last executing test programs: 2m34.150355112s ago: executing program 1 (id=1943): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x3ff, 0xf48}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={r0, 0xd, 0x8}, &(0x7f0000000580)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000680)={0xb8, 0x0, 0x0, [{{0x2, 0x3, 0x5, 0x2, 0x2, 0x2, {0x1, 0x8, 0x8001, 0x40000000000, 0x1, 0x3, 0xfffffffc, 0x1000, 0x3, 0x4000, 0xe, 0x0, 0x0, 0xa, 0x3}}, {0x1, 0x80, 0xa, 0x5, '/dev/fuse\x00'}}]}, 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e133d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2400000000000000, 0x200000) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000100)="dcaa3ec0db70f7b5497df35b257780efe27f1cb81edd58c157658a14e663543d6f9ebfb538f7f3c5b942592ba1b42f4fc085288685734dff3578d49d1ab88c0af97c4edd449e6b86351209056e0cdae833971026e1c669662266e4a638cba5435e835f2f666b357350dbb2dd911e28884939c2f6bce35d49f27add4d30e7652b30a6af7c0764f37c4451267b508b5713624a0175f939e99bb4675436b5d7c35657f783b3c1e2a7818315dce450b4bc84", 0xb0}, {&(0x7f00000001c0)="4b91a97acc2cc9c96eb3d67d7a09bf56748d551acc484f6d3776a72cbea05943c4d6424676dda3303141fa87f71d7d33b375a645edd8093664b3ce6da566205368f38a1fa578989b048edb94b43b04a771eb5d28ce702c81aa2fe6ef9cb4d5f7e0fef262ba75bc8a4e46f0df3e069260c6a66216f2acd18dcd81898e77bbbb2c174e81fed013e56b9be45740dd8ae8", 0x8f}, {&(0x7f0000000480)="f5548c082c4d143146f4c10b1c87e7b3c971c10518d690607deb106b1127058ae107dfc30ca3b5e2d9da2943665af958a35aa414a6fef4f88766da5ebdc0054b93a82a8544230ec9bec9d840138fbc25ca08b61d62d78c4bd07a0dbc851984a2b36e1bae9fff849cd4a000f47aeefd0d3153d199b721e22fa6b39b010d9d41fb93ebd6503f40084d80b3d362f8ba6fb13018e59fd55091f3538de002159ba18f82576cabdb0371f565e7f9a726d4be492b58741d88a7e442d13cb9cfde0393df79a2b377fe105580c82157599c5dbc0dabf95b635560c1f9273b2427329e40ea9153eb3fc50c89a1babefda7", 0xec}, {&(0x7f0000000040)="f0c72ed20b0bdd5cfec607e8aa2e696140adcb97adecc1349b1a3c03472422d6400b08eabbd73afeada7f7d16c49dc6358ab7f", 0x33}], 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x101) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x101) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x7, 0x81, 0x2) (async) ioperm(0x7, 0x81, 0x2) clock_settime(0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095", @ANYRES8=r4, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095", @ANYRES8=r4, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m32.200427247s ago: executing program 1 (id=1950): sendto$phonet(0xffffffffffffffff, &(0x7f0000000140)="7eb01d6467fe2ceb092eeea0b17036ef230f1151770f4c09359d7016e4c570dfc33679769cb31710e65a775626751f0f5d7fc89269a57c5c668cd3ce22537f1bd6c58000f5ddc456bf1dcbdfa5e9ce658beb5de148c1aa084373927e23650a012eb31db66d140e3b6597f1df2087ec545dfb73de3cac4afac36384d340fd4f12db468da15ec33c29597fb48d9695a51b6b3ed5d0c1ec3b0d52a745693f11603004c84a219d68268558204dd7ce621ec7cf33175b8a5d95c622351712", 0xbc, 0x4005, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2m30.747626758s ago: executing program 1 (id=1954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0x22, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) r3 = socket(0x10, 0x80002, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000016c0), 0x0, 0x0) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x64200, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2e0000001c0073fc0000000400fd000007000003", @ANYRES32, @ANYBLOB="020047040a000200bbbbbbbbbbbb0000060005"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c854) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1, 0xc}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8, 0x0, 0x0, @void}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000000880)=[{{&(0x7f0000000500)=@generic={0x2a, "7f80e66b99cd3e31ebb87a3d2203d8be8d180770c6e71792e53a4464335ff403a0484d43d5c105b8c44c1b5582fc0b721436d6ee61f637e71363d60fb7f594160637edb3a448791312eb00f7e1ace46daf104f47cead6fb753c66df22e2dcf7d264685896d27765365aeaeec0f09c5a02772ae894d4ceb94266fbbf6e333"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)="5636366d3114cb7c0581f153a275d9ce0f9423346e049cb0efa9a5a98341c743fb85df48a2a34553e4b476829c6b2475dbbb129d4e4d84dc963e58dff89c379fa518dd95bcc776d5bfbb0665b6a8eb300721685b2e8dba23f296e28005111e49a5e4828af4af6ad40f0d5372737c220eeb70fa9899c5967958093135c449294ca1a94c78939bade83a68de876e04b9c23b1ca2f625884953c74efe3b0a595b035aff1bdc3d68e74382b3d5d75567de42450f8d4aedd3d51cbb5be8dedb482d49adc7e972110464ddfee9f12192", 0xcd}, {&(0x7f0000000680)="a6214ff3426ac66e4702f85dbda0dd2663d274924df1836ae333bf6ca168c8683687f6127624e8f965808852eb386174007fb8ed4b527b1b6acc7bc1e3669510c43917763d7649d14038f655c288757acbaea29f6515a42d1299367ed196a1e1aafae1f617788e", 0x67}, {&(0x7f0000000740)="4a3cd5677481aa7720baa2b740e2a658429870cd2c494dfe374f5b8d093c233cc3df942b2e2dfd53baad60cc228b58e40a158f56f8a1d79ced00b30d3119cd42d0a5964bdb5815f0ba4aa227018e0ba0f52af3a2667dd884f626997b3e690a36933cc3d92be46f4660eba684354bc149da80d525797012e06eb0cbea986faf9406167855e65bd63932889a87a1476b3fda549f009596419377148cb51a575a28fe0ba0139fe601735f81defae503914bdab6ebd6a84eed4be907778836e89d4327c20ce9b60c3ef88cafd7c23f3e7c628bfb67", 0xd3}], 0x3}}], 0x1, 0x4008001) setsockopt$inet_int(r9, 0x0, 0x7, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x45833af92e4b39ff, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x100) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) getsockopt(r4, 0x8, 0x7f69c7, &(0x7f0000000400)=""/206, &(0x7f0000000380)=0xce) 2m29.243295807s ago: executing program 1 (id=1957): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cdd", &(0x7f0000000a40)="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"}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000000701040000000000000000010000050c000340000000000000000f0c000240000000000000ec10090001"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m28.282031905s ago: executing program 1 (id=1960): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\"\x00'}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r3) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x1540, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x1518, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7908f556e14ae64dccb72b195a7eb981d65248d0ba2c3eb3cadfa7a82193185f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "23d9521771ddb0d2b25afef67f0ab0e51817773f0fad44ebcc98a3b028170e33"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x7}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0x4cb}}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x5b8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "befcb8c857f31ef5d33f155e958b2cd8857f9a311d67c3b06f6502805d0d9a0e"}, @WGPEER_A_FLAGS={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xc42, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46a2d4c4682d585fd705bd6e31602ad93a655d321aaeb0cfd8593cb0c087119b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}]}, {0xcf8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8dec833a5c671df466870046a70fc8a964dd82923df4a448d839b0fae6e13baa"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @mcast2, 0x1}}, @WGPEER_A_ALLOWEDIPS={0x508, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x4}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x338, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1540}, 0x1, 0x0, 0x0, 0x14}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='m', 0x1, 0x0, &(0x7f0000000200)={0x3a, 0x13, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'macvlan0\x00', {0x1}, 0x9}) 2m27.700394611s ago: executing program 1 (id=1964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1b4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x200408c5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x20182) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) semget$private(0x0, 0x0, 0x162) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(r1, 0x6, &(0x7f0000000640)=0x4000006) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4000, 0x0, 0x0, 0x10cc}, &(0x7f00000000c0), &(0x7f0000000280)) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0xaa}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3f00}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) 2m27.304157848s ago: executing program 32 (id=1964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1b4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x200408c5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x20182) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) semget$private(0x0, 0x0, 0x162) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(r1, 0x6, &(0x7f0000000640)=0x4000006) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4000, 0x0, 0x0, 0x10cc}, &(0x7f00000000c0), &(0x7f0000000280)) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0xaa}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3f00}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) 11.887816804s ago: executing program 2 (id=2456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000880) (fail_nth: 11) 10.731045495s ago: executing program 2 (id=2459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) getresuid(&(0x7f0000000500), &(0x7f0000000540), 0x0) sendmsg$netlink(r5, 0x0, 0x80) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/146, 0x92}], 0x1, 0xc, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_pwait2(r6, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) 9.483790709s ago: executing program 2 (id=2464): openat$kvm(0xffffffffffffff9c, 0x0, 0x327fa1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905", @ANYRES64=r4], 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x7}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) 9.483077726s ago: executing program 0 (id=2465): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7400003a1401c00c000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000090000000000000008000a400000ffff100007800c00028008000140ac1414aa"], 0x74}}, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00098006000600800a000004"], 0x528}}, 0xc000) 9.481214573s ago: executing program 4 (id=2466): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x2f8c, &(0x7f0000000180)={0x0, 0xb0e6, 0x40, 0x1, 0x52}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000e15a45c8de218bf962a185122c9d0067719b2378b91aa46ea44437b4feff6b06e0632565e7ef3d3d0246f0f55e54525d2f6579ffde4a980ca327c989917eb55980b94cb56077ca98063f444f860b2f3d1a3065a7b9137dd10c954a459f30e94a92340cfc61f4d57b1cfc2a2e5aa53f2d22f1a41f62d76d7564e59286183e72c4ff00e9f2962c0686970568add4ef79fb2ad1cce4d5ce7a2265f24ebc0f07d5e9a7cb6944d2bba5dda6a0213ce57ad5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c009900f8ffffff8000000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4400c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES32=r4], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.372320857s ago: executing program 4 (id=2472): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x12d102, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd0e}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7.063985868s ago: executing program 0 (id=2474): r0 = syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0xc1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x4000010, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x7, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.396186073s ago: executing program 2 (id=2476): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x700) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x10000000008d}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000010c0)={0x5e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'dh\x00', 0x0, 0x5, 0x3a}, 0x2c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="170000000000000003000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000fbff00000084363d80bb3134210ae9d9c4842f2c000000000000005c0024c87bf6a53ea1d236be19985ba019c880c1d8a3dc171348678109940c006a52c4e402f1a93edf6d29b32deb6d614aacd80be5ed778c431009bebae1627ba84244d8886dc634251ac789b0ddf651e0d4247a5399ca55825740fb57c416bedd70540b53206748867544ef3ae6e7673fe8eb24e8f80a055d8ead34c303e5"], 0x50) io_submit(0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0]) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x4, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x2, 0x4e23, @remote}, 0x1c5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0xffffffff}) 6.310056073s ago: executing program 5 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206010800000000000000000000000005000400000000000900020073797a31000000000c00078005001500000005000100060000000c000300686173683a697000"], 0x50}}, 0x0) getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) 6.234532658s ago: executing program 2 (id=2478): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025caf02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x4000010, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x7, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') syz_fuse_handle_req(r2, &(0x7f0000001240)="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", 0x2000, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0x0, 0xffffffff}, {}, 0x7, 0x0, 0x0, 0x3}}}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000180)={0xf, 0x9, 0x1, 0x401, 0x6, 0xd}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000140)=0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xfff, 0x0, 0x0, 0x2, 0x11, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000001680)={0x2, &(0x7f00000032c0)=[{@fixed}, {}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.175595388s ago: executing program 5 (id=2480): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x1, 0x20, 0xfff, 0x80000001, {{0x21, 0x4, 0x0, 0x3a, 0x84, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @generic={0x83, 0x7, "3c492e11b0"}, @timestamp_prespec={0x44, 0x34, 0x12, 0x3, 0x4, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x80}, {@multicast2, 0x6}, {@remote, 0x50e0}, {@private=0xa010100, 0x6}, {@remote, 0x7}]}, @end, @generic={0x88, 0x2}, @timestamp={0x44, 0x14, 0x8d, 0x0, 0xf, [0x1, 0x0, 0x2, 0x8]}, @noop, @timestamp={0x44, 0x1c, 0xa0, 0x0, 0x7, [0x9, 0x10, 0xffffffff, 0x7, 0x7f, 0x4]}]}}}}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xa, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @ldst={0x2, 0x3, 0x6, 0x9, 0x5, 0x80, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xab}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8b, &(0x7f0000000200)=""/139, 0x41000, 0x15, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x4, 0x1, 0xc, 0x9}], 0x10, 0x1ff, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x144, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = dup3(r6, r5, 0x80000) sendmsg$nl_route(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40804) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 5.278055704s ago: executing program 5 (id=2482): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005200010000000400000000000203000008000100feffffff"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 4.919393471s ago: executing program 5 (id=2486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x24000004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x31f828a0, 0x0, 0xffffffffffffffff, 0x8c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x8000, 0x20, 0xffffffff, 0x3, {{0xd, 0x4, 0x1, 0x1b, 0x34, 0x68, 0x0, 0x68, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x83, 0x12, "f4580325ae139bacc3e700d8fdc1ff73"}, @end, @end, @timestamp={0x44, 0xc, 0xa5, 0x0, 0xd, [0x8, 0xffff2e5e]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, 0x0}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1b, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x80, 0x2c, &(0x7f0000000700)=""/44, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xcfa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x5, 0x3, 0xf, 0x7}, {0x1, 0x1, 0x6, 0x5}, {0x3, 0x3, 0x5, 0x7}, {0x3, 0x2, 0xa, 0x6}, {0x2, 0x4, 0x3}], 0x10, 0x101, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x100, 0xffffffff, 0x80000001, 0x18c40, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x1, @value, @void, @value}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x8, 0x18}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xed}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, @exit, @alu={0x7, 0x0, 0xceed26652054c7ff, 0x1, 0x3, 0x18, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x40, 0xc9, &(0x7f0000000340)=""/201, 0x41000, 0x1c, '\x00', r4, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xb, 0xd, 0x10001}, 0x10, r5, r6, 0x2, &(0x7f00000009c0)=[r7, 0x1, r8], &(0x7f0000000a00)=[{0x4, 0x2, 0x10, 0x2}, {0x4, 0x4, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x520, 0xf0, 0x318, 0xffffffff, 0x0, 0x318, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000c00), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xb, @ipv4=@private=0xa010101, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x65, @gre_key=0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0x0, 0xff, 0xffffffff, 0xffffffff], [0xda6cdfe4650c3e30, 0xff000000, 0xff, 0xff000000], 'geneve1\x00', 'pim6reg1\x00', {0xff}, {}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@private=0xa010101, @ipv4=@empty, @port=0x4e24, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [0xffffffff, 0x1fe000000, 0xff000000, 0xff], 'veth1_to_team\x00', 'veth1_to_team\x00', {}, {0xff}, 0x16, 0x2, 0x5, 0x8}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x80000001, 0x2, 0x1, [0xffff, 0xfffb, 0x2e, 0x7ff, 0x7, 0x3, 0x64, 0xff21, 0x0, 0xd2, 0x8cc0, 0x6, 0x7ff, 0x680, 0x6], 0x9}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv4=@private=0xa010101, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@empty, @loopback, [0x0, 0xff000000, 0xff000000], [0xffffff00, 0x0, 0xff], 'veth1_vlan\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x32, 0x8, 0x1, 0x9}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x1ff, 0x2, 0x0, [0x0, 0x6, 0x100, 0x56, 0x0, 0x5, 0x2, 0x72, 0xa, 0xc, 0x6, 0xffff, 0x9d, 0x7, 0x6807, 0x9], 0xb}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_usb_connect(0x5, 0x64b, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0x19, 0xab, 0x1c, 0x0, 0x50d, 0x905c, 0x385e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x639, 0x3, 0x1, 0x0, 0x80, 0x5, [{{0x9, 0x4, 0xd2, 0x6, 0x1, 0x51, 0x9b, 0xfd, 0xe, [@hid_hid={0x9, 0x21, 0x7e42, 0x45, 0x1, {0x22, 0x436}}, @generic={0x75, 