last executing test programs: 10.27039875s ago: executing program 0 (id=6417): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 9.320224175s ago: executing program 0 (id=6425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88", 0x11, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8.014087696s ago: executing program 0 (id=6428): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 7.613310996s ago: executing program 1 (id=6429): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x4b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x478, 0x2, [@TCA_BASIC_POLICE={0x474, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x800, 0x4, 0x38, 0x2a5, 0x6, 0xff, 0x6, 0x5, 0x6430, 0x5, 0x7f, 0x0, 0x4, 0x7, 0x4, 0x8, 0x0, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x2, 0x7, 0x0, 0x5, 0x81, 0x5, 0xfffff800, 0x9, 0xb, 0x9, 0x0, 0x6, 0xd6, 0x6, 0xfffffffc, 0x10000008, 0x9, 0x7c, 0x6, 0x8, 0x2, 0x4, 0x7, 0xfff, 0x9, 0x7d, 0x8, 0x732, 0x7, 0x6, 0x7, 0x4, 0x4, 0x6, 0x1, 0x3, 0x8, 0x7, 0x3ff, 0x8, 0x4f, 0x5, 0x8, 0x1ff, 0xffffff00, 0x2, 0x7, 0x5, 0x5, 0x989, 0xffffffff, 0x0, 0xa60a, 0x3, 0x5, 0x8, 0xff, 0x0, 0x0, 0x7, 0x4, 0xe9a, 0x6, 0x4, 0x2, 0x2, 0x5, 0x4, 0x3, 0x7fff, 0x4, 0x5, 0x9, 0x100, 0x4, 0xfffffffe, 0x3, 0x8, 0x7, 0x4, 0x70, 0x2, 0x5, 0x3602cab7, 0x1, 0x7, 0x5, 0x107, 0x0, 0x800, 0x4, 0x2, 0x9, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x7, 0xfffffffc, 0x5, 0x0, 0x3c8, 0x10000, 0xfe4, 0xffff, 0x7, 0x4, 0x401, 0x8, 0x101, 0x4, 0x40000, 0x9, 0x2, 0x7, 0x80000001, 0x1, 0x7fff, 0x9d, 0x9, 0xbbe, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x90, 0x5, 0x9, 0x8, 0x6, 0x9, 0x400, 0x0, 0x8, 0xb9, 0xfffffffd, 0x5, 0xffffffff, 0x1, 0x100, 0x2, 0x8, 0x1000, 0xc, 0x1, 0x3ff, 0x5, 0x68, 0x0, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x6, 0x6, 0x9, 0x100, 0x6, 0x7, 0x7, 0x0, 0x3, 0x9, 0xa, 0x16, 0x4, 0x3, 0x7, 0x1ff, 0x3, 0xbf, 0x5, 0x7, 0x5, 0x4cc9, 0x7fffffff, 0xfffffff6, 0x3ff, 0x3, 0x9, 0x80000000, 0xcf8, 0x5b8, 0x4, 0x7fff, 0x5fa6, 0x5, 0x4, 0x1, 0x2, 0x0, 0x9, 0xa90a, 0x40, 0x400, 0x8, 0x0, 0x0, 0xe00, 0x1, 0x20a, 0xfffffff9, 0x3, 0x2, 0x8, 0x7ff, 0x9, 0x2, 0xd, 0xa1b, 0x6, 0xc, 0xcda, 0x2, 0xa6, 0x5, 0xec93, 0x1, 0x1eb, 0xdea, 0x9, 0x5, 0xff, 0x0, 0xfff, 0x7, 0x61, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 7.612502347s ago: executing program 0 (id=6430): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") 7.28129967s ago: executing program 3 (id=6431): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x397c9140}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="3b000000010006", 0x7) 6.493202718s ago: executing program 1 (id=6432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x878, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x840, 0x2, [@TCA_BASIC_POLICE={0x83c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x800, 0x4, 0x38, 0x2a5, 0x6, 0xff, 0x6, 0x5, 0x6430, 0x5, 0x7f, 0x0, 0x4, 0x7, 0x4, 0x8, 0x0, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x2, 0x7, 0x0, 0x5, 0x81, 0x5, 0xfffff800, 0x9, 0xb, 0x9, 0x0, 0x6, 0xd6, 0x6, 0xfffffffc, 0x10000008, 0x9, 0x7c, 0x6, 0x8, 0x2, 0x4, 0x7, 0xfff, 0x9, 0x7d, 0x8, 0x732, 0x7, 0x6, 0x7, 0x4, 0x4, 0x6, 0x1, 0x3, 0x8, 0x7, 0x3ff, 0x8, 0x4f, 0x5, 0x8, 0x1ff, 0xffffff00, 0x2, 0x7, 0x5, 0x5, 0x989, 0xffffffff, 0x0, 0xa60a, 0x3, 0x5, 0x8, 0xff, 0x0, 0x0, 0x7, 0x4, 0xe9a, 0x6, 0x4, 0x2, 0x2, 0x5, 0x4, 0x3, 0x7fff, 0x4, 0x5, 0x9, 0x100, 0x4, 0xfffffffe, 0x3, 0x8, 0x7, 0x4, 0x70, 0x2, 0x5, 0x3602cab7, 0x1, 0x7, 0x5, 0x107, 0x0, 0x800, 0x4, 0x2, 0x9, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x7, 0xfffffffc, 0x5, 0x0, 0x3c8, 0x10000, 0xfe4, 0xffff, 0x7, 0x4, 0x401, 0x8, 0x101, 0x4, 0x40000, 0x9, 0x2, 0x7, 0x80000001, 0x1, 0x7fff, 0x9d, 0x9, 0xbbe, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x90, 0x5, 0x9, 0x8, 0x6, 0x9, 0x400, 0x0, 0x8, 0xb9, 0xfffffffd, 0x5, 0xffffffff, 0x1, 0x100, 0x2, 0x8, 0x1000, 0xc, 0x1, 0x3ff, 0x5, 0x68, 0x0, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x6, 0x6, 0x9, 0x100, 0x6, 0x7, 0x7, 0x0, 0x3, 0x9, 0xa, 0x16, 0x4, 0x3, 0x7, 0x1ff, 0x3, 0xbf, 0x5, 0x7, 0x5, 0x4cc9, 0x7fffffff, 0xfffffff6, 0x3ff, 0x3, 0x9, 0x80000000, 0xcf8, 0x5b8, 0x4, 0x7fff, 0x5fa6, 0x5, 0x4, 0x1, 0x2, 0x0, 0x9, 0xa90a, 0x40, 0x400, 0x8, 0x0, 0x0, 0xe00, 0x1, 0x20a, 0xfffffff9, 0x3, 0x2, 0x8, 0x7ff, 0x9, 0x2, 0xd, 0xa1b, 0x6, 0xc, 0xcda, 0x2, 0xa6, 0x5, 0xec93, 0x1, 0x1eb, 0xdea, 0x9, 0x5, 0xff, 0x0, 0xfff, 0x7, 0x61, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x695, 0xfff, 0x146b, 0x6, 0x3d8d, 0x200, 0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x80000000, 0x7f, 0x5, 0xe7, 0xf, 0x782b, 0xa7, 0x80, 0xffffffe0, 0xe, 0x401, 0x0, 0x3cc8, 0x0, 0x1, 0xa, 0xc860, 0x7, 0x0, 0x3, 0x7fff, 0x101, 0x3, 0x80000000, 0x8, 0x8004, 0x9, 0x80000001, 0x200, 0x4, 0x6, 0xffffffff, 0x7, 0x0, 0xda, 0x1, 0x200, 0x6, 0x80, 0xfffffff9, 0x0, 0x3, 0x2, 0x6, 0xf, 0x7, 0x2, 0x7, 0xffff, 0x9, 0x6, 0x9, 0x3352ecb4, 0x5, 0xfa33, 0x72, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6c, 0x7, 0x9, 0x92d7, 0xffffffff, 0xfffffffc, 0x101, 0x1, 0x5, 0x9, 0x495e, 0x80000000, 0xfffffff0, 0x1, 0x6362, 0x2400, 0x2, 0x8, 0x9, 0x3, 0x317, 0x80, 0x9, 0x3, 0x9, 0xaea8, 0xbf, 0xe, 0x9, 0x8, 0x5, 0xee, 0x5, 0x5, 0x400, 0x1ba9, 0x15400, 0x6, 0x8, 0x7f, 0xffff6e64, 0xfffffff7, 0x401, 0x40000, 0x8d7, 0x2, 0x200, 0x4, 0x5, 0xb5d, 0xfea, 0x8, 0xb2, 0x2, 0x2, 0x2, 0x200, 0x800, 0x4, 0x6, 0x4b87, 0xfffffffe, 0xd73, 0x5, 0x8, 0x3, 0x5, 0xfb27, 0x6, 0x7, 0x8, 0x2, 0x0, 0x1ff, 0x3, 0xd5, 0x477, 0xffff1be9, 0x10001, 0x0, 0x0, 0x0, 0x8000, 0x8000, 0x7, 0xff, 0x9, 0x8, 0x938e, 0x41, 0x7ff, 0x5, 0x0, 0xe793, 0xa1d, 0xfffffff9, 0xffff, 0x8, 0x1, 0x4, 0x2, 0x400, 0x3, 0x1, 0x8000, 0x6, 0xefee, 0xffffffff, 0xaa, 0x8, 0x8, 0xe, 0x6c, 0x61e1, 0x1, 0xcf0, 0x68, 0xed, 0x4, 0x82, 0x230, 0x7, 0x4, 0xfff, 0x637c5d46, 0x9, 0x97cb, 0x1, 0x1, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0x3, 0x1, 0x405, 0x6, 0x3dc9, 0xfffff503, 0x0, 0x4001, 0x9d, 0xd686, 0xc65, 0x8, 0x10000, 0x1, 0x7, 0x4, 0x10001, 0xb, 0x0, 0xf515, 0x2, 0x7d8, 0x5, 0x8000, 0x8000, 0x1, 0x5, 0xa, 0x8, 0x4, 0xd6, 0x8, 0x80000001, 0x2, 0x0, 0x8, 0xb9, 0xd9e, 0x9, 0x5, 0x9, 0x1, 0x2, 0x2, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x878}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 6.492557079s ago: executing program 3 (id=6433): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 5.504999738s ago: executing program 0 (id=6436): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000140)={[{@mblk_io_submit}, {@abort}, {@noacl}, {@oldalloc}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodelalloc}, {@abort}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x573, &(0x7f0000001200)="$eJzs3d9rW+UbAPDnpO1+dNt3HYzxVUQKu3Ayl66tPyZ4MS9FhwO9n6XNymi6jCYdax1su3A33sgQVByI1+q9l8N/wL9ioIMhoyjiTeWkJ13WJk2WZUtmPh847fuec9L3PDnnefuevAkJYGCNpz9yES9ExBdJxMG6bcORbRzf2G/twdXZdEliff2jP5JIsnW1/ZPs976s8v+I+OWziOO57e2WV1YXZorFwlJWn6gsXpoor6yeuLA4M1+YL1ycmp4+9cb01Ntvvdm1WF89+9c3H95579TnR9e++uneoVtJnI792bb6OJ7A9frKeIxnz8lInN6y42QXGusnSa8PgI4MZXk+EmkfcDCGsqwH/vuuRcQ6MKAS+Q8DqjYOqN3bd+k++Llx/92NG6Dt8Q9vvDYSe6r3RqNrySN3Run97lgX2k/b+Pn327fSJbr3OgRAS9dvRMTJ4eHt/V+S9X+dO9nGPlvb0P/Bs3MnHf+81mj8k9sc/0SD8c++Brnbidb5n7vXhWaaSsd/7zQc/25OWo0NZbUD1THfSHL+QrGQ9m3/i4hjMbI7re80n3Nq7e56s2314790SduvjQWz47g3vPvRx8zNVGaeJOZ6929EvNhw/Jtsnv+kwflPn4+zbbZxpHD75WbbWsf/dK1/H/FKw/P/cEYr2Xl+cqJ6PUzUrort/rx55Ndm7beO/+unOiGTnv/Rjfj/zm4Jt8Y/ltTP15Yfv43v9vxTaLat0+t/V/JxtbwrW3dlplJZmozYlXywff3Uw8fW6rX90/iPHd25/2t0/e+NiE/ajP/m4R9f6jz+rUbbbLU9afxzO1//W87/4xfuvv/pt53Hn57/16ulY9madvq/dg/wSZ47AAAAAAAA6De5iNgfSS6/Wc7l8vmN93ccjtFcsVSuHD9fWr44F9XPyo7FSK42032w7v0Qk9n7YWv1qS316Yg4FBFfDu2t1vOzpeJcr4MHAAAAAAAAAAAAAAAAAACAPrGvyef/U78N9frogKfOV37D4GqZ/934piegL/n/D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8wuOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNXZM2fSZX3twdXZtD53eWV5oXT5xFyhvJBfXJ7Nz5aWLuXnS6X5YiE/W1ps9feKpdKlyalYvjJRKZQrE+WV1XOLpeWLlXMXFn84EFEYeSZRAQAAAAAAAAAAAAAAAAAAwPOlvLK6MFMsFpYUqoXd8Uzautb7SLtVGO6Pw+h54cFoXxxG1wq97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KF/AwAA//8xVDou") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 5.504035738s ago: executing program 1 (id=6437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x2008002, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x5}}, {@noauto_da_alloc}, {@inlinecrypt}, {@discard}, {@oldalloc}]}, 0x1, 0x571, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000400000000000000001811000046b63b98b5e52a0ebd92717b4cee792a409949ae47494276a1f59bcbe9e73d8ced64a1335d1067e15c029c8b7928351b96ec0763d822c6c498373d93c8b49bf76bc8872a3b65ef070343777e9b9f6343478b86a9248e3122f3547f796c19f88ab3b2cb64073aa9ba7f2d2c17c7dac941cbdd2d1f9a1ab3d72b836290e37fa1ef8385eafcd41304eeaaa00ecee7c2254740dae989d530d58038fb82c2b9090720423a862f5ff45e09e1b1c68411c801600d6689ff997f72acab5cf30c496d69a009fba7cdbee26f256bdd68fdac3624a8fdbc47da7260f2f0e21c1828a270a001122cd6605dfc870e2d165b072a69b5317b4c3c29d854a716", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}}, 0x804) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x5) 5.28732545s ago: executing program 3 (id=6440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x640c1) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) dup(r4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000ea"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ipv6_route\x00') 4.292718629s ago: executing program 0 (id=6442): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002f638d408f01002204db10100000109022d00010b06800809045f40030a0000400905"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r3) write$hidraw(r2, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r2, 0x401c5820, &(0x7f00000005c0)) syz_usb_connect(0x5, 0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x4030582a, &(0x7f0000000140)={0xa, "7954bbc8aae250bd2354"}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0xb, 0x2, "449a"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "84c1"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3525358a", {0x3, 0x7, 0x0, 0x80, 0x5, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.246284264s ago: executing program 2 (id=6444): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x8ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x874, 0x2, [@TCA_BASIC_POLICE={0x870, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x800, 0x4, 0x38, 0x2a5, 0x6, 0xff, 0x6, 0x5, 0x6430, 0x5, 0x7f, 0x0, 0x4, 0x7, 0x4, 0x8, 0x0, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x2, 0x7, 0x0, 0x5, 0x81, 0x5, 0xfffff800, 0x9, 0xb, 0x9, 0x0, 0x6, 0xd6, 0x6, 0xfffffffc, 0x10000008, 0x9, 0x7c, 0x6, 0x8, 0x2, 0x4, 0x7, 0xfff, 0x9, 0x7d, 0x8, 0x732, 0x7, 0x6, 0x7, 0x4, 0x4, 0x6, 0x1, 0x3, 0x8, 0x7, 0x3ff, 0x8, 0x4f, 0x5, 0x8, 0x1ff, 0xffffff00, 0x2, 0x7, 0x5, 0x5, 0x989, 0xffffffff, 0x0, 0xa60a, 0x3, 0x5, 0x8, 0xff, 0x0, 0x0, 0x7, 0x4, 0xe9a, 0x6, 0x4, 0x2, 0x2, 0x5, 0x4, 0x3, 0x7fff, 0x4, 0x5, 0x9, 0x100, 0x4, 0xfffffffe, 0x3, 0x8, 0x7, 0x4, 0x70, 0x2, 0x5, 0x3602cab7, 0x1, 0x7, 0x5, 0x107, 0x0, 0x800, 0x4, 0x2, 0x9, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x7, 0xfffffffc, 0x5, 0x0, 0x3c8, 0x10000, 0xfe4, 0xffff, 0x7, 0x4, 0x401, 0x8, 0x101, 0x4, 0x40000, 0x9, 0x2, 0x7, 0x80000001, 0x1, 0x7fff, 0x9d, 0x9, 0xbbe, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x90, 0x5, 0x9, 0x8, 0x6, 0x9, 0x400, 0x0, 0x8, 0xb9, 0xfffffffd, 0x5, 0xffffffff, 0x1, 0x100, 0x2, 0x8, 0x1000, 0xc, 0x1, 0x3ff, 0x5, 0x68, 0x0, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x6, 0x6, 0x9, 0x100, 0x6, 0x7, 0x7, 0x0, 0x3, 0x9, 0xa, 0x16, 0x4, 0x3, 0x7, 0x1ff, 0x3, 0xbf, 0x5, 0x7, 0x5, 0x4cc9, 0x7fffffff, 0xfffffff6, 0x3ff, 0x3, 0x9, 0x80000000, 0xcf8, 0x5b8, 0x4, 0x7fff, 0x5fa6, 0x5, 0x4, 0x1, 0x2, 0x0, 0x9, 0xa90a, 0x40, 0x400, 0x8, 0x0, 0x0, 0xe00, 0x1, 0x20a, 0xfffffff9, 0x3, 0x2, 0x8, 0x7ff, 0x9, 0x2, 0xd, 0xa1b, 0x6, 0xc, 0xcda, 0x2, 0xa6, 0x5, 0xec93, 0x1, 0x1eb, 0xdea, 0x9, 0x5, 0xff, 0x0, 0xfff, 0x7, 0x61, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}, @TCA_POLICE_RATE={0x404, 0x2, [0x695, 0xfff, 0x146b, 0x6, 0x3d8d, 0x200, 0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x80000000, 0x7f, 0x5, 0xe7, 0xf, 0x782b, 0xa7, 0x80, 0xffffffe0, 0xe, 0x401, 0x0, 0x3cc8, 0x0, 0x1, 0xa, 0xc860, 0x7, 0x0, 0x3, 0x7fff, 0x101, 0x3, 0x80000000, 0x8, 0x8004, 0x9, 0x80000001, 0x200, 0x4, 0x6, 0xffffffff, 0x7, 0x0, 0xda, 0x1, 0x200, 0x6, 0x80, 0xfffffff9, 0x0, 0x3, 0x2, 0x6, 0xf, 0x7, 0x2, 0x7, 0xffff, 0x9, 0x6, 0x9, 0x3352ecb4, 0x5, 0xfa33, 0x72, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6c, 0x7, 0x9, 0x92d7, 0xffffffff, 0xfffffffc, 0x101, 0x1, 0x5, 0x9, 0x495e, 0x80000000, 0xfffffff0, 0x1, 0x6362, 0x2400, 0x2, 0x8, 0x9, 0x3, 0x317, 0x80, 0x9, 0x3, 0x9, 0xaea8, 0xbf, 0xe, 0x9, 0x8, 0x5, 0xee, 0x5, 0x5, 0x400, 0x1ba9, 0x15400, 0x6, 0x8, 0x7f, 0xffff6e64, 0xfffffff7, 0x401, 0x40000, 0x8d7, 0x2, 0x200, 0x4, 0x5, 0xb5d, 0xfea, 0x8, 0xb2, 0x2, 0x2, 0x2, 0x200, 0x800, 0x4, 0x6, 0x4b87, 0xfffffffe, 0xd73, 0x5, 0x8, 0x3, 0x5, 0xfb27, 0x6, 0x7, 0x8, 0x2, 0x0, 0x1ff, 0x3, 0xd5, 0x477, 0xffff1be9, 0x10001, 0x0, 0x0, 0x0, 0x8000, 0x8000, 0x7, 0xff, 0x9, 0x8, 0x938e, 0x41, 0x7ff, 0x5, 0x0, 0xe793, 0xa1d, 0xfffffff9, 0xffff, 0x8, 0x1, 0x4, 0x2, 0x400, 0x3, 0x1, 0x8000, 0x6, 0xefee, 0xffffffff, 0xaa, 0x8, 0x8, 0xe, 0x6c, 0x61e1, 0x1, 0xcf0, 0x68, 0xed, 0x4, 0x82, 0x230, 0x7, 0x4, 0xfff, 0x637c5d46, 0x9, 0x97cb, 0x1, 0x1, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0x3, 0x1, 0x405, 0x6, 0x3dc9, 0xfffff503, 0x0, 0x4001, 0x9d, 0xd686, 0xc65, 0x8, 0x10000, 0x1, 0x7, 0x4, 0x10001, 0xb, 0x0, 0xf515, 0x2, 0x7d8, 0x5, 0x8000, 0x8000, 0x1, 0x5, 0xa, 0x8, 0x4, 0xd6, 0x8, 0x80000001, 0x2, 0x0, 0x8, 0xb9, 0xd9e, 0x9, 0x5, 0x9, 0x1, 0x2, 0x2, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 4.228633596s ago: executing program 3 (id=6445): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x397c9140}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="3b000000010006", 0x7) 4.172405272s ago: executing program 1 (id=6446): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0xfffffff5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff8, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.444157554s ago: executing program 3 (id=6447): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") 3.333080896s ago: executing program 2 (id=6449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, 0x0, 0x0) 3.28873626s ago: executing program 1 (id=6450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.117597737s ago: executing program 1 (id=6451): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x8, {0x8, 0x2, "25f4e4e9f494"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.781454681s ago: executing program 2 (id=6452): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000140)={[{@mblk_io_submit}, {@abort}, {@noacl}, {@oldalloc}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodelalloc}, {@abort}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x573, &(0x7f0000001200)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 2.483007751s ago: executing program 4 (id=6453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC=r2], 0x1, 0x1534, &(0x7f0000002d00)="$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") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)={0x420, 0x3f3, 0x300, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0xb, [0x5, 0x7, 0x824, 0x2, 0x3, 0xff, 0x0, 0x6, 0x5, 0x5, 0xba4, 0x0, 0x200, 0x8d, 0x43, 0x3, 0x2, 0xfffffffe, 0x1, 0x7, 0x323, 0x7ff, 0x0, 0x2, 0x4, 0xffff29e2, 0xffffffab, 0xffff, 0x8000, 0x7, 0x200, 0x2, 0xfff, 0x2, 0x8, 0x2, 0x3, 0x9, 0x1, 0xff, 0x4, 0x10000, 0x9, 0x7, 0x9, 0x8, 0x8, 0x6, 0x7fff, 0x3, 0x10001, 0x3, 0x0, 0x2, 0x0, 0x7, 0x548, 0x5c8d, 0xfffffffa, 0x1ff, 0x7, 0x2, 0x9, 0x7fffffff], [0x5, 0x10001, 0x6, 0x635f, 0x1, 0x9, 0x9, 0x5, 0x77, 0x80000000, 0xbd, 0x9, 0x7, 0x9, 0x4, 0x45, 0x1, 0x0, 0x4, 0xe, 0x7, 0x9, 0x8, 0x80000000, 0x0, 0x5, 0xe, 0x7ff, 0x9, 0x7fffffff, 0x4, 0x8, 0x1b, 0x7c, 0xa, 0x7, 0x9, 0x80000001, 0xc, 0x2, 0x6, 0xfff, 0x8, 0x3, 0x81, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3a88, 0x10, 0x40, 0x2, 0x800, 0x7, 0x2, 0xfffffff2, 0x2, 0x9dd, 0x7f, 0xdb, 0x5, 0x2eb], [0x7ff, 0x5, 0xfffffff8, 0x7, 0xfffffffa, 0x4, 0xc5a, 0x380000, 0x7, 0x8000, 0x7, 0x8, 0xd6a4, 0x0, 0x8, 0x3ff, 0x3, 0x0, 0xfe, 0x4, 0x4a1, 0x6a0, 0x3, 0xdb, 0x9, 0x6, 0xd, 0xffff, 0xfffffff8, 0x80, 0x0, 0x3, 0xff, 0x7, 0x3, 0xffff, 0x2704, 0x1, 0x2, 0x3, 0x9c, 0x3, 0x8, 0x10001, 0x8000, 0xb221, 0xc0, 0xfffff801, 0x8, 0x1, 0x0, 0x1, 0x7, 0x7, 0x2, 0x0, 0x9, 0x8001, 0xbf4, 0x5, 0x1000, 0x3, 0x4, 0x6], [0x800, 0x5, 0x9, 0x40, 0x2b8, 0x9, 0x1, 0xffffffff, 0x1ff, 0xf7, 0x0, 0x1, 0x4, 0x10, 0x1000, 0x6, 0xfffffffc, 0x8, 0x2, 0x9, 0x4, 0x0, 0x40, 0x1ff, 0xc, 0x1, 0x4, 0x7, 0x0, 0x1, 0x5, 0x2, 0x7, 0x5, 0x1000, 0x8, 0x1, 0x5, 0x642, 0x4b4, 0x8, 0x1, 0x90, 0x0, 0x3, 0x7, 0x6, 0x10000, 0xffffffff, 0x67, 0x401, 0xa, 0x9, 0x1e81b999, 0x1, 0xffffffff, 0xd, 0x7, 0xb82c, 0x800, 0x4c1e95d5, 0xd, 0xfffffeff, 0x3]}, ["", "", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20004004) 1.131040976s ago: executing program 3 (id=6454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC=r2], 0x1, 