last executing test programs: 8m53.599283987s ago: executing program 4 (id=5934): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000e40)) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56018}], 0x1) close(r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000140)=0x1, 0x4) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) 8m52.773933134s ago: executing program 4 (id=5938): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x22, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) (async) recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="07000000f9ffa2d69f933dc48f2fcb535263ea962922330ac0a0768465334f7da38e81049cb1d7fd9a94b70b1e189aab6611adb1ad496cab6eb69659bcc9f0c8218c60c5002bf2014133906b88890c5e87be58a1eebc6b9738622fba2eccb3834cef512723fcda9cff7e0bc3c7c47d9731302ca5247841a59c4bfc328da3447f4da60feb44dbc550fcd522825f30307d8bfe82916588a6"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 8m51.775406123s ago: executing program 4 (id=5939): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"}) 8m50.575047369s ago: executing program 4 (id=5944): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) ppoll(&(0x7f0000000100)=[{r0, 0x2200}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x100004) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x2044, &(0x7f0000000400)={[{@huge_within_size}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '-}-\xd0)!'}}, {@fowner_gt={'fowner>', r1}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, '\\'}}]}) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 8m49.280164472s ago: executing program 4 (id=5946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x2e6, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000001fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a0018000303030303030000100070000b0003000000000000006500"], 0x38}}, 0x0) 8m48.382026483s ago: executing program 4 (id=5948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8090}}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8090}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4832, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4832, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m48.090325864s ago: executing program 32 (id=5948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8090}}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8090}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4832, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4832, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14.088263752s ago: executing program 2 (id=8122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) 12.12454275s ago: executing program 2 (id=8130): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) (async, rerun: 64) syz_usb_connect(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0) (rerun: 64) 10.507360924s ago: executing program 0 (id=8142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"}) 9.455713312s ago: executing program 0 (id=8146): syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x3, 0x40, 0x30, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x58}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa, 0xe, 0x40}, [@ncm={0x6, 0x24, 0x1a, 0xe1e, 0x12}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x11}, @ncm={0x6, 0x24, 0x1a, 0xffff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x65, 0x4, 0x70}}}}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @local, 0xa}, 0x1c) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f00000023c0)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 8.666671777s ago: executing program 2 (id=8151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.154645138s ago: executing program 0 (id=8153): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000", @ANYRESOCT=r0, @ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) 6.055559865s ago: executing program 1 (id=8154): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x78001904, &(0x7f0000007000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000002b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa, 0x0, 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400bafffa8a546f687669acb29da80900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.932717784s ago: executing program 2 (id=8156): syz_emit_ethernet(0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) r1 = inotify_init() r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4f) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5.299460695s ago: executing program 3 (id=8157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x5, 0x1, 0x6, 0x7, 0xa6f6, 0x9, 0x9, 0x10000, 0x2d24, 0x15, 0x11, 0x16, 0x8, 0xfffffff8, 0x7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d00000000000100000000000000014100a1ff1c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5.039720325s ago: executing program 1 (id=8158): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="070000f0ff", @ANYRESOCT=r1], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000003c0)=0x3ff) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4087, 0xff7}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000000640)=""/230, 0xe6}], 0x7) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf00000001090212"], 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0xc, 0x0, 0x32}, 0x10) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) 5.00729601s ago: executing program 3 (id=8159): syz_emit_ethernet(0xd81, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 4.923729326s ago: executing program 3 (id=8161): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x3, 0x121a42) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.808183511s ago: executing program 3 (id=8163): syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x3, 0x40, 0x30, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x58}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa, 0xe, 0x40}, [@ncm={0x6, 0x24, 0x1a, 0xe1e, 0x12}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x11}, @ncm={0x6, 0x24, 0x1a, 0xffff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x65, 0x4, 0x70}}}}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @local, 0xa}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 4.659882953s ago: executing program 0 (id=8164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) syz_io_uring_setup(0x7669, 0xfffffffffffffffe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x2, 0xff, 0x3, 0x9}, 0x0) pipe2$watch_queue(0x0, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, 0x0, 0x210000, 0x0) syz_emit_ethernet(0x56, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaa2d9ad47917000d03000040150100002795e4c6b2344277b6a9c55f3c41c95c642940d93ad3f199bbe91300ef90313b23f7e0e3bef380c9fecee371bc2cb3539efc851ae658520c9977a011197ec3e7"], 0x0) 4.349096847s ago: executing program 5 (id=8166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20000000}}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) 4.318049086s ago: executing program 5 (id=8167): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x3, 0x121a42) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 3.89542927s ago: executing program 5 (id=8168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32], 0x0, 0x2, 0xc8, &(0x7f0000000640)=""/200, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) connect$packet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b80)=""/112, 0x70}, {&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000000c80)=""/102, 0x66}, {&(0x7f0000000d00)=""/123, 0x7b}], 0xa, &(0x7f0000000e40)=""/185, 0xb9}, 0xb}, {{&(0x7f0000000f00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000f80)=""/253, 0xfd}, {&(0x7f0000001080)=""/173, 0xad}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/239, 0xef}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000002240)=""/205, 0xcd}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/128, 0x80}, {&(0x7f00000024c0)=""/90, 0x5a}, {&(0x7f0000002540)=""/152, 0x98}], 0xa, &(0x7f00000026c0)=""/104, 0x68}, 0x6}], 0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x3fe, 0x0, 0x32, 0xfffffffe}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x7ffc0002}, {0xf, 0xff, 0x5c, 0x4}, {0x5, 0x1, 0x6, 0x4}, {0x974, 0x1, 0x9, 0x10}]}) mount(&(0x7f00000009c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x221940c, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000480)={&(0x7f0000000400)="b232a33bac15b0092153c5f221967e34dcc97520e055e8aa97cfdd40c78a218cd620a3462cf95b15a2b27c7e4185e9", 0x2f}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000440), 0x3, 0x121a42) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 3.696536861s ago: executing program 0 (id=8169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @pic={0x8, 0x5, 0xf8, 0x6, 0x3, 0x0, 0xb, 0x2, 0x3, 0x4, 0x7, 0x84, 0x5, 0x0, 0x2, 0x9}}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd00000008000100020c1000418e00000004fcff", 0x58}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000840)="61c89b5f", 0x4}], 0x1, &(0x7f0000002e80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000040) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x4c, 0x2c, 0x5a, 0x10, 0x45e, 0x775, 0x49f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0xc7, 0x0, 0x0, 0xe2, 0xe5, 0xc}}]}}]}}, 0x0) 3.137460598s ago: executing program 1 (id=8170): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) 2.734018672s ago: executing program 5 (id=8171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000037c0)=@newtaction={0x3658, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x3644, 0x1, [@m_police={0x3640, 0x1, 0x0, 0x0, {{0xb}, {0x3614, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1e9f}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x3, 0x7, 0x1, 0xd147, 0x1, 0x81, 0xfffffff7, 0x1, 0x2, 0x4, 0x2, 0x68, 0x0, 0xa09, 0x7, 0x4, 0x724, 0x0, 0x1, 0x6, 0x11, 0x2, 0x4, 0x80000000, 0xc, 0x8001, 0x80000001, 0x2, 0x9, 0x0, 0x3ff, 0xfff, 0x2, 0x0, 0xd81, 0x3, 0xfffffff6, 0xe7, 0x7ff, 0x75, 0xb, 0x3, 0x8, 0x401, 0x5, 0x7, 0x2, 0x8, 0x15, 0x8, 0x1, 0x4, 0xfffffffe, 0x9, 0xffffffff, 0x6, 0x6, 0x1496, 0x3, 0x6, 0x9, 0x1, 0xd, 0x2, 0x1ff, 0x401, 0xff, 0x400, 0x9, 0x1aa, 0xc, 0x3, 0x8001, 0x1, 0x7b1767ff, 0x8, 0x81, 0x8, 0xff, 0x4, 0x81, 0x4, 0x1, 0x97, 0x7c9d, 0x5, 0x9, 0x9a, 0x1be2c00, 0x6, 0xb568, 0xfffffff7, 0x8, 0x8, 0x7, 0x8000, 0x2, 0x100, 0x5, 0x7, 0x401, 0xb, 0x3ff, 0x9, 0x1ff, 0x520c0d41, 0x7, 0x5ca, 0x2, 0x1, 0x1, 0x6, 0x6, 0xfffffffd, 0x8, 0xd, 0x3, 0x3, 0x0, 0x61999e69, 0x7f, 0x8c7, 0x7f, 0x7, 0x4b43f269, 0x40, 0x1, 0x4, 0xfffffffb, 0x6e, 0xffffffff, 0xff, 0x2, 0x1, 0x4, 0xffffffff, 0x7, 0x1, 0xc978, 0x55e4, 0x3, 0x3, 0x5, 0x1, 0x7, 0x9, 0x4, 0x1, 0x9, 0x5, 0x5, 0x1, 0x4, 0x3, 0x8001, 0x0, 0x4, 0x81, 0xfffffd76, 0x1, 0x3, 0x2, 0x0, 0x100, 0x4, 0x10001, 0xfff, 0x200000, 0x5, 0x194f, 0x8, 0x3, 0x1000, 0x5, 0x3, 0x3, 0x0, 0x7ca, 0x7, 0x9, 0x53, 0x7fff, 0xb, 0x9, 0x7ff, 0x8, 0xe00, 0x2, 0xb, 0x9e000000, 0x2, 0x1, 0x8000, 0x6, 0x910d, 0x6, 0x4f, 0x3, 0xffff, 0x25, 0x6, 0x1, 0x3, 0x3, 0x7, 0x2, 0x401, 0x4, 0x7, 0xa, 0x5, 0x6, 0x0, 0x7f, 0x0, 0x3ff, 0x30, 0x10, 0x39e0, 0x2, 0x3ff, 0x4, 0xb, 0x4, 0x9, 0xfffffffb, 0x3, 0x401, 0x9, 0x8000, 0x7cf, 0x81, 0x3d51, 0xfffffffd, 0x8, 0x1, 0x2, 0x1, 0x68c, 0x1, 0x0, 0x7382, 0xc, 0xe, 0x1, 0xd, 0xee03, 0x6, 0x28b0, 0x5, 0x4, 0xff, 0xb7, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xfffffffffffffff9, 0x8, 0x0, 0xfffffffe, {0xc7, 0x0, 0x6, 0x3d22, 0xff, 0x200}, {0x6, 0x2, 0x1ff, 0x806, 0xd48, 0x7}, 0x5, 0x780, 0xb}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ac1, 0x4, 0x80000000, 0x7, 0xfff, 0x4a, 0x0, 0x70, 0xe8, 0x2, 0x4, 0x9, 0x6ad, 0xf, 0x10000, 0x6a8, 0x2f2, 0x1, 0x5, 0x5, 0x3, 0x2, 0x1, 0x1, 0x2, 0xdfd7, 0x8, 0xfff, 0xfffffff8, 0x5, 0x5, 0x100, 0x400, 0x1, 0x7, 0x1, 0x99ed, 0xb, 0x3, 0x4, 0x3, 0x7, 0xfffffbff, 0x7ff, 0x9, 0x4, 0xe, 0xf725, 0x1, 0x3, 0x6, 0x401, 0xb, 0x1, 0x3, 0x9, 0x2, 0x4, 0x1, 0x7, 0x40, 0x40, 0x0, 0x269a, 0x1, 0x8, 0x9, 0x7f, 0x40, 0x0, 0x10001, 0x6, 0xd6, 0x18, 0x87, 0x400, 0x6, 0x0, 0x4, 0xf, 0x2, 0x3, 0xfffffff8, 0x9, 0xffff4ff0, 0x6, 0x1, 0x5, 0xf, 0xe7a, 0x2, 0xb55, 0x0, 0x3, 0x3, 0xe7, 0xf, 0x1, 0xf4, 0x2, 0x36ee, 0x1, 0x100, 0x6, 0x400, 0x2, 0xd78, 0x52a2, 0x3, 0x3, 0x3, 0x101, 0x7f, 0x2, 0x2, 0x1000, 0x5ec, 0x9, 0x8, 0x0, 0xffffffff, 0x9, 0x8000, 0x3, 0xfffffff7, 0x4, 0x92e, 0x14000, 0x2, 0x2, 0x2, 0xfff, 0x7, 0xd, 0x4fe9, 0x80000000, 0x5, 0xb, 0x8a, 0x7, 0x3ff, 0x700, 0x9, 0x101, 0x3, 0x7ff, 0x8, 0x7, 0x800, 0x4, 0x2, 0x9, 0x5, 0x1, 0xfffffffa, 0xc, 0x10001, 0x400, 0xaf, 0x753, 0x8, 0x5, 0xffff, 0x62a9, 0x200, 0x7f, 0x3, 0x4, 0x1, 0x14, 0xff, 0x1, 0x7, 0x7f, 0x9, 0x16, 0x2, 0x5, 0x7f983859, 0x6, 0x1, 0x4, 0x2, 0x705, 0x4, 0x9, 0x9, 0x2, 0x7, 0xfffffffd, 0x2, 0x2, 0xb, 0xba0, 0x1, 0x23, 0x8, 0x7, 0x4c, 0xae86, 0x1, 0x7, 0x46f2ce70, 0x6, 0x7, 0x6, 0xfffffff9, 0x7, 0x101, 0xfffffffe, 0x1, 0x1, 0xfffff000, 0x3, 0x4, 0x800, 0x8, 0x0, 0x8, 0x1, 0xfffffffc, 0x5, 0x7, 0x7, 0x6, 0x5, 0x8, 0x9, 0x9, 0xb, 0x101, 0x0, 0xf, 0x7f8000, 0x800, 0x10000, 0x3, 0x0, 0x0, 0x5, 0x0, 0x40, 0x0, 0x1, 0x5, 0x98, 0xfa, 0x0, 0x1, 0x7d9, 0x8, 0x6, 0x7, 0x1, 0x6, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x0, 0x7, 0xfffffff7, 0x2, 0xfffffffa, 0x4, 0x1, 0x3, 0x377a, 0x1, 0x0, 0x3, 0x3, 0x6, 0x80000001, 0x31, 0x6, 0x2edb9661, 0x7, 0xfffffffa, 0x1, 0x4, 0xc3a9, 0x5000000, 0x80000001, 0x0, 0x4, 0x5, 0x3, 0x10001, 0x7, 0x9, 0x7, 0xffffff6b, 0x3ff800, 0x9, 0x8, 0x4, 0x1000, 0x623e, 0x8001, 0x9, 0xc, 0x0, 0x4, 0x3, 0xdc, 0x3ff, 0xe00, 0x48, 0x5, 0xfa5c, 0x8, 0x3, 0x401, 0x7, 0x62, 0x4, 0x7f, 0x4, 0x1, 0xf, 0x40, 0x6, 0x6, 0x8d, 0x8, 0x6, 0x4, 0x9, 0x1, 0x101, 0x1, 0x2, 0x9, 0x4, 0x1, 0x401, 0xfffffffe, 0x1, 0x3, 0x779f, 0x3, 0x781d1e10, 0x0, 0x8, 0x6, 0x9, 0x5b, 0x2, 0x6, 0x11, 0x80000001, 0x8001, 0x9, 0x8, 0x1, 0x6, 0x6, 0x8, 0x3, 0xba4, 0x5c30, 0x1, 0x9, 0xb41, 0xd, 0x3, 0x100, 0x5, 0x100, 0x1ea9, 0x5, 0x1, 0xc1, 0x80000001, 0x12, 0x7f, 0x2, 0x7, 0x0, 0x410, 0x9, 0x2, 0x7, 0x7, 0x9, 0x1000, 0x2502, 0x8, 0xb86, 0x3, 0x7, 0x0, 0x4, 0x3, 0x366b, 0x5, 0x8, 0xe, 0x800, 0x2, 0x1, 0x9, 0xf, 0x74f, 0x5, 0x2, 0x3, 0xfffff372, 0x5, 0x6, 0x1, 0x4, 0x800, 0xfffffff9, 0x4, 0x80000000, 0x2, 0x253, 0xca50, 0x8, 0x800, 0x40, 0x6c7f, 0x3ff, 0x4eef, 0x0, 0x6, 0x1, 0x4cec, 0x4, 0x3, 0x1, 0xffffffff, 0x0, 0x8, 0x10, 0x1, 0x8, 0x2, 0x1, 0xd, 0x800, 0xd43, 0x1, 0xa54, 0xfffffff8, 0xd, 0x3, 0x6, 0x9, 0x5, 0x185e, 0xe, 0x7, 0x9b5, 0x68a, 0x80000001, 0x33f, 0x1, 0x40, 0x80000001, 0x2, 0xe7eb791, 0x80000001, 0xb0, 0x6, 0x1, 0xff, 0x0, 0x9, 0x9, 0x7, 0xdc, 0x7, 0x56f, 0xb83a, 0x6, 0x2, 0x1, 0x3, 0x10000000, 0x8, 0xd, 0x597e7056, 0x0, 0x8, 0x7, 0x100, 0x10001, 0x8, 0x5, 0xfa0, 0x3f7e, 0x5, 0x0, 0x8, 0x8, 0xf1, 0x6, 0x5cd7fbe0, 0x1ff, 0xa, 0x7, 0x6, 0x9, 0x0, 0x0, 0x3ff, 0x81, 0x9, 0x1, 0x10000]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2389, 0x5, 0x5, 0xfffffffe, 0x8, {0x40, 0x1, 0x8000, 0x1ff, 0x8000, 0x771}, {0x3, 0x1, 0x3, 0x81, 0x6, 0x7}, 0x1, 0x5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x6, 0x2, 0x5, {0x7, 0x2, 0x1, 0x6, 0x0, 0x7}, {0x1, 0x3, 0x4, 0x2, 0x8a4, 0xd}, 0xffff, 0x8, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x9, 0x2, 0x9, 0x2893, 0xd51, 0x4, 0x4, 0xd, 0x1, 0x6, 0x8, 0xf, 0x1de8, 0x4, 0x2, 0x2, 0xfffffff8, 0x6, 0x2, 0xfffffc01, 0x0, 0xc846, 0x5, 0x2, 0x8, 0x5c, 0x451a, 0x4, 0x40, 0x4, 0x6, 0x0, 0x0, 0x1, 0x5, 0x81, 0xe047, 0xf, 0x0, 0x5, 0x6, 0x7, 0x6, 0x8, 0x5f14, 0x7, 0x3, 0xb2, 0x2, 0x7fff, 0x9, 0x35, 0x6, 0x1, 0xfd, 0xffff, 0xe10c, 0x8001, 0x7, 0x1, 0xffff, 0x1, 0x401, 0x1000, 0x4, 0x28, 0x2, 0x6, 0x1, 0x1, 0x2000, 0x5, 0x0, 0xa9, 0x7, 0x7, 0x9, 0x9, 0x7f, 0x1, 0x4a59ce9a, 0x0, 0x7f, 0x7, 0x800, 0x8, 0x5, 0x40, 0x7ff0, 0x0, 0x80000001, 0x8, 0x10002000, 0x7, 0x6, 0x8, 0xfd, 0x4, 0x2, 0x6, 0x9, 0x2, 0x9, 0xa911, 0x6, 0x0, 0x7fff, 0x7, 0x6, 0xc, 0x9, 0x7, 0x3, 0x1000, 0x4, 0x0, 0x5d11, 0x1, 0x8, 0x2, 0x2f8, 0x9, 0x9, 0x4, 0x1, 0x200, 0x3, 0x1, 0xd7f, 0x4, 0xaf, 0x7, 0x7, 0x78c88f68, 0x9, 0x3, 0x1, 0x7, 0xf, 0x1ff, 0x9, 0x6, 0x1, 0x0, 0x3, 0x40, 0x6, 0x9, 0x0, 0x8, 0x8001, 0x6, 0x4, 0x401, 0x4, 0x200000, 0x9, 0x10001, 0x4, 0x5, 0x8, 0x7, 0x8, 0x8c8, 0x94e, 0x8000, 0x200, 0x4, 0x3, 0x5, 0xa10b, 0xfffffffc, 0x7fff, 0x584, 0x2, 0x9, 0xb49, 0x7, 0x8, 0x3, 0x2, 0x6, 0xc, 0x7, 0x7, 0xfffffffd, 0x6, 0xe9, 0x4, 0x802, 0x9, 0xe98, 0xe3, 0xffff, 0x80000000, 0x5, 0x10001, 0x1, 0x10, 0x0, 0x8, 0x169a02d1, 0x0, 0x6, 0x3, 0x1, 0x6009, 0xb6, 0x3ff, 0xfffffe01, 0xfff, 0x10001, 0x2, 0x3ff, 0x8, 0xf5, 0x0, 0x5, 0x6, 0x9, 0x8, 0x7867, 0x2, 0x3286aef5, 0xfffffffc, 0x4, 0x6, 0xfffffffc, 0x5, 0x7ff, 0x2, 0x6e043422, 0x7, 0x26, 0x5, 0x8, 0x4, 0x7, 0x8001, 0xd, 0x2, 0x7, 0x0, 0xf3d, 0xc, 0x9, 0x7, 0xffffffff, 0x0, 0x3cf, 0x4, 0x9, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x17d, 0x3, 0x1000, 0x4, 0x9, 0x10000, 0xffffffff, 0x2, 0x2, 0xe, 0x6, 0x5, 0x0, 0x8, 0x8, 0x9, 0x0, 0x3, 0xbe, 0x7fff, 0x4, 0x9, 0x6, 0x8, 0x7, 0x2, 0x10000, 0x2, 0x0, 0x4, 0x100, 0x4, 0xa2, 0x3ff, 0x540c, 0x8, 0xc5, 0x80, 0x0, 0xcb, 0x7, 0x8001, 0x0, 0x1, 0x0, 0x5f6, 0x1, 0xffffffc0, 0x400, 0xc, 0x7, 0x9, 0x0, 0x8, 0x100, 0x80000001, 0x1ff, 0x3, 0x5, 0xfffff10e, 0x0, 0x7, 0x81, 0x5, 0x0, 0xfffffff8, 0x2c, 0x0, 0x6, 0x10000, 0x3, 0xfffffff8, 0x9, 0x5f0, 0x7, 0x7, 0xae9, 0x7, 0xd2, 0x4, 0x3, 0x2, 0x5, 0x8, 0x0, 0x2, 0x9, 0x2c, 0x5, 0xfffffe00, 0x4, 0x4, 0xffff, 0xc00, 0x8, 0x2, 0x2, 0xfffffffc, 0x2, 0x1ada, 0xef1, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3c2b, 0x7f, 0x7, 0x200, 0x101, 0x4, 0x2, 0x2, 0xfffffff8, 0x8, 0x8001, 0x3, 0x300, 0x1000, 0x10001, 0x3, 0x0, 0x9, 0x7, 0x80000001, 0xdc4a, 0xf55, 0x57, 0x5, 0x6, 0x2c9b, 0x100, 0x3, 0x9, 0x6, 0x6, 0x267, 0x6, 0x7, 0x5, 0x7, 0x6, 0x400, 0x8, 0xffff, 0x7, 0x0, 0x7fffffff, 0xf, 0x4, 0x4, 0xbd5, 0x0, 0x8, 0x80, 0x3, 0x2, 0xa02c, 0x5, 0x3, 0x3, 0xfe7, 0x2, 0x5, 0x40, 0x0, 0x3, 0x9, 0x2, 0x400, 0x9, 0x8001, 0xfffffffd, 0x8, 0x0, 0x3, 0x6, 0xffffffff, 0x8, 0x3, 0xad, 0x7, 0x6b4, 0x4ec9a8b5, 0xa199, 0xb4a, 0x7f, 0x80, 0xc, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x4, 0x6, 0x72e4, 0x4, 0x4, 0xe, 0x1000, 0x8, 0x0, 0x1ff, 0x8, 0x3, 0x0, 0x100, 0x8, 0x6, 0x1, 0x5, 0xfffffffb, 