0x11, "386ef8c99047eb26773a30e877b09348922becf02c2ca7027cc2e5aa1826d88f5d3346dfdcc204887615313dc0e4d935f0f867c0807bd5ed12bcedee515b687f5fe37d5670b33c875fc75ddffe0e5016fcda167686d5d952cc81aaa3be493fefde9da7e47b667c6ae146e3861936fd0e5e2c6a"}], [{{0x9, 0x5, 0x5, 0x14, 0x400, 0x7, 0x7f, 0x6b, [@generic={0xd3, 0xf, "e8752a5c728e940edd4910963fc5ca7248639ec4402e239232e4e7da17c80565c15ccd6314648ee4c2c13c5d481b06896d7486edac1e88b6e81babe0edb749f5d4ba7ba493d6e1f30e6f57585106c1cc7572e7c4630e9a1b45cb851e5cad071f463e52ec8f6d441472c534bda61a8a9a73d32811ce670349b139c7dfb396d5656ac57763ad2aefedeae52e156f9c0ebb4ec39076cf1ada27b543bda9140460d1be9abb3059c4b2b920399dab3bacc78258044ba024e2b86da9502f4185457589bc2628c839c30e58b7fc1ead00ccc4ab2f"}]}}]}}, {{0x9, 0x4, 0x56, 0xfb, 0x8, 0x6e, 0xf6, 0x43, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x0, 0x76, 0x4, 0x4, [@generic={0xfb, 0xf, "dda4ce1cba07b60895481156b623f132d1aedfc6d354a624fb6d667a19e2efc1a2b37b457ee4aad80edeea85af81d0cc2db7fd73926a127b5e7e0e7b44f3323db27876b431f17bcb95c55cb53705a50aa940fbaa336408014d994f16b1a9999aa7a76d1f28bf4e363d6ab27ce0e7bc8bf3abbe9344fbac89d4a64d806d98f9aa97cab2a707dd7f56706e56e657fc66e3799666aa6d9198d5ff63d1578ea1aedf6fffd47cbaadbff0b5697b14d7459e95ae3cbdfd20b2eacae596622302b3407cfb346c74e359997d5ce988c2386e663f4fa1c921419f97d8e0b18842d9dd6c043bd25468dd7e5c18ec93b9efffe19197f33044ee489208c597"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xbe, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0x48, 0x80, [@generic={0x25, 0x5, "490d92f0adc8fb32c0f064be4ea622eed07ad14d2066fb5081d3205c9c388147e190b7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x49, 0x6}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0xe, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x100}]}}, {{0x9, 0x5, 0x4, 0x12, 0x8, 0x1, 0x81, 0x40, [@generic={0x4f, 0x23, "477dc044909d6de3d456ac7b1e203b052df0f38bae9a9dc1f1b8e3fe0f8130b40043f9e64418f493fd3683e86695cb0e72e95db6fb8f344df67b2bec64b68098323ad65f22e0f1a229e1b4d3da"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xfa, 0xa9, 0x8, [@generic={0x74, 0x30, "1f990e09e2d69dcbcc0d69819587e06bf1cb201fd15fce6a835a0ced1e25a0ddef51611c214a72faabbdc1de368a761dd647669c301ab09dc2ae0fbc7048ffdf518216a18b37e2b0c5cd1b6fbb4dbe808f949080721bfc0a3f93a67491e687d916e993e15f605223fd49a4fccd1019d44ee5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x100}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x4b, 0xff, 0x40, [@generic={0xca, 0x1, "8f604aba7cb03c8fe52d757d4a925237a39b50dce46315a67c604295a57a6eb31ac533d2680ebd01e65836443cfec746434271d9ff70d3600ca6cd59d8725574305738b33c72c4039b48d06d9bf0e65e84ba924d1a2b52eddafeb6d94f1c94f28fd662d034bee08a72c7317dc0ba9c873bcfb6eedbbb729e417c6d974fb264ebc3259e9ad77c9c816399591e7c822732601f49ee377ceb8fc57606e6b0efcf55390a77b8171d8e373641e3718506cb042541abfa966e72b376d8276e659b611c06b8b99ed3942862"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x24, 0x9a, 0xff}}]}}, {{0x9, 0x4, 0x31, 0x18, 0x1, 0xff, 0x2, 0x6e, 0x4, [@hid_hid={0x9, 0x21, 0x2, 0xc, 0x1, {0x22, 0x86b}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffd, 0x21ae, 0x3}}], [{{0x9, 0x5, 0xd, 0x3, 0x400, 0x7f, 0x9, 0x8, [@generic={0x7f, 0xd, "53b6a5c52a8541767a951ca6aff6812f10befe2bb5e8b5fb71c2f4fe535ce443cbe4f53c47eba839103b10e790beb5b70a614f06a7258ad9b04e11c36e74c4310d7c8214f657c7dbb0c9a36dc7d76cdbcbc179d6cc213095ebb409404203d8b12c981a0ddfaf3d92704d9aad2117eb618f9285d6a691f1c0a74f3a2c59"}, @generic={0xf4, 0x7, "a8846a9fb9682099f00b0008ec9fcc70f73f46a4a9cd045d3331c67682f40f3517444f405a54ee7b95fbf38e52e6f2dc5e3fb377f8f45fccf5ccd26b746a8d0e217cc04c9027b8f0b359e44cca87556356882246c47fac78910e39df2dfe661dce2945ae47b4b27d70285131bca25d4e39206fa3a7bb4cb0d764b55cce8b9cc3be65d139b736581d0fbf4fed39e31a42741793ad1d316c83935996d58d1f41c15b6324af8c8728d0bb6ba244b23d2b8083e96f7f537e81c18f2e881716081c5f8098e04ee1a54976abe78934a8c452829248ad39348435bae203bfc8a5c02fb01c3dc4877b8a6c1077c2b83b9e604b8a9f69"}]}}]}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x310, 0xff, 0x3, 0x6, 0x20}, 0x47, &(0x7f00000018c0)={0x5, 0xf, 0x47, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x1, 0xf, 0x0, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2e, 0x7f, 0xf, 0x5, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x0, 0x11f0f, 0x5, [0xc0, 0x4130, 0xff813f, 0xffff00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x5, 0x8, 0xba81, 0x4}]}, 0x3, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x480a}}, {0x21, &(0x7f0000001980)=@string={0x21, 0x3, "ad38b808a42fc7e4b6d2c2a51df74896267c5818baa387be4d8e5dee13bd17"}}, {0x65, &(0x7f00000019c0)=@string={0x65, 0x3, "dbd29f5203a1f00aab09448bc57f39b8f296c1ea269d105b034eebf9a85d95f3cbfbd911428e1f4b077f06bd83687297c7b67e29ee346e333d7f6019d0fc4dacfa79539d22829cc77bb9ccd06b1b6d2a1698a997fcb28a52997ec8bc0069d881b556bd"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)) ioctl$UI_DEV_CREATE(r6, 0x5501) sendto$inet(r10, &(0x7f0000001ac0)="76f678ecb4614717d8f77323f5b063ef57b5e074c35ec685d2e7a19d0892d17b8ac73b0ea34a983498ff40da5c5b2b20a258cd93ab543c3dd8ccf4c96c3536b0d91dd54a06a48d351497c96b7af0667d7c5b0ff97627828c3b75de7838544c05a93d4e4d112e6e0b4e621bb8634442f198663a7940aebaea337363", 0x7b, 0xa0, &(0x7f0000001b40)={0x2, 0x4e22, @local}, 0x10) read$msr(r10, &(0x7f0000001b80)=""/212, 0xd4) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000001dc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001d80)={0xffffffffffffffff}, 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r11, &(0x7f0000001e00)={0xb, 0x10, 0xfa00, {&(0x7f0000001cc0), r12}}, 0x18) r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)={0x101902, 0x10, 0x8}, 0x18) faccessat2(r13, &(0x7f0000001ec0)='./file0\x00', 0x31, 0x1000) mkdir(&(0x7f0000001f00)='./file0\x00', 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r10) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={0x120, r14, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0xa, 0x4, 0x1599, 0x7, 0x1, 0x401, 0x7fff, 0x8]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x3, 0x19c]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x653}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1be, 0xffffffed, 0xfffffffc]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x708, 0x8, 0x8001, 0x800, 0x6c, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45c}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000002180)=0xa0000) 3.905092647s ago: executing program 0 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400e90002060500000000000000f5000000000005000400fd0000000900020073797a31000000000c00078008001740040007"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a00000405"], 0x528}}, 0xc000) 3.902636565s ago: executing program 3 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xef2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xef2}, 0x8) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) (async) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x1d, r6}, 0x10, &(0x7f0000000540)={&(0x7f0000000480)={0x6, 0x91, 0x6, {r7, r8/1000+10000}, {0x77359400}, {0x4}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x1c, 0x2, 0x0, 0x0, "eedf9c4234ce9a876bfaf2972293f44822185743e5d959bd85edf4a1d327136a053da963633dfa1ce7a706ebfab1e756379555dfa6d2f9138f8d832de0a1ccff"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffa}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x5) (async) r14 = socket(0x10, 0x80002, 0x5) write$P9_RLERRORu(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16=r14], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@version_u}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@version_u}]}}) 3.80804109s ago: executing program 4 (id=2489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x38d000, 0x38d000, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f00000002c0)) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000d77a50b38c216c721573662c9ced389a1a45022a20e437aeceeabec7b5c4020e0f5df91d96acb1fb6ff7daaab18f17e24f39382e5991fb2cfb02b702c8f7e439502aba5dc67201b271161203e281f160d14836c3fd1661e7fe7f6fdc542443c85028ccd624b5320d44931a3ef902a36a000758244349117ca2bfe4823095e0a9dc71a39f5dc6c", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b00000005009200080000000800010078000000200022801c00008008000200000000000800040000004000080004000800000014002280040000800c0000800800070009000000"], 0x58}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000) 3.789381421s ago: executing program 0 (id=2490): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)={0x1, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x20}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400080c}, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGWINSZ(r5, 0x545d, &(0x7f0000000340)) 3.590414596s ago: executing program 3 (id=2491): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES16=r1, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00'}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000c00000018000380080002000100000008000400f4ad7e1e040001000c00018008000100", @ANYRES32], 0x38}}, 0x0) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r7) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, r8) 2.675136118s ago: executing program 0 (id=2492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 1.486841775s ago: executing program 5 (id=2493): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000200)="8e872554a3cbcf49ff819ef1ed34962da24215dfa8a67e5da2d1d6d895bd6eb9945661b702c1e7d2a29ae83de0eb2fbb9ed89089a0d7b18042806397662b07c8bdeec149d28690b7bb4f49db2b997ce1b4131b82dd50ffeae6d09ca9decbd074008af886c25994cc9a1a89b39921b09a0577", 0x72) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x280440a1) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) get_mempolicy(0x0, &(0x7f0000005d80), 0x1004, &(0x7f0000ff9000/0x4000)=nil, 0x3) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 1.478719995s ago: executing program 4 (id=2494): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @local, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 1.441741836s ago: executing program 3 (id=2495): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0xb0, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x9f, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fc"]}]}, 0xb0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) 801.260163ms ago: executing program 3 (id=2496): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005200010000000400000000000203000008000100feffffff"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 708.345408ms ago: executing program 2 (id=2497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x21c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}]}, @CTA_EXPECT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20048841}, 0x8840) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xaf80) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0xfffffffc, 0x1ff, "2109aa6cf60ba514364e383f00", "7ca24a13", "52020020", '\x00', ["c9b58700", "bed0f3d6ce7a5f0002000004"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="280000000306010200000000000000000000000005000100070000000900020073797a32"], 0x28}}, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0xfffffffffffffffd, 0x0, 0x100004, 0x0, 0xd, 0x1ffff, "57c1169b6664ea61326ac71ae7213059", 0xf3, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x80}) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@cgroup=r4, 0x31, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) listen(r1, 0x1ff) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @local}, &(0x7f0000000480)=0xc) 272.560299ms ago: executing program 4 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x50, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}}, 0x0) (fail_nth: 2) 251.210978ms ago: executing program 3 (id=2499): r0 = io_uring_setup(0x1487, &(0x7f0000000000)={0x0, 0x5eff, 0x80, 0x0, 0x382}) io_uring_enter(r0, 0x3517, 0x1000000, 0x31, 0x0, 0x0) (async) unshare(0x68050200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r1) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x69) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009", 0x70}], 0x1, 0x0, 0x0, 0x7}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) write$tun(r3, 0x0, 0xb9) (async, rerun: 64) r4 = socket$inet(0x2, 0x3, 0x8d) (rerun: 64) setsockopt$inet_msfilter(r4, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010102000000fcdbdf252b00000002000300", @ANYRES32=r7, @ANYBLOB="00009900f9060050dd000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x110) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44000) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x52202, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800024000000014080001400000001205000300010000000900100073797a30000000000900020073797a32000000000000000000000000000a"], 0x80}}, 0x0) 152.096574ms ago: executing program 5 (id=2500): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) syz_usb_connect(0x3, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd1, 0xd1, 0xce, 0x20, 0x12d1, 0x2c8, 0xabf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40, 0x2}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009510000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x0, 0x0, 0x7, 0xfffffff7fffffffc, 0x0, 0x1, 0x0, 0x7ffff7ff}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r3, &(0x7f00000000c0)=""/177, 0xb1) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) (async) syz_usb_connect(0x3, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd1, 0xd1, 0xce, 0x20, 0x12d1, 0x2c8, 0xabf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40, 0x2}}]}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009510000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x0, 0x0, 0x7, 0xfffffff7fffffffc, 0x0, 0x1, 0x0, 0x7ffff7ff}) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read(r3, &(0x7f00000000c0)=""/177, 0xb1) (async) 129.318011ms ago: executing program 4 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xc4, &(0x7f0000000a40)=""/196, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0xb, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0xdc420cf3f760ae6d, &(0x7f0000000280)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000884c0580822946f8d1c8c7d7000186dd061000090180c200000efc00000000000000000000000000000100000000009795d37b0601d94611395d5107be00fc0000000000000000000000000000001ff01cb523e68146aec7d31106fdf13508e247ecb3f3e5568c43cc1662f9e9b5d4d446a6e37c383b82c3d9ff1109b29f9a2d2873a56ef01ea321dd2e5b4ed6806ecb3ed98033ea3291cd9fe2ddd7b238e6d15098a7c540f79e4cb59ce3460b34fd558ec94969df0fc87b55f1f4576c1fd10fa940ff9ebc6a2ff37df4b6214332243c11163c60c306ec7637b4dcdb296abd3126736689d25a587f13cb"], 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r5, &(0x7f0000000140)=""/100, 0x64, 0x200) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x35) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000200)={'syz0\x00', {0x6, 0x400, 0x0, 0x5e6}, 0x12, [0x3, 0x0, 0xffffffff, 0x0, 0x24b2, 0x0, 0x4, 0x8, 0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000], [0x3, 0x0, 0x0, 0xd1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x5f9, 0x0, 0x8, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3], [0x7fff, 0x0, 0x0, 0x13d, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc], [0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x3fffff, 0x0, 0x3ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x3, r7}) syz_open_dev$evdev(&(0x7f0000000700), 0x86, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x117, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x40000000000037c, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x117, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x40000000000037c, 0x0) kernel console output (not intermixed with test programs): 2178" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 773.851209][ T5860] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 773.980862][ T29] audit: type=1400 audit(1736014371.680:32176): avc: denied { read write } for pid=14529 comm="syz.4.2178" name="radio8" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 774.011206][ T29] audit: type=1400 audit(1736014371.680:32177): avc: denied { open } for pid=14529 comm="syz.4.2178" path="/dev/radio8" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 774.048065][ T29] audit: type=1400 audit(1736014371.680:32178): avc: denied { ioctl } for pid=14529 comm="syz.4.2178" path="/dev/radio8" dev="devtmpfs" ino=1007 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 774.089645][ T5860] usb 4-1: Invalid ep0 maxpacket: 64 [ 774.096014][ T5860] usb usb4-port1: attempt power cycle [ 774.111222][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.114281][ T29] audit: type=1400 audit(1736014371.780:32179): avc: denied { prog_load } for pid=14529 comm="syz.4.