0x1534, &(0x7f0000002d00)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm8SyyRJLklySZIkSXJLSJrkSEJiyC1pSJJch+QyhOQyMWnc7/dLQpI0SRKSW7L+H8Vfnep3zvmdfjmfM8/383k/1jNrP2s/+33ey94b83WnwdUb1qhSn4jg34I//5EMALEA0B8ArgKAAADKxJeJPz+fU2Lyv7cT9ud6MO1yV8AuJ+5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZOLXA1P7Lvg+////er+4cz/P3/XySr5OjPV5e8tjNAzD+bwv3P3rj//7WCf2Yj7n/2xv3PrmIvdwHsPwC//7ODHH84w/3P3rj/jGVnl/v+8+V+QCR7PweX+/XHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOUvUQBwcXy562KMMcYYY4wxxtifx+e43BUwxhhjjDHGGGPs/x6CAAkKAoiBHBALOSEOBABcCbnhKojA1RAP10AeuBbyQj7IDwUgAQpCIdBgwAJBCIWhCEThOigK10MxuAGKQwlwUBIS4UYoBTdBabgZysAtUBZuhXJQHipARbgNKsHtUBnugCpwJ1SFalAdasBdUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGJtAUmkHz/1X+89ANXoDu0AOSoSf0ghehN/SBvtAP+sNLMABehoHwCqTAIBgMr8IQeA2GwuswDN6A4fAmjICRMApGwxgYC6kwDsbDWzAB3oaJMAkmwxRIg6kwDd6B6TADZsK7MAveg9kwB+bCPEiH92E+LIAM+AAWwoeQCYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w0ewAz6GnbALdsMnsAc+/RfzT/5dfmcEBBQoUKHCGIzBWIzFOIzDXJgLc2NujGAE4zEe82AezIt5MT/mxwRMwEJYCA0aJCQsjIUxilEsikWxGBbD4lgcHTpMxEQshTdhaSyNZbAMlsWyWA7LY3msiBWxElbCylgZq2AVrIpVsTpWx7vwLuyJtbAW1sbaWAfrXLw9hfWxPjbABtgQG2IjbISNsTE2xabYHJtjC2yBLbEltsbW2AbbYFtsi0mYhO2wHbbH9tgBO2BH7IidsBN2xi7YJev5HIAv4AvYA6uKntgLe2FvTMnRF/thP3wJB+DL+DK+gik4CAfjq/gqvoZD8QQOwzdwOA7HSmIkjsLRSGIspmIqjsfxOAEn4ESchJNwCqbhVJyG03A6zsAZ+C7OwvfwPZyDc3AepmM6zscFmIEZuBBPYiYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFt+A23AYfoQLAj3EX7sIU3IN7cC/uxX24D/fjfszCLDyAB/AgHsRDeAgP42E8gkfxGB7F43gcT+BJPIWn8AyewbP4bMKXDT66YVUKiPOUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoLooLJ5xIFImilCglSovSooy4RZQVt4pyorxo5SqKiqKSaO0qiztEFVFFVBXVRHVRQ9QQNUVNUUvUErVFbVFH1BF1xf2inuiJffFBcb4zDcUgbCQGY2PRRMgLn2AtxFBsKVqJ1uJx8QYOw7aihUsST4l2YhS2F38To/EZ0VGMxU7iOdFZdBFdxfOim2jpuoseYiL2FL3EFOwt+oi+op+YjtXEuzgrZ3XxikgRg8Rg8aqYh6+JoeJ1MeynI31TjBAjxSgxWowRY0WqGCfGi7fEBPG2mCgmicliikgTU8U08Y6YLmaImeJdMUu8J2aLOWKumCfSxftivlggMsQHYqH4UGSKRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrv4SOwQH4udYpfYLT4Re8SnYq/4TOwTn4v94guRJb4UB8RX4qD4WhwS34jD4ltxRBwVx8R34rj4XpwQJ8UpcVqcET+Is+JHcU54ARKlkFIqGcgYmUPGypwyTl4hc8ngwrN7tYyX18g88lqZV+aT+WUBmSALykJSSyOtJBnKwrKIjMrrZFF5vSwmb5DFZQnpZEmZKG+UpeRNsrS8WZaRt8iy8lZZTpaXFWRFeZusJG+XEPl5H1VlNVld1pB3yWS4W9aS98ja8l5ZR94n68r7ZT35gKwvH5QN5EOyoXxYNpKPyMayiWwqm8nm8lHZQj4mW8pWsrV8XLaRT8i28kmZJJ+S7aS/8BJ5RnaUz8pO8jnZWXaRXeWP8pz0srvsIaEnyF7yRdlb9pF9ZT/ZX74kB8iX5UD5ikyRg+Rg+aocIl+TQ+Xrcph8Qw6Xb8oRcqQcJUfLMXKsTJXj5Hj5lpwg35YT5SQ5WU6RaXKq7HthpZlS/sP8t34nf+BPe98gN8pNcrPcIrfKbXK7/EjukDvkTrlT7pa75R65R+6Ve+U+uU/ul/tllsySB+QBeVAelIfkIXlYHpZH5FF5Wn4nj8vv5Ql5Up6Up+UZeUaevfAcgEIllFRKBSpG5VCxKqeKU1eoXOpKlVtdpSLqahWvrlF51LUqr8qn8qsCKkEVVIWUVkZZRSpUhVURFVXX4YUXjCquSiinSqpEdeO/kq+KqutVMXXDr/Iv1pf8B/U1V81VC9VCtVQtVWvVWrVRbVRb1VYlqSTVTrVT7VV71UF1UB1VR9VJdVKdVWfVVXVV3VQ31V11V8kqWfVSL6reqo/qq/qp/uolNUANUAPVQJWiUtRgNVgNUUPUUDVUDVPD1HA1XI1QI9QoNUqNUWNUqkpV49V4NUFNUBPVRDVZTVZpKk1NU9PUdDVdzVQz1Sw1S81Ws9VcNVelq3Q1X81XGSpDLVQLVaZapBapJWqJWqaWqRVqhVqlVqk1ao1ap9apTLVRbVSb1Wa1VW1V29V2tUPtUDvVTrVb7VZ71B61V+1V+9Q+tV/tV1kqSx1QB9RBdVAdUofUYXVYHVFH1DF1TB1Xx9UJdUKdUqfUGXVGnVVn1Tl17vxpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Nogb5AvyB8UCBKCgkGhQAcmsIG40PRocF1QNLg+KBbcEBQPSgQuKBkkBjcGpYKbgtLBzUGZ4JagbHBrUC4oH1QIKga3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsZBk6Bp0Cxo/qeu7/2JfI+57rqHTtY9dS/9ou6t++i+up/ur1/SA/TLeqB+RafoQXqwflUP0a/pofp1PUy/oYfrN/UIPVKP0qP1GD1Wp+pxerx+S0/Qb+uJepKerKfoND1VT9Pv6Ol6hp6p39Wz9Ht6tp6j5+p5Ol2/r+frBTpDf6AX6g91pl6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa364/0Dv2x3ql36d36E71Hf6r36s/0Pv253q+/0Fn6S31Af6UP6q/1If2NPqy/1Uf0UX1Mf6eP6+/1CX1Sn9Kn9Rn9gz6rf9TntD9/cn/+690oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQy55EhU9gUNlETNUVNUVPMFDPFTXHjjDOJJtGUMqVMaVPalDFlTFlT1pQz5UwFU8HcZm4zt5vbzR3mDnOnudNUM9VMDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NU9PUNDfNTQvTwrQ0LU1r09q0MW1MW9PWJJkk0860M+1Ne9PBdDAdTUfTyXQynU1n09V0Nd1MN9PddDfJJtn0Mr1Mb9Pb9DV9TX/T3wwwA8xAM9CkmBQz2Aw2Q8wQM9QMNcPMG2b4+RNVM9KMMqPNGDPWpJpUM96MNxPMBDPRTDSTzWSTZtLMNDPNTDfTzUwz08wys8xsM9vMNXNNukk38818k2EyzEKz0GSaTLPYLDZLzVKz3Cw3K81Ks9qsNmthrVlv1puNZqPZbDabrWar2W62mx1mh9lpdprdZrfZY/aYvWav2Wf2mf1mv8kyWeaAOWAOmoPmkDlkDpvD5og5Yo6ZY+a4OW5OmBPmlDllzph8F74vvYm1OW2cvcLmslfa3PYq+/dxflvAJtiCtpDVNq/N96vYWGuL2RtscVvCOlvSJtobfxOXs+VtBVvR3mYr2dtt5d/ENe3dtpa9x9a299oa9q5fxXXsfbaufdjWQwSwTWwD28w2tA/bRvYR29g2sU1tM9vGPmHb2idtkn3KtrNP/yaebxfYlXaVXW3X2J12lz1lT9uD9mt7xv5gu9setr99yQ6wL9uB9hWbYgf9Jh5u37Qj7Eg7yo62Y+zY38ST7RSbZqfaafYdO93O+E2cbt+3s2yGnW3n2Ll23k/x+Zoy7Ad2of3QZtoAFtsldqldZpfbFf+/1iV2nV1vN9gd9mO72W6xW+02u/3iibDdZXfbT+we+6k9YL+y++zndr89ZLPslz/F54/vkP3GHrbf2iP2qD1mv7PH7ffqp9yRvQHsD/Y7+6M9Z70FQgKSpCigGMpBsZST4ugKykVXUm66iiJ0NcXTNZSHrqW8lI/yUwFKoIJUiDQZskQUUmEqQlG6ji6WV5xKkKOSlEg3Uim6iUrTzVSGbqGydCuVo/JUgSrSbVSJbqfKdAdVoTupKlWj6lSD7qKadDfVonuoNt1Ldeg+qkv3Uz16gOrTg9SAHqKG9DA1okeoMTWhptSMmtOj1IIeo5bUilrT49SGnqC29CQl0VPUjp6m9vQ36kDPUEd6ljrRc9SZulBXep660QvUnXpQMvWkXvQi9aY+1Jf6UX96iQbQyzSQXqEUGkSD6VUaQq/RUHqdhtEbNJzepBE0kkbRaBpDYymVxtF4eosm0Ns0kSbRZJpCaTSVptE7NJ1m0Ex6l2bRezSb5tBcmkfp9D7NpwWUQR/QQvqQMmkRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdvqIdtDHtJN20W76hPbQp7SXPqN99Dntpy8oi76kA/QVHaSv6RB943vQt3SEjtIx+o6O0/d0gk7SKTpNZ+gHOks/0jnyBCGGIpShCoMwJswRxoY5w7jwijBXeGWYO7wqjIRXh/HhNWGe8Nowb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGw+vCouH1YbEQw+JhidCFJcPE8MawVHhTWDq8OSwT3hKWDW8Ny4Xlw4fvrRjeFlYKbw8rh3eEVcI7w6phtbB6WCO8K6wZ3h3WCu8Ja4f3hqXD+8K64f1hvfCBsH74YNggfChsGD4cNgofCRuHTcKmYbOwefho2CJ8LGwZtgpbh4+HbcInwrbhk2FS+FTYLnz6p/n7FvzxfHLYM+wVvhi+GHp/j5wbnRdNj74fnR9dEM2IfhBdGP0wmhldFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RD1vkYOcOiEk065wMW4HC7W5XRx7gqXy13pcrurXMRd7eLdNS6Pu9bldflcflfAJbiCrpDTzjjryIWusCviou46V9Rd74q5G1xxV8I5V9IlumauuWvuWrjHXEvXyrV2j7vH3RPuCfeke9I95dq5p1179zfXwT3jOrpn3bPuOdfZdXFd3fOumxuX++f3ZLLr5Xq53q636+v6uv6uvxvgBriBbqBLcSlusBvshrghbqgb6oa5YW64G+5GuBFulBvlxrgxLtWluvFuvJvgJriJbqKb7Ca7NJfmprlpbrqb7irN+Hkvs91sN9fNdeku3c13588ZM9xCt9Bluky32C12S91St9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A6301/186Juj9vr9rp9bp/b775wWe5Ld8B95Q66r90h94077L51R9xRd8x95467790Jd9KdcqfdGfeDO+t+dOecd6mRcZHxkbciEyJvRyZGJkUmR6ZE0iJTI9Mi70SmR2ZEZkbejcyKvBeZHZkTmRuZF0mPvB+ZH1kQyYh8EFkY+TCSGVkUWRxZElkaWRbxvuDm0Bf2RXzUX+eL+ut9MX+DL+5LeOdL+kR/oy/lb/Kl/c2+jL/Fl/W3+nK+vK/gH/GNfRPf1Dfzzf2jvoV/zLf0rXxr/7hv45/wbf2TPsk/5dv5p317/zffwT/jO/pnfSf/nO/su/iu/nnfzb/gu/sePtn39L38i7637+P7+n6+v3/JD/Av+4H+FZ/iB/nB/lU/xL/mh/rX/TD/hh8e86YfcfESGcb6VD/Oj/dv+Qn+bT/RT/KT/RSf5qf6af4dP93P8DP9u36Wf8/P9nP8XD/Pp/v3/Xy/wGf4D/xC/6HP9Isu3lT2y/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9R36H/9jv9Lv8bv+J3+M/9Xv9Z36f/9zv91/4LP+lP+C/8gf91/6Q/8Yf9t/6I/6oP+a/88f99/6EP+lP+dP+jP/Bn/U/+nP8f9YYY4wxxv4p4y4Nxa9nfr6d3/N3csQvNu4FAFduKZD1y/nzZ5Rr8/487iMS2kQA4KkenR68+KhaNTk5+cK2mRKCInMALv5N0HkxcCleBK3hCUiCVlDqd+vvI7qcoX+wfvQWgLhf5MTCpfjS+p8BYPLvrP/o48Pnlw1Pxf8P688BKFbkUk5OuBQvgtY/3V9pBaX/oP58LX5Zf+xv18/5eSpAy1/k5IJL8aX6E+ExeBqSfrUlY4wxxhhjjDH2sz6iQoeL158X/8Xn712fJ6hLOTngUvyPrs8ZY4wxxhhjjDF2+T3TpeuTjyYlterwrw8q/6+y/ulBI/i/WvkvGdzxn1HGvzDwHuDiTxQA/JsLApwfyL/yKDb9JftKufDW+fuppad9AP8ZrfwzBpf5g4kxxhhjjDH2p7t00v/rn6vLVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYN/RW/TuyX++tx+Q6VMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu2z+XwAAAP//dMcCKA==") mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)={0x420, 0x3f3, 0x300, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0xb, [0x5, 0x7, 0x824, 0x2, 0x3, 0xff, 0x0, 0x6, 0x5, 0x5, 0xba4, 0x0, 0x200, 0x8d, 0x43, 0x3, 0x2, 0xfffffffe, 0x1, 0x7, 0x323, 0x7ff, 0x0, 0x2, 0x4, 0xffff29e2, 0xffffffab, 0xffff, 0x8000, 0x7, 0x200, 0x2, 0xfff, 0x2, 0x8, 0x2, 0x3, 0x9, 0x1, 0xff, 0x4, 0x10000, 0x9, 0x7, 0x9, 0x8, 0x8, 0x6, 0x7fff, 0x3, 0x10001, 0x3, 0x0, 0x2, 0x0, 0x7, 0x548, 0x5c8d, 0xfffffffa, 0x1ff, 0x7, 0x2, 0x9, 0x7fffffff], [0x5, 0x10001, 0x6, 0x635f, 0x1, 0x9, 0x9, 0x5, 0x77, 0x80000000, 0xbd, 0x9, 0x7, 0x9, 0x4, 0x45, 0x1, 0x0, 0x4, 0xe, 0x7, 0x9, 0x8, 0x80000000, 0x0, 0x5, 0xe, 0x7ff, 0x9, 0x7fffffff, 0x4, 0x8, 0x1b, 0x7c, 0xa, 0x7, 0x9, 0x80000001, 0xc, 0x2, 0x6, 0xfff, 0x8, 0x3, 0x81, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3a88, 0x10, 0x40, 0x2, 0x800, 0x7, 0x2, 0xfffffff2, 0x2, 0x9dd, 0x7f, 0xdb, 0x5, 0x2eb], [0x7ff, 0x5, 0xfffffff8, 0x7, 0xfffffffa, 0x4, 0xc5a, 0x380000, 0x7, 0x8000, 0x7, 0x8, 0xd6a4, 0x0, 0x8, 0x3ff, 0x3, 0x0, 0xfe, 0x4, 0x4a1, 0x6a0, 0x3, 0xdb, 0x9, 0x6, 0xd, 0xffff, 0xfffffff8, 0x80, 0x0, 0x3, 0xff, 0x7, 0x3, 0xffff, 0x2704, 0x1, 0x2, 0x3, 0x9c, 0x3, 0x8, 0x10001, 0x8000, 0xb221, 0xc0, 0xfffff801, 0x8, 0x1, 0x0, 0x1, 0x7, 0x7, 0x2, 0x0, 0x9, 0x8001, 0xbf4, 0x5, 0x1000, 0x3, 0x4, 0x6], [0x800, 0x5, 0x9, 0x40, 0x2b8, 0x9, 0x1, 0xffffffff, 0x1ff, 0xf7, 0x0, 0x1, 0x4, 0x10, 0x1000, 0x6, 0xfffffffc, 0x8, 0x2, 0x9, 0x4, 0x0, 0x40, 0x1ff, 0xc, 0x1, 0x4, 0x7, 0x0, 0x1, 0x5, 0x2, 0x7, 0x5, 0x1000, 0x8, 0x1, 0x5, 0x642, 0x4b4, 0x8, 0x1, 0x90, 0x0, 0x3, 0x7, 0x6, 0x10000, 0xffffffff, 0x67, 0x401, 0xa, 0x9, 0x1e81b999, 0x1, 0xffffffff, 0xd, 0x7, 0xb82c, 0x800, 0x4c1e95d5, 0xd, 0xfffffeff, 0x3]}, ["", "", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20004004) 1.130519166s ago: executing program 2 (id=6455): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.130141807s ago: executing program 2 (id=6456): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xd18, 0x1, 0x0, 0x3, 0x9, 0xff3b}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.115830208s ago: executing program 4 (id=6457): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x397c9140}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="3b000000010006", 0x7) 992.91118ms ago: executing program 4 (id=6458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000000000a9760000ed171200"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x21780, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 957.609304ms ago: executing program 4 (id=6459): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 892.91682ms ago: executing program 4 (id=6460): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x8ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x874, 0x2, [@TCA_BASIC_POLICE={0x870, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x800, 0x4, 0x38, 0x2a5, 0x6, 0xff, 0x6, 0x5, 0x6430, 0x5, 0x7f, 0x0, 0x4, 0x7, 0x4, 0x8, 0x0, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x2, 0x7, 0x0, 0x5, 0x81, 0x5, 0xfffff800, 0x9, 0xb, 0x9, 0x0, 0x6, 0xd6, 0x6, 0xfffffffc, 0x10000008, 0x9, 0x7c, 0x6, 0x8, 0x2, 0x4, 0x7, 0xfff, 0x9, 0x7d, 0x8, 0x732, 0x7, 0x6, 0x7, 0x4, 0x4, 0x6, 0x1, 0x3, 0x8, 0x7, 0x3ff, 0x8, 0x4f, 0x5, 0x8, 0x1ff, 0xffffff00, 0x2, 0x7, 0x5, 0x5, 0x989, 0xffffffff, 0x0, 0xa60a, 0x3, 0x5, 0x8, 0xff, 0x0, 0x0, 0x7, 0x4, 0xe9a, 0x6, 0x4, 0x2, 0x2, 0x5, 0x4, 0x3, 0x7fff, 0x4, 0x5, 0x9, 0x100, 0x4, 0xfffffffe, 0x3, 0x8, 0x7, 0x4, 0x70, 0x2, 0x5, 0x3602cab7, 0x1, 0x7, 0x5, 0x107, 0x0, 0x800, 0x4, 0x2, 0x9, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x7, 0xfffffffc, 0x5, 0x0, 0x3c8, 0x10000, 0xfe4, 0xffff, 0x7, 0x4, 0x401, 0x8, 0x101, 0x4, 0x40000, 0x9, 0x2, 0x7, 0x80000001, 0x1, 0x7fff, 0x9d, 0x9, 0xbbe, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x90, 0x5, 0x9, 0x8, 0x6, 0x9, 0x400, 0x0, 0x8, 0xb9, 0xfffffffd, 0x5, 0xffffffff, 0x1, 0x100, 0x2, 0x8, 0x1000, 0xc, 0x1, 0x3ff, 0x5, 0x68, 0x0, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x6, 0x6, 0x9, 0x100, 0x6, 0x7, 0x7, 0x0, 0x3, 0x9, 0xa, 0x16, 0x4, 0x3, 0x7, 0x1ff, 0x3, 0xbf, 0x5, 0x7, 0x5, 0x4cc9, 0x7fffffff, 0xfffffff6, 0x3ff, 0x3, 0x9, 0x80000000, 0xcf8, 0x5b8, 0x4, 0x7fff, 0x5fa6, 0x5, 0x4, 0x1, 0x2, 0x0, 0x9, 0xa90a, 0x40, 0x400, 0x8, 0x0, 0x0, 0xe00, 0x1, 0x20a, 0xfffffff9, 0x3, 0x2, 0x8, 0x7ff, 0x9, 0x2, 0xd, 0xa1b, 0x6, 0xc, 0xcda, 0x2, 0xa6, 0x5, 0xec93, 0x1, 0x1eb, 0xdea, 0x9, 0x5, 0xff, 0x0, 0xfff, 0x7, 0x61, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}, @TCA_POLICE_RATE={0x404, 0x2, [0x695, 0xfff, 0x146b, 0x6, 0x3d8d, 0x200, 0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x80000000, 0x7f, 0x5, 0xe7, 0xf, 0x782b, 0xa7, 0x80, 0xffffffe0, 0xe, 0x401, 0x0, 0x3cc8, 0x0, 0x1, 0xa, 0xc860, 0x7, 0x0, 0x3, 0x7fff, 0x101, 0x3, 0x80000000, 0x8, 0x8004, 0x9, 0x80000001, 0x200, 0x4, 0x6, 0xffffffff, 0x7, 0x0, 0xda, 0x1, 0x200, 0x6, 0x80, 0xfffffff9, 0x0, 0x3, 0x2, 0x6, 0xf, 0x7, 0x2, 0x7, 0xffff, 0x9, 0x6, 0x9, 0x3352ecb4, 0x5, 0xfa33, 0x72, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6c, 0x7, 0x9, 0x92d7, 0xffffffff, 0xfffffffc, 0x101, 0x1, 0x5, 0x9, 0x495e, 0x80000000, 0xfffffff0, 0x1, 0x6362, 0x2400, 0x2, 0x8, 0x9, 0x3, 0x317, 0x80, 0x9, 0x3, 0x9, 0xaea8, 0xbf, 0xe, 0x9, 0x8, 0x5, 0xee, 0x5, 0x5, 0x400, 0x1ba9, 0x15400, 0x6, 0x8, 0x7f, 0xffff6e64, 0xfffffff7, 0x401, 0x40000, 0x8d7, 0x2, 0x200, 0x4, 0x5, 0xb5d, 0xfea, 0x8, 0xb2, 0x2, 0x2, 0x2, 0x200, 0x800, 0x4, 0x6, 0x4b87, 0xfffffffe, 0xd73, 0x5, 0x8, 0x3, 0x5, 0xfb27, 0x6, 0x7, 0x8, 0x2, 0x0, 0x1ff, 0x3, 0xd5, 0x477, 0xffff1be9, 0x10001, 0x0, 0x0, 0x0, 0x8000, 0x8000, 0x7, 0xff, 0x9, 0x8, 0x938e, 0x41, 0x7ff, 0x5, 0x0, 0xe793, 0xa1d, 0xfffffff9, 0xffff, 0x8, 0x1, 0x4, 0x2, 0x400, 0x3, 0x1, 0x8000, 0x6, 0xefee, 0xffffffff, 0xaa, 0x8, 0x8, 0xe, 0x6c, 0x61e1, 0x1, 0xcf0, 0x68, 0xed, 0x4, 0x82, 0x230, 0x7, 0x4, 0xfff, 0x637c5d46, 0x9, 0x97cb, 0x1, 0x1, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0x3, 0x1, 0x405, 0x6, 0x3dc9, 0xfffff503, 0x0, 0x4001, 0x9d, 0xd686, 0xc65, 0x8, 0x10000, 0x1, 0x7, 0x4, 0x10001, 0xb, 0x0, 0xf515, 0x2, 0x7d8, 0x5, 0x8000, 0x8000, 0x1, 0x5, 0xa, 0x8, 0x4, 0xd6, 0x8, 0x80000001, 0x2, 0x0, 0x8, 0xb9, 0xd9e, 0x9, 0x5, 0x9, 0x1, 0x2, 0x2, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) 353.543364ms ago: executing program 2 (id=6461): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0xfffffff5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff8, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=6462): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$peek(0x2, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000080)={0x14, r5, 0x50be6fea6f3bd4bb, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000804) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x20040001) kernel console output (not intermixed with test programs): ption [ 1301.646857][T20623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1301.665437][T13986] EXT4-fs (loop2): unmounting filesystem. [ 1301.735946][T20627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1303.794438][T20661] netlink: 'syz.4.4950': attribute type 11 has an invalid length. [ 1303.802383][T20661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1303.811977][T20661] netlink: 'syz.4.4950': attribute type 11 has an invalid length. [ 1303.819831][T20661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1303.841436][T13480] EXT4-fs (loop3): unmounting filesystem. [ 1303.888914][T20666] fuse: Bad value for 'rootmode' [ 1304.268145][T20673] xt_SECMARK: invalid mode: 2 [ 1306.206274][T20711] xt_hashlimit: size too large, truncated to 1048576 [ 1306.511738][ T40] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1306.554058][T20722] xt_SECMARK: invalid mode: 2 [ 1306.713267][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.765762][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.799269][ T40] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1306.822408][ T40] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1306.844032][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.862518][ T40] usb 3-1: config 0 descriptor?? [ 1307.235436][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1307.300557][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1307.541521][ T40] usbhid 3-1:0.0: can't add hid device: -71 [ 1307.597683][ T40] usbhid: probe of 3-1:0.0 failed with error -71 [ 1307.628929][T20749] fuse: Unknown parameter 'group_id00000000000000000000' [ 1307.664613][ T40] usb 3-1: USB disconnect, device number 30 [ 1308.423641][ T6799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1308.661766][ T6799] usb 5-1: Using ep0 maxpacket: 8 [ 1308.690370][ T6799] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.725227][ T6799] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1308.767798][ T6799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.795531][ T6799] usb 5-1: Product: syz [ 1308.810613][ T6799] usb 5-1: Manufacturer: syz [ 1309.046625][ T6799] usb 5-1: SerialNumber: syz [ 1309.517632][T20753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.748371][T20753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.345909][T20788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.381922][T20788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.638756][T20753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.712954][T20753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.143413][ T6799] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1311.187507][ T6799] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1311.371626][ T6799] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1311.730763][ T6799] usb 5-1: USB disconnect, device number 24 [ 1311.737124][ T6799] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1315.709321][T20872] loop3: detected capacity change from 0 to 512 [ 1315.746750][T20872] EXT4-fs: Ignoring removed oldalloc option [ 1315.791086][T20876] device syzkaller0 entered promiscuous mode [ 1319.971112][T20911] xt_hashlimit: size too large, truncated to 1048576 [ 1320.268668][T20920] loop3: detected capacity change from 0 to 256 [ 1320.785439][T20920] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1323.398555][T20952] device syzkaller0 entered promiscuous mode [ 1324.336939][T20968] fuse: Bad value for 'fd' [ 1324.374567][T20970] fuse: Bad value for 'fd' [ 1325.901947][ T6799] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1326.181765][ T6799] usb 4-1: Using ep0 maxpacket: 8 [ 1326.190373][ T6799] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1326.229874][ T6799] usb 4-1: config 179 has no interface number 0 [ 1326.261201][ T6799] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1326.600551][ T6799] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1326.667723][ T6799] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1326.679156][ T6799] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1326.690810][ T6799] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1326.706988][ T6799] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1326.716185][ T6799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.732468][T21005] loop2: detected capacity change from 0 to 512 [ 1326.741323][T21005] EXT4-fs (loop2): Invalid log block size: 100663297 [ 1326.754339][T20996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1328.494801][ T6799] usb 4-1: USB disconnect, device number 31 [ 1328.494839][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1328.509040][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1333.597495][T21099] xt_SECMARK: invalid mode: 2 [ 1334.787361][T21111] device syzkaller0 entered promiscuous mode [ 1335.261779][ T471] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1335.473554][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.498505][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.543384][ T471] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.581175][ T471] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1335.608026][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.654312][ T471] usb 3-1: config 0 descriptor?? [ 1336.375753][T21152] binder: 21149:21152 ioctl 4018620d 0 returned -22 [ 1337.022580][ T471] wacom 0003:056A:00EC.0015: unknown main item tag 0x1 [ 1337.039660][ T471] wacom 0003:056A:00EC.0015: unknown main item tag 0x0 [ 1337.049846][ T471] wacom 0003:056A:00EC.0015: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.2-1/input0 [ 1337.177762][ T471] usb 3-1: USB disconnect, device number 31 [ 1337.840518][T21160] fido_id[21160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1337.846334][T21162] fuse: Bad value for 'rootmode' [ 1338.172781][T21172] loop2: detected capacity change from 0 to 512 [ 1338.207078][T21172] EXT4-fs (loop2): Invalid log block size: 100663297 [ 1340.466460][T21183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1340.571268][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1341.087295][ T28] audit: type=1400 audit(1762971547.865:817): avc: denied { read append } for pid=21187 comm="syz.2.5092" name="file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1341.191298][ T28] audit: type=1400 audit(1762971547.885:818): avc: denied { open } for pid=21187 comm="syz.2.5092" path="/369/file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1341.338133][ T28] audit: type=1326 audit(1762971548.115:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21208 comm="syz.1.5099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12138f6c9 code=0x0 [ 1341.476078][T21213] loop2: detected capacity change from 0 to 512 [ 1341.494640][T21213] EXT4-fs: Ignoring removed oldalloc option [ 1341.561714][ T471] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1341.751691][ T471] usb 4-1: Using ep0 maxpacket: 8 [ 1341.763106][ T471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.784245][ T471] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1341.802112][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.819700][ T471] usb 4-1: Product: syz [ 1341.828978][ T471] usb 4-1: Manufacturer: syz [ 1341.838413][ T471] usb 4-1: SerialNumber: syz [ 1342.076508][T21222] loop2: detected capacity change from 0 to 256 [ 1342.111000][T21222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1342.434760][T21205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.577656][T21205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.875869][T21225] fuse: Bad value for 'rootmode' [ 1343.106578][T21205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.122363][T21205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.332135][T21205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.340564][ T511] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1343.349994][T21205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.522717][ T511] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1343.531095][ T511] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1343.542974][ T511] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.560107][ T511] usb 5-1: config 220 has no interface number 2 [ 1343.570148][ T511] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1343.589049][ T511] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1343.595965][ T511] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1343.602967][ T511] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1343.622797][ T511] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1343.631882][ T511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.640230][ T511] usb 5-1: Product: syz [ 1343.841594][ T471] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1343.850266][ T471] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1343.852595][ T511] usb 5-1: Manufacturer: syz [ 1343.865843][ T511] usb 5-1: SerialNumber: syz [ 1343.921169][T21238] fuse: Bad value for 'fd' [ 1344.064642][ T471] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1344.077016][ T511] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1344.084203][ T511] usb 5-1: No valid video chain found. [ 1344.084518][ T471] usb 4-1: USB disconnect, device number 32 [ 1344.096927][ T471] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1344.104046][ T511] usb 5-1: USB disconnect, device number 25 [ 1344.168871][T21248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1344.266773][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1345.262697][T21281] xt_SECMARK: invalid mode: 2 [ 1345.353398][T21283] fuse: Bad value for 'rootmode' [ 1345.829542][T21306] fuse: Bad value for 'fd' [ 1346.950061][T21324] fuse: Bad value for 'fd' [ 1347.812505][ T511] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1348.212779][ T511] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1348.221922][ T511] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1348.234941][ T511] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.261712][ T511] usb 4-1: config 220 has no interface number 2 [ 1348.274045][ T511] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.297309][ T511] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1348.311345][ T511] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1348.324573][ T511] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1348.339131][ T511] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1348.368530][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.393177][ T511] usb 4-1: Product: syz [ 1348.402642][ T511] usb 4-1: Manufacturer: syz [ 1348.432537][T21353] fuse: Bad value for 'fd' [ 1348.441546][ T511] usb 4-1: SerialNumber: syz [ 1348.727644][ T511] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1348.735481][ T511] usb 4-1: No valid video chain found. [ 1348.752768][ T511] usb 4-1: USB disconnect, device number 33 [ 1348.926945][T21367] xt_SECMARK: invalid mode: 2 [ 1349.091481][T21369] fuse: Bad value for 'fd' [ 1349.212617][T21374] device syzkaller0 entered promiscuous mode [ 1349.910011][T21390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1350.650443][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1351.411788][ T511] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1351.441102][T21401] fuse: Bad value for 'fd' [ 1353.012401][ T511] usb 3-1: device descriptor read/all, error -71 [ 1353.044891][T21424] fuse: Unknown parameter 'use00000000000000000000' [ 1353.397944][T21431] xt_SECMARK: invalid mode: 2 [ 1353.604881][ T19] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1354.926176][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5160'. [ 1354.966088][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5160'. [ 1355.233809][ T19] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1355.245757][ T19] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1355.254816][ T19] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.963387][ T19] usb 1-1: config 220 has no interface number 2 [ 1355.973793][ T19] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.994026][ T19] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1356.008447][ T19] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1356.042088][ T19] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1356.063247][ T19] usb 1-1: string descriptor 0 read error: -71 [ 1356.075622][ T19] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1356.183458][T21463] fuse: Unknown parameter 'use00000000000000000000' [ 1356.192527][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.263486][ T19] usb 1-1: can't set config #220, error -71 [ 1356.296894][ T19] usb 1-1: USB disconnect, device number 21 [ 1356.548286][T21481] overlayfs: failed to resolve './file0': -2 [ 1356.673513][T21486] xt_SECMARK: invalid mode: 2 [ 1357.723499][T21502] fuse: Unknown parameter 'user_i00000000000000000000' [ 1357.789816][T21503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5176'. [ 1357.843294][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5176'. [ 1357.866413][ T40] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1358.203484][ T40] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1358.234223][ T40] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1358.364066][ T40] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.591432][ T40] usb 3-1: config 220 has no interface number 2 [ 1358.597932][ T40] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1358.685445][ T40] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1358.693057][ T40] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1358.700220][ T40] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1358.777117][T21517] netlink: 'syz.3.5171': attribute type 11 has an invalid length. [ 1358.785023][T21517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1358.794462][T21517] netlink: 'syz.3.5171': attribute type 11 has an invalid length. [ 1358.802379][T21517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1359.020671][ T40] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1359.053256][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.090163][ T40] usb 3-1: Product: syz [ 1359.112280][ T40] usb 3-1: Manufacturer: syz [ 1359.127449][ T40] usb 3-1: SerialNumber: syz [ 1359.344591][ T40] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1359.350963][ T40] usb 3-1: No valid video chain found. [ 1359.359731][ T40] usb 3-1: USB disconnect, device number 34 [ 1359.642317][T21534] xt_SECMARK: invalid mode: 2 [ 1362.668530][T21581] xt_SECMARK: invalid mode: 2 [ 1363.381877][ T40] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1363.631751][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 1363.639027][ T40] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1364.194623][ T40] usb 4-1: config 179 has no interface number 0 [ 1364.200930][ T40] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1364.303750][ T40] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1364.321666][ T40] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1364.333054][ T40] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1364.345416][ T40] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1364.418166][ T40] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1364.427963][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.461314][T21585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1364.999268][ T19] usb 4-1: USB disconnect, device number 34 [ 1364.999320][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1365.014911][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1365.136907][T21615] fuse: Unknown parameter 'user_i00000000000000000000' [ 1365.981684][T12037] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1366.247592][T12037] usb 2-1: Using ep0 maxpacket: 8 [ 1366.289093][T12037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.504699][T12037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1366.526997][T21636] fuse: Unknown parameter 'use00000000000000000000' [ 1367.103436][T12037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.113132][T12037] usb 2-1: Product: syz [ 1367.117544][T12037] usb 2-1: Manufacturer: syz [ 1367.184453][T12037] usb 2-1: SerialNumber: syz [ 1367.984788][T21648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.041199][T21648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.151470][T21653] fuse: Unknown parameter 'use00000000000000000000' [ 1368.317256][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.363925][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.250121][T12037] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1370.286735][T12037] cdc_ncm 2-1:1.0: bind() failure [ 1370.543435][T12037] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1370.561865][T12037] cdc_ncm 2-1:1.1: bind() failure [ 1371.124920][T12037] usb 2-1: USB disconnect, device number 22 [ 1373.711824][T21688] fuse: Unknown parameter 'user_i00000000000000000000' [ 1373.721492][T21694] fuse: Bad value for 'fd' [ 1374.452934][T21704] netlink: 'syz.2.5228': attribute type 11 has an invalid length. [ 1374.460965][T21704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5228'. [ 1375.763788][T21713] binder: BINDER_SET_CONTEXT_MGR already set [ 1375.769839][T21713] binder: 21708:21713 ioctl 4018620d 200000000040 returned -16 [ 1376.810186][T21729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5235'. [ 1376.873172][T21729] x_tables: duplicate underflow at hook 3 [ 1377.360519][T21743] binder: 21740:21743 ioctl 4018620d 0 returned -22 [ 1377.421779][ T40] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1377.603857][T21745] device syzkaller0 entered promiscuous mode [ 1377.695209][ T40] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1377.709754][ T40] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1377.723939][ T40] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.752444][ T40] usb 1-1: config 220 has no interface number 2 [ 1377.758746][ T40] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1377.772281][ T40] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1377.779262][ T40] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1377.787410][ T40] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1377.797688][ T40] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1377.808478][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.817237][ T40] usb 1-1: Product: syz [ 1377.821501][ T40] usb 1-1: Manufacturer: syz [ 1377.826951][ T40] usb 1-1: SerialNumber: syz [ 1378.113486][T21759] fuse: Unknown parameter 'user_i00000000000000000000' [ 1378.207939][ T40] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1378.216085][ T40] usb 1-1: No valid video chain found. [ 1378.222952][ T40] usb 1-1: selecting invalid altsetting 0 [ 1378.245254][ T40] usb 1-1: USB disconnect, device number 22 [ 1379.865648][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1379.950621][T21784] x_tables: duplicate underflow at hook 3 [ 1380.066023][T21795] device syzkaller0 entered promiscuous mode [ 1381.125707][T21809] device syzkaller0 entered promiscuous mode [ 1381.146665][T21812] fuse: Unknown parameter 'user_id00000000000000000000' [ 1383.010257][T21837] device syzkaller0 entered promiscuous mode [ 1383.063878][T21848] fuse: Unknown parameter 'user_i00000000000000000000' [ 1383.326701][T21859] fuse: Unknown parameter 'user_id00000000000000000000' [ 1383.390404][T21861] x_tables: duplicate underflow at hook 3 [ 1385.938526][T21885] device syzkaller0 entered promiscuous mode [ 1387.920661][T21901] fuse: Bad value for 'fd' [ 1389.867095][T21932] fuse: Bad value for 'fd' [ 1390.107748][ T28] audit: type=1326 audit(1762971596.885:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.120586][T21937] device syzkaller0 entered promiscuous mode [ 1390.132407][ T28] audit: type=1326 audit(1762971596.915:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.169745][ T28] audit: type=1326 audit(1762971596.915:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.203725][ T28] audit: type=1326 audit(1762971596.915:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.228131][ T28] audit: type=1326 audit(1762971596.945:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.253432][T21943] x_tables: duplicate underflow at hook 3 [ 1390.259217][ T28] audit: type=1326 audit(1762971596.945:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.283053][ T28] audit: type=1326 audit(1762971596.945:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.314170][ T28] audit: type=1326 audit(1762971596.945:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.418060][ T28] audit: type=1326 audit(1762971596.945:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1390.476967][T21947] fuse: Bad value for 'fd' [ 1390.518183][ T28] audit: type=1326 audit(1762971596.945:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21938 comm="syz.3.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278f6c9 code=0x7ffc0000 [ 1393.596355][T21980] binder: 21977:21980 ioctl 4018620d 0 returned -22 [ 1394.049368][T21983] device syzkaller0 entered promiscuous mode [ 1394.190716][T21992] xt_SECMARK: invalid mode: 2 [ 1394.282552][T21995] fuse: Bad value for 'fd' [ 1396.469111][T22032] overlayfs: failed to resolve './file0': -2 [ 1396.493200][T22034] fuse: Bad value for 'fd' [ 1396.500357][T22030] device syzkaller0 entered promiscuous mode [ 1396.561706][ T19] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1396.752177][T22048] xt_SECMARK: invalid mode: 2 [ 1396.817203][T22047] netlink: 'syz.0.5330': attribute type 195 has an invalid length. [ 1396.842420][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 1396.863505][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.890709][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1396.901429][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.915339][ T19] usb 5-1: Product: syz [ 1396.919932][ T19] usb 5-1: Manufacturer: syz [ 1396.932829][ T19] usb 5-1: SerialNumber: syz [ 1397.729596][T22026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.836338][T22026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.127434][T22026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.145622][T22026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.356870][T22026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.371831][T22026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.827193][ T19] cdc_ncm 5-1:1.0: failed to get mac address [ 1398.835493][ T19] cdc_ncm 5-1:1.0: bind() failure [ 1398.846068][ T19] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1398.857986][ T19] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1398.875999][ T19] usb 5-1: USB disconnect, device number 26 [ 1399.232989][T22078] device syzkaller0 entered promiscuous mode [ 1399.347914][T22082] fuse: Bad value for 'fd' [ 1400.440303][T22095] xt_SECMARK: invalid mode: 2 [ 1402.609665][T22127] device syzkaller0 entered promiscuous mode [ 1402.756980][T22131] fuse: Unknown parameter '0x0000000000000005' [ 1403.140274][T22138] fuse: Invalid rootmode [ 1404.444815][ T1693] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1404.531800][T22159] xt_SECMARK: invalid mode: 2 [ 1404.641747][ T1693] usb 3-1: Using ep0 maxpacket: 8 [ 1404.648674][ T1693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.714129][ T1693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1404.781616][ T1693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.844177][ T1693] usb 3-1: Product: syz [ 1405.112463][ T1693] usb 3-1: Manufacturer: syz [ 1405.117133][ T1693] usb 3-1: SerialNumber: syz [ 1405.286684][T22168] device syzkaller0 entered promiscuous mode [ 1405.792479][T22180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.800949][T22180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.032098][T22143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.040847][T22143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.170074][T22183] fuse: Invalid rootmode [ 1406.267165][T22143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.279584][T22143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.822062][ T1693] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1406.829642][ T1693] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1407.026584][ T1693] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1407.062306][ T1693] usb 3-1: USB disconnect, device number 35 [ 1407.075023][ T1693] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1407.248513][T22215] device syzkaller0 entered promiscuous mode [ 1408.082049][T22239] binder: 22231:22239 ioctl 4018620d 0 returned -22 [ 1408.102012][T22238] xt_SECMARK: invalid mode: 2 [ 1408.990628][T22257] fuse: Invalid rootmode [ 1409.421674][ T511] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1409.613784][ T511] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1409.633848][ T511] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1409.668663][ T511] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.692174][ T511] usb 4-1: config 220 has no interface number 2 [ 1409.698537][ T511] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.711854][ T511] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1409.718668][ T511] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1409.749122][ T511] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1409.757822][ T511] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1409.766892][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.774915][ T511] usb 4-1: Product: syz [ 1409.779068][ T511] usb 4-1: Manufacturer: syz [ 1409.783684][ T511] usb 4-1: SerialNumber: syz [ 1410.180923][ T511] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1410.205972][ T511] usb 4-1: No valid video chain found. [ 1410.218890][T22277] device syzkaller0 entered promiscuous mode [ 1410.229338][ T511] usb 4-1: USB disconnect, device number 35 [ 1410.835507][T22287] netlink: 'syz.2.5390': attribute type 195 has an invalid length. [ 1413.686396][T22306] netlink: 'syz.2.5398': attribute type 195 has an invalid length. [ 1414.361683][T12037] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1414.533748][T22328] 9pnet_fd: Insufficient options for proto=fd [ 1415.042096][T12037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.055488][T12037] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1415.061678][ T40] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1415.064634][T12037] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1415.081084][T12037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.089852][T12037] usb 3-1: config 0 descriptor?? [ 1415.245532][T22344] netlink: 'syz.0.5410': attribute type 195 has an invalid length. [ 1415.313268][ T40] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1415.324861][ T40] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1415.335022][ T40] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.346004][ T40] usb 2-1: config 220 has no interface number 2 [ 1415.352632][ T40] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.398242][ T40] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1415.405205][ T40] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1415.412138][ T40] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1415.420342][ T40] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1415.429400][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.437396][ T40] usb 2-1: Product: syz [ 1415.441546][ T40] usb 2-1: Manufacturer: syz [ 1415.446243][ T40] usb 2-1: SerialNumber: syz [ 1415.656069][ T40] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1415.662630][ T40] usb 2-1: No valid video chain found. [ 1415.679368][ T40] usb 2-1: USB disconnect, device number 23 [ 1418.986096][ T471] usb 3-1: USB disconnect, device number 36 [ 1419.280604][T22392] fuse: Bad value for 'rootmode' [ 1419.509750][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1419.531720][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1420.582241][T22412] device syzkaller0 entered promiscuous mode [ 1420.821699][ T1693] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1421.003569][ T1693] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1421.025567][ T40] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1421.034542][ T1693] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1421.043799][ T1693] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.060368][ T1693] usb 3-1: config 220 has no interface number 2 [ 1421.066969][ T1693] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1421.082897][ T1693] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1421.089811][ T1693] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1421.097323][ T1693] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1421.110353][ T1693] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1421.120753][ T1693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.128993][ T1693] usb 3-1: Product: syz [ 1421.133526][ T1693] usb 3-1: Manufacturer: syz [ 1421.138173][ T1693] usb 3-1: SerialNumber: syz [ 1421.232048][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 1421.245095][ T40] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.298064][ T40] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.308017][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.316268][ T40] usb 1-1: Product: syz [ 1421.320490][ T40] usb 1-1: Manufacturer: syz [ 1421.325364][ T40] usb 1-1: SerialNumber: syz [ 1421.351403][ T1693] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1421.357800][ T1693] usb 3-1: No valid video chain found. [ 1421.367020][ T1693] usb 3-1: USB disconnect, device number 37 [ 1421.647537][T22431] fuse: Unknown parameter 'use00000000000000000000' [ 1421.812045][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.820646][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.965886][ T19] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1422.249031][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.273552][ T19] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1422.354397][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.375751][ T19] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1422.560133][ T19] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.572918][ T19] usb 2-1: config 220 has no interface number 2 [ 1422.579371][ T19] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1422.593846][ T19] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1422.657209][ T19] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1422.664566][ T19] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1422.774604][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.783898][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.792390][ T40] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1422.798548][ T40] cdc_ncm 1-1:1.0: bind() failure [ 1422.804775][ T40] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1422.811809][ T40] cdc_ncm 1-1:1.1: bind() failure [ 1422.823095][ T19] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1422.832207][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.841057][ T19] usb 2-1: Product: syz [ 1422.845304][ T19] usb 2-1: Manufacturer: syz [ 1422.849919][ T19] usb 2-1: SerialNumber: syz [ 1423.181629][ T19] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1423.188271][ T19] usb 2-1: No valid video chain found. [ 1423.194025][ T19] usb 2-1: selecting invalid altsetting 0 [ 1423.206674][ T19] usb 2-1: USB disconnect, device number 24 [ 1423.273667][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1423.282857][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1423.470077][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1423.520698][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1424.038269][ T6799] usb 1-1: USB disconnect, device number 23 [ 1425.340838][T22481] binder: 22475:22481 ioctl 4018620d 0 returned -22 [ 1427.124671][T22503] fuse: Unknown parameter '0x0000000000000005' [ 1427.142584][T22507] fuse: Unknown parameter 'use00000000000000000000' [ 1427.400466][T22514] netlink: 'syz.2.5458': attribute type 11 has an invalid length. [ 1427.408374][T22514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1427.425683][T22514] netlink: 'syz.2.5458': attribute type 11 has an invalid length. [ 1427.433551][T22514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1427.442876][T22514] netlink: 'syz.2.5458': attribute type 11 has an invalid length. [ 1427.450721][T22514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5458'. [ 1427.511687][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1428.201777][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 1428.208292][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.222080][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1428.231174][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.239447][ T19] usb 5-1: Product: syz [ 1428.243764][ T19] usb 5-1: Manufacturer: syz [ 1428.248408][ T19] usb 5-1: SerialNumber: syz [ 1428.656142][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.664723][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.873579][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.882086][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.092944][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.102354][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.032801][T22552] fuse: Bad value for 'fd' [ 1430.074479][ T19] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1430.086851][T22555] fuse: Unknown parameter 'user_i00000000000000000000' [ 1430.093962][ T19] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1430.278250][ T19] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1430.573692][T22565] fuse: Unknown parameter 'fd0x0000000000000005' [ 1430.879313][ T19] usb 5-1: USB disconnect, device number 27 [ 1430.885591][ T19] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1432.193237][ T19] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1432.649680][T22597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1432.716917][T22597] x_tables: duplicate underflow at hook 3 [ 1432.741697][ T6799] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1433.011696][ T6799] usb 2-1: Using ep0 maxpacket: 8 [ 1433.018916][ T6799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.169353][ T6799] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.265712][ T6799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.391615][ T6799] usb 2-1: Product: syz [ 1433.430955][ T6799] usb 2-1: Manufacturer: syz [ 1433.725967][ T19] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1433.729235][ T6799] usb 2-1: SerialNumber: syz [ 1433.749355][ T19] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1433.771696][ T19] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.803659][ T19] usb 4-1: config 220 has no interface number 2 [ 1433.810183][ T19] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1433.824711][ T19] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1433.831490][ T19] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1433.839981][ T19] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1433.859592][ T19] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1433.868707][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.876798][ T19] usb 4-1: Product: syz [ 1433.883196][ T19] usb 4-1: Manufacturer: syz [ 1433.888038][ T19] usb 4-1: SerialNumber: syz [ 1434.005708][T22615] netlink: 'syz.0.5486': attribute type 195 has an invalid length. [ 1434.121748][T12037] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1434.131910][ T19] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1434.145991][ T19] usb 4-1: No valid video chain found. [ 1434.233332][ T19] usb 4-1: USB disconnect, device number 36 [ 1434.295703][T22591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.331781][T12037] usb 5-1: Using ep0 maxpacket: 8 [ 1434.355226][T12037] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.405306][T22591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.462427][T22617] fuse: Unknown parameter 'fd0x0000000000000005' [ 1434.471564][T12037] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1434.493921][T12037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.503215][T12037] usb 5-1: Product: syz [ 1434.507482][T12037] usb 5-1: Manufacturer: syz [ 1434.513480][T12037] usb 5-1: SerialNumber: syz [ 1434.842664][T22623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.855924][T22623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.005905][T22608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.014470][T22608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.067360][T22591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.076009][T22591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.223405][T22608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.232036][T22608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.539255][T22608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.563217][ T6799] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1435.597553][ T6799] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1435.632887][T22608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.826768][ T6799] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1436.332499][ T6799] usb 2-1: USB disconnect, device number 25 [ 1436.338706][ T6799] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1436.508439][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1436.508455][ T28] audit: type=1326 audit(1762971643.285:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22662 comm="syz.0.5497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffad398f6c9 code=0x0 [ 1436.558125][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1436.645429][T22666] x_tables: duplicate underflow at hook 3 [ 1436.651109][T12037] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1436.657877][T12037] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1437.188221][T12037] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1437.200678][T12037] usb 5-1: USB disconnect, device number 28 [ 1437.206868][T12037] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1438.773099][T22694] netlink: 'syz.2.5500': attribute type 11 has an invalid length. [ 1438.780952][T22694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1438.790108][T22695] netlink: 'syz.2.5500': attribute type 11 has an invalid length. [ 1438.797939][T22695] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1438.806955][T22695] netlink: 'syz.2.5500': attribute type 11 has an invalid length. [ 1438.814779][T22695] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1438.840192][T22693] netlink: 'syz.3.5501': attribute type 195 has an invalid length. [ 1441.293382][T22736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5511'. [ 1441.430266][T22736] x_tables: duplicate underflow at hook 3 [ 1444.380977][ T471] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1444.982753][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.997254][T22768] incfs: Backing dir is not set, filesystem can't be mounted. [ 1445.004799][T22768] incfs: mount failed -2 [ 1445.034442][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.044821][ T471] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.085233][ T471] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1445.100704][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.117690][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5526'. [ 1445.127284][ T471] usb 1-1: config 0 descriptor?? [ 1445.342263][T22787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1445.420143][T22787] x_tables: duplicate underflow at hook 3 [ 1445.543668][ T471] usbhid 1-1:0.0: can't add hid device: -71 [ 1445.556245][ T471] usbhid: probe of 1-1:0.0 failed with error -71 [ 1445.575046][ T471] usb 1-1: USB disconnect, device number 24 [ 1447.526385][T22825] device syzkaller0 entered promiscuous mode [ 1449.014344][T22851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1452.472265][T22895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1452.485946][T22897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1453.519504][T22916] fuse: Bad value for 'fd' [ 1454.919777][T22942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1455.015733][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1457.459147][T22965] overlayfs: failed to resolve './file1': -2 [ 1457.515895][T22973] fuse: Bad value for 'fd' [ 1457.801760][ T6799] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1458.041681][ T6799] usb 5-1: Using ep0 maxpacket: 8 [ 1458.047826][ T6799] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1458.056265][ T6799] usb 5-1: config 179 has no interface number 0 [ 1458.062566][ T6799] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1458.073664][ T6799] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1458.084934][ T6799] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1458.096097][ T6799] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1458.107531][ T6799] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1458.120788][ T6799] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1458.129845][ T6799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.138668][T22972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1458.533757][T22998] binder: 22990:22998 ioctl 4018620d 0 returned -22 [ 1458.779180][ T19] usb 5-1: USB disconnect, device number 29 [ 1458.779211][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1458.799672][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1459.404322][T23011] xt_SECMARK: invalid mode: 2 [ 1460.205215][T23018] netlink: 'syz.2.5592': attribute type 195 has an invalid length. [ 1462.363203][T23059] xt_SECMARK: invalid mode: 2 [ 1463.605421][ T511] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1463.822113][ T511] usb 2-1: Using ep0 maxpacket: 8 [ 1463.853272][ T511] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1463.862003][ T511] usb 2-1: config 179 has no interface number 0 [ 1463.868362][ T511] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1463.882084][ T511] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1464.477165][ T511] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1464.488391][ T511] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1464.512442][ T511] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1464.531693][ T511] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1464.540797][ T511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.659773][T23088] netlink: 'syz.0.5611': attribute type 195 has an invalid length. [ 1465.029082][T23071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1465.688230][ T511] usb 2-1: USB disconnect, device number 26 [ 1465.694221][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1465.694259][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1468.172230][T23128] fuse: Bad value for 'rootmode' [ 1469.330457][T23145] netlink: 'syz.3.5625': attribute type 195 has an invalid length. [ 1472.265905][T23176] device syzkaller0 entered promiscuous mode [ 1472.897913][T23191] netlink: 'syz.2.5638': attribute type 195 has an invalid length. [ 1473.634259][ T511] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1473.842820][ T511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.871019][ T511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.911133][ T511] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1473.962774][ T511] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1474.011765][ T511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.033299][ T511] usb 2-1: config 0 descriptor?? [ 1474.444223][ T511] usbhid 2-1:0.0: can't add hid device: -71 [ 1475.188487][ T511] usbhid: probe of 2-1:0.0 failed with error -71 [ 1475.198607][ T511] usb 2-1: USB disconnect, device number 27 [ 1476.504375][T23230] xt_SECMARK: invalid mode: 2 [ 1476.824366][ T19] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1477.217924][ T19] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1477.241698][ T19] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1477.250611][ T19] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.274382][ T19] usb 2-1: config 220 has no interface number 2 [ 1477.280679][ T19] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1477.307528][ T19] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1477.328801][ T19] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1477.361346][T23239] netlink: 'syz.0.5650': attribute type 195 has an invalid length. [ 1477.384807][ T19] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1477.441474][ T19] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1477.498678][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.560192][ T19] usb 2-1: Product: syz [ 1477.739797][ T19] usb 2-1: Manufacturer: syz [ 1477.808596][ T19] usb 2-1: SerialNumber: syz [ 1478.382673][ T19] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1478.391711][ T19] usb 2-1: No valid video chain found. [ 1478.397223][ T19] usb 2-1: selecting invalid altsetting 0 [ 1478.413746][ T19] usb 2-1: USB disconnect, device number 28 [ 1483.412614][T23283] binder: 23278:23283 ioctl 4018620d 0 returned -22 [ 1484.706303][T23298] netlink: 'syz.0.5664': attribute type 11 has an invalid length. [ 1484.714220][T23298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1484.737533][T23298] netlink: 'syz.0.5664': attribute type 11 has an invalid length. [ 1484.745457][T23298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1484.754548][T23298] netlink: 'syz.0.5664': attribute type 11 has an invalid length. [ 1484.762382][T23298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1485.024183][ T28] audit: type=1326 audit(1762971691.805:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23302 comm="syz.3.5666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6278f6c9 code=0x0 [ 1488.042800][T23345] syz.4.5676[23345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.043879][T23345] syz.4.5676[23345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.167381][T23345] xt_policy: neither incoming nor outgoing policy selected [ 1493.059209][T23385] device syzkaller0 entered promiscuous mode [ 1493.461696][ T471] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1493.642685][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.661695][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.671463][ T471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1493.684513][ T471] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1493.693731][ T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.706291][ T471] usb 4-1: config 0 descriptor?? [ 1494.115074][ T471] usbhid 4-1:0.0: can't add hid device: -71 [ 1494.124360][ T471] usbhid: probe of 4-1:0.0 failed with error -71 [ 1494.140541][ T471] usb 4-1: USB disconnect, device number 37 [ 1499.953097][T23488] netlink: 'syz.1.5715': attribute type 195 has an invalid length. [ 1500.481433][ T471] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1501.701696][ T471] usb 3-1: Using ep0 maxpacket: 8 [ 1501.707813][ T471] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.790098][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1502.836086][ T471] usb 3-1: string descriptor 0 read error: -71 [ 1502.876072][ T471] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1504.830312][ T471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.839830][ T471] usb 3-1: can't set config #1, error -71 [ 1504.847153][ T471] usb 3-1: USB disconnect, device number 38 [ 1508.374790][T23548] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1508.655826][T23557] syz.4.5731[23557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1508.657456][T23557] syz.4.5731[23557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1510.003873][T23557] xt_policy: neither incoming nor outgoing policy selected [ 1511.898020][T23592] syz.3.5740[23592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1511.898344][T23592] syz.3.5740[23592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1511.929408][T23592] xt_policy: neither incoming nor outgoing policy selected [ 1513.339612][T23614] binder: 23607:23614 ioctl 4018620d 0 returned -22 [ 1515.802752][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5760'. [ 1519.714234][T23725] syz.4.5775[23725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1519.714625][T23725] syz.4.5775[23725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1519.749519][T23725] xt_policy: neither incoming nor outgoing policy selected [ 1521.283286][T23754] syz.0.5782[23754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1521.283359][T23754] syz.0.5782[23754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1521.296633][T23754] xt_policy: neither incoming nor outgoing policy selected [ 1522.689665][ T471] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1523.205828][T23775] xt_policy: neither incoming nor outgoing policy selected [ 1523.267930][ T471] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.370349][ T471] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1523.455102][T23779] xt_hashlimit: size too large, truncated to 1048576 [ 1523.463084][ T471] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1523.527462][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.546239][ T471] usb 1-1: config 0 descriptor?? [ 1523.569137][ T471] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1523.854728][T23793] netlink: 'syz.4.5796': attribute type 11 has an invalid length. [ 1523.862624][T23793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1523.880432][T23793] netlink: 'syz.4.5796': attribute type 11 has an invalid length. [ 1523.888301][T23793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1523.897679][T23793] netlink: 'syz.4.5796': attribute type 11 has an invalid length. [ 1523.905543][T23793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1524.036799][ T28] audit: type=1400 audit(1762971730.815:850): avc: denied { relabelfrom } for pid=23794 comm="syz.3.5797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1524.057153][ T28] audit: type=1400 audit(1762971730.825:851): avc: denied { relabelto } for pid=23794 comm="syz.3.5797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1524.088841][T23795] device syzkaller0 entered promiscuous mode [ 1525.481319][ T471] usb 1-1: USB disconnect, device number 25 [ 1525.502462][T23825] xt_policy: neither incoming nor outgoing policy selected [ 1528.915690][T23863] netlink: 'syz.1.5815': attribute type 195 has an invalid length. [ 1529.586146][T23872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5820'. [ 1530.701736][ T471] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1530.901757][ T471] usb 4-1: Using ep0 maxpacket: 8 [ 1530.908787][ T471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.952568][ T471] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1530.990083][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.024140][ T471] usb 4-1: Product: syz [ 1531.042663][ T471] usb 4-1: Manufacturer: syz [ 1531.047454][ T471] usb 4-1: SerialNumber: syz [ 1531.587940][T23897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.597756][T23897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.038450][T23897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.106407][T23897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.586235][T23917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1532.622996][T23897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.638590][T23897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.352330][ T471] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1533.358955][ T471] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1533.640566][ T471] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1533.881497][ T471] usb 4-1: USB disconnect, device number 38 [ 1534.062164][ T471] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1537.040106][T23958] xt_SECMARK: invalid mode: 2 [ 1537.228924][T23968] fuse: Bad value for 'fd' [ 1537.257861][T23963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1537.658446][ T511] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1537.947853][ T511] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.980475][ T511] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1537.995653][ T511] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1538.030553][ T511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.282024][ T511] usb 1-1: config 0 descriptor?? [ 1538.403320][ T511] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1538.587959][T23994] netlink: 'syz.1.5854': attribute type 195 has an invalid length. [ 1539.207599][T24002] xt_SECMARK: invalid mode: 2 [ 1540.244757][ T471] usb 1-1: USB disconnect, device number 26 [ 1541.159848][T24016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1541.258516][T24021] device syzkaller0 entered promiscuous mode [ 1543.174690][T24046] xt_SECMARK: invalid mode: 2 [ 1543.214083][T24047] netlink: 'syz.4.5868': attribute type 195 has an invalid length. [ 1544.813192][T24065] fuse: Unknown parameter 'fd0x0000000000000005' [ 1545.469069][T24089] xt_SECMARK: invalid mode: 2 [ 1547.836894][T24110] netlink: 'syz.2.5886': attribute type 195 has an invalid length. [ 1548.089785][T12037] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1548.422763][T12037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.441028][T12037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.457101][T12037] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1548.478238][T12037] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1548.493628][T12037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.515005][T12037] usb 1-1: config 0 descriptor?? [ 1548.936101][T24130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.943196][T24130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.950806][T24130] device bridge_slave_0 entered promiscuous mode [ 1548.957928][T24130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.964959][T24130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.972275][T24130] device bridge_slave_1 entered promiscuous mode [ 1549.018193][T24130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.025252][T24130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.032531][T24130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.039550][T24130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.062871][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1549.070494][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.077882][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.086947][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1549.095214][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.102254][T20553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.112849][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1549.121019][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.125317][T12037] usbhid 1-1:0.0: can't add hid device: -71 [ 1549.128052][T20553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.134090][T12037] usbhid: probe of 1-1:0.0 failed with error -71 [ 1549.155382][T12037] usb 1-1: USB disconnect, device number 27 [ 1549.162145][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1549.170097][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1549.182889][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1549.196161][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1549.204211][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1549.211602][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1549.219563][T24130] device veth0_vlan entered promiscuous mode [ 1549.231164][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1549.243140][T24130] device veth1_macvtap entered promiscuous mode [ 1549.253229][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1549.271521][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1549.522993][T24149] loop4: detected capacity change from 0 to 256 [ 1549.834563][ T338] device bridge_slave_1 left promiscuous mode [ 1549.850498][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.091074][ T338] device bridge_slave_0 left promiscuous mode [ 1550.706081][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.756325][ T338] device veth1_macvtap left promiscuous mode [ 1550.768284][ T338] device veth0_vlan left promiscuous mode [ 1550.970245][T24170] xt_SECMARK: invalid mode: 2 [ 1551.264277][T24153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1551.276301][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1552.323422][T24199] 9pnet_fd: Insufficient options for proto=fd [ 1554.111979][T24219] syz.2.5911[24219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1554.112054][T24219] syz.2.5911[24219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1554.151622][T24220] xt_policy: neither incoming nor outgoing policy selected [ 1556.035112][T24222] netlink: 'syz.3.5913': attribute type 11 has an invalid length. [ 1556.042972][T24222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1556.052258][T24223] netlink: 'syz.3.5913': attribute type 11 has an invalid length. [ 1556.060069][T24223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1556.069093][T24223] netlink: 'syz.3.5913': attribute type 11 has an invalid length. [ 1556.077008][T24223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1556.245716][T24233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1556.257035][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1558.557135][T24285] netlink: 'syz.4.5929': attribute type 32 has an invalid length. [ 1558.599615][T24285] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5929'. [ 1559.427940][T24297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1559.437326][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1563.591502][T24385] loop4: detected capacity change from 0 to 256 [ 1563.629152][T24385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1564.559367][ T28] audit: type=1400 audit(1762971771.335:852): avc: denied { remove_name } for pid=13724 comm="syz-executor" name=".index" dev="loop0" ino=1048794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1564.765709][ T28] audit: type=1400 audit(1762971771.365:853): avc: denied { rmdir } for pid=13724 comm="syz-executor" name=".index" dev="loop0" ino=1048794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1565.100487][T24400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.131790][T24400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.139264][T24400] device bridge_slave_0 entered promiscuous mode [ 1565.167555][T24400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.190874][T24400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.212451][T24400] device bridge_slave_1 entered promiscuous mode [ 1566.076585][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1566.096967][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1566.242102][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1566.262243][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1566.290861][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.297923][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.335746][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1566.356180][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1566.391922][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.399001][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.411150][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1566.434222][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1566.449921][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1566.466746][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1566.501075][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1566.511771][ T471] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1566.522991][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1566.531346][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1566.555222][T24400] device veth0_vlan entered promiscuous mode [ 1566.578284][T24400] device veth1_macvtap entered promiscuous mode [ 1566.626538][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1566.642056][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1566.650191][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1566.711716][ T471] usb 5-1: Using ep0 maxpacket: 8 [ 1566.738851][ T471] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.838746][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1566.959494][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1566.993156][ T471] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1567.074320][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1567.121520][ T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.240593][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1567.291365][ T471] usb 5-1: Product: syz [ 1567.347773][ T471] usb 5-1: Manufacturer: syz [ 1567.447915][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1567.456161][ T471] usb 5-1: SerialNumber: syz [ 1567.461149][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1567.882396][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1567.892052][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1567.955357][T24405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.974172][T24405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.243687][T24405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.252231][T24405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.324873][ T28] audit: type=1326 audit(1762971775.105:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.349264][ T28] audit: type=1326 audit(1762971775.105:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.375431][ T28] audit: type=1326 audit(1762971775.105:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.399181][ T28] audit: type=1326 audit(1762971775.105:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.429250][ T28] audit: type=1326 audit(1762971775.105:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.453554][ T28] audit: type=1326 audit(1762971775.105:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.462753][T24455] device syzkaller0 entered promiscuous mode [ 1568.477576][T24405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.519213][T24405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.581512][ T28] audit: type=1326 audit(1762971775.105:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.678600][T24048] device veth1_macvtap left promiscuous mode [ 1568.684703][T24048] device veth0_vlan left promiscuous mode [ 1568.692968][ T28] audit: type=1326 audit(1762971775.105:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24448 comm="syz.2.