0xa2, 0xa, 0x34, 0x6, 0x9, 0x9, 0x3, 0x4, 0x81, 0xfffffffd, 0x5, 0x1, 0x8, 0x81, 0x7, 0x8, 0x40, 0x10001, 0x6, 0x45, 0x4, 0x400, 0x7, 0x75e, 0x2, 0x240, 0x1, 0x1, 0x7, 0x10b, 0x46000000, 0x9, 0x4, 0xffffffff, 0x1, 0xe, 0x4, 0x3, 0xb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x25c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xf0, 0x1, 0x6, 0x8001, 0x40, 0x0, 0x3, 0x5, 0x7fff, 0x71f, 0x3, 0x43b, 0xda, 0x7, 0x0, 0x63, 0x72, 0xf, 0x6, 0xe, 0x7, 0x1, 0x7fffffff, 0xb35, 0x2, 0x1, 0x6, 0x7, 0x5, 0xb2c7, 0x14, 0xf8, 0x8, 0xd, 0x3, 0x10, 0x9, 0x7fffffff, 0x48, 0x7, 0x0, 0x2, 0x5, 0x3, 0x7, 0x8, 0x8000, 0x8, 0x5, 0x5, 0x679, 0x1, 0x3925, 0xe, 0x2, 0x7, 0x8, 0x1, 0x6, 0x5, 0x6, 0x20, 0x7, 0x0, 0x7, 0xc460, 0x100, 0x8, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x2, 0x4, 0x3800, 0x6, 0x1, 0x200, 0x0, 0x9, 0x7, 0x2, 0x3, 0x1, 0xfffffff7, 0x9, 0x6, 0x4, 0x4, 0x4, 0x2, 0x5, 0xc, 0x2, 0x904a, 0x2, 0x3, 0x3, 0x3ff, 0x1, 0xfff, 0xfffffffe, 0x2, 0x100, 0x6, 0x1ff, 0x5, 0x1, 0x3, 0x3, 0x9, 0x7a9, 0x6, 0x0, 0xffffffff, 0x2, 0x6, 0x9, 0x7, 0xfff, 0x9, 0x10000, 0x7, 0x8000, 0x6, 0x3, 0x8, 0x7, 0x84, 0x7e, 0x81, 0x7, 0x4, 0x656, 0x2, 0x661d2f60, 0xfffffffe, 0x0, 0x378000, 0x1, 0x40000, 0x2, 0x3, 0x6, 0x291a, 0xffffffff, 0x8, 0x6, 0x7, 0x6, 0x40, 0x8, 0x236, 0x4, 0x40, 0xc, 0x2, 0x0, 0x4, 0x5, 0x1, 0xff, 0x5fb, 0xa, 0x7fff, 0x4e, 0x1, 0xffff, 0x6, 0x8, 0x8f9, 0x4, 0x7, 0x81, 0x8, 0x10001, 0x7, 0xed, 0x8, 0xfffffffa, 0xfff, 0x0, 0x5c9c, 0xfffffffe, 0xa4db, 0x7ee5fc39, 0x400, 0x0, 0x3, 0xffffffff, 0x2, 0x5, 0xc, 0x3, 0xff, 0x8, 0x9, 0x3, 0x40, 0x10000000, 0xffffffff, 0x8, 0x0, 0x3ff, 0x8, 0x200, 0x7, 0x4, 0xb8, 0x200, 0x8, 0x80000001, 0x2, 0x0, 0xf47, 0x0, 0x9, 0x0, 0xc5e, 0x3, 0x5, 0x6, 0x5, 0xcf45, 0x8, 0xa04, 0x8001, 0x80000001, 0x923, 0x0, 0x8, 0x4, 0x8, 0x9747, 0x4, 0xfffffffa, 0xba3, 0x8000, 0x7fff, 0x2, 0x9, 0x83f3, 0x2, 0x9, 0xffffffff, 0xfffff9bd, 0x9, 0x68, 0x80, 0x401, 0xf9b2, 0x7, 0x139, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff4659}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8c85, 0x7, 0x80000001, 0xa, 0x9, {0x4, 0x1, 0xffff, 0xc, 0x3}, {0x5, 0x2, 0x5, 0x10, 0x6, 0x5}, 0xfffffffe, 0x7f, 0x12d16ca1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x2, 0x1, 0x81, 0x7fffffff, 0x6, 0x235, 0x10000004, 0x6, 0x0, 0x0, 0x1, 0xe, 0x5, 0x3e9, 0xffffff28, 0x4, 0x8000, 0x0, 0x67e3, 0x400, 0x8, 0x3, 0xffff, 0x6, 0x3, 0x3, 0x9, 0xb3, 0x2, 0x4, 0x5, 0xc07, 0x2, 0x6, 0x2b66, 0x3, 0x0, 0x8, 0x5, 0x8, 0x4, 0xffffffff, 0x3, 0x4bb, 0x39d, 0x1, 0x2, 0x9, 0x6, 0x8, 0xf0f3, 0x0, 0xffffff01, 0x7, 0x5, 0x9, 0x7, 0x1, 0x8, 0x8, 0x4, 0x9, 0x7ff, 0x9, 0x200, 0x7, 0x4, 0x0, 0x0, 0x0, 0x7401, 0x2, 0x10, 0x80, 0x401, 0x7fffffff, 0x10001, 0x40, 0x90, 0x3, 0x81, 0x14, 0x3, 0xfffffffc, 0xa, 0x0, 0x0, 0x6, 0x6f73d55f, 0xffffb76f, 0x7, 0x3, 0xf47f, 0x1, 0x1ff, 0x10001, 0xa, 0x3, 0x2, 0xc9a, 0x1000, 0x9, 0x101, 0x8, 0x5, 0x1, 0x7f, 0x6, 0x4, 0x7, 0x6, 0x1000, 0x1920, 0x0, 0x2, 0x3, 0x0, 0x834, 0x8, 0x1000, 0xffff, 0x8, 0x4, 0x9, 0xf4, 0x95, 0x10, 0x7, 0x3, 0x7, 0x0, 0x7, 0x7fff, 0x4, 0x7, 0x7, 0x2, 0x7, 0x3, 0x200, 0xeb36734b, 0x3ff, 0xffffffff, 0x0, 0x1, 0x1, 0xfffffff9, 0x9, 0x5, 0x3, 0x0, 0x8, 0x7, 0x4, 0x5, 0xffffffff, 0x0, 0x3, 0x6, 0x10, 0xe, 0x80000000, 0x1, 0x0, 0x3, 0xfffffffe, 0x7, 0x0, 0x9, 0x6, 0x101, 0xffff, 0x2, 0x0, 0xffffff7b, 0x0, 0x3, 0x0, 0x5, 0x2, 0x80000001, 0x9, 0x9, 0xa1, 0x28ff, 0xd, 0x80, 0x1, 0x6, 0x2f00, 0xe, 0x62c, 0xc78, 0x6, 0x7fffffff, 0xb, 0x4, 0xa, 0xd, 0x2, 0x0, 0xf, 0xa3ef, 0x2, 0x200, 0x7, 0x7, 0x6, 0xc3, 0x5, 0x1000, 0xf1b, 0xe, 0x7f, 0x6, 0xffff, 0x7, 0x400, 0xd, 0x9, 0x1, 0x1, 0x0, 0x6, 0x7, 0x0, 0x2, 0x7ff, 0xffffffff, 0x200, 0x5, 0x1000, 0xc73, 0x81, 0x3, 0xfffffff7, 0xfff, 0x6, 0x4, 0x3, 0xd452, 0x3ff, 0x81, 0x7, 0x9, 0xa014, 0x4, 0x4, 0xb, 0x2, 0x3, 0x10000, 0x78e2, 0x200, 0xfe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0xa7, 0xff, 0xfffffffc, 0x5, 0x0, 0x3, 0x0, 0xac22, 0x4, 0xe, 0x9, 0xff, 0x6, 0x3ff, 0x8212a096, 0x0, 0xf3, 0xfffffff8, 0xffffffff, 0xfffffff9, 0xffffff45, 0xd4, 0x3, 0x9, 0x80000001, 0x10, 0x7, 0x0, 0x488, 0x80000000, 0x619010c7, 0x9, 0x8, 0x771, 0x0, 0x9, 0x0, 0x7f, 0x9, 0x4, 0xfff, 0x80000, 0xfff, 0x1, 0xf8c3, 0x2e, 0x6c1, 0x9, 0x81, 0x5f, 0x4, 0x3, 0xd4, 0xcf46, 0x8, 0xf, 0x5, 0x9, 0x0, 0xc5a2, 0x1, 0x9, 0x3, 0x79a, 0xffffffa1, 0xc, 0xf, 0x1ff, 0x9, 0x803, 0x7ff, 0x8, 0xda, 0x9, 0xcdb, 0x4, 0x9c11, 0x2, 0x7, 0x9, 0x4, 0x4, 0x2, 0xfffffff8, 0x200, 0x2, 0x9, 0x6, 0xefb3, 0x1, 0x0, 0x4, 0x9b0e, 0x7b4, 0x6, 0x4, 0x3, 0x9, 0x6, 0x8, 0x82, 0x80000001, 0x9, 0x8, 0x630, 0x4, 0x2, 0x9, 0x5, 0x2, 0xef5, 0x3, 0xf2c, 0x3, 0x26, 0x6, 0xec, 0x1, 0x4, 0x1, 0x7fff, 0xa0, 0x0, 0x5, 0x1, 0xffff0d67, 0x5, 0x3, 0x80, 0x35, 0x2, 0x7f, 0x16b0, 0x4, 0x8, 0xe, 0x0, 0x2, 0xf, 0x268, 0xff, 0x5, 0x1, 0x1, 0x8, 0x773, 0x7, 0x31, 0x5, 0x899, 0xe, 0x44a21aa6, 0x3, 0xfffffffe, 0x8, 0x7, 0x7, 0x3, 0x800, 0x556, 0xd, 0x6, 0x9, 0xfffffff8, 0x3, 0x1, 0xb, 0x9, 0x7f, 0x6b1, 0x1, 0x986, 0x8001, 0x1f2, 0x8, 0xfb3e, 0x6, 0x1, 0xffff488a, 0x3, 0x3, 0x72, 0x73, 0x5f0586c3, 0xf, 0xabe, 0x9, 0x5, 0x3, 0x7f, 0x8000, 0x1, 0x2, 0xefb, 0xfffffff2, 0x3, 0xbb, 0x1, 0x40, 0x5, 0x1, 0x3, 0x3b0f, 0x8, 0x80000001, 0xfffffff8, 0x9, 0xc0a, 0xffffffc0, 0x800, 0x5, 0x9, 0x9, 0x9, 0x1, 0xd, 0x1000, 0x80000000, 0x1, 0x1, 0x0, 0x3, 0x7, 0x9, 0xb6d1, 0x7, 0xd922, 0x8000, 0x1, 0x3, 0x102, 0x7, 0x3, 0x6, 0x3, 0x10000, 0x562f3f02, 0x7, 0x7, 0xe, 0x5c, 0x1ff, 0x5, 0x9, 0x7, 0x7fffffff, 0xa4, 0xfffffff9, 0x20, 0x1, 0x480, 0x401, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x3, 0x3, 0x8, 0x8, 0x0, 0xfffffffa, 0x3cc, 0x7, 0x7, 0x10, 0x2, 0xffffffff, 0x3, 0x1, 0x9, 0xfffffff8, 0xc85, 0x10000, 0xb, 0x8, 0xe3d8, 0xfffffffc, 0x2, 0x71, 0x0, 0x8000, 0x5, 0x5, 0x1ff, 0x9, 0x7fff, 0x5, 0x4e, 0x8, 0x6, 0x7c, 0x81, 0xf2, 0xec8, 0x0, 0x2, 0x8, 0x74, 0x9, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7, 0x30a4, 0x5, 0x7fff, 0x800000, 0x6, 0x6, 0xffff, 0x3, 0x1000, 0xf, 0x40, 0xffff, 0x1, 0xc, 0x8, 0x0, 0xf71, 0x2, 0x6, 0x10000, 0xe, 0x76a5, 0x0, 0xffff, 0xff, 0x6608533b, 0xfffffbff, 0x0, 0x7, 0x1, 0x0, 0x3, 0x2, 0x7, 0x1000, 0x8, 0x80000000, 0x3, 0x0, 0x7fffffff, 0x10000, 0x5, 0x101, 0x7, 0x2, 0x234, 0x3, 0x2, 0xb3, 0x7, 0x900, 0xb8b, 0x7aa, 0x7fffffff, 0x8, 0x6, 0xffffffc0, 0xffffffff, 0xbee, 0x200, 0x4, 0x6, 0x2, 0xe20b, 0x10, 0x7, 0x10, 0x1ff, 0x101, 0xc8, 0x9, 0xffffffff, 0xa457, 0x8, 0x8a, 0x5, 0x4, 0x4bc, 0x9, 0x8, 0x101, 0xffff8001, 0x4, 0x38, 0x0, 0x5, 0x2, 0xc6e9, 0x7, 0x9, 0x6, 0x401, 0x80, 0x0, 0x26, 0x7, 0xfffffff9, 0x7, 0x0, 0xbc2, 0x0, 0x9, 0x0, 0xfff, 0x2, 0x155, 0xde6, 0xc, 0x2, 0x8, 0x7f, 0x8, 0x2, 0x2, 0x66, 0x0, 0x2, 0xffffffff, 0x7, 0x800, 0x6, 0x4, 0xfc5caa3, 0xf9000000, 0x7f, 0x0, 0x92a, 0x1ff, 0x9c3, 0x400, 0x2, 0x23d4, 0x0, 0x1, 0x5, 0x8, 0x1, 0x1, 0x3, 0xfffffffe, 0x10000, 0x1, 0xe, 0x3, 0xffff, 0x9580, 0x93f3, 0xd, 0xffffff4d, 0x4, 0x98fd, 0x27, 0x5, 0x3, 0x400, 0x5e80, 0x74fc341a, 0x400, 0x0, 0xd726, 0x9e, 0xa37, 0x8, 0x6, 0x0, 0xfffffffa, 0x9, 0x2e, 0x7, 0x7, 0x8, 0x5, 0xfffffff0, 0x6, 0x401, 0x0, 0x10, 0x9, 0x100, 0x8, 0xfffffff7, 0x9, 0x7, 0x8, 0x46b3, 0x4, 0x7, 0x5, 0x0, 0x1, 0xa, 0x2, 0xfff, 0x4, 0x2, 0x9, 0x80000001, 0x1, 0x3, 0x8, 0x4, 0x4, 0x4, 0x75dd8a6e, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6057, 0x78, 0x8, 0x4, 0x66, 0xda68, 0x3, 0x400, 0x2, 0xc, 0x5, 0xffffffff, 0x2, 0x400, 0xe1, 0x0, 0xffff, 0xfffffffd, 0xc, 0x1, 0x10001, 0x7fffffff, 0x7, 0x0, 0x2, 0x5f, 0x2, 0x80000001, 0xff, 0x9e1f, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8c, 0xfff, 0xfffffff8, 0x8, 0x10001, 0x148d, 0x3, 0x7fffffff, 0x80, 0x9, 0x46, 0x7ff, 0x0, 0xfe, 0x6, 0x4, 0xc9c, 0xff, 0x2, 0x3, 0x4, 0xb3ce, 0x1, 0x1000, 0x800, 0x2, 0x8, 0xc3da, 0xba23, 0x6, 0x7fff, 0x3, 0x3ce, 0x300, 0x5, 0x1, 0x6, 0xf2, 0x5b24a634, 0x3ff, 0x6, 0xb0, 0x5, 0x9, 0x0, 0x7, 0x8, 0x7, 0x929, 0x0, 0x9, 0x9, 0x6, 0x7, 0x0, 0x9, 0xfffffffd, 0x5, 0x40, 0x7, 0x1, 0x4, 0xfa1b, 0x80, 0xd, 0x8, 0x0, 0x6f, 0x28, 0x81, 0xc5c, 0x80000000, 0x7, 0x200, 0x5, 0x7, 0x1c00, 0x7, 0x4, 0x1ff, 0x800, 0x9, 0x17fe, 0x3, 0x9, 0x17, 0x0, 0x2, 0xff, 0xf0ffff, 0x80000000, 0x2, 0x1, 0xd, 0x200, 0x9, 0x7c1, 0x6, 0x9, 0x5, 0x9, 0x80, 0x2, 0x1ff, 0x8, 0x9, 0x81, 0x8, 0x7, 0x4, 0x5, 0x2, 0x1000, 0x2, 0xc, 0x9, 0x64a40000, 0x2, 0x2, 0x0, 0x8000, 0x5, 0x3, 0xcd, 0x2, 0xff, 0xffff87f0, 0x9, 0x47, 0xd, 0x25f, 0xed29, 0x4, 0xffff687b, 0x9, 0x6, 0xe, 0xfffffffa, 0x9, 0x1, 0x10001, 0x7, 0xadab, 0x1, 0x3d, 0x445621ca, 0x2, 0xf, 0x2, 0xfffffffb, 0x9, 0x4cc, 0x3, 0x10, 0x6, 0x2, 0xfe, 0xfffffffb, 0x0, 0x7, 0x4, 0x3, 0x3b8, 0x5, 0x8, 0xa0a6, 0xe47, 0x7fffffff, 0xed, 0x8, 0xf6, 0x7, 0x100, 0x805, 0x1, 0x3, 0x3, 0x4, 0xfffffffe, 0xfff, 0x1ff, 0x380000, 0x7, 0x8, 0x67c8, 0x0, 0x2148497b, 0xfffffffc, 0x5, 0xf0f, 0x800, 0x100, 0x2, 0xfffffffb, 0x8, 0x9, 0x9, 0xae5, 0x2, 0x1, 0x400, 0x1b, 0x0, 0x8, 0x200, 0x8, 0x7, 0x9, 0x84, 0xd6, 0xe20, 0x6, 0x0, 0x60b, 0xffffffff, 0xf507, 0x8, 0x0, 0x6, 0x9, 0x7fff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x1440, 0x5, 0x3ff, 0x6, 0x4, 0x6c, 0x1, 0xfffffff9, 0x4, 0x5a6477ef, 0xffffffff, 0xc3, 0x3, 0x5, 0x6, 0xfffffffd, 0x7, 0xbb1e12e5, 0x1ff, 0x7, 0x1, 0x4, 0x7, 0x1d, 0x6, 0x6, 0x2, 0x9633, 0x3, 0x2, 0x39a88106, 0x4b55, 0xaa9a, 0xe7, 0x5, 0x6, 0x1, 0x8, 0x2, 0x82a, 0x1000, 0xfb54, 0x5, 0x10000, 0x1, 0x4, 0x0, 0x80000001, 0x6, 0x8, 0x9, 0x7, 0x8, 0x4a, 0x9, 0x5, 0x2f, 0xd76, 0x400, 0x2, 0x7, 0x7f, 0x2, 0x5a, 0x3, 0x29e, 0x823, 0x7, 0x2, 0x6, 0x81, 0x6, 0x2, 0x8a, 0x1ff, 0x5, 0x8, 0x3, 0x1, 0x3, 0x7, 0xd, 0x8, 0x9, 0x7, 0x4, 0x3, 0x401, 0x8, 0x81, 0x3, 0xda71, 0x0, 0x34d7, 0x6, 0x602, 0x100, 0x1000, 0x6, 0x2, 0x2, 0x1, 0xac2a, 0x6, 0x1000, 0x6, 0x1, 0x3, 0x3, 0xd22, 0x4, 0x1, 0x0, 0x4, 0x4, 0x5, 0xa, 0xa7a, 0x1c, 0x6, 0x3, 0xbb000000, 0x80000001, 0xfffffff7, 0x5174, 0xa, 0xfff, 0x2, 0x2, 0x1ff, 0x7272, 0x6, 0x7, 0x5854, 0x6, 0x8, 0x8, 0xfffff001, 0x4, 0x5, 0x4, 0x101, 0x0, 0x6bd, 0xe, 0x2796, 0x28000000, 0x8, 0xac6, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x4, 0x3, 0x9, 0x6, 0x10001, 0x4, 0x80, 0x3, 0x4, 0x401, 0xc6, 0x3ff, 0x9, 0xfffffeff, 0x0, 0x0, 0x7, 0x0, 0x3, 0x7, 0x0, 0x800, 0x5, 0xfffffff9, 0x6, 0x0, 0x100, 0x9ec, 0x3, 0x6, 0xc67, 0x7, 0x3, 0x10000, 0x6, 0x8, 0x0, 0x8, 0x8, 0x72, 0x8, 0x81, 0x16, 0xc, 0x7, 0xdec, 0xd15f, 0x7fffffff, 0x2, 0xe, 0x40, 0x8, 0x1, 0x2, 0x718, 0xb6, 0x5, 0x9, 0xfffffffb, 0xa1eb, 0x10, 0x1, 0x2, 0xfffffffc, 0x5, 0x8, 0x2, 0x0, 0x51e5, 0x2, 0xe49c, 0x4, 0x3, 0x1, 0xe8, 0xe, 0x7e7d, 0xfffffffb, 0x1, 0x8, 0x53dd, 0x6, 0x7f, 0x10040000, 0x3, 0x2, 0x4, 0x6, 0x9, 0xe2b, 0x10000, 0x9a, 0x514, 0x0, 0x5, 0x3e, 0x100, 0x9, 0xfffffffa]}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xb, 0x2, 0x2, 0x9, 0xffff, 0x2, 0x1, 0x43, 0xf786, 0x114f, 0xcd, 0x80000001, 0xfffffff8, 0x3, 0x3, 0x5, 0x80000000, 0x5, 0x5, 0x2, 0x0, 0x1, 0x1, 0x6, 0x8, 0x6, 0x8, 0x1ff, 0xff, 0x0, 0xa000000, 0x0, 0x1000, 0x7ff, 0x80000001, 0x10001, 0x1, 0xc443, 0x7, 0x8, 0xffff8000, 0x7fff, 0x8, 0xc, 0x8ba, 0x4, 0xc7d, 0x6d, 0x7ff, 0xffffffff, 0x20b, 0xfe, 0x8, 0xfffffffb, 0x7, 0x7, 0xd, 0x7fffffff, 0x37d, 0x8000, 0xd, 0x101, 0x3687285e, 0x80000001, 0x6, 0x0, 0x9, 0x6, 0x884, 0x3726075a, 0x100, 0x9c, 0x0, 0x9, 0x69, 0x10, 0x6, 0x6, 0x1, 0x7, 0x5, 0x6, 0x5410, 0xfffffff0, 0xfffffff9, 0x0, 0x0, 0x8, 0xffffff01, 0x1000, 0x2, 0x9, 0x1, 0x4, 0x8000, 0x14f, 0x0, 0x1, 0x8, 0x8, 0x52, 0x1, 0x100, 0x4, 0x1, 0x1ff, 0x8, 0x800, 0x1000, 0x9, 0xc, 0x5, 0x8000, 0x7, 0xfff, 0x5, 0x86c, 0x7fffffff, 0x2, 0x7, 0x8, 0x5, 0x200, 0x10000, 0x7, 0xffff, 0x9, 0x3298, 0x9, 0x10, 0x9, 0x9, 0x9, 0xffffffff, 0x7, 0x7, 0x6, 0x3, 0x1, 0x0, 0x7a, 0x9, 0xc, 0x47d8, 0x10001, 0x9, 0x9e1c, 0x7, 0x6d4e4b33, 0x2, 0x8, 0x10000, 0x40, 0x3, 0x6, 0x1, 0x2, 0x80, 0x2, 0x10, 0x9, 0x5, 0x2, 0x9, 0x400, 0x2, 0x3, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x8, 0xfffffffd, 0x4, 0x9, 0x5, 0x3, 0x1000, 0x0, 0x8e0, 0x3, 0x8, 0xbda, 0x2d9c, 0x7, 0x7fffffff, 0xf, 0x5a, 0x2ff5, 0x5a8, 0xff, 0x306, 0x1ff, 0x3, 0x9, 0x0, 0x7, 0x3, 0x2, 0x8, 0x8, 0x8, 0x0, 0x1, 0x4, 0xfffffffc, 0xffff4abb, 0x6, 0x9, 0xe16, 0x9d91, 0x7, 0xd142, 0x6, 0x1, 0x3, 0x7, 0xc, 0x8, 0x8000, 0xd74f, 0x6, 0xf4, 0x7, 0x1000, 0x4, 0x40, 0x9, 0x800, 0x9, 0x7, 0x9, 0x4, 0x2, 0x100, 0x5, 0x3, 0x8, 0x762, 0xfffffffe, 0x9, 0x2, 0x6a, 0x3, 0x1ff, 0x5, 0x629e, 0xffff3cc0, 0xfffffffc, 0x7f, 0x8000000, 0xb1, 0x6, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x2, 0x146, 0xd6, 0x7, 0x2, 0x1, 0x5, 0x4, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x9, 0xb8, 0x4, 0x4, 0x3, 0x8, 0x6, 0x0, 0x24000, 0x7fffffff, 0x8000000, 0x5, 0xb, 0x21, 0xb285, 0x1, 0x1ff, 0x8b, 0x7, 0x9, 0x7d197f49, 0xfffffffb, 0x8, 0x401, 0xca7, 0x4, 0x4, 0xb173, 0x2, 0x8, 0x5, 0xfffffff7, 0x200, 0x1, 0xf2a00000, 0x1, 0x7, 0x3, 0x3, 0x5, 0x1, 0xfb9, 0x2, 0x1, 0x83f, 0xffffffff, 0x56, 0xc2a, 0xab4f, 0x0, 0x790e, 0xa, 0x7, 0x1ff, 0x0, 0x0, 0x976, 0xa0, 0x1, 0x6, 0x0, 0x3, 0xfffffff5, 0x80, 0x6, 0xc343, 0x2, 0x7, 0x4, 0x200, 0x3, 0x9, 0xe, 0x5, 0x9, 0x800, 0xb, 0x102, 0x3df8, 0x7, 0x7, 0x5, 0x7fffffff, 0xaf7, 0x27e, 0x0, 0xffff8000, 0x59, 0x3, 0x6, 0x4, 0x400, 0x9, 0xdf5, 0x101, 0x3, 0x2, 0x8f25, 0x8, 0x2, 0x0, 0x7, 0x0, 0x0, 0x800, 0x9a96, 0x7ff, 0x8, 0x7ff, 0x1f62683f, 0x0, 0xa4, 0x81, 0x800, 0x0, 0xffff7fff, 0x5, 0x2ae, 0x3, 0x4, 0x7ff, 0x2, 0x4, 0x2be2fa26, 0x9, 0x9, 0x33, 0x9, 0x675, 0x535e, 0x3, 0x7, 0x3, 0x7f, 0xa44, 0x8, 0x6, 0x7, 0x200, 0x7f, 0x3, 0xe, 0x10001, 0x100, 0x7f, 0x3, 0x163, 0x800, 0x200, 0x3, 0x7, 0x4, 0x4, 0x1cf, 0x1, 0x1, 0x0, 0x800, 0xc0, 0x4, 0x0, 0x8, 0x2, 0x7, 0xb, 0x101, 0x101, 0x1, 0x3, 0x7, 0x5, 0x6, 0x7, 0x494a, 0x80, 0x94000000, 0x8, 0x1, 0x80000000, 0x1, 0x24e6, 0x7, 0x10, 0x1, 0x0, 0x5b9, 0x0, 0x3, 0xffffffff, 0x8, 0x7, 0x7, 0x9, 0xa40, 0x9, 0xfffffff9, 0x99, 0x2, 0xfffffffe, 0x30d1, 0x7, 0xdeb, 0x10000, 0xf678, 0x0, 0x5, 0x74b, 0x5, 0x4, 0xdf94, 0x6, 0xfffff001, 0x3, 0x2, 0x6, 0x7, 0x40, 0x1, 0x2, 0x6, 0x8000, 0x6, 0x3, 0xd1, 0x1, 0x3ff, 0x10000, 0x9, 0x6, 0x9d5, 0x2, 0x7, 0x8, 0x1, 0x10, 0x6, 0x4, 0x1, 0x3, 0x10, 0x401]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xde}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x3658}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getpid() 2.631148613s ago: executing program 5 (id=8172): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_TUPLE_MASTER={0x4}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xc0000, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 2.629023136s ago: executing program 1 (id=8173): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x814583, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0xcc6a, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x91}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='\x9a!\xa1\xd1', &(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.54805983s ago: executing program 5 (id=8174): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000", @ANYRESOCT=r0, @ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) 2.091816013s ago: executing program 2 (id=8175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x143a83, 0x104) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) 2.016539678s ago: executing program 0 (id=8176): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000580), 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x75, 0x9, {"36d12679bdcb4033980a7c24685d23ce"}, 0x4, 0x700000000000000, 0x8}}}, 0xa0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x66, 0x9e, 0x1f, 0x8, 0x711, 0x902, 0xadea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x24, 0x5, 0x90, 0x3, [{{0x9, 0x4, 0x2c, 0x40, 0x0, 0xb6, 0x3b, 0xb7, 0x8}}]}}]}}, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4000004) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x8c, 0x16, 0x1, 0x70bd2c, 0x25dfdbfe, {0x8}, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x21}, @generic="88ac6196a49ddc46e64d0603a0faccc3ec4192081beebe4d4bbd4b4f2b9d8c5fcdbf04b9905ecafe9855f8c3a302b3e3cbe1e55b1e810f12fe2cfd78f43a885aa8b69b814d9019481e5c06244e3e21c8b4631f429d75fc31415f5d628a8badf89057d4ea8e"]}, 0x8c}, 0x1, 0x0, 0x0, 0xc88d1}, 0x4004091) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000000000080000600000001000013020000000700000003000000070000020030302e2e612e5f5f00"], &(0x7f00000005c0)=""/194, 0x3a, 0xc2, 0x1, 0x8}, 0x28) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r9, 0x8000000000000003, {}, 0xfd}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r10, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) mkdir(0x0, 0x44) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) 1.295006018s ago: executing program 3 (id=8177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) 1.147987079s ago: executing program 1 (id=8178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x4008840, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x3}], 0x1, 0x1, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000140)=0x6, 0x4) 454.344373ms ago: executing program 2 (id=8179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800100b, r0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x141a82, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000380)={r5, 0x8, 0xc0, 0x6, 0x7, 0xf87, 0x0, 0x3ff, {r4, @in={{0x2, 0x4e21, @empty}}, 0x1df4, 0x6, 0x7, 0xe13, 0xedcc}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x8}, &(0x7f00000002c0)=0x8) sendfile(r0, r2, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000280), &(0x7f0000000540)=r7}, 0x20) ptrace$peeksig(0x4209, r6, &(0x7f0000000100)={0x3, 0x0, 0x3}, &(0x7f0000000480)=[{}, {}, {}]) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000180)=0x7) (async) r10 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async) sendmsg$inet(r10, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x24008004) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 133.345618ms ago: executing program 3 (id=8180): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 1 (id=8181): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0xaba64f4add525a93, 0x3, 0x0, {0x2, 0x20, 0x10, 0x0, 0x2, 0x2, 0xfd, 0xa}}, 0x1c}, 0x1, 0xffffff7f, 0x0, 0x4000800}, 0x24004084) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x4000, 0x7, 