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.122421][T12909] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.154294][ T29] audit: type=1400 audit(1736014371.790:32180): avc: denied { bpf } for pid=14529 comm="syz.4.2178" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.167582][T12909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.220223][T12909] usb 5-1: config 0 descriptor?? [ 774.236814][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'. [ 774.310350][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 774.459611][ T5860] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 774.464567][T12909] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 774.478217][T12909] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0030/input/input67 [ 774.502243][ T5860] usb 4-1: Invalid ep0 maxpacket: 64 [ 774.549530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 774.659476][T14570] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2188'. [ 774.679981][ T5860] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 774.784768][ T5860] usb 4-1: Invalid ep0 maxpacket: 64 [ 774.791421][ T5860] usb usb4-port1: unable to enumerate USB device [ 775.056858][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.067798][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.077637][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.086747][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.098573][ T9] usb 1-1: config 0 descriptor?? [ 775.130686][T12909] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 775.312413][T12909] usb 5-1: USB disconnect, device number 73 [ 775.389844][ T5858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 775.589532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 776.428633][T14601] FAULT_INJECTION: forcing a failure. [ 776.428633][T14601] name failslab, interval 1, probability 0, space 0, times 0 [ 776.441457][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.4.2200 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 776.448869][ T5860] kernel read not supported for file /dsp (pid: 5860 comm: kworker/1:6) [ 776.452210][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 776.452242][T14601] Call Trace: [ 776.452249][T14601] [ 776.452257][T14601] dump_stack_lvl+0x16c/0x1f0 [ 776.452284][T14601] should_fail_ex+0x497/0x5b0 [ 776.452310][T14601] ? fs_reclaim_acquire+0xae/0x150 [ 776.452330][T14601] should_failslab+0xc2/0x120 [ 776.452353][T14601] __kmalloc_noprof+0xcb/0x510 [ 776.452373][T14601] ? rcu_is_watching+0x12/0xc0 [ 776.452398][T14601] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 776.452428][T14601] p9_fcall_init+0x97/0x260 [ 776.452451][T14601] p9_tag_alloc+0x17a/0x870 [ 776.452474][T14601] ? __pfx_p9_tag_alloc+0x10/0x10 [ 776.452496][T14601] ? __call_rcu_common.constprop.0+0x99/0x7a0 [ 776.452518][T14601] ? kmem_cache_free+0x31d/0x4c0 [ 776.452536][T14601] ? p9_req_put+0x1c6/0x250 [ 776.452556][T14601] ? p9_client_walk+0x42d/0x530 [ 776.452578][T14601] ? v9fs_vfs_lookup+0x208/0x5c0 [ 776.452595][T14601] ? lookup_one_qstr_excl+0x11d/0x190 [ 776.452617][T14601] ? filename_create+0x1ed/0x530 [ 776.452632][T14601] ? do_mkdirat+0xab/0x3a0 [ 776.452653][T14601] p9_client_prepare_req+0x19f/0x4d0 [ 776.452676][T14601] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 776.452699][T14601] ? __pfx_mark_lock+0x10/0x10 [ 776.452724][T14601] p9_client_rpc+0x1c3/0xc10 [ 776.452747][T14601] ? __pfx_p9_client_rpc+0x10/0x10 [ 776.590464][T14601] ? mark_held_locks+0x9f/0xe0 [ 776.595223][T14601] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 776.601378][T14601] p9_client_clunk+0x93/0x170 [ 776.606048][T14601] p9_client_walk+0x48e/0x530 [ 776.610714][T14601] ? __pfx_p9_client_walk+0x10/0x10 [ 776.615904][T14601] ? v9fs_fid_lookup+0xe9/0xec0 [ 776.620749][T14601] v9fs_vfs_lookup+0x208/0x5c0 [ 776.625496][T14601] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 776.630764][T14601] ? lock_acquire+0x2f/0xb0 [ 776.635255][T14601] ? do_raw_spin_unlock+0x172/0x230 [ 776.640441][T14601] ? _raw_spin_unlock+0x28/0x50 [ 776.645285][T14601] lookup_one_qstr_excl+0x11d/0x190 [ 776.650473][T14601] ? mnt_want_write+0x161/0x450 [ 776.655334][T14601] filename_create+0x1ed/0x530 [ 776.660098][T14601] ? __pfx_filename_create+0x10/0x10 [ 776.665374][T14601] ? lock_acquire+0x2f/0xb0 [ 776.669862][T14601] ? __virt_addr_valid+0x1a4/0x590 [ 776.674966][T14601] ? __virt_addr_valid+0x5e/0x590 [ 776.680003][T14601] do_mkdirat+0xab/0x3a0 [ 776.684235][T14601] ? __pfx_do_mkdirat+0x10/0x10 [ 776.689071][T14601] ? getname_flags.part.0+0x1c5/0x550 [ 776.694436][T14601] __x64_sys_mkdir+0xef/0x140 [ 776.699099][T14601] do_syscall_64+0xcd/0x250 [ 776.703592][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.709477][T14601] RIP: 0033:0x7fa60c985d29 [ 776.713879][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.733472][T14601] RSP: 002b:00007fa60d84f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 776.741871][T14601] RAX: ffffffffffffffda RBX: 00007fa60cb75fa0 RCX: 00007fa60c985d29 [ 776.749845][T14601] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 00000000200002c0 [ 776.757800][T14601] RBP: 00007fa60d84f090 R08: 0000000000000000 R09: 0000000000000000 [ 776.765757][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.773721][T14601] R13: 0000000000000000 R14: 00007fa60cb75fa0 R15: 00007fff627eb0f8 [ 776.781689][T14601] [ 776.784931][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.305406][ T9] uclogic 0003:256C:006D.0031: v1 frame probing failed: -71 [ 777.312851][ T9] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 777.320423][ T9] uclogic 0003:256C:006D.0031: probe with driver uclogic failed with error -71 [ 777.373324][ T9] usb 1-1: USB disconnect, device number 91 [ 777.391211][T14611] openvswitch: netlink: Duplicate or invalid key (type 0). [ 777.411528][T14611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.520753][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2203'. [ 777.829569][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.106699][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 778.288683][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 778.288698][ T29] audit: type=1400 audit(1736014377.240:32570): avc: denied { read write } for pid=14634 comm="syz.0.2211" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.372651][ T29] audit: type=1400 audit(1736014377.280:32571): avc: denied { open } for pid=14634 comm="syz.0.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.417823][ T29] audit: type=1400 audit(1736014377.280:32572): avc: denied { ioctl } for pid=14634 comm="syz.0.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.445482][ T29] audit: type=1400 audit(1736014377.280:32573): avc: denied { create } for pid=14635 comm="syz.5.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.474812][ T29] audit: type=1400 audit(1736014377.280:32574): avc: denied { ioctl } for pid=14634 comm="syz.0.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.550553][ T29] audit: type=1400 audit(1736014377.280:32575): avc: denied { create } for pid=14618 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 778.581119][T12909] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 778.593471][ T29] audit: type=1400 audit(1736014377.290:32576): avc: denied { name_bind } for pid=14618 comm="syz.2.2206" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 778.638332][T14642] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2214'. [ 778.652739][T14643] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2213'. [ 778.663763][ T29] audit: type=1400 audit(1736014377.290:32577): avc: denied { node_bind } for pid=14618 comm="syz.2.2206" saddr=fc01:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 778.689101][T14643] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2213'. [ 778.699777][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2214'. [ 778.714798][ T29] audit: type=1400 audit(1736014377.290:32578): avc: denied { name_bind } for pid=14618 comm="syz.2.2206" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 778.744687][T14643] macsec1: entered promiscuous mode [ 778.752132][T14643] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 778.759278][T14643] macsec1: entered allmulticast mode [ 778.766273][ T29] audit: type=1400 audit(1736014377.290:32579): avc: denied { node_bind } for pid=14618 comm="syz.2.2206" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 778.801208][T12909] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 778.820479][T14643] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 778.828432][T12909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.843625][T12909] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 778.853358][T12909] usb 1-1: config 1 has no interface number 1 [ 778.859545][T12909] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 778.872452][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.879666][T12909] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.910741][T12909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.929593][T12909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.937643][T12909] usb 1-1: Product: syz [ 778.980959][T12909] usb 1-1: Manufacturer: syz [ 778.989670][T12909] usb 1-1: SerialNumber: syz [ 779.220294][T14636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.251640][T14636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.343220][T12909] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 779.353247][T12909] usb 1-1: MIDIStreaming interface descriptor not found [ 779.909551][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.138803][T14656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14656 comm=syz.5.2219 [ 780.356452][T14664] FAULT_INJECTION: forcing a failure. [ 780.356452][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 780.413674][T14664] CPU: 1 UID: 0 PID: 14664 Comm: syz.5.2224 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 780.424477][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 780.434543][T14664] Call Trace: [ 780.437822][T14664] [ 780.440759][T14664] dump_stack_lvl+0x16c/0x1f0 [ 780.445449][T14664] should_fail_ex+0x497/0x5b0 [ 780.450140][T14664] ? fs_reclaim_acquire+0xae/0x150 [ 780.455261][T14664] should_failslab+0xc2/0x120 [ 780.459947][T14664] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 780.465330][T14664] ? p9_tag_alloc+0x9c/0x870 [ 780.469934][T14664] p9_tag_alloc+0x9c/0x870 [ 780.472868][T12909] usb 1-1: USB disconnect, device number 92 [ 780.474348][T14664] ? __pfx_p9_tag_alloc+0x10/0x10 [ 780.474374][T14664] ? kasan_save_stack+0x42/0x60 [ 780.490085][T14664] ? kasan_save_stack+0x33/0x60 [ 780.494938][T14664] ? __kasan_record_aux_stack+0xba/0xd0 [ 780.500483][T14664] ? __call_rcu_common.constprop.0+0x99/0x7a0 [ 780.506542][T14664] ? kmem_cache_free+0x31d/0x4c0 [ 780.511474][T14664] ? p9_req_put+0x1c6/0x250 [ 780.515967][T14664] ? p9_client_walk+0x42d/0x530 [ 780.520804][T14664] ? v9fs_vfs_lookup+0x208/0x5c0 [ 780.525729][T14664] ? lookup_one_qstr_excl+0x11d/0x190 [ 780.531094][T14664] ? filename_create+0x1ed/0x530 [ 780.536018][T14664] ? do_mkdirat+0xab/0x3a0 [ 780.540428][T14664] p9_client_prepare_req+0x19f/0x4d0 [ 780.545732][T14664] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 780.551539][T14664] ? __pfx_mark_lock+0x10/0x10 [ 780.556312][T14664] p9_client_rpc+0x1c3/0xc10 [ 780.560904][T14664] ? __pfx_p9_client_rpc+0x10/0x10 [ 780.566014][T14664] ? mark_held_locks+0x9f/0xe0 [ 780.570764][T14664] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 780.576915][T14664] p9_client_clunk+0x93/0x170 [ 780.581594][T14664] p9_client_walk+0x48e/0x530 [ 780.586266][T14664] ? __pfx_p9_client_walk+0x10/0x10 [ 780.591460][T14664] ? v9fs_fid_lookup+0xe9/0xec0 [ 780.596317][T14664] v9fs_vfs_lookup+0x208/0x5c0 [ 780.601072][T14664] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 780.606343][T14664] ? lock_acquire+0x2f/0xb0 [ 780.610838][T14664] ? do_raw_spin_unlock+0x172/0x230 [ 780.616031][T14664] ? _raw_spin_unlock+0x28/0x50 [ 780.620876][T14664] lookup_one_qstr_excl+0x11d/0x190 [ 780.626068][T14664] ? mnt_want_write+0x161/0x450 [ 780.630916][T14664] filename_create+0x1ed/0x530 [ 780.635665][T14664] ? __pfx_filename_create+0x10/0x10 [ 780.640936][T14664] ? lock_acquire+0x2f/0xb0 [ 780.645422][T14664] ? __virt_addr_valid+0x1a4/0x590 [ 780.650524][T14664] ? __virt_addr_valid+0x5e/0x590 [ 780.655537][T14664] do_mkdirat+0xab/0x3a0 [ 780.659767][T14664] ? __pfx_do_mkdirat+0x10/0x10 [ 780.664602][T14664] ? getname_flags.part.0+0x1c5/0x550 [ 780.669964][T14664] __x64_sys_mkdir+0xef/0x140 [ 780.674625][T14664] do_syscall_64+0xcd/0x250 [ 780.679116][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.684996][T14664] RIP: 0033:0x7fdddc585d29 [ 780.689396][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.708985][T14664] RSP: 002b:00007fdddd2d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 780.717382][T14664] RAX: ffffffffffffffda RBX: 00007fdddc775fa0 RCX: 00007fdddc585d29 [ 780.725339][T14664] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 00000000200002c0 [ 780.733291][T14664] RBP: 00007fdddd2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 780.741242][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.749194][T14664] R13: 0000000000000000 R14: 00007fdddc775fa0 R15: 00007fff81468748 [ 780.757158][T14664] [ 780.760257][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.949652][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 780.989630][T14673] FAULT_INJECTION: forcing a failure. [ 780.989630][T14673] name failslab, interval 1, probability 0, space 0, times 0 [ 781.002462][T14673] CPU: 0 UID: 0 PID: 14673 Comm: syz.3.2226 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 781.013234][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 781.023294][T14673] Call Trace: [ 781.026572][T14673] [ 781.029501][T14673] dump_stack_lvl+0x16c/0x1f0 [ 781.034190][T14673] should_fail_ex+0x497/0x5b0 [ 781.038882][T14673] should_failslab+0xc2/0x120 [ 781.043571][T14673] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 781.049909][T14673] ? sidtab_sid2str_get+0x17a/0x680 [ 781.055127][T14673] kmemdup_noprof+0x29/0x60 [ 781.059642][T14673] sidtab_sid2str_get+0x17a/0x680 [ 781.064679][T14673] sidtab_entry_to_string+0x33/0x110 [ 781.069976][T14673] security_sid_to_context_core+0x35c/0x640 [ 781.075859][T14673] avc_audit_post_callback+0x10b/0x8c0 [ 781.081308][T14673] ? audit_log_format+0xe9/0x130 [ 781.086232][T14673] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 781.092200][T14673] ? skb_put+0x138/0x1b0 [ 781.096429][T14673] ? audit_log_n_string+0x253/0x540 [ 781.101630][T14673] ? audit_log_n_untrustedstring+0xf2/0x100 [ 781.107528][T14673] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 781.113524][T14673] common_lsm_audit+0x33f/0x2250 [ 781.118463][T14673] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 781.124433][T14673] ? __pfx_common_lsm_audit+0x10/0x10 [ 781.129799][T14673] ? avc_denied+0x138/0x180 [ 781.134292][T14673] ? avc_denied+0x141/0x180 [ 781.138787][T14673] ? slow_avc_audit+0x17d/0x210 [ 781.143627][T14673] slow_avc_audit+0x17d/0x210 [ 781.148303][T14673] ? __pfx_slow_avc_audit+0x10/0x10 [ 781.153500][T14673] avc_has_perm+0x18d/0x1c0 [ 781.157997][T14673] ? __pfx_avc_has_perm+0x10/0x10 [ 781.163018][T14673] sock_has_perm+0x253/0x2f0 [ 781.167592][T14673] ? __pfx_sock_has_perm+0x10/0x10 [ 781.172693][T14673] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 781.179450][T14673] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 781.184902][T14673] security_socket_sendmsg+0x9b/0x240 [ 781.190260][T14673] ____sys_sendmsg+0x7ec/0xc90 [ 781.195012][T14673] ? copy_msghdr_from_user+0x10b/0x160 [ 781.200453][T14673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.205732][T14673] ___sys_sendmsg+0x135/0x1e0 [ 781.210394][T14673] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.215577][T14673] ? lockdep_hardirqs_on+0x7c/0x110 [ 781.220792][T14673] __sys_sendmsg+0x16e/0x220 [ 781.225363][T14673] ? __pfx___sys_sendmsg+0x10/0x10 [ 781.230551][T14673] ? rcu_read_unlock_trace_special+0x2aa/0x3f0 [ 781.236692][T14673] ? rcu_is_watching+0x12/0xc0 [ 781.241446][T14673] do_syscall_64+0xcd/0x250 [ 781.245942][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.251825][T14673] RIP: 0033:0x7f3841f85d29 [ 781.256226][T14673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.275823][T14673] RSP: 002b:00007f383fdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.284220][T14673] RAX: ffffffffffffffda RBX: 00007f3842176080 RCX: 00007f3841f85d29 [ 781.292176][T14673] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 781.300130][T14673] RBP: 00007f383fdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 781.308083][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.316038][T14673] R13: 0000000000000000 R14: 00007f3842176080 R15: 00007ffe85300728 [ 781.324002][T14673] [ 781.989530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.068708][T14688] delete_channel: no stack [ 782.309602][ T5858] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 782.389858][ T5861] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 782.481182][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 782.499895][ T5858] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 96, changing to 10 [ 782.519554][ T5858] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 782.546519][ T5858] usb 4-1: config 1 interface 0 has no altsetting 0 [ 782.567582][ T5858] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.40 [ 782.579142][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.595216][ T5858] usb 4-1: Product: Д [ 782.599637][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.612771][ T5861] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 782.621940][ T5858] usb 4-1: Manufacturer: â„à³“å†¾ë¥®éµ¡æ¿Žæ¡Œæ‡¥çœ®çµºîµšë»æ‡‚੣崞ȣ˔都ë‚ЕѤ쟭雲蹬è½ê¨½â¶„丙藳磪)늘袳Ⓚ壉ꬵé·ë»£ê£ƒëº²æ–࣌ë“ì¡ë¯•䪵࠿嘧̕쩷ç†ë‘µî¾ˆê¼ ì¿¼î‰‘曈혨쩲祄쾲蔉è‹âŠ±á›—ä—¼ä·¹í—›î—¥ç€¨è¨‡í—¶ãˆ˜á¾ê±ï­²ì†ºí„ ê¯®ïª–⮙뎭洳唨ᖞ㟾 [ 782.648822][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.655362][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.664254][ T5858] usb 4-1: SerialNumber: И [ 782.686642][ T5861] usb 5-1: config 0 descriptor?? [ 783.029529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.043453][T12909] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 783.248911][T12909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.293635][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 783.293672][ T29] audit: type=1400 audit(1736014382.250:32980): avc: denied { read write open } for pid=14689 comm="syz.4.2232" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.377453][ T29] audit: type=1400 audit(1736014382.290:32981): avc: denied { ioctl } for pid=14689 comm="syz.4.2232" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.386312][T12909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 783.402594][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.403083][ T29] audit: type=1400 audit(1736014382.290:32982): avc: denied { ioctl } for pid=14689 comm="syz.4.2232" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.443323][T12909] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 783.443352][T12909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.451886][T12909] usb 1-1: config 0 descriptor?? [ 783.452506][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 783.473800][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 783.481088][T12909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 783.484738][ T5861] usb 5-1: USB disconnect, device number 74 [ 783.488573][T12909] dvb-usb: bulk message failed: -22 (3/0) [ 783.536355][ T5858] usbhid 4-1:1.0: can't add hid device: -71 [ 783.539807][T14714] FAULT_INJECTION: forcing a failure. [ 783.539807][T14714] name failslab, interval 1, probability 0, space 0, times 0 [ 783.556089][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.2.2241 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 783.559808][ T5858] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 783.566844][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 783.566859][T14714] Call Trace: [ 783.566866][T14714] [ 783.566873][T14714] dump_stack_lvl+0x16c/0x1f0 [ 783.566902][T14714] should_fail_ex+0x497/0x5b0 [ 783.600107][T14714] should_failslab+0xc2/0x120 [ 783.604779][T14714] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 