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e60f8f6c9 code=0x7ffc0000 [ 1568.955728][T24464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.962847][T24464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.970384][T24464] device bridge_slave_0 entered promiscuous mode [ 1568.979413][T24464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.987719][T24464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.998686][T24464] device bridge_slave_1 entered promiscuous mode [ 1569.095191][T24468] netlink: 'syz.2.5977': attribute type 11 has an invalid length. [ 1569.103136][T24468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1569.112842][T24469] netlink: 'syz.2.5977': attribute type 11 has an invalid length. [ 1569.120965][T24469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1569.130552][T24469] netlink: 'syz.2.5977': attribute type 11 has an invalid length. [ 1569.138460][T24469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1569.207425][ T471] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1569.214272][ T471] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1569.249554][T24464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.256687][T24464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.264000][T24464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.271038][T24464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.282532][T24480] netlink: 'syz.3.5979': attribute type 195 has an invalid length. [ 1569.306036][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1569.313852][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.321118][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.333046][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1569.341278][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.348339][T20553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.356192][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1569.365478][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.372550][T20553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.386837][ T471] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1569.398522][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1569.406929][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1569.428283][ T471] usb 5-1: USB disconnect, device number 30 [ 1569.442271][ T471] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1569.454589][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1569.471520][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1569.480591][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1569.488462][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1569.499608][T24464] device veth0_vlan entered promiscuous mode [ 1569.514985][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1569.524728][T24464] device veth1_macvtap entered promiscuous mode [ 1569.536560][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.555257][T20553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1569.851922][ T1693] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1569.906558][T24048] device bridge_slave_1 left promiscuous mode [ 1569.915926][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.926575][T24048] device bridge_slave_0 left promiscuous mode [ 1569.932830][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.941071][T24048] device veth1_macvtap left promiscuous mode [ 1569.947976][T24048] device veth0_vlan left promiscuous mode [ 1570.032008][ T1693] usb 2-1: Using ep0 maxpacket: 8 [ 1570.038138][ T1693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.121806][ T1693] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1570.130875][ T1693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.146813][ T1693] usb 2-1: Product: syz [ 1570.155345][ T1693] usb 2-1: Manufacturer: syz [ 1570.162357][ T1693] usb 2-1: SerialNumber: syz [ 1570.238439][T24501] loop0: detected capacity change from 0 to 512 [ 1570.268815][T24501] EXT4-fs (loop0): Invalid log block size: 100663297 [ 1571.098149][T24505] binder: BINDER_SET_CONTEXT_MGR already set [ 1571.104262][T24505] binder: 24502:24505 ioctl 4018620d 200000000040 returned -16 [ 1571.548617][T24506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.557214][T24506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.622835][T24511] device veth3 entered promiscuous mode [ 1571.784997][T24521] loop0: detected capacity change from 0 to 512 [ 1571.797131][T24486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.810231][T24521] EXT4-fs: Ignoring removed oldalloc option [ 1571.821802][T24486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.040935][T24486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.059640][T24486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.080501][ T1693] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1572.087696][ T1693] cdc_ncm 2-1:1.0: bind() failure [ 1572.103088][ T1693] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1572.123018][ T1693] cdc_ncm 2-1:1.1: bind() failure [ 1572.143250][T24526] device syzkaller0 entered promiscuous mode [ 1572.275350][T24529] netlink: 'syz.4.5993': attribute type 195 has an invalid length. [ 1572.881979][T24540] syz.3.5995[24540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.882054][T24540] syz.3.5995[24540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.975968][T24540] xt_policy: neither incoming nor outgoing policy selected [ 1573.508312][ T288] usb 2-1: USB disconnect, device number 29 [ 1575.753783][T24556] loop0: detected capacity change from 0 to 1024 [ 1575.760451][T24556] EXT4-fs: Ignoring removed orlov option [ 1575.913271][T24556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1576.705795][T24580] loop1: detected capacity change from 0 to 4096 [ 1577.134918][T24580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1577.276009][T24580] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1577.284346][T24580] System zones: 0-5 [ 1577.328306][T24580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1577.451724][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1577.451747][ T28] audit: type=1400 audit(1762971784.185:886): avc: denied { name_bind } for pid=24583 comm="syz.4.6006" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1578.852807][T24464] EXT4-fs (loop1): unmounting filesystem. [ 1579.880374][T24400] EXT4-fs (loop0): unmounting filesystem. [ 1580.264382][T24620] netlink: 'syz.0.6014': attribute type 195 has an invalid length. [ 1582.633069][T24644] binder: BINDER_SET_CONTEXT_MGR already set [ 1582.639084][T24644] binder: 24634:24644 ioctl 4018620d 200000000040 returned -16 [ 1582.665984][T24631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.673318][T24631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.680851][T24631] device bridge_slave_0 entered promiscuous mode [ 1582.687987][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.695228][T24631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.702843][T24631] device bridge_slave_1 entered promiscuous mode [ 1582.764129][T24647] syz.0.6022[24647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.764445][T24647] syz.0.6022[24647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1582.791583][T24647] xt_policy: neither incoming nor outgoing policy selected [ 1582.819381][T24558] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1583.035610][T24558] usb 5-1: device descriptor read/64, error -71 [ 1583.650393][ T334] tipc: Left network mode [ 1584.012949][T24558] usb 5-1: device descriptor read/64, error -71 [ 1584.643216][T24558] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1585.083332][T24558] usb 5-1: device descriptor read/64, error -71 [ 1585.153735][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1585.161524][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.170701][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1585.179605][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.189476][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.196515][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.204710][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1585.214959][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1585.223366][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.232400][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.239453][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.275937][T24678] syz.2.6028[24678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.276242][T24678] syz.2.6028[24678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.301893][T24678] xt_policy: neither incoming nor outgoing policy selected [ 1585.440131][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1586.152393][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1586.180820][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1586.220139][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1586.278751][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1586.287800][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1586.315197][ T334] device bridge_slave_1 left promiscuous mode [ 1586.325256][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.348306][ T334] device bridge_slave_0 left promiscuous mode [ 1586.358846][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.446539][ T334] device veth1_macvtap left promiscuous mode [ 1586.480354][ T334] device veth0_vlan left promiscuous mode [ 1586.798330][T24631] device veth0_vlan entered promiscuous mode [ 1586.805684][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1586.813999][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1586.829759][T24631] device veth1_macvtap entered promiscuous mode [ 1586.840367][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1586.848453][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1586.856159][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1586.864695][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1586.873247][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1586.889969][T24694] device syzkaller0 entered promiscuous mode [ 1586.903912][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1586.912868][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1586.921312][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1586.929757][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1587.073328][T24709] device syzkaller0 entered promiscuous mode [ 1587.339180][T24717] netlink: 'syz.4.6040': attribute type 195 has an invalid length. [ 1587.451727][T12037] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1587.631668][T12037] usb 2-1: Using ep0 maxpacket: 8 [ 1587.637742][T12037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.650633][T12037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1587.659809][T12037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.667814][T12037] usb 2-1: Product: syz [ 1587.672011][T12037] usb 2-1: Manufacturer: syz [ 1587.676578][T12037] usb 2-1: SerialNumber: syz [ 1588.117210][T24712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.133887][T24712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.360214][T24712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.372884][T24712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.354766][T24712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.424931][T24712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.951745][T24729] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1590.032290][T24754] device syzkaller0 entered promiscuous mode [ 1590.141730][T12037] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1590.148198][T12037] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1590.162774][T24729] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1590.176504][T24729] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1590.185803][T24729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.197344][T24729] usb 1-1: config 0 descriptor?? [ 1590.203468][T24729] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1590.226699][T12037] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1590.257863][T12037] usb 2-1: USB disconnect, device number 30 [ 1590.274404][T12037] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1590.297526][T24767] netlink: 'syz.4.6053': attribute type 195 has an invalid length. [ 1590.983987][T24805] loop1: detected capacity change from 0 to 256 [ 1591.011555][T24805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1592.669023][T24298] usb 1-1: USB disconnect, device number 28 [ 1592.702157][T24829] device syzkaller0 entered promiscuous mode [ 1592.771094][ T28] audit: type=1326 audit(1762971799.545:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.810976][ T28] audit: type=1326 audit(1762971799.545:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.843849][ T28] audit: type=1326 audit(1762971799.565:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.867945][ T28] audit: type=1326 audit(1762971799.565:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.931497][ T28] audit: type=1326 audit(1762971799.565:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.964535][ T28] audit: type=1326 audit(1762971799.565:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1592.998099][ T28] audit: type=1326 audit(1762971799.565:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1593.049256][ T28] audit: type=1326 audit(1762971799.565:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1593.079285][ T28] audit: type=1326 audit(1762971799.565:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1593.104744][ T28] audit: type=1326 audit(1762971799.565:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24830 comm="syz.0.