0x1ad}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000300)) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x2) ioctl$TIOCSLCKTRMIOS(r4, 0x89f0, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r6, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r6, r2, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) kernel console output (not intermixed with test programs): interface 0 has no altsetting 0 [ 2197.799471][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2197.809376][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2197.823280][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2197.833309][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2197.842304][T27498] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2197.852533][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2197.867604][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2197.869822][T27498] usb 4-1: device descriptor read/8, error -71 [ 2197.893774][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2197.909790][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2197.921680][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2197.929254][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2197.940452][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2197.950460][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2197.959747][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2197.979148][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2197.989336][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2197.996401][T27498] usb usb4-port1: unable to enumerate USB device [ 2198.005137][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2198.116358][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2198.127123][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2198.147434][T28554] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2198.164110][T28554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2198.452447][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2198.473172][T28554] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2198.478649][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7472'. [ 2198.508229][T28554] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2198.534344][T28554] usb 2-1: Product: syz [ 2198.556486][T28554] usb 2-1: Manufacturer: syz [ 2198.574346][T28554] usb 2-1: SerialNumber: syz [ 2198.601269][T28554] usb 2-1: config 0 descriptor?? [ 2198.617855][T28554] yurex 2-1:0.0: Could not find endpoints [ 2198.634173][T32118] netlink: 'syz.0.7474': attribute type 1 has an invalid length. [ 2198.684148][T32118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2198.736357][T32122] bond5: (slave geneve6): making interface the new active one [ 2198.756009][T32122] bond5: (slave geneve6): Enslaving as an active interface with an up link [ 2199.657124][T32133] qnx4: unable to read the superblock [ 2199.720668][T32116] lo speed is unknown, defaulting to 1000 [ 2199.912058][T32138] Invalid source name [ 2199.916192][T32138] UBIFS error (pid: 32138): cannot open "/dev/sg0", error -22 [ 2200.017371][T27245] usb 2-1: USB disconnect, device number 117 [ 2200.472258][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2200.503285][T32138] sp0: Synchronizing with TNC [ 2200.834333][T32115] [U] `` [ 2201.072044][T32155] syzkaller0: entered promiscuous mode [ 2201.077765][T32155] syzkaller0: entered allmulticast mode [ 2201.283843][T32159] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2201.439437][T32155] tipc: Enabled bearer , priority 0 [ 2201.463073][T32154] tipc: Resetting bearer [ 2201.575408][T32154] tipc: Disabling bearer [ 2201.593144][T32162] sp0: Synchronizing with TNC [ 2203.050362][T32166] lo speed is unknown, defaulting to 1000 [ 2203.174149][T32181] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2203.426896][ T5894] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2203.608140][ T5894] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 2203.620519][T32203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 2203.640247][ T5894] usb 1-1: config 0 has no interface number 0 [ 2203.651667][ T5894] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2203.661502][ T5894] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2203.715728][ T5894] usb 1-1: config 0 interface 249 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 2203.756584][ T5894] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2203.779682][ T5894] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 2203.813326][ T5894] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 2203.834926][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.847000][ T5894] usb 1-1: config 0 descriptor?? [ 2203.854193][ T5894] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 2204.123513][ T5894] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2204.137502][T28554] usb 1-1: USB disconnect, device number 53 [ 2204.294551][ T5894] usb 3-1: device descriptor read/64, error -71 [ 2204.609357][ T5894] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2204.967801][ T5894] usb 3-1: device descriptor read/64, error -71 [ 2205.114127][ T5894] usb usb3-port1: attempt power cycle [ 2205.779416][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7509'. [ 2205.832263][ T5894] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2205.866779][ T5894] usb 3-1: device descriptor read/8, error -71 [ 2206.131756][ T5894] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2206.174935][ T5894] usb 3-1: device descriptor read/8, error -71 [ 2206.187495][T32258] vlan0: entered promiscuous mode [ 2206.302903][ T5894] usb usb3-port1: unable to enumerate USB device [ 2206.446114][T32257] lo speed is unknown, defaulting to 1000 [ 2206.772410][T32266] xt_policy: too many policy elements [ 2206.797980][T32266] fuse: Bad value for 'fd' [ 2207.690016][T32286] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7522'. [ 2207.814309][T32287] binder: 32285:32287 ioctl 400c620e 0 returned -14 [ 2208.504959][T20677] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2208.698461][T20677] usb 4-1: Using ep0 maxpacket: 32 [ 2208.767881][T20677] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2208.838690][T20677] usb 4-1: config 0 has no interface number 0 [ 2208.906138][T20677] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2209.000282][T20677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.070683][T20677] usb 4-1: Product: syz [ 2209.116362][T20677] usb 4-1: Manufacturer: syz [ 2209.302144][T20677] usb 4-1: SerialNumber: syz [ 2209.318740][T20677] usb 4-1: config 0 descriptor?? [ 2209.340974][T20677] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2209.424328][T25602] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2209.620923][T25602] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2210.149941][T25602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.158499][T20677] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2210.164545][T25602] usb 1-1: config 0 descriptor?? [ 2210.178530][T25602] cp210x 1-1:0.0: cp210x converter detected [ 2210.199429][T20677] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2210.320405][ T30] audit: type=1400 audit(2000001478.044:2836): avc: denied { read } for pid=32298 comm="syz.1.7526" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2210.382050][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 2210.407890][ T30] audit: type=1400 audit(2000001478.073:2837): avc: denied { open } for pid=32298 comm="syz.1.7526" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2210.454368][ T30] audit: type=1400 audit(2000001478.101:2838): avc: denied { ioctl } for pid=32298 comm="syz.1.7526" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2210.608634][T32294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.636692][T32294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.660196][T25602] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2210.691719][T25602] usb 1-1: cp210x converter now attached to ttyUSB2 [ 2210.786951][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2210.794850][T20677] usb 4-1: USB disconnect, device number 38 [ 2210.820269][T20677] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2210.841034][T20677] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2210.884628][T20677] quatech2 4-1:0.51: device disconnected [ 2210.902539][ T30] audit: type=1400 audit(2000001478.587:2839): avc: denied { read open } for pid=32292 comm="syz.0.7524" path="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2210.926973][ T5894] usb 1-1: USB disconnect, device number 54 [ 2210.937850][T32294] /dev/nullb0: Can't open blockdev [ 2210.953740][ T5894] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 2210.983615][ T5894] cp210x 1-1:0.0: device disconnected [ 2211.000000][ T30] audit: type=1400 audit(2000001478.624:2840): avc: denied { mounton } for pid=32292 comm="syz.0.7524" path="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2211.351635][T32316] syzkaller0: entered promiscuous mode [ 2211.362655][T32316] syzkaller0: entered allmulticast mode [ 2211.413238][T32316] tipc: Enabled bearer , priority 0 [ 2211.439946][T32315] tipc: Resetting bearer [ 2211.479606][T32315] tipc: Disabling bearer [ 2211.496782][T32318] netlink: 'syz.3.7531': attribute type 3 has an invalid length. [ 2211.715518][T32322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2212.385879][T32331] lo speed is unknown, defaulting to 1000 [ 2212.476186][T32336] Invalid source name [ 2212.480568][T32336] UBIFS error (pid: 32336): cannot open "/dev/sg0", error -22 [ 2212.725563][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7537'. [ 2212.816718][T32336] sp0: Synchronizing with TNC [ 2213.441659][T32329] [U] `` [ 2213.670677][T32345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7540'. [ 2213.839866][T32361] syzkaller0: entered promiscuous mode [ 2213.852023][T32361] syzkaller0: entered allmulticast mode [ 2213.893478][T32361] tipc: Enabled bearer , priority 0 [ 2213.911131][T32360] tipc: Resetting bearer [ 2213.947102][T32360] tipc: Disabling bearer [ 2215.389985][T32378] 9pnet_virtio: no channels available for device syz [ 2215.400571][T25602] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2215.602101][ T30] audit: type=1400 audit(2000001482.983:2841): avc: denied { connect } for pid=32375 comm="syz.0.7549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2215.796985][T25602] usb 4-1: not running at top speed; connect to a high speed hub [ 2215.889051][T25602] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2215.980323][T25602] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2216.061292][T25602] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2216.150879][T25602] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 2216.183623][T25602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.211037][T25602] usb 4-1: Product: syz [ 2216.227310][T25602] usb 4-1: Manufacturer: syz [ 2216.252864][T25602] usb 4-1: SerialNumber: syz [ 2217.044389][T32394] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2217.513913][T32401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7556'. [ 2217.589205][T32403] netlink: 'syz.1.7557': attribute type 3 has an invalid length. [ 2217.723026][T32406] 9pnet_virtio: no channels available for device syz [ 2217.814435][T25602] usbhid 4-1:1.0: can't add hid device: -71 [ 2217.849271][T25602] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2217.980740][T25602] usb 4-1: USB disconnect, device number 39 [ 2218.864255][T25602] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2219.024510][T25602] usb 2-1: device descriptor read/64, error -71 [ 2219.281233][T25602] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2219.302700][T27852] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2219.487930][T27852] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2219.511249][T27852] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2219.516602][T32442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7569'. [ 2219.522577][T27852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2219.553563][T27852] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2219.590251][T27852] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2219.612872][T28215] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 2219.619868][T27852] usb 4-1: Product: syz [ 2219.625752][T27852] usb 4-1: Manufacturer: syz [ 2219.630449][T27852] usb 4-1: SerialNumber: syz [ 2219.635285][T25602] usb 2-1: device descriptor read/64, error -71 [ 2219.658379][T27852] usb 4-1: config 0 descriptor?? [ 2219.697674][T27852] usb 4-1: selecting invalid altsetting 0 [ 2219.755122][T25602] usb usb2-port1: attempt power cycle [ 2220.068122][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.078676][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.087175][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.099703][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.111779][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.120852][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.136328][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.136352][T25602] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2220.144306][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.165278][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.168852][T25602] usb 2-1: device descriptor read/8, error -71 [ 2220.173530][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.191756][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.199627][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.205826][T32455] netlink: 'syz.0.7571': attribute type 51 has an invalid length. [ 2220.211345][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.227894][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.239264][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.250128][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.261908][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.314987][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.327179][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.338103][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.354676][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.366527][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.377900][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.391600][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.403730][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.414026][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.424512][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.435354][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.447143][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.455867][T25602] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2220.466257][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.511129][T25602] usb 2-1: device descriptor read/8, error -71 [ 2220.639284][T25602] usb usb2-port1: unable to enumerate USB device [ 2220.740150][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.754196][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.766323][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.775742][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.807972][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.830813][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.867271][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.894913][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2220.921829][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.036063][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.067952][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.095143][T32455] lo speed is unknown, defaulting to 1000 [ 2221.478797][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.513265][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.535217][T32454] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.567977][T32428] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2221.584669][T27852] usb 4-1: USB disconnect, device number 40 [ 2223.622795][ T6623] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2223.795762][ T6623] usb 6-1: not running at top speed; connect to a high speed hub [ 2223.813060][ T6623] usb 6-1: config 3 has an invalid interface number: 226 but max is 2 [ 2223.832179][ T6623] usb 6-1: config 3 has an invalid interface number: 116 but max is 2 [ 2223.841641][ T6623] usb 6-1: config 3 has no interface number 1 [ 2223.850911][ T6623] usb 6-1: config 3 has no interface number 2 [ 2223.866746][ T6623] usb 6-1: config 3 interface 0 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 2223.877986][ T6623] usb 6-1: config 3 interface 226 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2223.891828][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2223.903705][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 2223.915422][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 2223.928819][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 2223.941293][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 2223.994644][ T6623] usb 6-1: config 3 interface 226 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 2224.024079][ T6623] usb 6-1: config 3 interface 116 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 2224.064038][ T6623] usb 6-1: config 3 interface 0 has no altsetting 0 [ 2224.079978][ T6623] usb 6-1: config 3 interface 226 has no altsetting 0 [ 2224.101978][ T6623] usb 6-1: config 3 interface 116 has no altsetting 0 [ 2224.170608][ T6623] usb 6-1: New USB device found, idVendor=187f, idProduct=0700, bcdDevice=8e.5c [ 2224.191774][ T6623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.200051][ T6623] usb 6-1: Product: 呤씃铯㇂뿘㷬踬 [ 2224.219166][ T6623] usb 6-1: Manufacturer: ф [ 2224.223913][ T6623] usb 6-1: SerialNumber: syz [ 2224.241602][T27245] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2224.402280][T27245] usb 1-1: Using ep0 maxpacket: 8 [ 2224.586838][ T6623] smsusb:smsusb_probe: board id=20, interface number 0 [ 2224.595729][ T6623] smsusb:smsusb_probe: Device initialized with return code -19 [ 2225.410244][ T6623] smsusb:smsusb_probe: board id=20, interface number 226 [ 2225.424533][ T6623] smsusb:smsusb_probe: board id=20, interface number 116 [ 2225.439546][ T6623] usb 6-1: USB disconnect, device number 30 [ 2225.750253][T32525] sctp: [Deprecated]: syz.3.7589 (pid 32525) Use of int in max_burst socket option deprecated. [ 2225.750253][T32525] Use struct sctp_assoc_value instead [ 2226.457610][T32528] lo speed is unknown, defaulting to 1000 [ 2226.497512][T32540] Invalid source name [ 2226.504073][T32540] UBIFS error (pid: 32540): cannot open "/dev/sg0", error -22 [ 2226.504848][ T30] audit: type=1326 audit(2000001493.179:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2226.542521][ T30] audit: type=1326 audit(2000001493.179:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2226.606348][ T30] audit: type=1326 audit(2000001493.179:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2226.851513][T32546] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 2226.959363][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7590'. [ 2226.986055][ T30] audit: type=1326 audit(2000001493.179:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2226.999666][T32540] sp0: Synchronizing with TNC [ 2227.083126][ T30] audit: type=1326 audit(2000001493.179:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.195470][ T30] audit: type=1326 audit(2000001493.179:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.219103][T27245] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2227.228830][T27245] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2227.236820][T27245] usb 1-1: can't read configurations, error -71 [ 2227.244213][ T30] audit: type=1326 audit(2000001493.179:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.300481][T32527] [U] `` [ 2227.305500][ T30] audit: type=1326 audit(2000001493.179:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.330565][ T30] audit: type=1326 audit(2000001493.179:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.354707][ T30] audit: type=1326 audit(2000001493.179:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32539 comm="syz.1.