783.611096][T14714] ? sidtab_sid2str_get+0x17a/0x680 [ 783.616288][T14714] kmemdup_noprof+0x29/0x60 [ 783.620775][T14714] sidtab_sid2str_get+0x17a/0x680 [ 783.625789][T14714] sidtab_entry_to_string+0x33/0x110 [ 783.631065][T14714] security_sid_to_context_core+0x35c/0x640 [ 783.636950][T14714] avc_audit_post_callback+0x1ac/0x8c0 [ 783.642397][T14714] ? audit_log_format+0xe9/0x130 [ 783.647324][T14714] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 783.653290][T14714] ? skb_put+0x138/0x1b0 [ 783.657525][T14714] ? audit_log_n_string+0x253/0x540 [ 783.662710][T14714] ? audit_log_n_untrustedstring+0xf2/0x100 [ 783.668589][T14714] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 783.674558][T14714] common_lsm_audit+0x33f/0x2250 [ 783.679483][T14714] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 783.685450][T14714] ? __pfx_common_lsm_audit+0x10/0x10 [ 783.690811][T14714] ? avc_denied+0x138/0x180 [ 783.695301][T14714] ? avc_denied+0x141/0x180 [ 783.699796][T14714] ? slow_avc_audit+0x17d/0x210 [ 783.704633][T14714] slow_avc_audit+0x17d/0x210 [ 783.709303][T14714] ? __pfx_slow_avc_audit+0x10/0x10 [ 783.714490][T14714] ? __pfx_mark_lock+0x10/0x10 [ 783.719248][T14714] avc_has_perm+0x18d/0x1c0 [ 783.723740][T14714] ? __pfx_avc_has_perm+0x10/0x10 [ 783.728753][T14714] ? __pfx___lock_acquire+0x10/0x10 [ 783.733949][T14714] sock_has_perm+0x253/0x2f0 [ 783.738523][T14714] ? __pfx_sock_has_perm+0x10/0x10 [ 783.743618][T14714] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 783.750368][T14714] ? import_ubuf+0x1b6/0x220 [ 783.754957][T14714] security_socket_sendmsg+0x9b/0x240 [ 783.760313][T14714] ____sys_sendmsg+0x7ec/0xc90 [ 783.765064][T14714] ? copy_msghdr_from_user+0x10b/0x160 [ 783.770505][T14714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.775786][T14714] ___sys_sendmsg+0x135/0x1e0 [ 783.780449][T14714] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.785642][T14714] ? __pfx_lock_release+0x10/0x10 [ 783.790680][T14714] ? trace_lock_acquire+0x14e/0x1f0 [ 783.795878][T14714] ? __fget_files+0x206/0x3a0 [ 783.800548][T14714] __sys_sendmsg+0x16e/0x220 [ 783.805123][T14714] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.810235][T14714] do_syscall_64+0xcd/0x250 [ 783.814729][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.820614][T14714] RIP: 0033:0x7fe54dd85d29 [ 783.825016][T14714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.844612][T14714] RSP: 002b:00007fe54eb65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.853013][T14714] RAX: ffffffffffffffda RBX: 00007fe54df76080 RCX: 00007fe54dd85d29 [ 783.860971][T14714] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 783.868942][T14714] RBP: 00007fe54eb65090 R08: 0000000000000000 R09: 0000000000000000 [ 783.876897][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.884856][T14714] R13: 0000000000000000 R14: 00007fe54df76080 R15: 00007ffcadf3ef28 [ 783.892821][T14714] [ 783.905762][ T5858] usb 4-1: USB disconnect, device number 89 [ 784.069552][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.138462][ T29] audit: type=1400 audit(1736014382.310:32983): avc: denied { ioctl } for pid=14689 comm="syz.4.2232" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.162448][T14702] nftables ruleset with unbound set [ 784.171574][ T29] audit: type=1400 audit(1736014382.320:32984): avc: denied { ioctl } for pid=14689 comm="syz.4.2232" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.209913][ T29] audit: type=1400 audit(1736014382.430:32985): avc: denied { read } for pid=14712 comm="syz.2.2241" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 784.233871][ T29] audit: type=1400 audit(1736014382.430:32986): avc: denied { open } for pid=14712 comm="syz.2.2241" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 784.259533][ T29] audit: type=1400 audit(1736014382.430:32987): avc: denied { ioctl } for pid=14701 comm="syz.0.2237" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.290115][ T29] audit: type=1400 audit(1736014382.430:32988): avc: denied { ioctl } for pid=14701 comm="syz.0.2237" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.319509][ T29] audit: type=1400 audit(1736014382.490:32989): avc: denied { create } for pid=14712 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 784.350454][ T5861] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 784.350679][T12909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 784.370451][T12909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 784.378141][T12909] usb 1-1: media controller created [ 784.395838][T12909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 784.516520][T12909] dvb-usb: bulk message failed: -22 (6/0) [ 784.522396][T12909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 784.531147][T14702] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 784.537685][T14702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 784.560804][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 784.570525][T14702] vhci_hcd vhci_hcd.0: Device attached [ 784.577303][ T5861] usb 5-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 784.591921][ T5861] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 784.613125][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.685190][T12909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input69 [ 784.701718][T14720] vhci_hcd: connection closed [ 784.714731][T12909] dvb-usb: schedule remote query interval to 150 msecs. [ 784.727043][T12909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 784.737153][T12909] usb 1-1: USB disconnect, device number 93 [ 784.878521][ T5857] vhci_hcd: vhci_device speed not set [ 784.895313][ T5858] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 784.914079][T10032] vhci_hcd: stop threads [ 784.967111][T10032] vhci_hcd: release socket [ 784.981384][ T5857] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 784.988807][T10032] vhci_hcd: disconnect device [ 785.088885][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 785.109582][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.116548][ T5858] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 785.185477][ T5858] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.247382][T12909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 785.266155][ T5858] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 785.282869][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.291130][ T5861] usb 5-1: string descriptor 0 read error: -71 [ 785.298675][ T5861] usb 5-1: USB disconnect, device number 75 [ 785.310192][ T5858] usb 6-1: Product: syz [ 785.328795][ T5858] usb 6-1: Manufacturer: syz [ 785.358306][ T5858] usb 6-1: SerialNumber: syz [ 785.659873][ T5860] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 785.727768][ T5858] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 785.924836][ T5860] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 785.937492][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.950170][ T5860] usb 3-1: config 0 descriptor?? [ 785.959033][ T5860] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 785.967286][ T5860] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 786.149530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.228033][ T5860] usb 3-1: USB disconnect, device number 100 [ 787.189666][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.397717][T14766] FAULT_INJECTION: forcing a failure. [ 787.397717][T14766] name failslab, interval 1, probability 0, space 0, times 0 [ 787.410611][T14766] CPU: 0 UID: 0 PID: 14766 Comm: syz.3.2254 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 787.421384][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 787.431440][T14766] Call Trace: [ 787.434705][T14766] [ 787.437620][T14766] dump_stack_lvl+0x16c/0x1f0 [ 787.442292][T14766] should_fail_ex+0x497/0x5b0 [ 787.446957][T14766] ? fs_reclaim_acquire+0xae/0x150 [ 787.452056][T14766] should_failslab+0xc2/0x120 [ 787.456720][T14766] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 787.462514][T14766] ? __alloc_skb+0x2b1/0x380 [ 787.467095][T14766] __alloc_skb+0x2b1/0x380 [ 787.471505][T14766] ? __pfx___alloc_skb+0x10/0x10 [ 787.476433][T14766] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 787.482404][T14766] netlink_alloc_large_skb+0x69/0x130 [ 787.487765][T14766] netlink_sendmsg+0x689/0xd70 [ 787.492523][T14766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.497816][T14766] ____sys_sendmsg+0xaaf/0xc90 [ 787.502567][T14766] ? copy_msghdr_from_user+0x10b/0x160 [ 787.508010][T14766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.513290][T14766] ___sys_sendmsg+0x135/0x1e0 [ 787.517951][T14766] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.523145][T14766] ? __pfx_lock_release+0x10/0x10 [ 787.528165][T14766] ? trace_lock_acquire+0x14e/0x1f0 [ 787.533362][T14766] ? __fget_files+0x206/0x3a0 [ 787.538033][T14766] __sys_sendmsg+0x16e/0x220 [ 787.542608][T14766] ? __pfx___sys_sendmsg+0x10/0x10 [ 787.547716][T14766] do_syscall_64+0xcd/0x250 [ 787.552209][T14766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.558089][T14766] RIP: 0033:0x7f3841f85d29 [ 787.562487][T14766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.582079][T14766] RSP: 002b:00007f383fdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.590497][T14766] RAX: ffffffffffffffda RBX: 00007f3842176080 RCX: 00007f3841f85d29 [ 787.598451][T14766] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 787.606404][T14766] RBP: 00007f383fdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 787.614358][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.622313][T14766] R13: 0000000000000000 R14: 00007f3842176080 R15: 00007ffe85300728 [ 787.630294][T14766] [ 787.663254][T14768] No buffer was provided with the request [ 788.008074][ T9] usb 6-1: USB disconnect, device number 4 [ 788.017421][ T9] usblp0: removed [ 788.229546][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.321887][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 788.321931][ T29] audit: type=1400 audit(1736014387.280:33266): avc: denied { perfmon } for pid=14776 comm="syz.3.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 788.350993][ T5860] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 788.546493][ T29] audit: type=1400 audit(1736014387.310:33267): avc: denied { read } for pid=14778 comm="syz.2.2259" dev="nsfs" ino=4026533220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 788.549550][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 788.586022][ T29] audit: type=1400 audit(1736014387.310:33268): avc: denied { open } for pid=14778 comm="syz.2.2259" path="net:[4026533220]" dev="nsfs" ino=4026533220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 788.643255][ T5860] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 788.659554][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.677830][ T5860] usb 5-1: Product: syz [ 788.698069][ T5860] usb 5-1: Manufacturer: syz [ 788.712880][ T5860] usb 5-1: SerialNumber: syz [ 788.737328][ T29] audit: type=1400 audit(1736014387.310:33269): avc: denied { create } for pid=14778 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 788.752175][ T5860] usb 5-1: config 0 descriptor?? [ 788.783094][ T5860] usb 5-1: bad CDC descriptors [ 788.805945][ T29] audit: type=1400 audit(1736014387.330:33270): avc: denied { perfmon } for pid=14776 comm="syz.3.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 788.861543][ T29] audit: type=1400 audit(1736014387.330:33271): avc: denied { ioctl } for pid=14770 comm="syz.4.2257" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 788.919311][ T29] audit: type=1400 audit(1736014387.330:33272): avc: denied { perfmon } for pid=14776 comm="syz.3.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 788.933868][T14789] netlink: 'syz.5.2262': attribute type 1 has an invalid length. [ 788.968033][T14789] netlink: 'syz.5.2262': attribute type 3 has an invalid length. [ 788.983817][T14789] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2262'. [ 788.987369][ T29] audit: type=1400 audit(1736014387.340:33273): avc: denied { perfmon } for pid=14776 comm="syz.3.2258" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.078283][ T29] audit: type=1400 audit(1736014387.340:33274): avc: denied { bpf } for pid=14776 comm="syz.3.2258" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.269637][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.462608][ T5858] usb 5-1: USB disconnect, device number 76 [ 789.496150][ T29] audit: type=1400 audit(1736014387.360:33275): avc: denied { ioctl } for pid=14770 comm="syz.4.2257" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 789.710404][T14801] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 789.719413][T14801] overlayfs: missing 'lowerdir' [ 789.929938][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 790.086466][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 790.309536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.354383][ T5857] vhci_hcd: vhci_device speed not set [ 790.362158][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.374743][ T5860] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 790.384488][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.429758][ T5860] usb 6-1: config 0 descriptor?? [ 791.005208][ T5860] sunplus 0003:04FC:05D8.0032: unknown main item tag 0x0 [ 791.013375][ T5860] sunplus 0003:04FC:05D8.0032: unknown main item tag 0x0 [ 791.025646][ T5860] sunplus 0003:04FC:05D8.0032: unknown main item tag 0x0 [ 791.044306][ T5860] sunplus 0003:04FC:05D8.0032: unknown main item tag 0x0 [ 791.054704][ T5860] sunplus 0003:04FC:05D8.0032: unknown main item tag 0x0 [ 791.073913][ T5860] sunplus 0003:04FC:05D8.0032: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 791.169627][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 791.213212][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.236108][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.292019][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.307930][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.322438][T12909] usb 6-1: USB disconnect, device number 5 [ 791.330104][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 791.349524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.378666][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 791.398608][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.415668][ T9] usb 4-1: Product: syz [ 791.424062][ T9] usb 4-1: Manufacturer: syz [ 791.433803][ T9] usb 4-1: SerialNumber: syz [ 791.448240][ T9] usb 4-1: config 0 descriptor?? [ 792.121372][T14858] FAULT_INJECTION: forcing a failure. [ 792.121372][T14858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.134799][T14858] CPU: 0 UID: 0 PID: 14858 Comm: syz.5.2281 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 792.145561][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 792.155615][T14858] Call Trace: [ 792.158883][T14858] [ 792.161804][T14858] dump_stack_lvl+0x16c/0x1f0 [ 792.166474][T14858] should_fail_ex+0x497/0x5b0 [ 792.171156][T14858] _copy_from_iter+0x2a1/0x1560 [ 792.176003][T14858] ? trace_lock_acquire+0x14e/0x1f0 [ 792.181193][T14858] ? __alloc_skb+0x1fe/0x380 [ 792.185795][T14858] ? __pfx__copy_from_iter+0x10/0x10 [ 792.191072][T14858] ? __virt_addr_valid+0x1a4/0x590 [ 792.196192][T14858] ? __virt_addr_valid+0x5e/0x590 [ 792.201206][T14858] ? __phys_addr_symbol+0x30/0x80 [ 792.206217][T14858] ? __check_object_size+0x488/0x710 [ 792.211498][T14858] netlink_sendmsg+0x813/0xd70 [ 792.216258][T14858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.221539][T14858] ____sys_sendmsg+0xaaf/0xc90 [ 792.226297][T14858] ? copy_msghdr_from_user+0x10b/0x160 [ 792.231743][T14858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.237027][T14858] ___sys_sendmsg+0x135/0x1e0 [ 792.241691][T14858] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.246883][T14858] ? __pfx_lock_release+0x10/0x10 [ 792.251899][T14858] ? trace_lock_acquire+0x14e/0x1f0 [ 792.257097][T14858] ? __fget_files+0x206/0x3a0 [ 792.261765][T14858] __sys_sendmsg+0x16e/0x220 [ 792.266341][T14858] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.271445][T14858] do_syscall_64+0xcd/0x250 [ 792.275939][T14858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.281822][T14858] RIP: 0033:0x7fdddc585d29 [ 792.286221][T14858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.305812][T14858] RSP: 002b:00007fddda3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.314212][T14858] RAX: ffffffffffffffda RBX: 00007fdddc776080 RCX: 00007fdddc585d29 [ 792.322169][T14858] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 792.330126][T14858] RBP: 00007fddda3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 792.338081][T14858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.346037][T14858] R13: 0000000000000000 R14: 00007fdddc776080 R15: 00007fff81468748 [ 792.354006][T14858] [ 792.389576][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.672849][ T9] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 2178044916 serial 38E8D2F2.C1104ECC (2 channels) [ 792.709049][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 792.734506][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 792.830053][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 792.889357][T14867] tc_dump_action: action bad kind [ 792.941386][T14867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2283'. [ 793.392297][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 793.392313][ T29] audit: type=1400 audit(1736014392.350:33607): avc: denied { read } for pid=14873 comm="syz.2.2286" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 793.429532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.442688][ T29] audit: type=1400 audit(1736014392.390:33608): avc: denied { read open } for pid=14873 comm="syz.2.2286" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 793.573371][ T29] audit: type=1400 audit(1736014392.400:33609): avc: denied { read } for pid=14873 comm="syz.2.2286" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 793.839693][ T29] audit: type=1400 audit(1736014392.400:33610): avc: denied { read open } for pid=14873 comm="syz.2.2286" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 793.901065][T14874] lo speed is unknown, defaulting to 1000 [ 793.929158][ T29] audit: type=1400 audit(1736014392.400:33611): avc: denied { create } for pid=14879 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 793.984803][ T29] audit: type=1400 audit(1736014392.410:33612): avc: denied { write } for pid=14879 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 794.009721][ T29] audit: type=1400 audit(1736014392.410:33613): avc: denied { create } for pid=14879 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 794.109754][ T29] audit: type=1400 audit(1736014392.450:33614): avc: denied { create } for pid=14873 comm="syz.2.