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5378f6c9 code=0x7ffc0000 [ 1594.386060][T24862] netlink: 'syz.0.6074': attribute type 195 has an invalid length. [ 1595.187101][T24869] device syzkaller0 entered promiscuous mode [ 1596.030715][T24880] syz.0.6078[24880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1596.030787][T24880] syz.0.6078[24880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1596.043099][T24880] xt_policy: neither incoming nor outgoing policy selected [ 1596.793894][T24893] loop3: detected capacity change from 0 to 512 [ 1596.806485][T24893] EXT4-fs: Ignoring removed oldalloc option [ 1602.762704][T24981] loop0: detected capacity change from 0 to 256 [ 1602.839368][T24981] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1604.502923][T24994] loop3: detected capacity change from 0 to 512 [ 1604.515392][T24994] EXT4-fs: Ignoring removed oldalloc option [ 1608.144966][ T471] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1608.184827][T25046] device syzkaller0 entered promiscuous mode [ 1608.351724][ T471] usb 2-1: Using ep0 maxpacket: 8 [ 1608.358836][ T471] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.443796][ T471] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.461075][ T471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.491992][ T471] usb 2-1: Product: syz [ 1608.503358][ T471] usb 2-1: Manufacturer: syz [ 1608.514107][ T471] usb 2-1: SerialNumber: syz [ 1609.826109][T25059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.846776][T25059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.143136][T25066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1610.155748][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1610.548709][T25042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.626747][T25042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.765906][T25070] loop3: detected capacity change from 0 to 2048 [ 1610.791881][T25070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1610.933675][T25080] xt_hashlimit: size too large, truncated to 1048576 [ 1611.004558][T25042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.033847][T25042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.148088][T24631] EXT4-fs (loop3): unmounting filesystem. [ 1611.451887][ T471] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1611.459794][ T471] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1611.601700][T24298] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1611.656594][ T471] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1611.688935][ T471] usb 2-1: USB disconnect, device number 31 [ 1611.708496][ T471] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1611.792725][T24298] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1611.823067][T24298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1611.851880][T24298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.873767][T24298] usb 5-1: config 0 descriptor?? [ 1611.886716][T24298] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1612.879425][T25135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1613.031030][T25145] device syzkaller0 entered promiscuous mode [ 1613.435943][T25158] xt_hashlimit: size too large, truncated to 1048576 [ 1614.390145][T24558] usb 5-1: USB disconnect, device number 33 [ 1615.888644][T25203] device veth13 entered promiscuous mode [ 1617.783798][T25226] loop3: detected capacity change from 0 to 256 [ 1619.171737][T25230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6162'. [ 1619.371715][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6162'. [ 1620.419598][T25246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.428376][T25246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.435945][T25246] device bridge_slave_0 entered promiscuous mode [ 1620.445440][T25246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.452675][T25246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.460201][T25246] device bridge_slave_1 entered promiscuous mode [ 1620.589425][T25246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.596513][T25246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.603814][T25246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.610843][T25246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.669733][T25246] device veth0_vlan entered promiscuous mode [ 1620.724315][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1620.733258][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1620.746416][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1620.762958][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1621.404262][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1621.412584][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1621.421122][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1621.432246][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1621.495548][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1621.552113][T25246] device veth1_macvtap entered promiscuous mode [ 1621.570404][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1621.671841][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1621.694365][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1621.913636][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1621.961686][ T19] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1621.988919][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1622.125312][T25304] syz.2.6167[25304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1622.125614][T25304] syz.2.6167[25304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1622.152270][T25304] xt_policy: neither incoming nor outgoing policy selected [ 1623.801730][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 1623.808399][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.832408][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1623.841450][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.849655][ T19] usb 4-1: Product: syz [ 1623.853965][ T19] usb 4-1: Manufacturer: syz [ 1623.854136][T24048] device bridge_slave_1 left promiscuous mode [ 1623.858547][ T19] usb 4-1: SerialNumber: syz [ 1623.872294][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.881095][T24048] device bridge_slave_0 left promiscuous mode [ 1623.888399][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.030443][T25314] loop2: detected capacity change from 0 to 4096 [ 1624.082959][T25314] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1624.202561][T25314] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1624.210871][T25314] System zones: 0-5 [ 1624.260255][T25314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1624.283694][T25281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.354427][T24048] device veth1_macvtap left promiscuous mode [ 1624.406060][T25281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.492970][T24048] device veth0_vlan left promiscuous mode [ 1624.546468][T25321] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1624.797280][T25246] EXT4-fs (loop2): unmounting filesystem. [ 1624.931876][T25281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.942345][T25281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.509365][T25336] device veth3 entered promiscuous mode [ 1626.565931][ T19] cdc_ncm 4-1:1.0: bind() failure [ 1626.575239][ T19] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1626.613361][ T19] cdc_ncm 4-1:1.1: bind() failure [ 1626.619452][ T19] usb 4-1: USB disconnect, device number 39 [ 1626.694848][T25348] device syzkaller0 entered promiscuous mode [ 1626.890695][T25362] netlink: 'syz.1.6198': attribute type 195 has an invalid length. [ 1626.917849][T25366] xt_hashlimit: size too large, truncated to 1048576 [ 1629.461054][T25403] device syzkaller0 entered promiscuous mode [ 1630.269448][T25413] loop2: detected capacity change from 0 to 256 [ 1632.447501][T25423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1632.457269][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1632.710711][T25427] xt_hashlimit: size too large, truncated to 1048576 [ 1633.865136][T25442] binder: BINDER_SET_CONTEXT_MGR already set [ 1633.871154][T25442] binder: 25434:25442 ioctl 4018620d 200000000040 returned -16 [ 1637.709758][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1638.190128][T25489] netlink: 'syz.1.6234': attribute type 195 has an invalid length. [ 1639.003469][T25501] syz.3.6237[25501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.003539][T25501] syz.3.6237[25501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.016599][T25501] xt_policy: neither incoming nor outgoing policy selected [ 1639.036059][T23959] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1639.085951][T24298] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1639.995234][T25503] device veth3 entered promiscuous mode [ 1640.077158][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1640.077171][ T28] audit: type=1326 audit(1762971846.855:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.177984][ T28] audit: type=1326 audit(1762971846.885:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.201566][ T28] audit: type=1326 audit(1762971846.885:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.224985][ T28] audit: type=1326 audit(1762971846.885:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.248371][ T28] audit: type=1326 audit(1762971846.895:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.281408][ T28] audit: type=1326 audit(1762971846.895:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.320946][ T28] audit: type=1326 audit(1762971846.895:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.375987][ T28] audit: type=1326 audit(1762971846.895:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.401668][T23959] usb 1-1: Using ep0 maxpacket: 8 [ 1640.412655][T23959] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.433328][T23959] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1640.451755][T23959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.456080][ T28] audit: type=1326 audit(1762971846.895:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1640.459947][T23959] usb 1-1: Product: syz [ 1640.488639][T23959] usb 1-1: Manufacturer: syz [ 1640.493793][T23959] usb 1-1: SerialNumber: syz [ 1640.500438][ T28] audit: type=1326 audit(1762971846.895:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.2.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1641.249367][T25522] device veth3 entered promiscuous mode [ 1641.512351][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.531874][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.573813][T25532] xt_hashlimit: size too large, truncated to 1048576 [ 1641.671689][T24729] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1641.750564][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.760610][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.883432][T24729] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.893387][T24729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1641.900150][T24729] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1641.910184][T24729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.929176][T24729] usb 4-1: config 0 descriptor?? [ 1641.936309][T25544] netlink: 'syz.4.6252': attribute type 195 has an invalid length. [ 1642.361769][T24729] usbhid 4-1:0.0: can't add hid device: -71 [ 1642.373517][T23959] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1642.381325][T24729] usbhid: probe of 4-1:0.0 failed with error -71 [ 1642.388693][T23959] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1642.421520][T24729] usb 4-1: USB disconnect, device number 40 [ 1642.582034][T23959] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1642.626700][T23959] usb 1-1: USB disconnect, device number 29 [ 1642.639942][T23959] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1646.053962][ T455] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1646.243333][ T455] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1646.281345][ T455] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1646.315895][ T455] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1646.355116][ T455] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1646.369093][ T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.377390][ T455] usb 4-1: Product: syz [ 1646.381853][ T455] usb 4-1: Manufacturer: syz [ 1646.386498][ T455] usb 4-1: SerialNumber: syz [ 1646.601964][ T455] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 1646.618571][ T455] usb 4-1: No valid video chain found. [ 1646.628063][ T455] usb 4-1: USB disconnect, device number 41 [ 1647.321764][T25608] netlink: 'syz.3.6269': attribute type 195 has an invalid length. [ 1648.253519][T25622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6274'. [ 1649.235278][T25629] device syzkaller0 entered promiscuous mode [ 1652.880926][T25681] device syzkaller0 entered promiscuous mode [ 1653.555430][T25699] device veth5 entered promiscuous mode [ 1653.821692][ T455] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1653.892129][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1653.892144][ T28] audit: type=1400 audit(1762971860.675:948): avc: denied { mount } for pid=25702 comm="syz.3.6301" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1654.007132][ T28] audit: type=1400 audit(1762971860.695:949): avc: denied { unmount } for pid=24631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1654.034637][ T455] usb 3-1: Using ep0 maxpacket: 8 [ 1654.154388][ T455] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.456748][ T455] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1655.498977][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.510409][ T455] usb 3-1: Product: syz [ 1655.514655][ T455] usb 3-1: Manufacturer: syz [ 1655.519391][ T455] usb 3-1: SerialNumber: syz [ 1655.957780][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1656.650077][ T455] cdc_ncm 3-1:1.0: bind() failure [ 1656.729949][T25740] loop2: detected capacity change from 0 to 512 [ 1656.773733][T25740] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1656.782104][ T455] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1656.800092][ T455] cdc_ncm 3-1:1.1: bind() failure [ 1656.809606][T25740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1656.837279][T25740] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.6312: corrupted in-inode xattr [ 1656.854771][ T455] usb 3-1: USB disconnect, device number 40 [ 1656.877722][T25740] EXT4-fs (loop2): 1 orphan inode deleted [ 1656.883681][T25740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1657.196505][T25246] EXT4-fs (loop2): unmounting filesystem. [ 1657.202115][T25761] device syzkaller0 entered promiscuous mode [ 1657.251735][ T288] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1657.261665][T24729] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1657.442847][T24729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.442847][ T288] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.442881][T24729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.454559][ T288] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1657.464077][T24729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1657.474053][ T288] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1657.480492][T24729] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1657.493426][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.502273][T24729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.518782][ T288] usb 1-1: config 0 descriptor?? [ 1657.521583][T24729] usb 2-1: config 0 descriptor?? [ 1657.871019][T25772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6321'. [ 1657.885754][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6321'. [ 1657.951350][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1657.958579][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1657.967791][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1657.975450][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1657.983062][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1657.990635][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1658.011310][T24729] wacom 0003:056A:00EC.0016: unknown main item tag 0x0 [ 1658.028778][T24729] wacom 0003:056A:00EC.0016: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.1-1/input0 [ 1658.824087][ T288] usbhid 1-1:0.0: can't add hid device: -71 [ 1658.830682][ T288] usbhid: probe of 1-1:0.0 failed with error -71 [ 1658.868293][ T288] usb 1-1: USB disconnect, device number 30 [ 1658.928881][T24863] usb 2-1: USB disconnect, device number 32 [ 1659.984209][ T288] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1660.374985][ T288] usb 1-1: Using ep0 maxpacket: 8 [ 1660.466971][ T288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.568896][ T288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1660.623280][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.653445][ T288] usb 1-1: Product: syz [ 1660.669739][ T288] usb 1-1: Manufacturer: syz [ 1660.689094][ T288] usb 1-1: SerialNumber: syz [ 1661.192198][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.214605][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.460384][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.087372][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.574036][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.614700][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.007540][T25835] loop3: detected capacity change from 0 to 40427 [ 1663.278959][T25853] loop2: detected capacity change from 0 to 256 [ 1663.298812][T25853] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1663.377238][T25835] F2FS-fs (loop3): fault_type options not supported [ 1663.558589][T25835] F2FS-fs (loop3): fault_injection options not supported [ 1663.679480][T25835] F2FS-fs (loop3): Image doesn't support compression [ 1663.788134][T25835] F2FS-fs (loop3): invalid crc value [ 1663.916488][T25835] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1664.051882][ T288] cdc_ncm 1-1:1.0: bind() failure [ 1664.068244][ T288] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1664.075064][ T288] cdc_ncm 1-1:1.1: bind() failure [ 1664.091963][ T288] usb 1-1: USB disconnect, device number 31 [ 1664.118564][T25835] F2FS-fs (loop3): Start checkpoint disabled! [ 1664.144046][T25835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1664.302345][T25868] netlink: 'syz.2.6347': attribute type 195 has an invalid length. [ 1664.302358][T25835] syz.3.6340: attempt to access beyond end of device [ 1664.302358][T25835] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1664.396375][ T334] kworker/u4:3: attempt to access beyond end of device [ 1664.396375][ T334] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1664.871663][ T40] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1666.295707][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 1666.315013][ T40] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.328790][ T40] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1666.390457][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.398762][ T40] usb 4-1: Product: syz [ 1666.451511][ T40] usb 4-1: Manufacturer: syz [ 1666.456300][ T40] usb 4-1: SerialNumber: syz [ 1667.204202][T25872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.217028][T25872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.259681][T25904] syz.1.6357[25904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1667.259774][T25904] syz.1.6357[25904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1667.272270][T25904] xt_policy: neither incoming nor outgoing policy selected [ 1667.506340][T25872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.531280][T25872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.159160][T25914] device veth3 entered promiscuous mode [ 1669.148794][ T40] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1669.161395][ T40] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1669.365451][ T40] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1669.380531][ T40] usb 4-1: USB disconnect, device number 42 [ 1669.387103][ T40] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1670.645993][T25946] loop3: detected capacity change from 0 to 512 [ 1672.321833][T25946] EXT4-fs: Ignoring removed oldalloc option [ 1675.060988][T25992] device veth5 entered promiscuous mode [ 1677.657902][T26028] syz.2.6389[26028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.658199][T26028] syz.2.6389[26028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.683049][T26028] xt_policy: neither incoming nor outgoing policy selected [ 1677.793136][ T28] audit: type=1400 audit(1762971884.575:950): avc: denied { write } for pid=26031 comm="syz.3.6395" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1679.907380][ T28] audit: type=1326 audit(1762971886.685:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1680.211751][T26079] xt_policy: neither incoming nor outgoing policy selected [ 1680.270689][ T28] audit: type=1326 audit(1762971886.715:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1680.309755][ T28] audit: type=1400 audit(1762971886.795:953): avc: denied { read append open } for pid=26070 comm="syz.1.6410" path="/syzcgroup/unified/syz1/syz1/cgroup.freeze" dev="loop1" ino=1048829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1680.733025][ T28] audit: type=1326 audit(1762971887.005:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1680.759038][ T28] audit: type=1326 audit(1762971887.005:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1680.787662][ T28] audit: type=1326 audit(1762971887.005:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1681.062000][ T28] audit: type=1326 audit(1762971887.005:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1681.354356][ T28] audit: type=1326 audit(1762971887.005:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1681.399088][ T28] audit: type=1326 audit(1762971887.005:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26074 comm="syz.2.