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f5f8f749 code=0x7ff00000 [ 2227.448780][T25602] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2227.710263][T25602] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2227.810429][T25602] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2227.906510][T25602] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2227.979757][T25602] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2228.056962][T25602] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2228.132623][T25602] usb 4-1: Product: syz [ 2228.194283][T25602] usb 4-1: Manufacturer: syz [ 2228.244337][T25602] usb 4-1: SerialNumber: syz [ 2228.349910][T25602] usb 4-1: config 0 descriptor?? [ 2228.365346][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.367846][T25602] usb 4-1: selecting invalid altsetting 0 [ 2228.372916][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.372962][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.372982][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.401735][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.409285][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.418133][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.425570][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.434108][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.449846][T27245] hid-generic 0003:0004:0000.002F: unknown main item tag 0x0 [ 2228.463777][T27245] hid-generic 0003:0004:0000.002F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2228.785042][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.787673][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.790948][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.794695][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.797344][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.800726][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.804047][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.806874][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.810530][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.813223][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.816850][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.819005][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2228.823182][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.208470][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.211916][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.214605][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.218195][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.221619][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.224224][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.227282][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.230673][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.233750][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.236760][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.240199][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.243290][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.246741][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.254304][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.257997][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.263264][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.266240][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.267799][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.270575][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.273387][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.276309][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.277867][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.280430][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.283277][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.286172][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.288507][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.291239][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.294159][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.296862][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.299098][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.301332][T32569] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.357460][T32548] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2229.375124][T25602] usb 4-1: USB disconnect, device number 41 [ 2231.401427][T32588] netlink: 'syz.5.7603': attribute type 3 has an invalid length. [ 2231.894643][T32597] batman_adv: batadv0: Adding interface: vlan2 [ 2231.916198][T32597] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2231.994900][T32597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2232.028999][T32597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2232.049832][T32597] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 2232.163244][T27245] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2232.246091][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 2232.246103][ T30] audit: type=1400 audit(2000001498.548:2928): avc: denied { append } for pid=32605 comm="syz.5.7610" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2232.559130][T27245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.570685][T27245] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2232.588454][T27245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.603414][T27245] usb 1-1: config 0 descriptor?? [ 2233.108790][ T30] audit: type=1326 audit(2000001499.362:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32618 comm="syz.2.7614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1938f749 code=0x0 [ 2233.152684][T27245] lenovo 0003:17EF:6047.0030: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 2233.232348][T28554] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 2233.533041][ T30] audit: type=1400 audit(2000001499.755:2930): avc: denied { add_name } for pid=32599 comm="syz.0.7608" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2233.544061][T28554] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2233.555068][T32600] o2cb: This node has not been configured. [ 2233.571987][T28554] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2233.583326][T28554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2233.595791][T32600] o2cb: Cluster check failed. Fix errors before retrying. [ 2233.611230][T32600] (syz.0.7608,32600,0):user_dlm_register:674 ERROR: status = -22 [ 2233.613995][T28554] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2233.620802][ T30] audit: type=1400 audit(2000001499.783:2931): avc: denied { create } for pid=32599 comm="syz.0.7608" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2233.650392][T32600] (syz.0.7608,32600,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 2233.661899][T28554] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2233.661982][ T30] audit: type=1400 audit(2000001499.783:2932): avc: denied { associate } for pid=32599 comm="syz.0.7608" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2233.695684][T28554] usb 2-1: Product: syz [ 2233.700438][T28554] usb 2-1: Manufacturer: syz [ 2233.706216][T28554] usb 2-1: SerialNumber: syz [ 2233.737541][T28554] usb 2-1: config 0 descriptor?? [ 2233.753148][T28554] usb 2-1: selecting invalid altsetting 0 [ 2233.784319][T27245] lenovo 0003:17EF:6047.0030: Failed to switch F7/9/11 mode: -71 [ 2233.793190][T27245] lenovo 0003:17EF:6047.0030: Failed to switch middle button: -71 [ 2233.801377][T27245] lenovo 0003:17EF:6047.0030: Fn-lock setting failed: -71 [ 2233.808816][T27245] lenovo 0003:17EF:6047.0030: Sensitivity setting failed: -71 [ 2233.824315][T27245] usb 1-1: USB disconnect, device number 57 [ 2234.251988][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.260729][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.269316][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.278070][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.286826][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.295819][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.305448][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.313815][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.323107][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.333496][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.344835][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.354868][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.364484][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.374496][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.387928][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.398042][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.410204][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.418798][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.427901][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.436822][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.445699][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.454823][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.464249][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.472818][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.482460][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.493103][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.503717][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.514269][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.524979][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.535583][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.546116][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.555786][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.716172][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2234.727067][T32638] /dev/nullb0: Can't open blockdev [ 2234.765696][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.194860][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.212082][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.238849][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.251006][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.260380][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.268941][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.278177][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.286144][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.297733][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.306900][T32637] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.318383][T32613] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2235.336342][T25602] usb 2-1: USB disconnect, device number 122 [ 2235.455999][ T5894] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2235.798601][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 2237.134404][T20677] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2237.245645][T32674] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2237.299567][T20677] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2237.311605][T20677] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2237.321234][T20677] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 2237.331406][T20677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.345187][T20677] usb 2-1: config 0 descriptor?? [ 2237.679639][T20677] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2237.811820][T32688] x_tables: duplicate underflow at hook 1 [ 2237.857828][T20677] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 2237.874081][T20677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.917049][T20677] usb 3-1: config 0 descriptor?? [ 2237.939762][T20677] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 2238.018697][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2238.059669][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2238.117493][ T5894] usb 1-1: can't read configurations, error -71 [ 2238.267538][T20677] gspca_zc3xx: reg_w_i err -71 [ 2238.285284][T20677] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2238.340362][T20677] usb 3-1: USB disconnect, device number 52 [ 2238.793737][T32688] lo speed is unknown, defaulting to 1000 [ 2239.037896][ T5894] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 2239.200189][ T5894] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2239.244199][ T5894] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2239.318314][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2239.346339][ T5894] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2239.355780][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2239.374882][ T5894] usb 1-1: Product: syz [ 2239.386757][ T5894] usb 1-1: Manufacturer: syz [ 2239.398247][ T5894] usb 1-1: SerialNumber: syz [ 2239.415560][ T5894] usb 1-1: config 0 descriptor?? [ 2239.450187][ T5894] usb 1-1: selecting invalid altsetting 0 [ 2239.746353][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.756501][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.765921][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.775671][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.785820][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.795961][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.806515][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.816840][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.827489][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.839749][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.849963][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.859285][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.870152][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.881636][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.892948][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.903664][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.913897][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.924600][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.935719][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.946032][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.957169][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.968539][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.978096][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2239.989703][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.000948][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.012108][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.022757][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.034270][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.043996][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.054974][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.065352][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.075435][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.086084][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.096922][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.106739][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.117715][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.128475][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.138596][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.149495][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.160597][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.170542][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.181002][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.193259][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.203380][T32717] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.251855][T32703] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2240.283194][T27245] usb 2-1: USB disconnect, device number 123 [ 2240.289476][ T5894] usb 1-1: USB disconnect, device number 59 [ 