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 794.130265][ T29] audit: type=1400 audit(1736014392.780:33615): avc: denied { read write } for pid=13667 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.154731][ T29] audit: type=1400 audit(1736014392.780:33616): avc: denied { open } for pid=13667 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 794.469517][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.509560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.892277][ T5859] usb 4-1: USB disconnect, device number 90 [ 795.965781][T14912] ieee802154 phy1 wpan1: encryption failed: -22 [ 796.113506][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 796.549516][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.763399][T14920] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.108813][T14922] FAULT_INJECTION: forcing a failure. [ 797.108813][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 797.153027][T14922] CPU: 1 UID: 0 PID: 14922 Comm: syz.0.2293 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 797.163816][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 797.173846][T14922] Call Trace: [ 797.177115][T14922] [ 797.180048][T14922] dump_stack_lvl+0x16c/0x1f0 [ 797.184737][T14922] should_fail_ex+0x497/0x5b0 [ 797.189419][T14922] should_failslab+0xc2/0x120 [ 797.194077][T14922] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 797.199424][T14922] ? skb_clone+0x190/0x3f0 [ 797.203819][T14922] skb_clone+0x190/0x3f0 [ 797.208032][T14922] netlink_deliver_tap+0xabd/0xd30 [ 797.213123][T14922] netlink_unicast+0x5e1/0x7f0 [ 797.217863][T14922] ? __pfx_netlink_unicast+0x10/0x10 [ 797.223129][T14922] netlink_sendmsg+0x8b8/0xd70 [ 797.227871][T14922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.233147][T14922] ____sys_sendmsg+0xaaf/0xc90 [ 797.237898][T14922] ? copy_msghdr_from_user+0x10b/0x160 [ 797.243353][T14922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.248632][T14922] ___sys_sendmsg+0x135/0x1e0 [ 797.253298][T14922] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.258473][T14922] ? __pfx_lock_release+0x10/0x10 [ 797.263477][T14922] ? trace_lock_acquire+0x14e/0x1f0 [ 797.268655][T14922] ? __fget_files+0x206/0x3a0 [ 797.273308][T14922] __sys_sendmsg+0x16e/0x220 [ 797.277872][T14922] ? __pfx___sys_sendmsg+0x10/0x10 [ 797.282963][T14922] do_syscall_64+0xcd/0x250 [ 797.287444][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.293324][T14922] RIP: 0033:0x7f08d9b85d29 [ 797.297734][T14922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.317327][T14922] RSP: 002b:00007f08da998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.325711][T14922] RAX: ffffffffffffffda RBX: 00007f08d9d76080 RCX: 00007f08d9b85d29 [ 797.333663][T14922] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 797.341619][T14922] RBP: 00007f08da998090 R08: 0000000000000000 R09: 0000000000000000 [ 797.349580][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.357547][T14922] R13: 0000000000000000 R14: 00007f08d9d76080 R15: 00007ffc3f7a1b08 [ 797.365501][T14922] [ 797.589521][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.239623][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 798.339280][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 798.348346][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2305'. [ 798.629550][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.851057][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 798.851072][ T29] audit: type=1400 audit(1736014397.440:33774): avc: denied { create } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 798.879004][ T29] audit: type=1400 audit(1736014397.460:33775): avc: denied { create } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 798.899367][ T29] audit: type=1400 audit(1736014397.480:33776): avc: denied { bind } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 798.922557][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 799.083526][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.115606][ T29] audit: type=1400 audit(1736014397.500:33777): avc: denied { ioctl } for pid=14941 comm="syz.2.2303" path="socket:[52604]" dev="sockfs" ino=52604 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 799.456519][ T29] audit: type=1400 audit(1736014397.520:33778): avc: denied { create } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.509541][ T29] audit: type=1400 audit(1736014397.530:33779): avc: denied { write } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.539879][ T29] audit: type=1400 audit(1736014397.540:33780): avc: denied { read } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.610377][ T9] usb 6-1: config 0 descriptor?? [ 799.669516][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.875819][ T29] audit: type=1400 audit(1736014397.560:33781): avc: denied { prog_load } for pid=14941 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.979284][ T29] audit: type=1400 audit(1736014397.560:33782): avc: denied { bpf } for pid=14941 comm="syz.2.2303" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 800.063086][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 800.075574][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 800.087007][ T53] Bluetooth: hci0: hardware error 0x00 [ 800.143040][T14962] x_tables: ip_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 800.200916][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 800.216437][ T29] audit: type=1400 audit(1736014397.560:33783): avc: denied { perfmon } for pid=14941 comm="syz.2.2303" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 800.238907][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 800.299318][T14969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2307'. [ 800.709521][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.218858][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 801.749516][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.787585][T14997] fuse: Bad value for 'fd' [ 802.209048][T14997] netlink: 140504 bytes leftover after parsing attributes in process `syz.0.2317'. [ 802.229016][T14997] netlink: zone id is out of range [ 802.256593][T14997] netlink: zone id is out of range [ 802.267152][T14997] netlink: zone id is out of range [ 802.279610][T14997] netlink: zone id is out of range [ 802.284876][T14997] netlink: zone id is out of range [ 802.295877][T14997] netlink: zone id is out of range [ 802.301108][T14997] netlink: zone id is out of range [ 802.307248][T14997] netlink: zone id is out of range [ 802.310086][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 802.355799][T15002] 9pnet_fd: Insufficient options for proto=fd [ 802.490862][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 802.510540][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 802.548063][T15012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15012 comm=syz.3.2320 [ 802.699773][ T5859] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 802.799577][T12909] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 802.816297][ T9] usb 6-1: Cannot set autoneg [ 802.821314][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 802.883384][ T5859] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 802.897622][ T9] usb 6-1: USB disconnect, device number 6 [ 802.942082][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.959738][ T5859] usb 5-1: Product: syz [ 802.964128][ T5859] usb 5-1: Manufacturer: syz [ 802.973952][ T5859] usb 5-1: SerialNumber: syz [ 802.995641][ T5859] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 803.006261][T12909] usb 1-1: Using ep0 maxpacket: 16 [ 803.014954][T12909] usb 1-1: config 16 has an invalid interface number: 179 but max is 1 [ 803.024169][T12909] usb 1-1: config 16 has an invalid interface number: 79 but max is 1 [ 803.035315][T12909] usb 1-1: config 16 has no interface number 0 [ 803.041706][T12909] usb 1-1: config 16 has no interface number 1 [ 803.048205][T12917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 803.063572][T12909] usb 1-1: config 16 interface 179 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 803.076041][T12909] usb 1-1: config 16 interface 179 has no altsetting 0 [ 803.083744][T12909] usb 1-1: config 16 interface 79 has no altsetting 0 [ 803.092818][T12909] usb 1-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=65.7c [ 803.155215][T12909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.178320][T12909] usb 1-1: Product: syz [ 803.214309][T12909] usb 1-1: Manufacturer: syz [ 803.219004][T12909] usb 1-1: SerialNumber: syz [ 803.335885][ T5860] usb 5-1: USB disconnect, device number 77 [ 803.886130][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 803.981556][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 803.987901][ T29] audit: type=1400 audit(1736014402.940:34142): avc: denied { ioctl } for pid=15015 comm="syz.5.2324" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.072407][T12917] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 804.080441][ T29] audit: type=1400 audit(1736014403.040:34143): avc: denied { ioctl } for pid=15015 comm="syz.5.2324" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.080472][T12917] ath9k_htc: Failed to initialize the device [ 804.113977][ T5860] usb 5-1: ath9k_htc: USB layer deinitialized [ 804.159653][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 804.172584][ T29] audit: type=1400 audit(1736014403.130:34144): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.199973][ T29] audit: type=1400 audit(1736014403.130:34145): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.264988][ T29] audit: type=1400 audit(1736014403.130:34146): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 804.310948][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.322380][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 804.338411][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.357587][ T9] usb 6-1: config 0 descriptor?? [ 804.362756][ T29] audit: type=1400 audit(1736014403.160:34147): avc: denied { sys_module } for pid=15026 comm="syz.2.2328" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 804.394576][ T29] audit: type=1400 audit(1736014403.160:34148): avc: denied { module_request } for pid=15026 comm="syz.2.2328" kmod="wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 804.445094][ T29] audit: type=1400 audit(1736014403.160:34149): avc: denied { ioctl } for pid=15015 comm="syz.5.2324" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.480200][ T5857] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 804.481385][ T29] audit: type=1400 audit(1736014403.160:34150): avc: denied { read write } for pid=15037 comm="syz.3.2329" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.535153][ T29] audit: type=1400 audit(1736014403.160:34151): avc: denied { open } for pid=15037 comm="syz.3.2329" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.543231][T15044] trusted_key: encrypted_key: insufficient parameters specified [ 804.627245][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 804.659539][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 804.666997][ T5857] usb 4-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 804.676628][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.690519][ T5857] usb 4-1: config 0 descriptor?? [ 804.698586][ T5857] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 804.709182][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 804.852908][ T5857] usb 6-1: USB disconnect, device number 7 [ 805.391685][ T9] usb 4-1: USB disconnect, device number 91 [ 805.553274][T12909] usb 1-1: unknown number of interfaces: 2 [ 805.577791][T12909] usb 1-1: USB disconnect, device number 94 [ 805.909517][ C0] net_ratelimit: 121 callbacks suppressed [ 805.909535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.539562][T12909] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 806.551271][ T5857] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 806.709509][T12909] usb 1-1: Using ep0 maxpacket: 16 [ 806.742510][T12909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 806.743993][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 806.751738][T12909] usb 1-1: can't read configurations, error -61 [ 806.783443][ T5857] usb 6-1: unable to get BOS descriptor or descriptor too short [ 806.796927][ T5857] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 806.807307][ T5857] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 806.822375][ T5857] usb 6-1: config 1 interface 0 has no altsetting 1 [ 806.830683][ T5857] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 806.842709][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.850884][ T5857] usb 6-1: Product: syz [ 806.855299][ T5857] usb 6-1: Manufacturer: syz [ 806.860018][ T5857] usb 6-1: SerialNumber: syz [ 806.868977][T15087] trusted_key: encrypted_key: insufficient parameters specified [ 806.910387][ T5857] smsusb:smsusb_probe: board id=8, interface number 0 [ 806.943969][T12909] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 806.951617][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.095232][T15094] syz.4.2348: attempt to access beyond end of device [ 807.095232][T15094] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 807.108547][T15094] MINIX-fs: unable to read superblock [ 807.117458][T15094] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2348'. [ 807.126539][T15094] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2348'. [ 807.135777][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 807.172639][T12909] usb 1-1: Using ep0 maxpacket: 16 [ 807.192751][ T5857] smsusb:smsusb_probe: Device initialized with return code -19 [ 807.195986][T12909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 807.313059][T12909] usb 1-1: can't read configurations, error -61 [ 807.336493][T12909] usb usb1-port1: attempt power cycle [ 807.495122][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 807.518442][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.536751][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.577397][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.598472][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.608199][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.635693][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.655963][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.672183][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.685756][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.695886][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.717837][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.728805][T12909] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 807.738756][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.746619][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.762920][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.774793][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.782139][T12909] usb 1-1: Using ep0 maxpacket: 16 [ 807.790747][T12909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 807.799031][T12909] usb 1-1: can't read configurations, error -61 [ 807.799122][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.912716][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.926806][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.966148][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 807.976699][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 807.987906][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 807.994591][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.002020][T12909] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 808.011035][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 808.020183][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 808.031165][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 808.038279][T12909] usb 1-1: Using ep0 maxpacket: 16 [ 808.046787][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 808.056028][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 808.064596][ T9] usb 4-1: Product: syz [ 808.068808][ T9] usb 4-1: Manufacturer: syz [ 808.073550][ T9] usb 4-1: SerialNumber: syz [ 808.078985][T12909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 808.086969][T12909] usb 1-1: can't read configurations, error -61 [ 808.132580][ T9] usb 4-1: config 0 descriptor?? [ 808.199429][T12909] usb usb1-port1: unable to enumerate USB device [ 808.343631][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.507429][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 808.517479][ T9] usb 4-1: USB disconnect, device number 92 [ 808.526665][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 808.707353][T15086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.999506][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 808.999524][ T29] audit: type=1400 audit(1736014407.950:34539): avc: denied { bpf } for pid=15110 comm="syz.4.2353" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.029522][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 809.082493][T15116] overlay: ./file0 is not a directory [ 809.098357][ T9] usb 6-1: USB disconnect, device number 8 [ 809.188531][ T29] audit: type=1400 audit(1736014407.950:34540): avc: denied { prog_run } for pid=15110 comm="syz.4.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 809.209626][ T29] audit: type=1400 audit(1736014408.030:34541): avc: denied { prog_load } for pid=15114 comm="syz.2.