739.201469][ T5855] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 739.222206][ T5855] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.244955][ T5855] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 739.273382][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.303002][ T5855] usb 6-1: Product: syz [ 739.322446][ T5855] usb 6-1: Manufacturer: syz [ 739.344518][ T5855] usb 6-1: SerialNumber: syz [ 739.431383][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 739.713165][ T6307] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 739.786923][T13955] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 739.817561][T13955] binder: 13954:13955 ioctl 4018620d 20000040 returned -1 [ 739.896082][ T6307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 739.905158][ T6307] usb 4-1: config 15 has an invalid interface number: 168 but max is 0 [ 739.921393][ T6307] usb 4-1: config 15 has no interface number 0 [ 739.952050][ T6307] usb 4-1: config 15 interface 168 has no altsetting 0 [ 739.973314][ T6307] usb 4-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 740.022087][ T5855] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 740.141677][ T6307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.149712][ T6307] usb 4-1: Product: syz [ 740.187720][ T6307] usb 4-1: Manufacturer: syz [ 740.194440][ T6307] usb 4-1: SerialNumber: syz [ 740.471461][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 741.147482][T13966] input: syz1 as /devices/virtual/input/input52 [ 741.244971][ T29] audit: type=1400 audit(2000000082.649:1130): avc: denied { write } for pid=13952 comm="syz.3.2153" name="file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 741.267830][ T29] audit: type=1400 audit(2000000082.649:1131): avc: denied { open } for pid=13952 comm="syz.3.2153" path="/469/file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 741.398115][ T6307] dvb-usb: found a 'Gigabyte U8000-RH' in cold state, will try to load a firmware [ 741.511421][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 741.597387][T13974] sp0: Synchronizing with TNC [ 741.608671][T13974] sp0: Found TNC [ 741.908339][ T6307] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 741.917149][ T6307] dib0700: firmware download failed at 7 with -22 [ 741.923990][ T5855] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 741.945201][ T6307] usb 4-1: USB disconnect, device number 46 [ 742.024433][ T5855] usb 6-1: USB disconnect, device number 21 [ 742.233156][T13982] netlink: 'syz.2.2160': attribute type 4 has an invalid length. [ 742.331561][ T5885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 742.551452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 742.652977][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.665605][T13987] netlink: 'syz.4.2163': attribute type 4 has an invalid length. [ 742.699993][ T5885] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 742.724906][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.741563][ T5885] usb 7-1: config 0 descriptor?? [ 742.754243][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 743.591412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 743.862545][ T6307] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 743.870320][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 744.486232][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.515467][ T6307] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 744.519545][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.524820][ T6307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.540401][ T6307] usb 4-1: Product: syz [ 744.545295][ T6307] usb 4-1: Manufacturer: syz [ 744.550123][ T6307] usb 4-1: SerialNumber: syz [ 744.557014][ T6307] usb 4-1: config 0 descriptor?? [ 744.631561][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 744.730199][ T5885] pwc: recv_control_msg error -71 req 02 val 2c00 [ 744.741526][ T5885] pwc: recv_control_msg error -71 req 04 val 1000 [ 744.749748][ T5885] pwc: recv_control_msg error -71 req 04 val 1300 [ 744.757256][ T5885] pwc: recv_control_msg error -71 req 04 val 1400 [ 744.764119][ T5885] pwc: recv_control_msg error -71 req 02 val 2000 [ 744.770935][ T5885] pwc: recv_control_msg error -71 req 02 val 2100 [ 744.779440][ T5885] pwc: recv_control_msg error -71 req 04 val 1500 [ 744.982458][T14015] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 744.989353][ T5885] pwc: recv_control_msg error -71 req 02 val 2500 [ 744.995579][T14015] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 744.995599][T14015] CPU: 0 UID: 0 PID: 14015 Comm: syz.3.2164 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 744.995620][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 744.995631][T14015] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 744.995656][T14015] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d 8a a5 f5 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 f7 7e 93 0f 84 [ 744.995675][T14015] RSP: 0018:ffffc900036b7268 EFLAGS: 00010006 [ 745.002446][ T5885] pwc: recv_control_msg error -71 req 02 val 2400 [ 745.010440][T14015] [ 745.010448][T14015] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 745.010462][T14015] RDX: 0000000000000006 RSI: 1ffff920006d6e5f RDI: 0000000000000030 [ 745.010475][T14015] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 745.021206][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 745.030874][T14015] R10: ffffffff90609657 R11: 0000000000000001 R12: 0000000000000030 [ 745.030889][T14015] R13: ffff888029f8a440 R14: 0000000000000000 R15: 0000000000000000 [ 745.030901][T14015] FS: 00007f6e853006c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 