2240.651467][T32721] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2240.787574][T32730] 9pnet_virtio: no channels available for device syz [ 2241.317163][T32743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2241.434751][T32743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2242.367951][T32764] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2242.458108][T32766] syzkaller0: entered promiscuous mode [ 2242.486110][T32766] syzkaller0: entered allmulticast mode [ 2242.632798][ T30] audit: type=1400 audit(2000001508.267:2933): avc: denied { lock } for pid=302 comm="syz.0.7656" path="socket:[130746]" dev="sockfs" ino=130746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2243.037683][ T303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7656'. [ 2244.441018][ T30] audit: type=1400 audit(2000001509.951:2934): avc: denied { listen } for pid=328 comm="syz.0.7666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2244.605921][ T336] netlink: 'syz.5.7668': attribute type 3 has an invalid length. [ 2245.060939][ T341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2245.075075][ T342] binder: 329:342 ioctl c0306201 0 returned -14 [ 2245.437111][ T353] syzkaller0: entered promiscuous mode [ 2245.445795][ T30] audit: type=1400 audit(2000001510.896:2935): avc: denied { ioctl } for pid=352 comm="syz.0.7673" path="socket:[131467]" dev="sockfs" ino=131467 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2245.483696][ T353] syzkaller0: entered allmulticast mode [ 2245.491245][ T3515] syzkaller0: tun_net_xmit 70 [ 2245.655864][ T354] binder: 349:354 ioctl c0306201 0 returned -14 [ 2245.761736][T27498] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 2245.854006][ T348] netlink: 388 bytes leftover after parsing attributes in process `syz.1.7671'. [ 2245.896791][ T358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7674'. [ 2245.960541][T27498] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 2245.997793][T27498] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2246.026032][T27498] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2246.043598][T27498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.095406][T27498] usb 1-1: config 0 descriptor?? [ 2246.104507][ T353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2246.383608][ T364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7677'. [ 2246.567301][ T368] No control pipe specified [ 2246.676507][ T30] audit: type=1400 audit(2000001512.056:2936): avc: denied { execute } for pid=363 comm="syz.2.7677" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2246.816037][ T353] syzkaller0: tun_net_xmit 14 [ 2247.434272][ T30] audit: type=1400 audit(2000001512.261:2937): avc: denied { setattr } for pid=352 comm="syz.0.7673" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 2247.708906][T27498] usbhid 1-1:0.0: can't add hid device: -71 [ 2247.714889][T27498] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2247.772918][T27498] usb 1-1: USB disconnect, device number 60 [ 2247.993166][ T378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7680'. [ 2248.044126][ T378] ip6gre1: entered promiscuous mode [ 2248.052890][ T378] ip6gre1: entered allmulticast mode [ 2249.510584][ T397] netlink: 'syz.1.7685': attribute type 21 has an invalid length. [ 2249.518550][ T397] netlink: 'syz.1.7685': attribute type 6 has an invalid length. [ 2249.526269][ T397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7685'. [ 2249.600774][ T399] netlink: 'syz.5.7686': attribute type 1 has an invalid length. [ 2249.692346][ T399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2249.723394][ T401] bond3: (slave geneve4): making interface the new active one [ 2249.744401][ T401] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 2249.815849][ T408] Invalid source name [ 2249.819865][ T408] UBIFS error (pid: 408): cannot open "/dev/sg0", error -22 [ 2249.833446][ T391] lo speed is unknown, defaulting to 1000 [ 2249.948254][T25602] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2249.980647][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7684'. [ 2250.002029][ T391] sp0: Synchronizing with TNC [ 2250.118354][ T389] [U] ` [ 2250.127035][T25602] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2250.147540][T25602] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2250.172973][T25602] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2250.193541][T25602] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2250.258683][T25602] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2250.302404][T25602] usb 2-1: Product: syz [ 2250.313863][T25602] usb 2-1: Manufacturer: syz [ 2250.326239][T25602] usb 2-1: SerialNumber: syz [ 2250.346836][T25602] usb 2-1: config 0 descriptor?? [ 2250.364596][T25602] usb 2-1: selecting invalid altsetting 0 [ 2250.547582][ T421] overlayfs: failed to resolve './file0': -2 [ 2251.935443][ T430] SELinux: failed to load policy [ 2251.947457][T27498] usb 2-1: USB disconnect, device number 124 [ 2251.968457][ T30] audit: type=1400 audit(2000001517.004:2938): avc: denied { ioctl } for pid=429 comm="syz.2.7694" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2252.185316][ T437] syzkaller0: entered promiscuous mode [ 2252.191665][ T437] syzkaller0: entered allmulticast mode [ 2253.643758][ T459] lo speed is unknown, defaulting to 1000 [ 2253.969323][ T465] Invalid source name [ 2253.974733][ T465] UBIFS error (pid: 465): cannot open "/dev/sg0", error -22 [ 2254.141669][ T465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7702'. [ 2254.268359][ T465] sp0: Synchronizing with TNC [ 2254.456410][ T458] [U] ` [ 2255.244081][ T486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7709'. [ 2255.361513][ T486] ip6gre1: entered promiscuous mode [ 2255.366908][ T486] ip6gre1: entered allmulticast mode [ 2255.562421][ T491] qnx4: unable to read the superblock [ 2255.640358][T28680] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2255.928484][T28680] usb 1-1: Using ep0 maxpacket: 8 [ 2256.188369][T28680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2256.219619][T28680] usb 1-1: config 4 interface 0 has no altsetting 0 [ 2256.234391][T28680] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2256.247773][T28680] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2256.278409][T28680] usb 1-1: Manufacturer: О [ 2256.308928][T28680] usb 1-1: SerialNumber: syz [ 2256.397464][ T30] audit: type=1400 audit(2000001521.138:2939): avc: denied { shutdown } for pid=498 comm="syz.2.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2256.484367][T27459] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2256.565231][T28680] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2256.584088][T28680] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2256.652881][T28680] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2256.663130][T28680] usb 1-1: media controller created [ 2256.682533][T28680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2256.684742][T27459] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2256.707215][ T503] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2256.724410][T27459] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2256.736139][T27459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2256.745377][T28680] zl10353_read_register: readreg error (reg=127, ret==0) [ 2256.746662][T27459] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2256.761732][T27459] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2256.771838][T27459] usb 6-1: Product: syz [ 2256.776324][T27459] usb 6-1: Manufacturer: syz [ 2256.780942][T27459] usb 6-1: SerialNumber: syz [ 2256.790002][T27459] usb 6-1: config 0 descriptor?? [ 2256.808625][T28680] usb 1-1: USB disconnect, device number 61 [ 2256.809633][T27459] usb 6-1: selecting invalid altsetting 0 [ 2257.348287][T28680] usb 6-1: USB disconnect, device number 31 [ 2257.591316][ T526] netlink: 'syz.2.7722': attribute type 3 has an invalid length. [ 2259.183116][ T535] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2259.374253][ T547] syzkaller0: entered promiscuous mode [ 2259.396867][ T547] syzkaller0: entered allmulticast mode [ 2259.898601][ T6623] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2260.124794][ T6623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.844361][ T6623] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 2260.856531][ T6623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.131607][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2261.156745][ T6623] usb 2-1: Product: syz [ 2261.170449][ T6623] usb 2-1: Manufacturer: syz [ 2261.196444][ T6623] usb 2-1: SerialNumber: syz [ 2261.224318][ T6623] usb 2-1: config 0 descriptor?? [ 2261.270535][ T6623] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 2261.714503][ T578] syzkaller0: entered promiscuous mode [ 2261.751104][ T578] syzkaller0: entered allmulticast mode [ 2261.874439][ T578] tipc: Enabled bearer , priority 0 [ 2261.919541][ T575] tipc: Resetting bearer [ 2262.007711][ T575] tipc: Disabling bearer [ 2263.032563][ T592] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2263.423534][ T6623] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 2263.512134][T25602] usb 2-1: USB disconnect, device number 125 [ 2263.616792][ T6623] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2263.679055][ T6623] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2263.701326][ T6623] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2264.080036][ T603] dvmrp1: entered allmulticast mode [ 2264.093094][ T6623] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2264.119064][ T6623] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2264.142881][ T6623] usb 6-1: Product: syz [ 2264.147126][ T6623] usb 6-1: Manufacturer: syz [ 2264.158945][ T6623] usb 6-1: SerialNumber: syz [ 2264.187324][ T6623] usb 6-1: config 0 descriptor?? [ 2264.204315][ T6623] usb 6-1: selecting invalid altsetting 0 [ 2264.819369][T25602] usb 6-1: USB disconnect, device number 32 [ 2265.478602][ T638] syzkaller0: entered promiscuous mode [ 2265.490208][ T638] syzkaller0: entered allmulticast mode [ 2265.892154][ T30] audit: type=1400 audit(2000001530.025:2940): avc: denied { shutdown } for pid=640 comm="syz.5.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2265.927462][ T641] lo speed is unknown, defaulting to 1000 [ 2267.217972][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7756'. [ 2267.651127][ T30] audit: type=1400 audit(2000001531.671:2941): avc: denied { map } for pid=660 comm="syz.0.7760" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2267.710954][ T30] audit: type=1400 audit(2000001531.671:2942): avc: denied { execute } for pid=660 comm="syz.0.7760" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2267.867777][ T667] syzkaller0: entered promiscuous mode [ 2267.873487][ T667] syzkaller0: entered allmulticast mode [ 2268.068086][ T674] syzkaller0: entered promiscuous mode [ 2268.077106][ T674] syzkaller0: entered allmulticast mode [ 2268.094785][ T674] tipc: Enabled bearer , priority 0 [ 2268.102795][ T673] tipc: Resetting bearer [ 2268.118607][T28554] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 2268.310536][ T673] tipc: Disabling bearer [ 2268.332263][ T6623] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2268.511431][ T6623] usb 6-1: Using ep0 maxpacket: 32 [ 2268.543280][ T6623] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2268.566044][ T6623] usb 6-1: config 0 has no interface number 0 [ 2268.572183][ T6623] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2268.593003][ T6623] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2268.661117][ T6623] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2268.675114][ T6623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.689589][ T683] /dev/nullb0: Can't open blockdev [ 2268.695986][ T6623] usb 6-1: Product: syz [ 2268.704812][ T6623] usb 6-1: Manufacturer: syz [ 2268.709562][ T6623] usb 6-1: SerialNumber: syz [ 2268.724025][T28554] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2268.744158][T28554] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2268.756097][T28554] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2268.797530][ T6623] usb 6-1: config 0 descriptor?? [ 2268.798832][T28554] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2268.927463][T28554] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2269.047112][T28554] usb 1-1: Product: syz [ 2269.059434][T28554] usb 1-1: Manufacturer: syz [ 2269.072836][T28554] usb 1-1: SerialNumber: syz [ 2269.108400][T28554] usb 1-1: config 0 descriptor?? [ 2269.467008][T28554] usb 1-1: selecting invalid altsetting 0 [ 2269.559125][ T691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7768'. [ 2270.299455][ T662] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 2270.318895][ T5894] usb 1-1: USB disconnect, device number 62 [ 2270.646465][ T704] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7772'. [ 2270.860681][ T704] kAFS: No cell specified [ 2270.874524][ T701] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7772'. [ 2270.896892][ T704] 9pnet_fd: Insufficient options for proto=fd [ 2271.077827][ T6623] appletouch 6-1:0.85: Geyser mode initialized. [ 2271.097537][ T6623] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input103 [ 2271.162587][ T5894] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2271.323358][ T5894] usb 3-1: device descriptor read/64, error -71 [ 2271.340709][T28554] usb 6-1: USB disconnect, device number 33 [ 2271.364072][T28554] appletouch 6-1:0.85: input: appletouch disconnected [ 2271.385017][ T715] syzkaller0: entered promiscuous mode [ 2271.391383][ T715] syzkaller0: entered allmulticast mode [ 2271.617628][ T5894] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2271.816773][ T5894] usb 3-1: device descriptor read/64, error -71 [ 2271.979499][ T5894] usb usb3-port1: attempt power cycle [ 2272.643949][ T740] netlink: 'syz.3.7783': attribute type 1 has an invalid length. [ 2272.682521][ T5894] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2272.686033][ T740] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2272.721742][ T740] bond10: (slave geneve9): making interface the new active one [ 2272.737325][ T740] bond10: (slave geneve9): Enslaving as an active interface with an up link [ 2272.745086][ T5894] usb 3-1: device descriptor read/8, error -71 [ 2272.771125][ T745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7785'. [ 2273.512654][ T752] syzkaller0: entered promiscuous mode [ 2273.525479][T28680] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 2273.526126][ T752] syzkaller0: entered allmulticast mode [ 2273.533163][ T5894] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2273.569703][ T5894] usb 3-1: device descriptor read/8, error -71 [ 2273.747242][ T5894] usb usb3-port1: unable to enumerate USB device [ 2273.792226][T28680] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2273.806195][T28680] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2273.823845][T28680] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2273.835617][T28680] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2273.945424][T28680] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2274.119932][T28680] usb 1-1: Product: syz [ 2274.136849][T28680] usb 1-1: Manufacturer: syz [ 2274.150791][T28680] usb 1-1: SerialNumber: syz [ 2274.175060][T28680] usb 1-1: config 0 descriptor?? [ 2274.186674][T28680] usb 1-1: selecting invalid altsetting 0 [ 2275.362280][T28680] usb 1-1: USB disconnect, device number 63 [ 2275.441973][ T776] ip6gre2: entered promiscuous mode [ 2275.447284][ T776] ip6gre2: entered allmulticast mode [ 2275.864440][ T790] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2276.042332][ T793] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2276.327241][ T795] syzkaller0: entered promiscuous mode [ 2276.332754][ T795] syzkaller0: entered allmulticast mode [ 2276.633856][ T811] 9pnet_virtio: no channels available for device syz [ 2277.469758][ T821] ip6gre2: entered promiscuous mode [ 2277.497042][ T821] ip6gre2: entered allmulticast mode [ 2277.518464][ T30] audit: type=1400 audit(2000001540.903:2943): avc: denied { setattr } for pid=822 comm="syz.2.7807" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2277.530044][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 2277.586959][ T30] audit: type=1326 audit(2000001540.931:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=825 comm="syz.1.7809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f5f8f749 code=0x0 [ 2277.659795][ T827] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2277.690420][ T839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7801'. [ 2277.715959][ T827] macvlan2: entered allmulticast mode [ 2277.732192][ T827] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2277.755804][ T802] lo speed is unknown, defaulting to 1000 [ 2278.219893][ T809] sp0: Synchronizing with TNC [ 2278.326776][ T801] [U] `` [ 2279.160234][ T867] netlink: 'syz.2.7818': attribute type 1 has an invalid length. [ 2279.308635][ T873] 9pnet_virtio: no channels available for device syz [ 2279.568862][ T867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2279.891966][ T872] bond5: (slave geneve4): making interface the new active one [ 2279.927862][ T872] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 2280.158121][ T881] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2280.382209][ T890] syzkaller0: entered promiscuous mode [ 2280.388656][ T890] syzkaller0: entered allmulticast mode [ 2280.399432][T25602] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2280.400939][ T890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=890 comm=syz.2.7824 [ 2280.834771][ T879] netlink: 'syz.0.7820': attribute type 15 has an invalid length. [ 2280.857900][T25602] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2280.871768][T25602] usb 6-1: config 0 has no interface number 0 [ 2280.880731][T25602] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2280.890751][T25602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.899776][T25602] usb 