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 809.228808][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.235406][ T29] audit: type=1400 audit(1736014408.030:34542): avc: denied { bpf } for pid=15114 comm="syz.2.2355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.256279][ T29] audit: type=1400 audit(1736014408.030:34543): avc: denied { perfmon } for pid=15114 comm="syz.2.2355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.277298][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.283868][ T29] audit: type=1400 audit(1736014408.030:34544): avc: denied { perfmon } for pid=15114 comm="syz.2.2355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.305176][ T29] audit: type=1400 audit(1736014408.030:34545): avc: denied { perfmon } for pid=15114 comm="syz.2.2355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.326484][ T29] audit: type=1400 audit(1736014408.030:34546): avc: denied { perfmon } for pid=15114 comm="syz.2.2355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.347467][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.355725][ T29] audit: type=1400 audit(1736014408.030:34547): avc: denied { perfmon } for pid=15114 comm="syz.2.2355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.377264][ T29] audit: type=1400 audit(1736014408.030:34548): avc: denied { bpf } for pid=15114 comm="syz.2.2355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 809.693935][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 809.763332][T15126] trusted_key: encrypted_key: insufficient parameters specified [ 810.069519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.109512][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.990354][T15160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.149531][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.432351][ T5857] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 812.631201][ T5857] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.660612][ T5857] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 812.673756][T15163] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 812.682795][T15163] overlayfs: missing 'lowerdir' [ 812.937726][ T5857] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.997714][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.169862][T15170] vivid-007: ================= START STATUS ================= [ 813.179345][T15170] vivid-007: Generate PTS: true [ 813.184887][T15170] vivid-007: Generate SCR: true [ 813.189522][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.189946][T15170] tpg source WxH: 640x360 (Y'CbCr) [ 813.202170][T15170] tpg field: 1 [ 813.205611][T15170] tpg crop: 640x360@0x0 [ 813.210142][T15170] tpg compose: 640x360@0x0 [ 813.215014][T15170] tpg colorspace: 8 [ 813.227164][T15170] tpg transfer function: 0/0 [ 813.244707][T15170] tpg Y'CbCr encoding: 0/0 [ 813.249269][T15170] tpg quantization: 0/0 [ 813.260380][T15170] tpg RGB range: 0/2 [ 813.264357][T15170] vivid-007: ================== END STATUS ================== [ 813.302611][T15151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.339902][ T5857] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 813.384339][T15173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2369'. [ 813.490869][T15179] netlink: 'syz.5.2372': attribute type 29 has an invalid length. [ 813.503014][T15179] netlink: 'syz.5.2372': attribute type 29 has an invalid length. [ 813.570375][ T9] usb 5-1: USB disconnect, device number 78 [ 813.689862][ T5860] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 813.912101][ T5860] usb 3-1: Invalid ep0 maxpacket: 64 [ 814.044616][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 814.044633][ T29] audit: type=1400 audit(1736014413.000:34782): avc: denied { read write } for pid=15184 comm="syz.5.2373" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 814.084332][ T5860] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 814.104522][ T29] audit: type=1400 audit(1736014413.000:34783): avc: denied { open } for pid=15184 comm="syz.5.2373" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 814.128627][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.191812][ T29] audit: type=1400 audit(1736014413.040:34784): avc: denied { ioctl } for pid=15184 comm="syz.5.2373" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 814.229527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.249625][ T29] audit: type=1400 audit(1736014413.040:34785): avc: denied { create } for pid=15184 comm="syz.5.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 814.279620][ T5860] usb 3-1: Invalid ep0 maxpacket: 64 [ 814.286429][ T5860] usb usb3-port1: attempt power cycle [ 814.318442][ T29] audit: type=1400 audit(1736014413.040:34786): avc: denied { ioctl } for pid=15184 comm="syz.5.2373" path="socket:[53944]" dev="sockfs" ino=53944 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 814.343536][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.651745][ T29] audit: type=1400 audit(1736014413.050:34787): avc: denied { write } for pid=15184 comm="syz.5.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 814.715224][ T29] audit: type=1400 audit(1736014413.050:34788): avc: denied { ioctl } for pid=15184 comm="syz.5.2373" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 814.756547][ T29] audit: type=1400 audit(1736014413.050:34789): avc: denied { ioctl } for pid=15184 comm="syz.5.2373" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 814.870043][ T29] audit: type=1400 audit(1736014413.050:34790): avc: denied { ioctl } for pid=15168 comm="syz.2.2367" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 815.047714][ T5860] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 815.170340][ T5860] usb 3-1: Invalid ep0 maxpacket: 64 [ 815.269543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.271244][ T29] audit: type=1400 audit(1736014413.100:34791): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 815.373194][ T5860] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 815.400934][ T5860] usb 3-1: Invalid ep0 maxpacket: 64 [ 815.407023][ T5860] usb usb3-port1: unable to enumerate USB device [ 815.603129][ T5857] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 815.779566][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 815.793718][ T5857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.824306][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 815.851480][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 815.892908][ T5857] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.939586][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 816.064217][ T5857] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 816.099671][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 816.108109][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 816.120032][ T9] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 816.134480][ T9] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 816.143863][ T9] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 816.148710][ T5857] usb 6-1: Product: syz [ 816.181408][ T9] usb 1-1: config 250 has no interface number 0 [ 816.189092][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 816.264842][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 816.305822][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.316178][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.373868][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 816.416305][ T9] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 816.460067][ T5857] usb 6-1: GET_CAPABILITIES returned 0 [ 816.465592][ T5857] usbtmc 6-1:16.0: can't read capabilities [ 816.478703][ T9] usb 1-1: config 250 interface 228 has no altsetting 0 [ 816.518778][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 816.559668][ T9] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 816.567957][ T9] usb 1-1: Product: syz [ 816.601112][ T9] usb 1-1: SerialNumber: syz [ 816.635956][ T9] hub 1-1:250.228: bad descriptor, ignoring hub [ 816.646341][ T9] hub 1-1:250.228: probe with driver hub failed with error -5 [ 816.694850][ T5857] usb 6-1: USB disconnect, device number 9 [ 817.302146][T15241] fuse: Bad value for 'user_id' [ 817.307113][T15241] fuse: Bad value for 'user_id' [ 817.349527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.379634][T12917] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 817.529536][T12917] usb 3-1: Using ep0 maxpacket: 16 [ 817.536414][T12917] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 817.544622][T12917] usb 3-1: config 3 has no interface number 0 [ 817.551016][T12917] usb 3-1: config 3 interface 71 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 817.569599][T12917] usb 3-1: config 3 interface 71 has no altsetting 0 [ 817.581213][T12917] usb 3-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice=df.4d [ 817.590511][T12917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.598526][T12917] usb 3-1: Product: syz [ 817.602917][T12917] usb 3-1: Manufacturer: syz [ 817.607555][T12917] usb 3-1: SerialNumber: syz [ 817.848558][ T5860] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 817.856628][ T5857] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 818.021033][ T5857] usb 6-1: device descriptor read/64, error -71 [ 818.039692][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 818.059000][ T5860] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 818.070182][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.109234][ T5860] usb 5-1: Product: syz [ 818.129058][ T5860] usb 5-1: Manufacturer: syz [ 818.139708][ T5860] usb 5-1: SerialNumber: syz [ 818.181048][ T5860] usb 5-1: config 0 descriptor?? [ 818.219261][ T5860] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 818.290038][ T5857] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 818.389513][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.402491][T12917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.416076][ T9] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 99 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 818.429682][ T5857] usb 6-1: device descriptor read/64, error -71 [ 818.447685][T12917] snd-usb-audio 3-1:3.71: probe with driver snd-usb-audio failed with error -2 [ 818.460394][ T9] usb 1-1: USB disconnect, device number 99 [ 818.469847][T12917] usb 3-1: USB disconnect, device number 105 [ 818.489784][ T9] usblp0: removed [ 818.561041][ T5857] usb usb6-port1: attempt power cycle [ 818.765101][T15271] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.2396'. [ 818.779518][T15271] openvswitch: netlink: Flow key attr not present in new flow. [ 818.895192][T12917] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 818.929935][ T5857] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 818.964596][ T5857] usb 6-1: device descriptor read/8, error -71 [ 819.053208][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 819.053223][ T29] audit: type=1400 audit(1736014418.010:35138): avc: denied { read } for pid=15268 comm="syz.3.2395" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.070172][T12917] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 819.087883][ T29] audit: type=1400 audit(1736014418.010:35139): avc: denied { read open } for pid=15268 comm="syz.3.2395" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.100565][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.121989][ T29] audit: type=1400 audit(1736014418.030:35140): avc: denied { ioctl } for pid=15258 comm="syz.2.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.129524][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.164001][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.173893][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.182992][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 819.194149][ T29] audit: type=1400 audit(1736014418.150:35141): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 819.196242][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.214883][ T29] audit: type=1400 audit(1736014418.150:35142): avc: denied { ioctl } for pid=15278 comm="syz.0.2398" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.230891][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.258436][ T5857] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 819.262742][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.276226][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.287246][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.295369][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.307985][ T29] audit: type=1400 audit(1736014418.210:35143): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.312576][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.343345][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.350586][ T5857] usb 6-1: device descriptor read/8, error -71 [ 819.351171][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.366212][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.377829][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 819.383235][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.387077][ T29] audit: type=1400 audit(1736014418.210:35144): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.391122][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.423403][ T29] audit: type=1400 audit(1736014418.210:35145): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 819.429522][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.450123][ T29] audit: type=1400 audit(1736014418.220:35146): avc: denied { ioctl } for pid=15258 comm="syz.2.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.464244][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 819.481394][ T29] audit: type=1400 audit(1736014418.240:35147): avc: denied { ioctl } for pid=15258 comm="syz.2.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 819.488919][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.523922][ T5857] usb usb6-port1: unable to enumerate USB device [ 819.533391][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.542890][T15283] netlink: 'syz.3.2400': attribute type 7 has an invalid length. [ 819.545735][ T9] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 819.550925][T15283] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2400'. [ 819.558821][ T9] usb 1-1: config 9 has no interface number 0 [ 819.574285][ T9] usb 1-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 819.584788][ T9] usb 1-1: config 9 interface 5 has no altsetting 0 [ 819.591720][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.600694][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.608938][T15283] bond1: entered promiscuous mode [ 819.611600][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.612569][T12917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.621410][T15283] bond1: entered allmulticast mode [ 819.623734][T12917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.633429][T15283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.655461][T12917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.657089][T12917] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 819.671997][T12917] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 819.681685][T12917] usb 3-1: Product: syz [ 819.685855][T12917] usb 3-1: Manufacturer: syz [ 819.690581][T12917] usb 3-1: SerialNumber: syz [ 819.695920][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 819.705594][T12917] usb 3-1: config 0 descriptor?? [ 819.710779][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.719628][ T9] usb 1-1: Product: syz [ 819.723972][ T9] usb 1-1: Manufacturer: syz [ 819.730077][ T9] usb 1-1: SerialNumber: syz [ 819.745280][T12917] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 819.786946][ T5860] gspca_sonixj: reg_r err -32 [ 819.822672][T15283] bond1 (unregistering): Released all slaves [ 819.840146][ T5860] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 819.951230][T12917] usb 5-1: USB disconnect, device number 79 [ 820.001639][ T5860] usb 3-1: USB disconnect, device number 106 [ 820.018030][ T5860] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 820.220695][T15262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.310682][ T9] usb 1-1: USB disconnect, device number 100 [ 820.469601][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.550682][T15297] fuse: Bad value for 'fd' [ 820.716253][T15306] netlink: 1040 bytes leftover after parsing attributes in process `syz.5.2407'. [ 820.728246][T15306] openvswitch: netlink: Flow key attr not present in new flow. [ 820.952532][T15312] openvswitch: netlink: IP tunnel dst address not specified [ 821.369093][T15311] dns_resolver: Unsupported server list version (0) [ 821.509573][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.030611][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 822.259779][ T5860] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 822.322518][ T9] usb 3-1: device descriptor read/64, error -71 [ 822.443337][ T5860] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 822.458358][T15334] trusted_key: encrypted_key: insufficient parameters specified [ 822.466062][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.549628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.549842][ T5860] usb 5-1: config 0 descriptor?? [ 822.573705][T15335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15335 comm=syz.5.2416 [ 822.709592][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 822.873779][ T9] usb 3-1: device descriptor read/64, error -71 [ 822.979547][ T5857] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 822.989842][ T9] usb usb3-port1: attempt power cycle [ 823.069296][ T5860] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 823.089471][ T5860] [drm] Initialized udl on minor 2 [ 823.109568][ T5857] usb 6-1: device descriptor read/64, error -71 [ 823.132314][T15347] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.2419'. [ 823.142173][T15347] openvswitch: netlink: Flow key attr not present in new flow. [ 823.349564][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 823.371711][ T9] usb 3-1: device descriptor read/8, error -71 [ 823.478720][ T5860] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 823.486037][ T5860] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 823.519957][ T5858] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 823.520111][T12917] usb 5-1: USB disconnect, device number 80 [ 823.529194][ T5858] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 823.541843][ T5858] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 823.589572][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.611670][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 823.629782][ T5857] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 823.639921][ T9] usb 3-1: device descriptor read/8, error -71 [ 823.769653][ T5857] usb 6-1: device descriptor read/64, error -71 [ 823.773910][ T9] usb usb3-port1: unable to enumerate USB device [ 823.895843][ T5857] usb usb6-port1: attempt power cycle [ 824.065055][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 824.065071][ T29] audit: type=1400 audit(1736014423.020:35434): avc: denied { read } for pid=15353 comm="syz.0.2422" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 824.099569][ T29] audit: type=1400 audit(1736014423.050:35435): avc: denied { read open } for pid=15353 comm="syz.0.2422" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 824.133042][ T29] audit: type=1400 audit(1736014423.080:35436): avc: denied { read write } for pid=15356 comm="syz.3.2423" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 824.205574][ T29] audit: type=1400 audit(1736014423.080:35437): avc: denied { open } for pid=15356 comm="syz.3.2423" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 824.250231][ T29] audit: type=1400 audit(1736014423.080:35438): avc: denied { ioctl } for pid=15356 comm="syz.3.2423" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 824.278854][ T29] audit: type=1400 audit(1736014423.090:35439): avc: denied { prog_load } for pid=15356 comm="syz.3.