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69478f6c9 code=0x7ffc0000 [ 1681.671691][T24298] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1681.736352][T26106] device syzkaller0 entered promiscuous mode [ 1681.854243][T26113] loop3: detected capacity change from 0 to 256 [ 1681.861790][T24298] usb 3-1: Using ep0 maxpacket: 8 [ 1681.877298][T24298] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.890275][T24298] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1681.904881][T24298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.920289][T24298] usb 3-1: Product: syz [ 1681.929666][T24298] usb 3-1: Manufacturer: syz [ 1681.939489][T24298] usb 3-1: SerialNumber: syz [ 1682.042386][T26117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1682.051821][T26117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1682.409145][T26098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.467358][T26098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.551439][T26119] device syzkaller0 entered promiscuous mode [ 1683.294282][T26098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.382461][T26129] xt_policy: neither incoming nor outgoing policy selected [ 1683.469694][T26098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.413696][T24298] cdc_ncm 3-1:1.0: failed to get mac address [ 1685.420798][T24298] cdc_ncm 3-1:1.0: bind() failure [ 1685.490725][T24298] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1685.504398][T24298] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1685.523250][T24298] usb 3-1: USB disconnect, device number 41 [ 1686.061417][T26160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1687.508074][T26189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6446'. [ 1687.517587][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6446'. [ 1688.051854][ T1693] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1688.261828][ T1693] usb 1-1: Using ep0 maxpacket: 8 [ 1688.304412][ T1693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.464371][T26194] device syzkaller0 entered promiscuous mode [ 1688.469188][ T1693] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1688.479732][ T1693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.487960][ T1693] usb 1-1: Product: syz [ 1688.492240][ T1693] usb 1-1: Manufacturer: syz [ 1688.496872][ T1693] usb 1-1: SerialNumber: syz [ 1688.597339][T26205] loop3: detected capacity change from 0 to 4096 [ 1688.605601][T26205] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1688.700799][T26205] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1688.709176][T26205] System zones: 0-5 [ 1688.728686][T26205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1689.010865][T26180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.067985][T26180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.247605][T24631] EXT4-fs (loop3): unmounting filesystem. [ 1690.372403][ T6799] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1690.515735][T26180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.535978][T26180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.572762][ T6799] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.595655][ T6799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1690.617400][T26233] loop3: detected capacity change from 0 to 256 [ 1690.639737][ T6799] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1690.726381][ T6799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.766931][T26233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1690.802070][ T6799] usb 2-1: config 0 descriptor?? [ 1690.989387][ T1693] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1691.036303][ T1693] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1691.203500][ T1693] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1691.223973][ T1693] usb 1-1: USB disconnect, device number 32 [ 1691.237564][ T6799] usbhid 2-1:0.0: can't add hid device: -71 [ 1691.252736][ T6799] usbhid: probe of 2-1:0.0 failed with error -71 [ 1691.268981][T26240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1691.280595][T26240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1691.294910][ T1693] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1691.389992][ T6799] usb 2-1: USB disconnect, device number 33 [ 1691.632234][T25476] ================================================================== [ 1691.640330][T25476] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 1691.647553][T25476] Read of size 8 at addr ffff88810debece0 by task kworker/1:6/25476 [ 1691.655523][T25476] [ 1691.657841][T25476] CPU: 1 PID: 25476 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1691.665380][T25476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1691.675447][T25476] Workqueue: 0x0 (events) [ 1691.679901][T25476] Call Trace: [ 1691.683176][T25476] [ 1691.686101][T25476] __dump_stack+0x21/0x24 [ 1691.690430][T25476] dump_stack_lvl+0xee/0x150 [ 1691.695017][T25476] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1691.700038][T25476] ? __cfi__printk+0x8/0x8 [ 1691.704506][T25476] ? __schedule+0xb8f/0x14e0 [ 1691.709119][T25476] ? worker_thread+0x9ff/0x11f0 [ 1691.713977][T25476] print_address_description+0x71/0x200 [ 1691.719521][T25476] print_report+0x4a/0x60 [ 1691.723857][T25476] kasan_report+0x122/0x150 [ 1691.728361][T25476] ? worker_thread+0x9ff/0x11f0 [ 1691.733211][T25476] __asan_report_load8_noabort+0x14/0x20 [ 1691.738851][T25476] worker_thread+0x9ff/0x11f0 [ 1691.743526][T25476] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1691.748989][T25476] ? __kthread_parkme+0x142/0x180 [ 1691.754012][T25476] kthread+0x281/0x320 [ 1691.758093][T25476] ? __cfi_worker_thread+0x10/0x10 [ 1691.763214][T25476] ? __cfi_kthread+0x10/0x10 [ 1691.767806][T25476] ret_from_fork+0x1f/0x30 [ 1691.772225][T25476] [ 1691.775237][T25476] [ 1691.777560][T25476] Allocated by task 1693: [ 1691.781875][T25476] kasan_set_track+0x4b/0x70 [ 1691.786461][T25476] kasan_save_alloc_info+0x25/0x30 [ 1691.791587][T25476] __kasan_kmalloc+0x95/0xb0 [ 1691.796218][T25476] __kmalloc_node+0xb2/0x1e0 [ 1691.800820][T25476] kvmalloc_node+0x294/0x480 [ 1691.805406][T25476] alloc_netdev_mqs+0x8d/0xf90 [ 1691.810166][T25476] alloc_etherdev_mqs+0x37/0x40 [ 1691.815010][T25476] usbnet_probe+0x20c/0x2780 [ 1691.819596][T25476] usb_probe_interface+0x610/0xaf0 [ 1691.824698][T25476] really_probe+0x2cb/0x960 [ 1691.829193][T25476] __driver_probe_device+0x198/0x280 [ 1691.834472][T25476] driver_probe_device+0x54/0x3e0 [ 1691.839488][T25476] __device_attach_driver+0x2e9/0x4a0 [ 1691.844853][T25476] bus_for_each_drv+0x183/0x210 [ 1691.849700][T25476] __device_attach+0x2a2/0x400 [ 1691.854452][T25476] device_initial_probe+0x1a/0x20 [ 1691.859470][T25476] bus_probe_device+0xc0/0x1f0 [ 1691.864229][T25476] device_add+0xb4d/0xef0 [ 1691.868555][T25476] usb_set_configuration+0x19c2/0x1f10 [ 1691.874010][T25476] usb_generic_driver_probe+0x91/0x150 [ 1691.879448][T25476] usb_probe_device+0x159/0x270 [ 1691.884269][T25476] really_probe+0x2cb/0x960 [ 1691.888745][T25476] __driver_probe_device+0x198/0x280 [ 1691.894002][T25476] driver_probe_device+0x54/0x3e0 [ 1691.899001][T25476] __device_attach_driver+0x2e9/0x4a0 [ 1691.904347][T25476] bus_for_each_drv+0x183/0x210 [ 1691.909194][T25476] __device_attach+0x2a2/0x400 [ 1691.913929][T25476] device_initial_probe+0x1a/0x20 [ 1691.918925][T25476] bus_probe_device+0xc0/0x1f0 [ 1691.923704][T25476] device_add+0xb4d/0xef0 [ 1691.928009][T25476] usb_new_device+0xa70/0x1520 [ 1691.932748][T25476] hub_event+0x2850/0x4350 [ 1691.937139][T25476] process_one_work+0x71f/0xc40 [ 1691.941960][T25476] worker_thread+0xa29/0x11f0 [ 1691.946784][T25476] kthread+0x281/0x320 [ 1691.950825][T25476] ret_from_fork+0x1f/0x30 [ 1691.955220][T25476] [ 1691.957603][T25476] Freed by task 1693: [ 1691.961562][T25476] kasan_set_track+0x4b/0x70 [ 1691.966125][T25476] kasan_save_free_info+0x31/0x50 [ 1691.971132][T25476] ____kasan_slab_free+0x132/0x180 [ 1691.976217][T25476] __kasan_slab_free+0x11/0x20 [ 1691.980955][T25476] slab_free_freelist_hook+0xc2/0x190 [ 1691.986305][T25476] __kmem_cache_free+0xb7/0x1b0 [ 1691.991134][T25476] kfree+0x6f/0xf0 [ 1691.995101][T25476] kvfree+0x35/0x40 [ 1691.998884][T25476] netdev_freemem+0x3f/0x60 [ 1692.003363][T25476] netdev_release+0x7f/0xb0 [ 1692.007837][T25476] device_release+0xa4/0x1d0 [ 1692.012430][T25476] kobject_put+0x19d/0x280 [ 1692.016825][T25476] put_device+0x1f/0x30 [ 1692.020955][T25476] free_netdev+0x392/0x490 [ 1692.025369][T25476] usbnet_disconnect+0x25a/0x3b0 [ 1692.030282][T25476] usb_unbind_interface+0x223/0x8d0 [ 1692.035456][T25476] device_release_driver_internal+0x508/0x820 [ 1692.041493][T25476] device_release_driver+0x19/0x20 [ 1692.046576][T25476] bus_remove_device+0x2ee/0x350 [ 1692.051488][T25476] device_del+0x6a4/0xeb0 [ 1692.055789][T25476] usb_disable_device+0x3a8/0x750 [ 1692.060786][T25476] usb_disconnect+0x31e/0x860 [ 1692.065438][T25476] hub_event+0x1a78/0x4350 [ 1692.069829][T25476] process_one_work+0x71f/0xc40 [ 1692.074656][T25476] worker_thread+0xd2e/0x11f0 [ 1692.079309][T25476] kthread+0x281/0x320 [ 1692.083351][T25476] ret_from_fork+0x1f/0x30 [ 1692.087741][T25476] [ 1692.090047][T25476] Last potentially related work creation: [ 1692.095733][T25476] kasan_save_stack+0x3a/0x60 [ 1692.100384][T25476] __kasan_record_aux_stack+0xb6/0xc0 [ 1692.105730][T25476] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1692.111513][T25476] insert_work+0x51/0x300 [ 1692.115810][T25476] __queue_work+0x9b1/0xd30 [ 1692.120284][T25476] queue_work_on+0xd2/0x140 [ 1692.124761][T25476] usbnet_link_change+0x189/0x1b0 [ 1692.129759][T25476] usbnet_probe+0x1d55/0x2780 [ 1692.134409][T25476] usb_probe_interface+0x610/0xaf0 [ 1692.139492][T25476] really_probe+0x2cb/0x960 [ 1692.143975][T25476] __driver_probe_device+0x198/0x280 [ 1692.149230][T25476] driver_probe_device+0x54/0x3e0 [ 1692.154228][T25476] __device_attach_driver+0x2e9/0x4a0 [ 1692.159581][T25476] bus_for_each_drv+0x183/0x210 [ 1692.164424][T25476] __device_attach+0x2a2/0x400 [ 1692.169183][T25476] device_initial_probe+0x1a/0x20 [ 1692.174201][T25476] bus_probe_device+0xc0/0x1f0 [ 1692.178953][T25476] device_add+0xb4d/0xef0 [ 1692.183264][T25476] usb_set_configuration+0x19c2/0x1f10 [ 1692.188705][T25476] usb_generic_driver_probe+0x91/0x150 [ 1692.194146][T25476] usb_probe_device+0x159/0x270 [ 1692.198978][T25476] really_probe+0x2cb/0x960 [ 1692.203462][T25476] __driver_probe_device+0x198/0x280 [ 1692.208722][T25476] driver_probe_device+0x54/0x3e0 [ 1692.213719][T25476] __device_attach_driver+0x2e9/0x4a0 [ 1692.219067][T25476] bus_for_each_drv+0x183/0x210 [ 1692.223897][T25476] __device_attach+0x2a2/0x400 [ 1692.228633][T25476] device_initial_probe+0x1a/0x20 [ 1692.233628][T25476] bus_probe_device+0xc0/0x1f0 [ 1692.238376][T25476] device_add+0xb4d/0xef0 [ 1692.242688][T25476] usb_new_device+0xa70/0x1520 [ 1692.247426][T25476] hub_event+0x2850/0x4350 [ 1692.251819][T25476] process_one_work+0x71f/0xc40 [ 1692.256644][T25476] worker_thread+0xa29/0x11f0 [ 1692.261294][T25476] kthread+0x281/0x320 [ 1692.265335][T25476] ret_from_fork+0x1f/0x30 [ 1692.269726][T25476] [ 1692.272027][T25476] Second to last potentially related work creation: [ 1692.278577][T25476] kasan_save_stack+0x3a/0x60 [ 1692.283229][T25476] __kasan_record_aux_stack+0xb6/0xc0 [ 1692.288582][T25476] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1692.294376][T25476] insert_work+0x51/0x300 [ 1692.298685][T25476] __queue_work+0x9b1/0xd30 [ 1692.303199][T25476] queue_work_on+0xd2/0x140 [ 1692.307686][T25476] __ext4_grp_locked_error+0x909/0xbb0 [ 1692.313125][T25476] ext4_mb_generate_buddy+0x65d/0x7a0 [ 1692.318474][T25476] ext4_mb_init_cache+0xd7a/0x12d0 [ 1692.323562][T25476] ext4_mb_init_group+0x2cd/0x5b0 [ 1692.328560][T25476] ext4_mb_load_buddy_gfp+0xbf6/0xd20 [ 1692.333905][T25476] ext4_free_blocks+0xe9c/0x2100 [ 1692.338822][T25476] ext4_clear_blocks+0x367/0x3e0 [ 1692.343731][T25476] ext4_ind_truncate+0x6f8/0xb20 [ 1692.348645][T25476] ext4_truncate+0x98e/0xf90 [ 1692.353208][T25476] ext4_process_orphan+0x1d9/0x320 [ 1692.358299][T25476] ext4_orphan_cleanup+0xb02/0x1210 [ 1692.363471][T25476] ext4_fill_super+0x7439/0x7970 [ 1692.368383][T25476] get_tree_bdev+0x444/0x680 [ 1692.372952][T25476] ext4_get_tree+0x1c/0x20 [ 1692.377431][T25476] vfs_get_tree+0x9a/0x270 [ 1692.381839][T25476] do_new_mount+0x25a/0xa20 [ 1692.386336][T25476] path_mount+0x675/0x1010 [ 1692.390739][T25476] __se_sys_mount+0x318/0x380 [ 1692.395396][T25476] __x64_sys_mount+0xbf/0xd0 [ 1692.399967][T25476] x64_sys_call+0x65d/0x9a0 [ 1692.404460][T25476] do_syscall_64+0x4c/0xa0 [ 1692.408855][T25476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.414731][T25476] [ 1692.417035][T25476] The buggy address belongs to the object at ffff88810debe000 [ 1692.417035][T25476] which belongs to the cache kmalloc-4k of size 4096 [ 1692.431234][T25476] The buggy address is located 3296 bytes inside of [ 1692.431234][T25476] 4096-byte region [ffff88810debe000, ffff88810debf000) [ 1692.444658][T25476] [ 1692.446962][T25476] The buggy address belongs to the physical page: [ 1692.453345][T25476] page:ffffea000437ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10deb8 [ 1692.463558][T25476] head:ffffea000437ae00 order:3 compound_mapcount:0 compound_pincount:0 [ 1692.471855][T25476] flags: 0x4000000000010200(slab|head|zone=1) [ 1692.477909][T25476] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 1692.486464][T25476] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1692.495015][T25476] page dumped because: kasan: bad access detected [ 1692.501405][T25476] page_owner tracks the page as allocated [ 1692.507097][T25476] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, tgid 285 (syz-executor), ts 21650464005, free_ts 21645665851 [ 1692.528275][T25476] post_alloc_hook+0x1f5/0x210 [ 1692.533031][T25476] prep_new_page+0x1c/0x110 [ 1692.537513][T25476] get_page_from_freelist+0x2c7b/0x2cf0 [ 1692.543035][T25476] __alloc_pages+0x1c3/0x450 [ 1692.547603][T25476] alloc_slab_page+0x6e/0xf0 [ 1692.552170][T25476] new_slab+0x98/0x3d0 [ 1692.556214][T25476] ___slab_alloc+0x6bd/0xb20 [ 1692.560781][T25476] __slab_alloc+0x5e/0xa0 [ 1692.565086][T25476] __kmem_cache_alloc_node+0x203/0x2c0 [ 1692.570520][T25476] __kmalloc_node_track_caller+0xa0/0x1e0 [ 1692.576225][T25476] kmemdup+0x2b/0x60 [ 1692.580113][T25476] __devinet_sysctl_register+0xad/0x320 [ 1692.585644][T25476] devinet_sysctl_register+0x169/0x1e0 [ 1692.591088][T25476] inetdev_init+0x2d1/0x510 [ 1692.595573][T25476] inetdev_event+0x1f8/0x10e0 [ 1692.600227][T25476] raw_notifier_call_chain+0xa1/0x110 [ 1692.605581][T25476] page last free stack trace: [ 1692.610224][T25476] free_unref_page_prepare+0x742/0x750 [ 1692.615660][T25476] free_unref_page+0x8f/0x530 [ 1692.620313][T25476] __free_pages+0x67/0x100 [ 1692.624702][T25476] __free_slab+0xca/0x1a0 [ 1692.629011][T25476] __unfreeze_partials+0x160/0x190 [ 1692.634107][T25476] put_cpu_partial+0xa9/0x100 [ 1692.638759][T25476] __slab_free+0x1c4/0x280 [ 1692.643168][T25476] ___cache_free+0xbf/0xd0 [ 1692.647561][T25476] qlist_free_all+0xc6/0x140 [ 1692.652121][T25476] kasan_quarantine_reduce+0x14a/0x170 [ 1692.657552][T25476] __kasan_slab_alloc+0x24/0x80 [ 1692.662376][T25476] slab_post_alloc_hook+0x4f/0x2d0 [ 1692.667460][T25476] __kmem_cache_alloc_node+0x192/0x2c0 [ 1692.672892][T25476] kmalloc_trace+0x29/0xb0 [ 1692.677281][T25476] ref_tracker_alloc+0x139/0x430 [ 1692.682192][T25476] netdev_hold+0x80/0xc0 [ 1692.686413][T25476] [ 1692.688719][T25476] Memory state around the buggy address: [ 1692.694330][T25476] ffff88810debeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1692.702371][T25476] ffff88810debec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1692.710424][T25476] >ffff88810debec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1692.718472][T25476] ^ [ 1692.725643][T25476] ffff88810debed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1692.733689][T25476] ffff88810debed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1692.741843][T25476] ================================================================== [ 1692.749874][T25476] Disabling lock debugging due to kernel taint [ 1692.817349][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1692.817362][ T28] audit: type=1400 audit(1762971899.595:975): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1692.900788][ T28] audit: type=1400 audit(1762971899.595:976): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.922236][ T28] audit: type=1400 audit(1762971899.595:977): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.943681][ T28] audit: type=1400 audit(1762971899.595:978): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.965526][ T28] audit: type=1400 audit(1762971899.595:979): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1692.986493][ T28] audit: type=1400 audit(1762971899.595:980): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1693.009627][ T28] audit: type=1400 audit(1762971899.595:981): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1