6-1: Product: syz [ 2280.904823][T25602] usb 6-1: Manufacturer: syz [ 2280.910382][T25602] usb 6-1: SerialNumber: syz [ 2280.922222][T25602] usb 6-1: config 0 descriptor?? [ 2281.432755][T25602] usb 6-1: Firmware: major: 0, minor: 107, hardware type: UNKNOWN (5) [ 2281.586434][ T30] audit: type=1400 audit(2000001544.710:2945): avc: denied { map } for pid=909 comm="syz.1.7829" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 2281.903428][ T913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.939818][ T913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.964016][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.973138][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.022438][T25602] usb 6-1: failed to fetch extended address, random address set [ 2282.031139][T25602] usb 6-1: atusb_probe: initialization failed, error = -524 [ 2282.038669][T25602] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 2282.071551][ T922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7831'. [ 2282.109076][T25602] usb 6-1: USB disconnect, device number 34 [ 2282.115204][ T927] netlink: 'syz.5.7832': attribute type 3 has an invalid length. [ 2282.761182][ T945] FAULT_INJECTION: forcing a failure. [ 2282.761182][ T945] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.777844][ T945] CPU: 0 UID: 0 PID: 945 Comm: syz.2.7836 Tainted: G L syzkaller #0 PREEMPT(full) [ 2282.777871][ T945] Tainted: [L]=SOFTLOCKUP [ 2282.777877][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2282.777887][ T945] Call Trace: [ 2282.777892][ T945] [ 2282.777899][ T945] dump_stack_lvl+0x16c/0x1f0 [ 2282.777924][ T945] should_fail_ex+0x512/0x640 [ 2282.777947][ T945] ? fs_reclaim_acquire+0xae/0x150 [ 2282.777973][ T945] should_failslab+0xc2/0x120 [ 2282.777997][ T945] __kmalloc_noprof+0xdd/0x8f0 [ 2282.778015][ T945] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2282.778041][ T945] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2282.778060][ T945] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2282.778082][ T945] ? tomoyo_profile+0x47/0x60 [ 2282.778107][ T945] tomoyo_path_number_perm+0x245/0x580 [ 2282.778128][ T945] ? tomoyo_path_number_perm+0x237/0x580 [ 2282.778145][ T945] ? __schedule+0x1054/0x6150 [ 2282.778164][ T945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2282.778204][ T945] ? irqentry_exit+0x1dd/0x8c0 [ 2282.778224][ T945] ? hook_file_ioctl_common+0x144/0x410 [ 2282.778263][ T945] security_file_ioctl+0x9b/0x240 [ 2282.778284][ T945] __x64_sys_ioctl+0xb7/0x210 [ 2282.778307][ T945] do_syscall_64+0xcd/0xf80 [ 2282.778328][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.778344][ T945] RIP: 0033:0x7f3d1938f749 [ 2282.778356][ T945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2282.778372][ T945] RSP: 002b:00007f3d1a28e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2282.778390][ T945] RAX: ffffffffffffffda RBX: 00007f3d195e6180 RCX: 00007f3d1938f749 [ 2282.778401][ T945] RDX: 0000000000000000 RSI: 000000000000641f RDI: 0000000000000005 [ 2282.778411][ T945] RBP: 00007f3d1a28e090 R08: 0000000000000000 R09: 0000000000000000 [ 2282.778420][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.778430][ T945] R13: 00007f3d195e6218 R14: 00007f3d195e6180 R15: 00007ffde66b53c8 [ 2282.778455][ T945] [ 2282.983540][ T945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2283.586142][ T30] audit: type=1800 audit(2000001546.544:2946): pid=962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7839" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 2283.636325][ T957] batadv_slave_0: entered promiscuous mode [ 2283.642951][ T956] batadv_slave_0: left promiscuous mode [ 2283.664489][ T959] syzkaller0: entered promiscuous mode [ 2283.669973][ T959] syzkaller0: entered allmulticast mode [ 2284.066662][ T977] 9pnet_virtio: no channels available for device syz [ 2284.140043][ T979] Invalid source name [ 2284.144289][ T979] UBIFS error (pid: 979): cannot open "/dev/sg0", error -22 [ 2284.270218][ T954] lo speed is unknown, defaulting to 1000 [ 2284.288730][ T986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7837'. [ 2284.426946][ T990] loop9: detected capacity change from 0 to 7 [ 2284.604789][ T990] Dev loop9: unable to read RDB block 7 [ 2284.610890][ T991] SET target dimension over the limit! [ 2284.618442][ T960] sp0: Synchronizing with TNC [ 2284.629259][ T990] loop9: AHDI p1 p2 [ 2284.725838][ T990] loop9: partition table partially beyond EOD, truncated [ 2284.733080][ T990] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 2285.218800][ T998] block device autoloading is deprecated and will be removed. [ 2285.237531][ T951] [U] `` [ 2285.838637][ T1004] syzkaller0: entered promiscuous mode [ 2285.851466][ T1004] syzkaller0: entered allmulticast mode [ 2285.968538][ T30] audit: type=1400 audit(2000001548.798:2947): avc: denied { map } for pid=1010 comm="syz.1.7850" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2286.009614][ T1013] tipc: Enabled bearer , priority 0 [ 2286.025895][ T30] audit: type=1400 audit(2000001548.836:2948): avc: denied { execute } for pid=1010 comm="syz.1.7850" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2286.086010][ T1003] tipc: Resetting bearer [ 2286.191022][ T1003] tipc: Disabling bearer [ 2287.249229][ T30] audit: type=1400 audit(2000001549.902:2949): avc: denied { write } for pid=1020 comm="syz.1.7853" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2287.398861][ T1030] FAULT_INJECTION: forcing a failure. [ 2287.398861][ T1030] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.411848][ T1030] CPU: 1 UID: 0 PID: 1030 Comm: syz.5.7854 Tainted: G L syzkaller #0 PREEMPT(full) [ 2287.411866][ T1030] Tainted: [L]=SOFTLOCKUP [ 2287.411870][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2287.411877][ T1030] Call Trace: [ 2287.411881][ T1030] [ 2287.411885][ T1030] dump_stack_lvl+0x16c/0x1f0 [ 2287.411902][ T1030] should_fail_ex+0x512/0x640 [ 2287.411918][ T1030] ? fs_reclaim_acquire+0xae/0x150 [ 2287.411936][ T1030] should_failslab+0xc2/0x120 [ 2287.411953][ T1030] __kmalloc_noprof+0xdd/0x8f0 [ 2287.411965][ T1030] ? tomoyo_encode2+0x100/0x3e0 [ 2287.411981][ T1030] ? tomoyo_encode2+0x100/0x3e0 [ 2287.411994][ T1030] tomoyo_encode2+0x100/0x3e0 [ 2287.412008][ T1030] tomoyo_encode+0x29/0x50 [ 2287.412021][ T1030] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2287.412038][ T1030] tomoyo_path_number_perm+0x245/0x580 [ 2287.412049][ T1030] ? tomoyo_path_number_perm+0x237/0x580 [ 2287.412062][ T1030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2287.412075][ T1030] ? find_held_lock+0x2b/0x80 [ 2287.412098][ T1030] ? find_held_lock+0x2b/0x80 [ 2287.412109][ T1030] ? hook_file_ioctl_common+0x144/0x410 [ 2287.412127][ T1030] ? __fget_files+0x20e/0x3c0 [ 2287.412141][ T1030] security_file_ioctl+0x9b/0x240 [ 2287.412155][ T1030] __x64_sys_ioctl+0xb7/0x210 [ 2287.412174][ T1030] do_syscall_64+0xcd/0xf80 [ 2287.412195][ T1030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.412209][ T1030] RIP: 0033:0x7f35c9d8f749 [ 2287.412219][ T1030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2287.412235][ T1030] RSP: 002b:00007f35cabdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2287.412253][ T1030] RAX: ffffffffffffffda RBX: 00007f35c9fe5fa0 RCX: 00007f35c9d8f749 [ 2287.412263][ T1030] RDX: 0000000000000000 RSI: 000000000000641f RDI: 0000000000000005 [ 2287.412273][ T1030] RBP: 00007f35cabdb090 R08: 0000000000000000 R09: 0000000000000000 [ 2287.412284][ T1030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.412294][ T1030] R13: 00007f35c9fe6038 R14: 00007f35c9fe5fa0 R15: 00007fff782f0e48 [ 2287.412312][ T1030] [ 2287.623209][ T1030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2287.679848][ T1032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7852'. [ 2287.815137][ T1040] wg1: entered promiscuous mode [ 2287.825932][ T1040] wg1: entered allmulticast mode [ 2288.081563][ T1043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7856'. [ 2288.379678][ T1053] netlink: 'syz.0.7859': attribute type 3 has an invalid length. [ 2289.998632][ T1047] netlink: 388 bytes leftover after parsing attributes in process `syz.3.7857'. [ 2290.106364][T20677] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2290.384311][T20677] usb 3-1: Using ep0 maxpacket: 8 [ 2290.617094][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7862'. [ 2291.709182][ T1102] program syz.0.7867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2291.719937][ T1102] program syz.0.7867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2292.423719][ T1116] Set syz1 is full, maxelem 65536 reached [ 2292.970678][ T1123] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2293.142937][T20677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2293.163831][T20677] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2293.173238][T20677] usb 3-1: can't read configurations, error -71 [ 2293.640461][ T1148] ALSA: seq fatal error: cannot create timer (-22) [ 2294.147963][T20677] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2294.382720][T20677] usb 3-1: Using ep0 maxpacket: 16 [ 2294.395071][T20677] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 2294.421808][T20677] usb 3-1: config 4 has no interface number 0 [ 2294.434218][T20677] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2294.444240][T20677] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2294.454274][T20677] usb 3-1: config 4 interface 9 has no altsetting 0 [ 2294.467239][T20677] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 2294.854085][T20677] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 2294.871014][T20677] usb 3-1: Product: syz [ 2294.878516][ T1169] netlink: 'syz.1.7887': attribute type 3 has an invalid length. [ 2294.882979][T20677] usb 3-1: Manufacturer: syz [ 2294.894693][T20677] usb 3-1: SerialNumber: syz [ 2294.908800][ T1154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2294.916129][ T1154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2294.946600][T20677] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2294.977438][ T1176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2295.152804][ T1182] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 2295.504031][ T812] usb 3-1: Failed to submit usb control message: -71 [ 2295.512101][ T9943] usb 3-1: USB disconnect, device number 58 [ 2295.549245][ T812] usb 3-1: unable to send the bmi data to the device: -71 [ 2295.594863][ T1187] syzkaller0: entered promiscuous mode [ 2295.612503][ T812] usb 3-1: unable to get target info from device [ 2295.618998][ T1187] syzkaller0: entered allmulticast mode [ 2295.625569][ T812] usb 3-1: could not get target info (-71) [ 2295.637891][ T1187] tipc: Enabled bearer , priority 0 [ 2295.648858][ T812] usb 3-1: could not probe fw (-71) [ 2295.673996][ T1186] tipc: Resetting bearer [ 2295.755662][ T1186] tipc: Disabling bearer [ 2296.222791][T28680] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2296.606226][T28680] usb 1-1: Using ep0 maxpacket: 8 [ 2296.637129][ T1194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7893'. [ 2296.885593][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.894232][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.329103][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.336349][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.385817][ T1212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2297.401213][ T1212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2297.494845][ T4027] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.504304][T14647] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.516649][T28680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2297.557717][T28680] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2297.565318][T28680] usb 1-1: can't read configurations, error -71 [ 2297.568458][T14647] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.697731][ T999] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.886398][ T1222] netlink: 388 bytes leftover after parsing attributes in process `syz.5.7900'. [ 2298.468468][ T1236] ALSA: seq fatal error: cannot create timer (-22) [ 2299.931553][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7913'. [ 2300.097563][ T1274] binder: 1268:1274 ioctl c0306201 0 returned -14 [ 2300.123672][ T1275] loop6: detected capacity change from 1 to 0 [ 2300.131951][ T1275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7916'. [ 2300.451237][ T1277] tc_dump_action: action bad kind [ 2300.467139][ T1280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2301.583032][ T1294] netlink: 'syz.3.7922': attribute type 3 has an invalid length. [ 2302.666994][ T1307] random: crng reseeded on system resumption [ 2303.839618][ T1320] tc_dump_action: action bad kind [ 2303.999628][T27498] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2304.191501][T27498] usb 3-1: config index 0 descriptor too short (expected 133, got 72) [ 2304.212878][T27498] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2304.234721][T27498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.263913][T27498] usb 3-1: Product: syz [ 2304.274098][T27498] usb 3-1: Manufacturer: syz [ 2304.290562][T27498] usb 3-1: SerialNumber: syz [ 2304.302675][T27498] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2304.325570][T28554] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2304.518973][ T1328] lo speed is unknown, defaulting to 1000 [ 2304.538712][T28680] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2304.799223][ C1] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 2304.807356][T28680] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 2304.815574][T28680] usb 2-1: config 0 has no interface number 0 [ 2304.863668][T28680] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 2304.873567][T28680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.882083][T28680] usb 2-1: Product: syz [ 2304.886248][T28680] usb 2-1: Manufacturer: syz [ 2304.890841][T28680] usb 2-1: SerialNumber: syz [ 2304.903065][T28680] usb 2-1: config 0 descriptor?? [ 2304.910353][T28680] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 2304.921378][T28680] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 2305.027309][T25602] usb 3-1: USB disconnect, device number 59 [ 2305.468772][T28554] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2305.478180][T28554] ath9k_htc: Failed to initialize the device [ 2305.515839][T25602] usb 3-1: ath9k_htc: USB layer deinitialized [ 2305.527181][ T1358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7938'. [ 2305.694095][ T1360] netlink: 'syz.0.7940': attribute type 10 has an invalid length. [ 2305.701605][ T1337] lo speed is unknown, defaulting to 1000 [ 2305.705222][ T1360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7940'. [ 2305.755367][ T1360] team0: Port device geneve0 added [ 2305.874838][ T1334] lo speed is unknown, defaulting to 1000 [ 2306.614093][T25602] usb 2-1: USB disconnect, device number 126 [ 2307.119695][ T1390] syzkaller0: entered promiscuous mode [ 2307.125297][ T1390] syzkaller0: entered allmulticast mode [ 2307.153843][ T1391] tc_dump_action: action bad kind [ 2307.723884][ T1405] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 2308.816898][ T1405] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2308.924457][ T1408] bond6: (slave geneve7): making interface the new active one [ 2308.946728][ T1408] bond6: (slave geneve7): Enslaving as an active interface with an up link [ 2309.238752][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7959'. [ 2309.838932][ T1440] lo speed is unknown, defaulting to 1000 [ 2309.852313][T20677] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2309.926781][T27498] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2310.029638][T20677] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2310.038132][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.038175][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.038194][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.039016][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.039052][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.039066][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.041932][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.041973][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.042066][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.053247][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.053271][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.053284][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.054109][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.054130][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.054143][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.058170][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.058194][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.058207][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.064178][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.064205][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.064218][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.071450][T20677] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2310.071477][T20677] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2310.071490][T20677] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2310.073979][T20677] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2310.073995][T20677] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2310.074007][T20677] usb 1-1: Product: syz [ 2310.074016][T20677] usb 1-1: Manufacturer: syz [ 2310.074027][T20677] usb 1-1: SerialNumber: syz [ 2310.075359][T20677] usb 1-1: config 0 descriptor?? [ 2310.077710][ T1463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7961'. [ 2310.092123][T20677] yurex 1-1:0.0: Could not find endpoints [ 2310.147151][ T1465] tc_dump_action: action bad kind [ 