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 824.317792][ T29] audit: type=1400 audit(1736014423.090:35440): avc: denied { bpf } for pid=15356 comm="syz.3.2423" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.338949][ T5857] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 824.349264][ T29] audit: type=1400 audit(1736014423.090:35441): avc: denied { perfmon } for pid=15356 comm="syz.3.2423" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.370956][ T29] audit: type=1400 audit(1736014423.090:35442): avc: denied { bpf } for pid=15356 comm="syz.3.2423" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.392389][ T29] audit: type=1400 audit(1736014423.090:35443): avc: denied { read } for pid=15356 comm="syz.3.2423" dev="nsfs" ino=4026533026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 824.422708][ T5857] usb 6-1: device descriptor read/8, error -71 [ 824.629537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.636357][T15368] overlayfs: failed to resolve './bus': -2 [ 824.730731][ T5857] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 824.747245][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 824.784838][ T5857] usb 6-1: device descriptor read/8, error -71 [ 824.915630][ T5857] usb usb6-port1: unable to enumerate USB device [ 824.918316][T15374] trusted_key: encrypted_key: insufficient parameters specified [ 825.049648][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 825.059289][ T9] usb 5-1: config 1 has no interface number 1 [ 825.067879][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 825.153508][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.200560][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.209577][ T9] usb 5-1: Product: syz [ 825.213747][ T9] usb 5-1: Manufacturer: syz [ 825.218332][ T9] usb 5-1: SerialNumber: syz [ 825.564371][ T9] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 825.585677][ T9] usb 5-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 825.599602][ T9] usb 5-1: failed to enable PITCH for EP 0x82 [ 825.666138][ T9] usb 5-1: USB disconnect, device number 81 [ 825.672114][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.838658][T15394] FAULT_INJECTION: forcing a failure. [ 825.838658][T15394] name failslab, interval 1, probability 0, space 0, times 0 [ 825.859622][T12917] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 825.896966][T15394] CPU: 0 UID: 0 PID: 15394 Comm: syz.5.2432 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 825.907764][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 825.917829][T15394] Call Trace: [ 825.921111][T15394] [ 825.924043][T15394] dump_stack_lvl+0x16c/0x1f0 [ 825.928730][T15394] should_fail_ex+0x497/0x5b0 [ 825.933423][T15394] ? fs_reclaim_acquire+0xae/0x150 [ 825.938545][T15394] should_failslab+0xc2/0x120 [ 825.943228][T15394] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 825.949047][T15394] ? __alloc_skb+0x2b1/0x380 [ 825.953653][T15394] __alloc_skb+0x2b1/0x380 [ 825.958080][T15394] ? __pfx___alloc_skb+0x10/0x10 [ 825.963036][T15394] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 825.969377][T15394] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 825.976074][T15394] netlink_alloc_large_skb+0x69/0x130 [ 825.981463][T15394] netlink_sendmsg+0x689/0xd70 [ 825.986254][T15394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.991569][T15394] ____sys_sendmsg+0xaaf/0xc90 [ 825.996344][T15394] ? copy_msghdr_from_user+0x10b/0x160 [ 826.001807][T15394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.007129][T15394] ___sys_sendmsg+0x135/0x1e0 [ 826.011808][T15394] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.017021][T15394] ? __pfx_lock_release+0x10/0x10 [ 826.022048][T15394] ? trace_lock_acquire+0x14e/0x1f0 [ 826.027273][T15394] ? __fget_files+0x206/0x3a0 [ 826.031964][T15394] __sys_sendmsg+0x16e/0x220 [ 826.036558][T15394] ? __pfx___sys_sendmsg+0x10/0x10 [ 826.041695][T15394] do_syscall_64+0xcd/0x250 [ 826.046216][T15394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.052119][T15394] RIP: 0033:0x7fdddc585d29 [ 826.056533][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.076149][T15394] RSP: 002b:00007fdddd2d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.084572][T15394] RAX: ffffffffffffffda RBX: 00007fdddc775fa0 RCX: 00007fdddc585d29 [ 826.092547][T15394] RDX: 0000000020000880 RSI: 0000000020000280 RDI: 0000000000000003 [ 826.100521][T15394] RBP: 00007fdddd2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 826.108492][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.116465][T15394] R13: 0000000000000000 R14: 00007fdddc775fa0 R15: 00007fff81468748 [ 826.124456][T15394] [ 826.217507][T12917] usb 4-1: config 129 has an invalid interface number: 249 but max is 0 [ 826.255080][T12917] usb 4-1: config 129 has no interface number 0 [ 826.275420][T12917] usb 4-1: config 129 interface 249 has no altsetting 0 [ 826.305838][T12917] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21 [ 826.386088][T12917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.719486][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.659784][T12917] usb 4-1: string descriptor 0 read error: -71 [ 827.689369][T12917] redrat3 4-1:129.249: Couldn't find all endpoints [ 827.728904][T12917] usb 4-1: USB disconnect, device number 93 [ 827.749516][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.601050][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 828.749585][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 828.758513][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.770618][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.789667][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.812002][T15420] overlay: ./file1 is not a directory [ 828.823691][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 828.852038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.883632][ T9] usb 1-1: config 0 descriptor?? [ 828.921332][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 829.079333][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 829.079348][ T29] audit: type=1400 audit(1736014428.030:35729): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.111223][ T29] audit: type=1400 audit(1736014428.050:35730): avc: denied { read write } for pid=13667 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.135668][ T29] audit: type=1400 audit(1736014428.050:35731): avc: denied { open } for pid=13667 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.160270][ T29] audit: type=1400 audit(1736014428.050:35732): avc: denied { ioctl } for pid=13667 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.172042][T15432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2445'. [ 829.186159][ T29] audit: type=1400 audit(1736014428.050:35733): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.202340][T15432] autofs: Unknown parameter 'X' [ 829.220716][ T29] audit: type=1400 audit(1736014428.050:35734): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.251294][ T29] audit: type=1400 audit(1736014428.120:35735): avc: denied { create } for pid=15431 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.272335][ T29] audit: type=1400 audit(1736014428.120:35736): avc: denied { write } for pid=15431 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.292956][ T29] audit: type=1400 audit(1736014428.120:35737): avc: denied { read } for pid=15431 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.313614][ T29] audit: type=1400 audit(1736014428.120:35738): avc: denied { ioctl } for pid=15431 comm="syz.5.2445" path="socket:[55557]" dev="sockfs" ino=55557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.707517][T15437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.819963][ T5857] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 829.829525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 829.848510][T15437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.972174][T15439] ªªªªªª: renamed from syzkaller0 [ 830.034442][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 830.075068][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.110574][ T5857] usb 5-1: Product: syz [ 830.130907][ T5857] usb 5-1: Manufacturer: syz [ 830.169563][ T5857] usb 5-1: SerialNumber: syz [ 830.186428][T15441] netlink: 892 bytes leftover after parsing attributes in process `syz.5.2447'. [ 830.186686][ T5857] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 830.238744][ T5861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 830.337384][T15444] : entered promiscuous mode [ 830.700000][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 830.843135][T15450] trusted_key: encrypted_key: insufficient parameters specified [ 830.869515][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.886114][ T9] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 830.905789][ T9] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.920262][T12917] usb 5-1: USB disconnect, device number 82 [ 830.929301][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 830.939107][ T9] usb 6-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.40 [ 830.949642][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.958392][ T9] usb 6-1: Product: syz [ 830.963876][ T9] usb 6-1: Manufacturer: â°Š [ 830.969895][ T9] usb 6-1: SerialNumber: syz [ 830.983676][T15447] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 831.005081][T15447] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 831.253369][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 831.279901][ T5861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 831.280056][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 831.306539][ T5861] ath9k_htc: Failed to initialize the device [ 831.321362][T12917] usb 5-1: ath9k_htc: USB layer deinitialized [ 831.327557][ T9] usb 6-1: USB disconnect, device number 18 [ 831.687693][ T5858] usb 1-1: USB disconnect, device number 101 [ 831.909519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.075694][T15476] FAULT_INJECTION: forcing a failure. [ 832.075694][T15476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.709168][T15476] CPU: 1 UID: 0 PID: 15476 Comm: syz.2.2456 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 832.719972][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 832.730030][T15476] Call Trace: [ 832.733296][T15476] [ 832.736211][T15476] dump_stack_lvl+0x16c/0x1f0 [ 832.740885][T15476] should_fail_ex+0x497/0x5b0 [ 832.745557][T15476] _copy_from_iter+0x2a1/0x1560 [ 832.750413][T15476] ? trace_lock_acquire+0x14e/0x1f0 [ 832.755619][T15476] ? __alloc_skb+0x1fe/0x380 [ 832.760212][T15476] ? __pfx__copy_from_iter+0x10/0x10 [ 832.765503][T15476] ? __virt_addr_valid+0x1a4/0x590 [ 832.770612][T15476] ? __virt_addr_valid+0x5e/0x590 [ 832.775629][T15476] ? __phys_addr_symbol+0x30/0x80 [ 832.780643][T15476] ? __check_object_size+0x488/0x710 [ 832.785919][T15476] netlink_sendmsg+0x813/0xd70 [ 832.790676][T15476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.795955][T15476] ____sys_sendmsg+0xaaf/0xc90 [ 832.800709][T15476] ? copy_msghdr_from_user+0x10b/0x160 [ 832.806153][T15476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.811441][T15476] ___sys_sendmsg+0x135/0x1e0 [ 832.816102][T15476] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.821290][T15476] ? __pfx_lock_release+0x10/0x10 [ 832.826300][T15476] ? trace_lock_acquire+0x14e/0x1f0 [ 832.831496][T15476] ? __fget_files+0x206/0x3a0 [ 832.836162][T15476] __sys_sendmsg+0x16e/0x220 [ 832.840735][T15476] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.845841][T15476] do_syscall_64+0xcd/0x250 [ 832.850337][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.856218][T15476] RIP: 0033:0x7fe54dd85d29 [ 832.860618][T15476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.880209][T15476] RSP: 002b:00007fe54eb86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.888606][T15476] RAX: ffffffffffffffda RBX: 00007fe54df75fa0 RCX: 00007fe54dd85d29 [ 832.896561][T15476] RDX: 0000000020000880 RSI: 0000000020000280 RDI: 0000000000000003 [ 832.904518][T15476] RBP: 00007fe54eb86090 R08: 0000000000000000 R09: 0000000000000000 [ 832.912471][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.920425][T15476] R13: 0000000000000000 R14: 00007fe54df75fa0 R15: 00007ffcadf3ef28 [ 832.928390][T15476] [ 832.931454][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.949501][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.137511][T15484] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2458'. [ 833.679975][ T5858] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 833.859746][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 833.980996][ T5858] usb 6-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 833.989526][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.990241][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.016925][ T5858] usb 6-1: config 0 descriptor?? [ 834.036231][ T5858] usb 6-1: dvb_usb_v2: found a 'Anysee' in warm state [ 834.049703][ T5858] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 834.056482][ T5858] dvb_usb_anysee 6-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 834.103155][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 834.103471][ T29] audit: type=1400 audit(1736014433.060:36027): avc: denied { create } for pid=15503 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.240637][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.264583][ T29] audit: type=1400 audit(1736014433.060:36028): avc: denied { prog_load } for pid=15503 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 834.288091][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.365187][ T29] audit: type=1400 audit(1736014433.060:36029): avc: denied { bpf } for pid=15503 comm="syz.2.2464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 834.391343][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.401362][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.403877][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.423399][ T29] audit: type=1400 audit(1736014433.060:36030): avc: denied { perfmon } for pid=15503 comm="syz.2.2464" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 834.426150][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.446956][ T29] audit: type=1400 audit(1736014433.060:36031): avc: denied { prog_run } for pid=15503 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 834.472571][ T29] audit: type=1400 audit(1736014433.140:36032): avc: denied { execmem } for pid=15503 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 834.497908][ T29] audit: type=1400 audit(1736014433.150:36033): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.524919][ T29] audit: type=1400 audit(1736014433.150:36034): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.563294][T12917] usb 6-1: USB disconnect, device number 19 [ 834.575065][ T29] audit: type=1400 audit(1736014433.150:36035): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 834.603755][ T29] audit: type=1400 audit(1736014433.190:36036): avc: denied { read write } for pid=15500 comm="syz.5.2463" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 834.627586][ T5858] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 834.689897][ T9] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 834.759699][ T5861] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 834.795072][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 834.804765][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.815023][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 834.832670][ T5858] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 834.841978][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.850371][ T5858] usb 3-1: Product: syz [ 834.852273][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 834.854589][ T5858] usb 3-1: Manufacturer: syz [ 834.865707][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 834.867502][ T5858] usb 3-1: SerialNumber: syz [ 834.877711][ T9] usb 1-1: config 0 has no interface number 0 [ 834.888921][ T9] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.889834][ T5858] usb 3-1: config 0 descriptor?? [ 834.900832][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 834.900862][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 834.931569][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 834.931934][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 834.940822][ T9] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 834.947350][ T5858] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 834.953971][ T9] usb 1-1: Product: syz [ 834.965884][ T5858] imon 3-1:0.0: unable to initialize intf0, err -19 [ 834.966229][ T9] usb 1-1: Manufacturer: syz [ 834.975094][ T5858] imon:imon_probe: failed to initialize context! [ 834.979820][ T9] usb 1-1: config 0 descriptor?? [ 834.985346][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.989322][T15511] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 835.001306][ T5858] imon 3-1:0.0: unable to register, err -19 [ 835.013865][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.027528][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 835.029611][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.038767][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.059221][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 835.068298][ T5861] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 835.076336][ T5861] usb 5-1: Manufacturer: syz [ 835.083442][ T5861] usb 5-1: config 0 descriptor?? [ 835.449758][ T5861] rc_core: IR keymap rc-hauppauge not found [ 835.455884][ T5861] Registered IR keymap rc-empty [ 835.462018][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 835.501655][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 835.520601][ T5861] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 835.539051][ T5861] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input73 [ 835.602806][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 