745.030919][T14015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.030933][T14015] CR2: 00007f6e852fff98 CR3: 000000007fd86000 CR4: 00000000003526f0 [ 745.036900][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 745.055954][T14015] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000080000000 [ 745.055969][T14015] DR3: 0000000020000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.055982][T14015] Call Trace: [ 745.055989][T14015] [ 745.055997][T14015] ? die_addr+0x3b/0xa0 [ 745.056020][T14015] ? exc_general_protection+0x155/0x230 [ 745.056048][T14015] ? asm_exc_general_protection+0x26/0x30 [ 745.056080][T14015] ? __lock_acquire+0xe4/0x3c40 [ 745.056102][T14015] ? find_held_lock+0x2d/0x110 [ 745.056127][T14015] ? __pfx___lock_acquire+0x10/0x10 [ 745.056145][T14015] ? addrconf_get_prefix_route+0x5d8/0x980 [ 745.056172][T14015] ? __pfx_lock_release+0x10/0x10 [ 745.056193][T14015] lock_acquire.part.0+0x11b/0x380 [ 745.056213][T14015] ? modify_prefix_route+0x30b/0x8b0 [ 745.056240][T14015] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 745.056262][T14015] ? rcu_is_watching+0x12/0xc0 [ 745.056288][T14015] ? trace_lock_acquire+0x146/0x1e0 [ 745.056314][T14015] ? modify_prefix_route+0x30b/0x8b0 [ 745.056340][T14015] ? lock_acquire+0x2f/0xb0 [ 745.056360][T14015] ? modify_prefix_route+0x30b/0x8b0 [ 745.056388][T14015] _raw_spin_lock_bh+0x33/0x40 [ 745.056406][T14015] ? modify_prefix_route+0x30b/0x8b0 [ 745.150768][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 745.155417][T14015] modify_prefix_route+0x30b/0x8b0 [ 745.155453][T14015] inet6_rtm_newaddr+0x12c7/0x1ab0 [ 745.155475][T14015] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 745.155495][T14015] ? __mutex_lock+0x1cc/0xa60 [ 745.155518][T14015] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 745.155546][T14015] ? __pfx___mutex_lock+0x10/0x10 [ 745.184354][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 745.185043][T14015] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 745.190176][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 745.194610][T14015] rtnetlink_rcv_msg+0x3c7/0xea0 [ 745.194642][T14015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 745.194671][T14015] netlink_rcv_skb+0x16b/0x440 [ 745.194697][T14015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 745.194723][T14015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.194751][T14015] ? netlink_deliver_tap+0x1ae/0xd30 [ 745.194774][T14015] netlink_unicast+0x53c/0x7f0 [ 745.194800][T14015] ? __pfx_netlink_unicast+0x10/0x10 [ 745.194827][T14015] netlink_sendmsg+0x8b8/0xd70 [ 745.293104][ T5885] pwc: Registered as video103. [ 745.294517][T14015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.294553][T14015] ____sys_sendmsg+0xaaf/0xc90 [ 745.303629][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 745.305917][T14015] ? copy_msghdr_from_user+0x10b/0x160 [ 745.305952][T14015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.324431][ T5885] usb 7-1: USB disconnect, device number 18 [ 745.328101][T14015] ___sys_sendmsg+0x135/0x1e0 [ 745.328137][T14015] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.414202][T14015] ? __pfx_lock_release+0x10/0x10 [ 745.414229][T14015] ? trace_lock_acquire+0x146/0x1e0 [ 745.424421][T14015] ? __fget_files+0x206/0x3a0 [ 745.429106][T14015] __sys_sendmsg+0x16e/0x220 [ 745.433698][T14015] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.438807][T14015] ? __x64_sys_futex+0x1e1/0x4c0 [ 745.443753][T14015] do_syscall_64+0xcd/0x250 [ 745.448253][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.454150][T14015] RIP: 0033:0x7f6e8457e819 [ 745.458560][T14015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.478162][T14015] RSP: 002b:00007f6e85300038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.486571][T14015] RAX: ffffffffffffffda RBX: 00007f6e84736160 RCX: 00007f6e8457e819 [ 745.494527][T14015] RDX: 0000000000008044 RSI: 0000000020000840 RDI: 000000000000000c [ 745.502488][T14015] RBP: 00007f6e845f175e R08: 0000000000000000 R09: 0000000000000000 [ 745.510459][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.518430][T14015] R13: 0000000000000000 R14: 00007f6e84736160 R15: 00007fff2387c308 [ 745.526397][T14015] [ 745.529390][T14015] Modules linked in: [ 745.533261][T14015] ---[ end trace 0000000000000000 ]--- [ 745.538707][T14015] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 745.544166][T14015] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d 8a a5 f5 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 f7 7e 93 0f 84 [ 745.563766][T14015] RSP: 0018:ffffc900036b7268 EFLAGS: 00010006 [ 745.569831][T14015] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 745.577801][T14015] RDX: 0000000000000006 RSI: 1ffff920006d6e5f RDI: 0000000000000030 [ 745.585791][T14015] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 745.585805][T14015] R10: ffffffff90609657 R11: 0000000000000001 R12: 0000000000000030 [ 745.601715][T14015] R13: ffff888029f8a440 R14: 0000000000000000 R15: 0000000000000000 [ 745.609687][T14015] FS: 00007f6e853006c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 745.618607][T14015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.625180][T14015] CR2: 00007f6e852fff98 CR3: 000000007fd86000 CR4: 00000000003526f0 [ 745.633151][T14015] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000080000000 [ 745.641109][T14015] DR3: 0000000020000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.649076][T14015] Kernel panic - not syncing: Fatal exception in interrupt [ 745.656464][T14015] Kernel Offset: disabled [ 745.660773][T14015] Rebooting in 86400 seconds..