2310.149605][T27498] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2310.149629][T27498] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2310.149644][T27498] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2310.194173][T27498] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2310.194196][T27498] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2310.194207][T27498] usb 4-1: Product: syz [ 2310.194216][T27498] usb 4-1: Manufacturer: syz [ 2310.194225][T27498] usb 4-1: SerialNumber: syz [ 2310.220134][T27498] usb 4-1: config 0 descriptor?? [ 2310.228774][T27498] usb 4-1: selecting invalid altsetting 0 [ 2311.084995][T25602] usb 1-1: USB disconnect, device number 66 [ 2311.554286][ T1469] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7967'. [ 2312.618108][ T1482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7971'. [ 2312.758097][ T5894] usb 4-1: USB disconnect, device number 42 [ 2314.646504][ T1496] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 2314.686984][ T1498] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 2314.694610][ T1498] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 2314.760178][ T1502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7978'. [ 2315.060798][ T1514] fuse: Unknown parameter 'f' [ 2315.482215][ T1514] comedi: valid board names for 8255 driver are: [ 2315.486355][ T1517] tc_dump_action: action bad kind [ 2315.493815][ T1514] 8255 [ 2315.502393][ T1514] comedi: valid board names for vmk80xx driver are: [ 2315.516737][ T1514] vmk80xx [ 2315.523137][ T1514] comedi: valid board names for usbduxsigma driver are: [ 2315.541354][ T1514] usbduxsigma [ 2315.548400][ T1514] comedi: valid board names for usbduxfast driver are: [ 2315.559712][ T1514] usbduxfast [ 2315.569653][ T1514] comedi: valid board names for usbdux driver are: [ 2315.576581][ T1514] usbdux [ 2315.590390][ T1514] comedi: valid board names for ni6501 driver are: [ 2315.604195][ T1514] ni6501 [ 2315.608141][ T1514] comedi: valid board names for dt9812 driver are: [ 2315.614753][ T1514] dt9812 [ 2315.617747][ T1514] comedi: valid board names for ni_labpc_cs driver are: [ 2315.625850][ T1514] ni_labpc_cs [ 2315.629290][ T1514] comedi: valid board names for ni_daq_700 driver are: [ 2315.638843][ T1514] ni_daq_700 [ 2315.674143][ T1514] comedi: valid board names for labpc_pci driver are: [ 2315.682144][ T1514] labpc_pci [ 2315.687703][ T1514] comedi: valid board names for adl_pci9118 driver are: [ 2315.704342][ T1514] pci9118dg [ 2315.709842][ T1514] pci9118hg [ 2315.725761][ T1514] pci9118hr [ 2315.768571][ T1514] comedi: valid board names for 8255_pci driver are: [ 2315.841354][ T1514] 8255_pci [ 2315.853949][ T1514] comedi: valid board names for s526 driver are: [ 2315.860380][ T1514] s526 [ 2315.872233][ T1514] comedi: valid board names for multiq3 driver are: [ 2315.888538][ T1514] multiq3 [ 2315.893091][ T1514] comedi: valid board names for pcmuio driver are: [ 2315.900068][ T1514] pcmuio48 [ 2315.924331][ T1514] pcmuio96 [ 2315.932367][ T1514] comedi: valid board names for pcmmio driver are: [ 2315.945497][ T1514] pcmmio [ 2315.956391][ T1514] comedi: valid board names for pcmda12 driver are: [ 2315.965552][ T1514] pcmda12 [ 2315.975810][ T1528] binder: 1521:1528 ioctl c0306201 0 returned -14 [ 2315.987238][ T1514] comedi: valid board names for pcmad driver are: [ 2315.994307][ T1514] pcmad12 [ 2315.997771][ T1514] pcmad16 [ 2316.034720][ T1514] comedi: valid board names for ni_labpc driver are: [ 2316.043076][ T1514] lab-pc-1200 [ 2316.084887][ T1514] lab-pc-1200ai [ 2316.093123][ T1514] lab-pc+ [ 2316.103734][ T1514] comedi: valid board names for atmio16 driver are: [ 2316.113974][ T1514] atmio16 [ 2316.121281][ T1514] atmio16d [ 2316.126726][ T1514] comedi: valid board names for ni_at_ao driver are: [ 2316.142241][ T1514] at-ao-6 [ 2316.145308][ T1514] at-ao-10 [ 2316.190990][ T1514] comedi: valid board names for ni_at_a2150 driver are: [ 2316.238016][ T1514] ni_at_a2150 [ 2316.241962][ T1514] comedi: valid board names for adq12b driver are: [ 2316.256809][ T1514] adq12b [ 2316.259946][ T1514] comedi: valid board names for mpc624 driver are: [ 2316.269509][ T1534] syzkaller0: entered promiscuous mode [ 2316.275059][ T1514] mpc624 [ 2316.278196][ T1534] syzkaller0: entered allmulticast mode [ 2316.284705][ T1514] comedi: valid board names for c6xdigio driver are: [ 2316.292990][ T1514] c6xdigio [ 2316.299435][ T1514] comedi: valid board names for aio_iiro_16 driver are: [ 2316.306458][ T1514] aio_iiro_16 [ 2316.312814][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.335354][ T1514] comedi: valid board names for aio_aio12_8 driver are: [ 2316.362720][ T1514] aio_aio12_8 [ 2316.370945][ T1514] aio_ai12_8 [ 2316.375150][ T1514] aio_ao12_4 [ 2316.379050][ T1514] comedi: valid board names for fl512 driver are: [ 2316.400548][ T1514] fl512 [ 2316.419587][ T1514] comedi: valid board names for dmm32at driver are: [ 2316.447416][ T1514] dmm32at [ 2316.460810][ T1514] comedi: valid board names for dt282x driver are: [ 2316.477744][ T1514] dt2821 [ 2316.505643][ T1542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7992'. [ 2318.571930][ T1514] dt2821-f [ 2318.575069][ T1514] dt2821-g [ 2318.608483][ T1514] dt2823 [ 2318.641383][ T1514] dt2824-pgh [ 2318.665581][ T1514] dt2824-pgl [ 2318.705788][ T1514] dt2825 [ 2318.724423][ T1514] dt2827 [ 2318.756071][ T1514] dt2828 [ 2318.776438][ T1514] dt2829 [ 2318.803573][ T1514] dt21-ez [ 2318.846068][ T1514] dt23-ez [ 2318.871473][ T1514] dt24-ez [ 2318.874579][ T1514] dt24-ez-pgl [ 2318.908520][ T1514] comedi: valid board names for dt2817 driver are: [ 2318.956938][ T1514] dt2817 [ 2318.984861][ T1514] comedi: valid board names for dt2815 driver are: [ 2319.005207][ T1514] dt2815 [ 2319.040236][ T1514] comedi: valid board names for dt2814 driver are: [ 2319.098659][ T1514] dt2814 [ 2319.111480][ T1514] comedi: valid board names for dt2811 driver are: [ 2319.122575][ T1514] dt2811-pgh [ 2319.232571][ T1514] dt2811-pgl [ 2319.242414][ T1514] comedi: valid board names for dt2801 driver are: [ 2319.255429][ T1514] dt2801 [ 2319.263965][ T1514] comedi: valid board names for das6402 driver are: [ 2319.275767][ T1514] das6402-12 [ 2319.275807][ T1514] das6402-16 [ 2319.275812][ T1514] comedi: valid board names for das1800 driver are: [ 2319.275817][ T1514] das-1701st [ 2319.275822][ T1514] das-1701st-da [ 2319.275826][ T1514] das-1702st [ 2319.275830][ T1514] das-1702st-da [ 2319.275834][ T1514] das-1702hr [ 2319.275838][ T1514] das-1702hr-da [ 2319.275842][ T1514] das-1701ao [ 2319.275846][ T1514] das-1702ao [ 2319.275850][ T1514] das-1801st [ 2319.275854][ T1514] das-1801st-da [ 2319.275858][ T1514] das-1802st [ 2319.275863][ T1514] das-1802st-da [ 2319.275867][ T1514] das-1802hr [ 2319.275871][ T1514] das-1802hr-da [ 2319.275875][ T1514] das-1801hc [ 2319.275879][ T1514] das-1802hc [ 2319.275883][ T1514] das-1801ao [ 2319.275887][ T1514] das-1802ao [ 2319.275891][ T1514] comedi: valid board names for das800 driver are: [ 2319.275897][ T1514] das-800 [ 2319.275901][ T1514] cio-das800 [ 2319.275905][ T1514] das-801 [ 2319.275909][ T1514] cio-das801 [ 2319.275913][ T1514] das-802 [ 2319.275917][ T1514] cio-das802 [ 2319.275921][ T1514] cio-das802/16 [ 2319.275925][ T1514] comedi: valid board names for isa-das08 driver are: [ 2319.275930][ T1514] isa-das08 [ 2319.275934][ T1514] das08-pgm [ 2319.275939][ T1514] das08-pgh [ 2319.275943][ T1514] das08-pgl [ 2319.275947][ T1514] das08-aoh [ 2319.275951][ T1514] das08-aol [ 2319.275955][ T1514] das08-aom [ 2319.275959][ T1514] das08/jr-ao [ 2319.275963][ T1514] das08jr-16-ao [ 2319.275967][ T1514] pc104-das08 [ 2319.275971][ T1514] das08jr/16 [ 2319.275975][ T1514] comedi: valid board names for das16m1 driver are: [ 2319.275980][ T1514] das16m1 [ 2319.275984][ T1514] comedi: valid board names for dac02 driver are: [ 2319.275990][ T1514] dac02 [ 2319.275994][ T1514] comedi: valid board names for rti802 driver are: [ 2319.275999][ T1514] rti802 [ 2319.276003][ T1514] comedi: valid board names for rti800 driver are: [ 2319.276008][ T1514] rti800 [ 2319.276012][ T1514] rti815 [ 2319.276016][ T1514] comedi: valid board names for pcm3724 driver are: [ 2319.276021][ T1514] pcm3724 [ 2319.276026][ T1514] comedi: valid board names for pcl818 driver are: [ 2319.276031][ T1514] pcl818l [ 2319.276035][ T1514] pcl818h [ 2319.276039][ T1514] pcl818hd [ 2319.276043][ T1514] pcl818hg [ 2319.276047][ T1514] pcl818 [ 2319.276051][ T1514] pcl718 [ 2319.276055][ T1514] pcm3718 [ 2319.276059][ T1514] comedi: valid board names for pcl816 driver are: [ 2319.276064][ T1514] pcl816 [ 2319.276068][ T1514] pcl814b [ 2319.276072][ T1514] comedi: valid board names for pcl812 driver are: [ 2319.276078][ T1514] pcl812 [ 2319.276082][ T1514] pcl812pg [ 2319.276086][ T1514] acl8112pg [ 2319.276090][ T1514] acl8112dg [ 2319.276094][ T1514] acl8112hg [ 2319.276098][ T1514] a821pgl [ 2319.276102][ T1514] a821pglnda [ 2319.276106][ T1514] a821pgh [ 2319.276110][ T1514] a822pgl [ 2319.276114][ T1514] a822pgh [ 2319.276118][ T1514] a823pgl [ 2319.276121][ T1514] a823pgh [ 2319.276125][ T1514] pcl813 [ 2319.276129][ T1514] pcl813b [ 2319.276133][ T1514] acl8113 [ 2319.276137][ T1514] iso813 [ 2319.276141][ T1514] acl8216 [ 2319.276146][ T1514] a826pg [ 2319.276149][ T1514] comedi: valid board names for pcl730 driver are: [ 2319.276154][ T1514] pcl730 [ 2319.276158][ T1514] iso730 [ 2319.276162][ T1514] acl7130 [ 2319.276166][ T1514] pcm3730 [ 2319.276170][ T1514] pcl725 [ 2319.276174][ T1514] p8r8dio [ 2319.276178][ T1514] acl7225b [ 2319.276182][ T1514] p16r16dio [ 2319.276185][ T1514] pcl733 [ 2319.276190][ T1514] pcl734 [ 2319.276193][ T1514] opmm-1616-xt [ 2319.276198][ T1514] pearl-mm-p [ 2319.276202][ T1514] ir104-pbf [ 2319.276206][ T1514] comedi: valid board names for pcl726 driver are: [ 2319.276211][ T1514] pcl726 [ 2319.276215][ T1514] pcl727 [ 2319.276219][ T1514] pcl728 [ 2319.276222][ T1514] acl6126 [ 2319.276226][ T1514] acl6128 [ 2319.276230][ T1514] comedi: valid board names for pcl724 driver are: [ 2319.276236][ T1514] pcl724 [ 2319.276239][ T1514] pcl722 [ 2319.276243][ T1514] pcl731 [ 2319.276247][ T1514] acl7122 [ 2319.276251][ T1514] acl7124 [ 2319.276255][ T1514] pet48dio [ 2319.276259][ T1514] pcmio48 [ 2319.276263][ T1514] onyx-mm-dio [ 2319.276267][ T1514] comedi: valid board names for pcl711 driver are: [ 2319.276272][ T1514] pcl711 [ 2319.276276][ T1514] pcl711b [ 2319.276286][ T1514] acl8112hg [ 2319.276291][ T1514] acl8112dg [ 2319.276295][ T1514] comedi: valid board names for amplc_pc263 driver are: [ 2319.276300][ T1514] pc263 [ 2319.276304][ T1514] comedi: valid board names for amplc_pc236 driver are: [ 2319.276309][ T1514] pc36at [ 2319.276313][ T1514] comedi: valid board names for amplc_dio200 driver are: [ 2319.276319][ T1514] pc212e [ 2319.276323][ T1514] pc214e [ 2319.276326][ T1514] pc215e [ 2319.276330][ T1514] pc218e [ 2319.276334][ T1514] pc272e [ 2319.276338][ T1514] comedi: valid board names for comedi_parport driver are: [ 2319.276343][ T1514] comedi_parport [ 2319.276347][ T1514] comedi: valid board names for comedi_test driver are: [ 2319.276353][ T1514] comedi_test [ 2319.276357][ T1514] comedi: valid board names for comedi_bond driver are: [ 2319.276362][ T1514] comedi_bond [ 2319.813512][ T1566] tc_dump_action: action bad kind [ 2320.001555][T25602] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2320.442793][ T1580] syzkaller0: entered promiscuous mode [ 2320.442807][ T1580] syzkaller0: entered allmulticast mode [ 2320.512989][T25602] usb 4-1: Using ep0 maxpacket: 32 [ 2321.018824][T25602] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2321.064973][T25602] usb 4-1: config 0 has no interface number 0 [ 2321.099990][ T30] audit: type=1400 audit(2000001581.659:2950): avc: denied { getopt } for pid=1587 comm="syz.1.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2321.141565][T25602] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2321.156550][T25602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.166694][T25602] usb 4-1: Product: syz [ 2321.170882][T25602] usb 4-1: Manufacturer: syz [ 2321.177422][ T30] audit: type=1400 audit(2000001581.659:2951): avc: denied { ioctl } for pid=1587 comm="syz.1.8005" path="socket:[137358]" dev="sockfs" ino=137358 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2321.210441][T25602] usb 4-1: SerialNumber: syz [ 2321.217646][T25602] usb 4-1: config 0 descriptor?? [ 2321.224887][T25602] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2321.355273][T28554] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2321.408470][T27498] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2321.438873][ T1569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2321.447991][ T1569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2321.459044][T25602] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2321.473072][T25602] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2321.515352][T28554] usb 2-1: Using ep0 maxpacket: 8 [ 2321.521872][T28554] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2321.529989][T28554] usb 2-1: config 0 has no interface number 0 [ 2321.536160][T28554] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2321.547127][T28554] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2321.558806][T27498] usb 6-1: device descriptor read/64, error -71 [ 2321.558856][T28554] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2321.558873][T28554] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2321.558913][T28554] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2321.558927][T28554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.560338][T28554] usb 2-1: config 0 descriptor?? [ 2321.577693][T28554] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2321.625047][ T5894] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2321.670791][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 2321.780205][ T1588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8005'. [ 2321.794073][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 2321.851469][T27498] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2322.103077][ T1569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.253661][T20677] usb 2-1: USB disconnect, device number 127 [ 2322.263452][T20677] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2322.270172][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.270442][ T1569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.278910][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.306520][T27498] usb 6-1: device descriptor read/64, error -71 [ 2322.315547][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2322.315856][ T6623] usb 4-1: USB disconnect, device number 43 [ 2322.350805][ T1611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8012'. [ 2322.360906][ T6623] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2322.389254][ T6623] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2322.402470][ T6623] quatech2 4-1:0.51: device disconnected [ 2322.402653][ T1610] syzkaller0: entered promiscuous mode [ 2322.414242][ T1610] syzkaller0: entered allmulticast mode [ 2322.424643][T27498] usb usb6-port1: attempt power cycle [ 2322.566808][ T1617] syzkaller0: entered promiscuous mode [ 2322.566830][ T1617] syzkaller0: entered allmulticast mode [ 2322.705195][ T1615] tc_dump_action: action bad kind [ 2322.798482][T27498] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2322.991253][T27498] usb 6-1: device descriptor read/8, error -71 [ 2323.414687][ T1631] syzkaller0: entered promiscuous mode [ 2323.420493][ T1631] syzkaller0: entered allmulticast mode [ 2323.450368][T27498] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2323.473375][T27498] usb 6-1: device descriptor read/8, error -71 [ 2323.591534][T27498] usb usb6-port1: unable to enumerate USB device [ 2324.008550][ T30] audit: type=1326 audit(2000001584.390:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.115316][ T30] audit: type=1326 audit(2000001584.390:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.209110][ T30] audit: type=1326 audit(2000001584.390:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.309512][ T30] audit: type=1326 audit(2000001584.390:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.428754][ T30] audit: type=1326 audit(2000001584.390:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.544561][ T30] audit: type=1326 audit(2000001584.390:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.648221][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2324.668023][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2324.685697][ T5894] usb 3-1: can't read configurations, error -71 [ 2324.744048][ T30] audit: type=1326 audit(2000001584.456:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2324.957357][ T30] audit: type=1326 audit(2000001584.456:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.0.