835.642824][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 835.643053][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input72 [ 835.671171][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 835.892013][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.000605][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.069654][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.100647][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.136414][T15511] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.2465'. [ 836.183586][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.246977][ T5858] usb 1-1: USB disconnect, device number 102 [ 836.247045][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 836.295528][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.363952][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.406070][T15527] netlink: 'syz.3.2470': attribute type 4 has an invalid length. [ 836.409342][ T5861] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 836.463731][ T5861] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 836.482104][ T5861] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 836.497525][ T5861] usb 5-1: USB disconnect, device number 83 [ 837.109605][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 837.395833][ T5860] usb 3-1: USB disconnect, device number 111 [ 837.463851][ T53] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 837.464180][T15545] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20001 [ 837.528504][ T5858] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 837.529909][T15545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.581793][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2477'. [ 837.591058][ T5861] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 837.707304][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.726844][ T5858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.737602][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.756027][ T5858] usb 1-1: Product: syz [ 837.763669][ T5858] usb 1-1: Manufacturer: syz [ 837.768338][ T5858] usb 1-1: SerialNumber: syz [ 837.775431][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 837.790134][ T5861] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 837.813759][ T5861] usb 5-1: config 0 has no interface number 0 [ 837.824246][ T5861] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 837.877622][ T5861] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 837.890734][ T5861] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 837.903412][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.912253][ T5861] usb 5-1: Product: syz [ 837.916523][ T5861] usb 5-1: Manufacturer: syz [ 838.149507][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 838.488828][ T5860] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 838.497345][ T5861] usb 5-1: SerialNumber: syz [ 838.509840][ T5861] usb 5-1: config 0 descriptor?? [ 838.515375][T15534] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 838.522730][T15534] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 838.814284][T15569] cgroup: Unknown subsys name 'subj_role' [ 838.827810][T15569] cgroup: Unknown subsys name 'subj_role' [ 838.864733][ T5860] usb 3-1: config index 0 descriptor too short (expected 44892, got 92) [ 838.901875][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.934911][ T5860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.981835][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.026432][ T5860] usb 3-1: Product: syz [ 839.044390][ T5860] usb 3-1: Manufacturer: syz [ 839.049246][ T5860] usb 3-1: SerialNumber: syz [ 839.054761][ T5858] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 839.061689][ T5858] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 839.189562][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.240421][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 839.240492][ T29] audit: type=1400 audit(1736014438.020:36375): avc: denied { execmem } for pid=15572 comm="syz.3.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 839.321076][ T5858] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 839.338773][ T5858] cdc_ncm 1-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 839.347265][ T29] audit: type=1400 audit(1736014438.030:36376): avc: denied { write } for pid=15533 comm="syz.4.2472" laddr=172.20.20.10 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.373870][ T29] audit: type=1400 audit(1736014438.080:36377): avc: denied { write } for pid=15533 comm="syz.4.2472" laddr=172.20.20.10 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.395901][ T5861] asix 5-1:0.251: probe with driver asix failed with error -71 [ 839.409255][ T5858] usb 1-1: USB disconnect, device number 103 [ 839.416023][ T5858] cdc_ncm 1-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 839.425518][ T5861] usb 5-1: USB disconnect, device number 84 [ 839.489981][ T29] audit: type=1400 audit(1736014438.080:36378): avc: denied { write } for pid=15533 comm="syz.4.2472" laddr=172.20.20.10 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.547452][ T29] audit: type=1400 audit(1736014438.160:36379): avc: denied { prog_load } for pid=15573 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 839.575314][ T29] audit: type=1400 audit(1736014438.160:36380): avc: denied { bpf } for pid=15573 comm="syz.5.2486" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 839.599640][ T5857] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 839.632129][ T29] audit: type=1400 audit(1736014438.160:36381): avc: denied { perfmon } for pid=15573 comm="syz.5.2486" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 839.659527][ T29] audit: type=1400 audit(1736014438.170:36382): avc: denied { bpf } for pid=15573 comm="syz.5.2486" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 839.680463][ T29] audit: type=1400 audit(1736014438.170:36383): avc: denied { map_create } for pid=15573 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 839.699850][ T29] audit: type=1400 audit(1736014438.180:36384): avc: denied { prog_load } for pid=15573 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 839.749844][ T5857] usb 6-1: device descriptor read/64, error -71 [ 839.987427][T15580] openvswitch: netlink: Flow actions attr not present in new flow. [ 840.009563][ T5857] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 840.179234][ T5857] usb 6-1: device descriptor read/64, error -71 [ 840.229511][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 840.300599][ T5857] usb usb6-port1: attempt power cycle [ 840.691562][ T5857] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 840.747589][ T5857] usb 6-1: device descriptor read/8, error -71 [ 841.269536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.299548][ T5857] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 841.395220][ T5857] usb 6-1: device descriptor read/8, error -71 [ 841.534580][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 841.543858][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 841.555130][ T5812] Bluetooth: hci2: hardware error 0x00 [ 841.567889][ T5857] usb usb6-port1: unable to enumerate USB device [ 841.783396][ T5860] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 841.791907][ T5860] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 842.086634][T15606] trusted_key: encrypted_key: insufficient parameters specified [ 842.309527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 842.607704][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 843.159251][ T5860] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 843.259345][ T5860] cdc_ncm 3-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 843.349508][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 843.374837][ T5860] usb 3-1: USB disconnect, device number 112 [ 843.385040][ T5860] cdc_ncm 3-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 843.614674][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 843.778070][ T5860] ------------[ cut here ]------------ [ 843.783768][ T5860] ODEBUG: free active (active state 0) object: ffff88805e5e9260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90 [ 843.834109][ T5860] WARNING: CPU: 1 PID: 5860 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 843.843672][ T5860] Modules linked in: [ 843.847587][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: kworker/1:6 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 843.858749][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 843.868945][ T5860] Workqueue: usb_hub_wq hub_event [ 843.874044][ T5860] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 843.880331][ T5860] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd c0 fe d1 8b 41 56 4c 89 e6 48 c7 c7 40 f3 d1 8b e8 7f f8 b4 fc 90 <0f> 0b 90 90 58 83 05 56 15 ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 843.900096][ T5860] RSP: 0018:ffffc90003287458 EFLAGS: 00010282 [ 843.906194][ T5860] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001b0c8000 [ 843.914662][ T5860] RDX: 0000000000100000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 843.922740][ T5860] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 843.930749][ T5860] R10: 0000000000000001 R11: 000000000000fe40 R12: ffffffff8bd1f9e0 [ 843.938976][ T5860] R13: ffffffff8b6bef60 R14: ffffffff86d1dc00 R15: ffffc90003287568 [ 843.947632][ T5860] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 843.956850][ T5860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.963562][ T5860] CR2: 00007f3842ca56c0 CR3: 0000000061b80000 CR4: 00000000003526f0 [ 843.972019][ T5860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000450f632 [ 843.980079][ T5860] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 843.988066][ T5860] Call Trace: [ 843.991509][ T5860] [ 843.994458][ T5860] ? __warn+0xea/0x3c0 [ 843.998544][ T5860] ? preempt_schedule_notrace+0x62/0xe0 [ 844.004507][ T5860] ? debug_print_object+0x1a2/0x2b0 [ 844.009792][ T5860] ? report_bug+0x3c0/0x580 [ 844.014330][ T5860] ? handle_bug+0x54/0xa0 [ 844.018686][ T5860] ? exc_invalid_op+0x17/0x50 [ 844.023431][ T5860] ? asm_exc_invalid_op+0x1a/0x20 [ 844.028476][ T5860] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 844.034756][ T5860] ? __warn_printk+0x1a6/0x350 [ 844.039792][ T5860] ? debug_print_object+0x1a2/0x2b0 [ 844.045014][ T5860] ? debug_print_object+0x1a1/0x2b0 [ 844.050472][ T5860] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 844.056390][ T5860] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 844.062560][ T5860] debug_check_no_obj_freed+0x4b7/0x600 [ 844.066941][T15640] sp0: Synchronizing with TNC [ 844.068108][ T5860] ? __pfx_mark_lock+0x10/0x10 [ 844.068142][ T5860] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 844.079538][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 844.083702][ T5860] kfree+0x2b3/0x4b0 [ 844.095143][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.100224][ T5860] ? kvfree+0x47/0x50 [ 844.101043][T15645] sp0: Found TNC [ 844.104214][ T5860] kvfree+0x47/0x50 [ 844.104238][ T5860] ? __pfx_netdev_release+0x10/0x10 [ 844.104259][ T5860] device_release+0xa1/0x240 [ 844.121723][ T5860] kobject_put+0x1e4/0x5a0 [ 844.126168][ T5860] put_device+0x1f/0x30 [ 844.130375][ T5860] free_netdev+0x4f1/0x6c0 [ 844.134815][ T5860] usbnet_disconnect+0x25c/0x500 [ 844.139817][ T5860] usb_unbind_interface+0x1e2/0x960 [ 844.145247][ T5860] ? kernfs_find_ns+0x2ee/0x3f0 [ 844.150969][ T5860] ? __pfx_usb_unbind_interface+0x10/0x10 [ 844.156717][ T5860] device_remove+0x122/0x170 [ 844.161353][ T5860] device_release_driver_internal+0x44a/0x610 [ 844.167439][ T5860] bus_remove_device+0x22f/0x420 [ 844.172420][ T5860] device_del+0x396/0x9f0 [ 844.176775][ T5860] ? __pfx_device_del+0x10/0x10 [ 844.181946][ T5860] ? kobject_put+0x210/0x5a0 [ 844.186561][ T5860] usb_disable_device+0x36c/0x7f0 [ 844.191633][ T5860] usb_disconnect+0x2e1/0x920 [ 844.195356][T15643] overlay: ./bus is not a directory [ 844.196320][ T5860] hub_event+0x1da5/0x4e10 [ 844.205966][ T5860] ? lock_acquire+0x2f/0xb0 [ 844.210813][ T5860] ? __pfx_hub_event+0x10/0x10 [ 844.215595][ T5860] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 844.221290][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.226081][ T5860] ? trace_lock_acquire+0x14e/0x1f0 [ 844.231336][ T5860] ? process_one_work+0x921/0x1ba0 [ 844.236468][ T5860] ? lock_acquire+0x2f/0xb0 [ 844.239601][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 844.241236][ T5860] ? process_one_work+0x921/0x1ba0 [ 844.251655][ T5860] process_one_work+0x9c5/0x1ba0 [ 844.256628][ T5860] ? __pfx_hub_event+0x10/0x10 [ 844.257507][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 844.257561][ T29] audit: type=1400 audit(1736014443.210:36668): avc: denied { ioctl } for pid=15635 comm="syz.5.2500" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.261412][ T5860] ? __pfx_process_one_work+0x10/0x10 [ 844.261437][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.261470][ T5860] ? assign_work+0x1a0/0x250 [ 844.261494][ T5860] worker_thread+0x6c8/0xf00 [ 844.261522][ T5860] ? __kthread_parkme+0x148/0x220 [ 844.269061][ T29] audit: type=1400 audit(1736014443.230:36669): avc: denied { ioctl } for pid=15635 comm="syz.5.2500" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.292964][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 844.303542][ T9] usb 6-1: config 0 has no interfaces? [ 844.307566][ T5860] kthread+0x2c1/0x3a0 [ 844.307595][ T5860] ? _raw_spin_unlock_irq+0x23/0x50 [ 844.350714][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=02c8, bcdDevice=ab.f8 [ 844.353521][ T5860] ? __pfx_kthread+0x10/0x10 [ 844.370914][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.372059][ T5860] ret_from_fork+0x45/0x80 [ 844.376461][ T9] usb 6-1: Product: syz [ 844.384350][ T5860] ? __pfx_kthread+0x10/0x10 [ 844.384383][ T5860] ret_from_fork_asm+0x1a/0x30 [ 844.384423][ T5860] [ 844.384435][ T5860] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 844.384446][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: kworker/1:6 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 844.384467][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 844.384479][ T5860] Workqueue: usb_hub_wq hub_event [ 844.384497][ T5860] Call Trace: [ 844.384503][ T5860] [ 844.384510][ T5860] dump_stack_lvl+0x3d/0x1f0 [ 844.384533][ T5860] panic+0x71d/0x800 [ 844.384557][ T5860] ? __pfx_panic+0x10/0x10 [ 844.384581][ T5860] ? show_trace_log_lvl+0x29d/0x3d0 [ 844.384610][ T5860] ? debug_print_object+0x1a2/0x2b0 [ 844.384627][ T5860] check_panic_on_warn+0xab/0xb0 [ 844.384644][ T5860] __warn+0xf6/0x3c0 [ 844.384657][ T5860] ? preempt_schedule_notrace+0x62/0xe0 [ 844.384677][ T5860] ? debug_print_object+0x1a2/0x2b0 [ 844.384695][ T5860] report_bug+0x3c0/0x580 [ 844.384718][ T5860] handle_bug+0x54/0xa0 [ 844.384740][ T5860] exc_invalid_op+0x17/0x50 [ 844.384762][ T5860] asm_exc_invalid_op+0x1a/0x20 [ 844.384784][ T5860] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 844.384802][ T5860] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd c0 fe d1 8b 41 56 4c 89 e6 48 c7 c7 40 f3 d1 8b e8 7f f8 b4 fc 90 <0f> 0b 90 90 58 83 05 56 15 ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 844.384818][ T5860] RSP: 0018:ffffc90003287458 EFLAGS: 00010282 [ 844.384832][ T5860] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001b0c8000 [ 844.384843][ T5860] RDX: 0000000000100000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 844.384854][ T5860] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 844.384864][ T5860] R10: 0000000000000001 R11: 000000000000fe40 R12: ffffffff8bd1f9e0 [ 844.384875][ T5860] R13: ffffffff8b6bef60 R14: ffffffff86d1dc00 R15: ffffc90003287568 [ 844.384888][ T5860] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 844.384916][ T5860] ? __warn_printk+0x1a6/0x350 [ 844.384943][ T5860] ? debug_print_object+0x1a1/0x2b0 [ 844.384959][ T5860] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 844.384981][ T5860] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 844.385004][ T5860] debug_check_no_obj_freed+0x4b7/0x600 [ 844.385022][ T5860] ? __pfx_mark_lock+0x10/0x10 [ 844.385047][ T5860] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 844.385078][ T5860] kfree+0x2b3/0x4b0 [ 844.385093][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.385116][ T5860] ? kvfree+0x47/0x50 [ 844.385137][ T5860] kvfree+0x47/0x50 [ 844.385153][ T5860] ? __pfx_netdev_release+0x10/0x10 [ 844.385172][ T5860] device_release+0xa1/0x240 [ 844.385197][ T5860] kobject_put+0x1e4/0x5a0 [ 844.385221][ T5860] put_device+0x1f/0x30 [ 844.385235][ T5860] free_netdev+0x4f1/0x6c0 [ 844.385261][ T5860] usbnet_disconnect+0x25c/0x500 [ 844.385287][ T5860] usb_unbind_interface+0x1e2/0x960 [ 844.385311][ T5860] ? kernfs_find_ns+0x2ee/0x3f0 [ 844.385332][ T5860] ? __pfx_usb_unbind_interface+0x10/0x10 [ 844.385351][ T5860] device_remove+0x122/0x170 [ 844.385371][ T5860] device_release_driver_internal+0x44a/0x610 [ 844.385397][ T5860] bus_remove_device+0x22f/0x420 [ 844.385418][ T5860] device_del+0x396/0x9f0 [ 844.385439][ T5860] ? __pfx_device_del+0x10/0x10 [ 844.385458][ T5860] ? kobject_put+0x210/0x5a0 [ 844.385485][ T5860] usb_disable_device+0x36c/0x7f0 [ 844.385515][ T5860] usb_disconnect+0x2e1/0x920 [ 844.385545][ T5860] hub_event+0x1da5/0x4e10 [ 844.385578][ T5860] ? lock_acquire+0x2f/0xb0 [ 844.385600][ T5860] ? __pfx_hub_event+0x10/0x10 [ 844.385617][ T5860] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 844.385636][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.385658][ T5860] ? trace_lock_acquire+0x14e/0x1f0 [ 844.385682][ T5860] ? process_one_work+0x921/0x1ba0 [ 844.385701][ T5860] ? lock_acquire+0x2f/0xb0 [ 844.385717][ T5860] ? process_one_work+0x921/0x1ba0 [ 844.385739][ T5860] process_one_work+0x9c5/0x1ba0 [ 844.385764][ T5860] ? __pfx_hub_event+0x10/0x10 [ 844.385780][ T5860] ? __pfx_process_one_work+0x10/0x10 [ 844.385797][ T5860] ? rcu_is_watching+0x12/0xc0 [ 844.385825][ T5860] ? assign_work+0x1a0/0x250 [ 844.385845][ T5860] worker_thread+0x6c8/0xf00 [ 844.385870][ T5860] ? __kthread_parkme+0x148/0x220 [ 844.385893][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 844.385911][ T5860] kthread+0x2c1/0x3a0 [ 844.385931][ T5860] ? _raw_spin_unlock_irq+0x23/0x50 [ 844.385948][ T5860] ? __pfx_kthread+0x10/0x10 [ 844.385971][ T5860] ret_from_fork+0x45/0x80 [ 844.385987][ T5860] ? __pfx_kthread+0x10/0x10 [ 844.386009][ T5860] ret_from_fork_asm+0x1a/0x30 [ 844.386042][ T5860] [ 844.389043][ T5860] Kernel Offset: disabled