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa17058f749 code=0x7ffc0000 [ 2325.557062][ T1648] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8024'. [ 2325.590984][ T1662] netlink: 'syz.3.8027': attribute type 3 has an invalid length. [ 2325.665740][ T1665] netlink: 'syz.2.8029': attribute type 1 has an invalid length. [ 2325.698912][ T1665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2325.727884][ T1665] bond6: (slave geneve5): making interface the new active one [ 2325.744397][ T1665] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 2325.763893][ T1659] tc_dump_action: action bad kind [ 2325.877186][T20677] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2326.153730][T20677] usb 4-1: device descriptor read/64, error -71 [ 2326.206490][ T1680] binder: 1670:1680 ioctl c0306201 0 returned -14 [ 2326.550695][T20677] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2326.660558][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2326.700684][T20677] usb 4-1: device descriptor read/64, error -71 [ 2326.829265][T20677] usb usb4-port1: attempt power cycle [ 2326.983802][ T1683] lo speed is unknown, defaulting to 1000 [ 2327.021787][ T1689] Invalid source name [ 2327.039396][ T1689] UBIFS error (pid: 1689): cannot open "/dev/sg0", error -22 [ 2327.218646][ T1683] sp0: Synchronizing with TNC [ 2327.238733][T20677] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2327.289116][T20677] usb 4-1: device descriptor read/8, error -71 [ 2327.383664][ T1682] [U] `` [ 2327.716304][T20677] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2327.973312][T20677] usb 4-1: device descriptor read/8, error -71 [ 2328.108271][T20677] usb usb4-port1: unable to enumerate USB device [ 2329.440394][ T1723] tc_dump_action: action bad kind [ 2329.603465][ T1719] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8042'. [ 2329.620841][ T1731] syzkaller0: entered promiscuous mode [ 2329.626392][ T1731] syzkaller0: entered allmulticast mode [ 2330.525132][ T1745] can0: slcan on ttyS3. [ 2330.561373][ T1748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1023 sclass=netlink_route_socket pid=1748 comm=syz.2.8052 [ 2330.672400][ T1748] netlink: 'syz.2.8052': attribute type 5 has an invalid length. [ 2331.044934][ T1739] can0 (unregistered): slcan off ttyS3. [ 2331.193032][ T1765] syzkaller0: entered promiscuous mode [ 2331.211704][ T1765] syzkaller0: entered allmulticast mode [ 2331.239052][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2331.239070][ T30] audit: type=1400 audit(2000001591.144:2983): avc: denied { setopt } for pid=1762 comm="syz.3.8056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2331.268161][ T1768] Invalid source name [ 2331.273538][ T1749] lo speed is unknown, defaulting to 1000 [ 2331.291400][ T1768] UBIFS error (pid: 1768): cannot open "/dev/sg0", error -22 [ 2331.414911][ T6623] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2331.472646][ T1771] sp0: Synchronizing with TNC [ 2331.538277][ T1773] syzkaller0: entered promiscuous mode [ 2331.550502][ T1773] syzkaller0: entered allmulticast mode [ 2331.607411][ T6623] usb 6-1: device descriptor read/64, error -71 [ 2331.619930][ T1746] [U] `` [ 2331.888317][ T6623] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2331.951166][ T1763] lo speed is unknown, defaulting to 1000 [ 2332.244018][ T6623] usb 6-1: device descriptor read/64, error -71 [ 2332.409441][ T6623] usb usb6-port1: attempt power cycle [ 2332.462889][ T30] audit: type=1400 audit(2000001592.304:2984): avc: denied { setopt } for pid=1787 comm="syz.2.8064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2332.525589][ T1791] Device name cannot be null; rc = [-22] [ 2332.622355][ T1791] netlink: 'syz.1.8062': attribute type 2 has an invalid length. [ 2332.826080][ T6623] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2332.848068][ T6623] usb 6-1: device descriptor read/8, error -71 [ 2332.911966][ T30] audit: type=1400 audit(2000001592.725:2985): avc: denied { write } for pid=1799 comm="syz.2.8065" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2333.115240][ T6623] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2333.157960][ T6623] usb 6-1: device descriptor read/8, error -71 [ 2333.275337][ T6623] usb usb6-port1: unable to enumerate USB device [ 2333.437378][ T1810] syzkaller0: entered promiscuous mode [ 2333.443060][ T1810] syzkaller0: entered allmulticast mode [ 2333.577367][ T1812] syzkaller0: entered promiscuous mode [ 2333.582850][ T1812] syzkaller0: entered allmulticast mode [ 2333.639926][ T1806] netlink: 388 bytes leftover after parsing attributes in process `syz.1.8067'. [ 2333.659868][ T9943] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2333.833956][ T9943] usb 3-1: Using ep0 maxpacket: 8 [ 2334.130422][ T6623] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2334.139195][ T1833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8068'. [ 2334.297174][ T6623] usb 1-1: Using ep0 maxpacket: 32 [ 2334.317054][ T6623] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 2334.332538][ T6623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.355741][ T6623] usb 1-1: config 0 descriptor?? [ 2334.374447][ T6623] gl620a 1-1:0.0: probe with driver gl620a failed with error -22 [ 2334.776519][ T1849] syzkaller0: entered promiscuous mode [ 2334.787321][ T1849] syzkaller0: entered allmulticast mode [ 2335.236132][ T1856] could not allocate digest TFM handle digest_null [ 2335.660909][ T1862] lo speed is unknown, defaulting to 1000 [ 2336.228689][ T1872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8086'. [ 2336.439528][ T1878] loop9: detected capacity change from 0 to 7 [ 2336.447364][ T1878] buffer_io_error: 54 callbacks suppressed [ 2336.447396][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.462232][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.470363][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.478538][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.486864][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.495113][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.503299][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.511342][ T1878] ldm_validate_partition_table(): Disk read failed. [ 2336.518205][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.526370][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.534473][ T1878] Buffer I/O error on dev loop9, logical block 0, async page read [ 2336.543087][ T1878] Dev loop9: unable to read RDB block 0 [ 2336.549578][ T1878] loop9: unable to read partition table [ 2336.555808][ T1878] loop9: partition table beyond EOD, truncated [ 2336.562021][ T1878] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2336.562021][ T1878] ) failed (rc=-5) [ 2336.766896][ T9943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2336.794298][ T9943] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2336.817380][ T9943] usb 3-1: can't read configurations, error -71 [ 2337.578597][ T6623] usb 1-1: USB disconnect, device number 67 [ 2337.595780][ T1875] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8088'. [ 2338.013629][ T1902] syzkaller0: entered promiscuous mode [ 2338.027289][ T1902] syzkaller0: entered allmulticast mode [ 2339.593429][ T1930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.568397][ T6623] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2340.790667][ T6623] usb 6-1: Using ep0 maxpacket: 8 [ 2341.062540][ T1960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2341.082917][T28215] Bluetooth: hci2: hardware error 0xf7 [ 2341.279900][ T6623] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2341.296468][ T6623] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2341.310889][ T1961] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2341.361573][ T6623] usb 6-1: can't read configurations, error -71 [ 2342.045409][ T1991] syzkaller0: entered promiscuous mode [ 2342.056466][ T1991] syzkaller0: entered allmulticast mode [ 2342.126869][ T6724] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2342.331949][ T6724] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 2342.381689][ T1997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2342.391759][ T6724] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 2342.425883][ T6724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2342.443604][ T6724] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2342.706047][ T6724] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2342.714483][ T6724] usb 4-1: Product: syz [ 2342.722027][ T6724] usb 4-1: Manufacturer: syz [ 2342.726813][ T6724] usb 4-1: SerialNumber: syz [ 2342.735239][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 2342.800486][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 2342.821254][ T6724] usb 4-1: config 0 descriptor?? [ 2342.830444][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 2342.859581][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 2342.868825][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 2343.259108][T28215] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2343.284925][ T2005] syzkaller0: entered promiscuous mode [ 2343.295093][ T6724] usb 4-1: selecting invalid altsetting 0 [ 2343.315068][ T2005] syzkaller0: entered allmulticast mode [ 2343.807506][ T6724] usb 4-1: USB disconnect, device number 48 [ 2344.038247][ T30] audit: type=1400 audit(2000001603.126:2986): avc: denied { ioctl } for pid=2016 comm="syz.1.8127" path="socket:[139181]" dev="sockfs" ino=139181 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2344.201701][ T2023] netlink: 'syz.1.8129': attribute type 3 has an invalid length. [ 2344.281921][ T2025] No such timeout policy "syz1" [ 2344.331940][ T2025] No such timeout policy "syz1" [ 2344.341089][ T2025] No such timeout policy "syz1" [ 2344.346781][ T2025] No such timeout policy "syz1" [ 2344.410269][ T2025] No such timeout policy "syz1" [ 2344.419437][ T2025] No such timeout policy "syz1" [ 2344.429349][ T2025] No such timeout policy "syz1" [ 2344.436607][ T2025] No such timeout policy "syz1" [ 2344.442064][ T2025] No such timeout policy "syz1" [ 2344.468759][ T2025] No such timeout policy "syz1" [ 2344.543078][T28680] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 2345.120246][T28680] usb 3-1: device descriptor read/64, error -71 [ 2345.283378][ T2052] netlink: 'syz.1.8140': attribute type 1 has an invalid length. [ 2345.451779][T28554] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2345.643738][T28554] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2345.672765][T28554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.689727][ T2052] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2345.702078][T28554] usb 4-1: Product: syz [ 2345.705041][ T2054] bond11: (slave geneve7): making interface the new active one [ 2345.716496][T28554] usb 4-1: Manufacturer: syz [ 2345.718864][ T2054] bond11: (slave geneve7): Enslaving as an active interface with an up link [ 2345.728291][T28554] usb 4-1: SerialNumber: syz [ 2345.730038][T28680] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 2345.890196][T28680] usb 3-1: device descriptor read/64, error -71 [ 2346.007098][ T2048] openvswitch: netlink: IPv4 tunnel dst address is zero [ 2346.014944][T28680] usb usb3-port1: attempt power cycle [ 2346.786709][T28554] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2346.842448][T28554] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2346.903749][T28554] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2346.931350][ T30] audit: type=1400 audit(2000001605.820:2987): avc: denied { getattr } for pid=2072 comm="syz.3.8145" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2346.964999][T28554] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2346.985011][T28554] usb 4-1: USB disconnect, device number 49 [ 2347.026526][ T2081] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 2347.089459][ T2081] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2347.121497][ T2087] bond12: (slave geneve8): making interface the new active one [ 2347.130643][ T2087] bond12: (slave geneve8): Enslaving as an active interface with an up link [ 2347.156309][ T2074] tipc: Enabled bearer , priority 0 [ 2347.194261][ T6724] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2347.248957][ T2082] syzkaller0: entered promiscuous mode [ 2347.264482][ T2082] syzkaller0: entered allmulticast mode [ 2347.280735][ T2082] tipc: Resetting bearer [ 2347.290583][T28680] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 2347.313829][T28680] usb 3-1: device descriptor read/8, error -71 [ 2347.452589][ T6724] usb 1-1: Using ep0 maxpacket: 8 [ 2347.643341][T28680] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 2347.899803][T28680] usb 3-1: device not accepting address 67, error -71 [ 2347.906732][ T6623] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2347.914874][T28680] usb usb3-port1: unable to enumerate USB device [ 2348.081665][ T6623] usb 6-1: Using ep0 maxpacket: 16 [ 2348.089123][ T6623] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2348.098515][ T6623] usb 6-1: config 0 has no interface number 0 [ 2348.122892][ T6623] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2348.132399][ T6623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.140692][ T6623] usb 6-1: Product: syz [ 2348.144995][ T6623] usb 6-1: Manufacturer: syz [ 2348.149799][ T6623] usb 6-1: SerialNumber: syz [ 2348.157625][ T6623] usb 6-1: config 0 descriptor?? [ 2348.168460][ T6623] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2348.712365][ T6623] gspca_spca1528: reg_w err -110 [ 2348.733917][ T6623] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2349.673365][ T2092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8148'. [ 2349.682781][ T2092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8148'. [ 2349.768659][ T2072] tipc: Resetting bearer [ 2349.817097][ T2072] tipc: Disabling bearer [ 2350.192212][ T6724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2350.203081][ T6724] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2350.235980][ T6724] usb 1-1: can't read configurations, error -71 [ 2350.508081][ T2124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8154'. [ 2351.145762][ T2130] syzkaller0: entered promiscuous mode [ 2351.166621][ T2130] syzkaller0: entered allmulticast mode [ 2351.214395][T28554] usb 6-1: USB disconnect, device number 45 [ 2351.361096][ T2132] input: syz0 as /devices/virtual/input/input107 [ 2351.364563][T20677] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 2351.484538][ T2136] veth3: entered promiscuous mode [ 2351.560604][T20677] usb 3-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 2351.587681][T20677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2351.599169][T20677] usb 3-1: config 1 has no interface number 0 [ 2351.605290][T20677] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2351.624996][T20677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2351.634816][T20677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.656486][T20677] usb 3-1: Product: syz [ 2351.661441][T20677] usb 3-1: Manufacturer: syz [ 2351.667911][T20677] usb 3-1: SerialNumber: syz [ 2351.678399][T20677] usb 3-1: selecting invalid altsetting 1 [ 2351.716995][ T6724] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2351.967459][ T5894] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2352.064213][ T6724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2352.076138][ T6724] usb 2-1: config 0 has no interfaces? [ 2352.083725][ T2154] FAULT_INJECTION: forcing a failure. [ 2352.083725][ T2154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2352.098832][ T6724] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 2352.110496][ T6724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.111359][ T2154] CPU: 1 UID: 0 PID: 2154 Comm: syz.5.8167 Tainted: G L syzkaller #0 PREEMPT(full) [ 2352.111384][ T2154] Tainted: [L]=SOFTLOCKUP [ 2352.111389][ T2154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2352.111398][ T2154] Call Trace: [ 2352.111403][ T2154] [ 2352.111410][ T2154] dump_stack_lvl+0x16c/0x1f0 [ 2352.111434][ T2154] should_fail_ex+0x512/0x640 [ 2352.111459][ T2154] _copy_from_user+0x2e/0xd0 [ 2352.111481][ T2154] bpf_test_init.isra.0+0xce/0x130 [ 2352.111506][ T2154] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 2352.111529][ T2154] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 2352.111549][ T2154] ? find_held_lock+0x2b/0x80 [ 2352.111566][ T2154] ? __fget_files+0x204/0x3c0 [ 2352.111585][ T2154] ? __fget_files+0x20e/0x3c0 [ 2352.111597][ T2154] ? __might_fault+0x50/0x190 [ 2352.111618][ T2154] ? fput+0x70/0xf0 [ 2352.111634][ T2154] ? __bpf_prog_get+0x97/0x2a0 [ 2352.111653][ T2154] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 2352.111669][ T2154] __sys_bpf+0x1035/0x4980 [ 2352.111695][ T2154] ? __pfx___sys_bpf+0x10/0x10 [ 2352.111718][ T2154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2352.111740][ T2154] ? htab_lru_map_delete_elem+0x5bf/0x850 [ 2352.111759][ T2154] ? lockdep_hardirqs_on+0x7c/0x110 [ 2352.111784][ T2154] ? __lock_acquire+0x433/0x22f0 [ 2352.111813][ T2154] ? find_held_lock+0x2b/0x80 [ 2352.111827][ T2154] ? __might_fault+0xe3/0x190 [ 2352.111842][ T2154] ? __might_fault+0xe3/0x190 [ 2352.111856][ T2154] ? __might_fault+0x13b/0x190 [ 2352.111878][ T2154] __x64_sys_bpf+0x78/0xc0 [ 2352.111892][ T2154] do_syscall_64+0xcd/0xf80 [ 2352.111913][ T2154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2352.111928][ T2154] RIP: 0033:0x7f35c9d8f749 [ 2352.111942][ T2154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2352.111956][ T2154] RSP: 002b:00007f35cabdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2352.111972][ T2154] RAX: ffffffffffffffda RBX: 00007f35c9fe5fa0 RCX: 00007f35c9d8f749 [ 2352.111982][ T2154] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 2352.111991][ T2154] RBP: 00007f35cabdb090 R08: 0000000000000000 R09: 0000000000000000 [ 2352.112000][ T2154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2352.112009][ T2154] R13: 00007f35c9fe6038 R14: 00007f35c9fe5fa0 R15: 00007fff782f0e48 [ 2352.112031][ T2154] [ 2352.367382][ T6724] usb 2-1: config 0 descriptor?? [ 2352.379156][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 2352.628506][ T6724] usb 2-1: USB disconnect, device number 2 [ 2352.988541][ T6724] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2353.148849][ T6724] usb 1-1: Using ep0 maxpacket: 16 [ 2353.155459][ T6724] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 2353.163825][ T6724] usb 1-1: config 0 has no interface number 0 [ 2353.173685][ T6724] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 2353.183912][ T6724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.201554][ T6724] usb 1-1: Product: syz [ 2353.215749][ T6724] usb 1-1: Manufacturer: syz [ 2353.225881][ T6724] usb 1-1: SerialNumber: syz [ 2353.236183][ T6724] usb 1-1: config 0 descriptor?? [ 2353.622795][ T6724] usb 1-1: USB disconnect, device number 70 [ 2353.666479][ T2170] netlink: 'syz.5.8171': attribute type 3 has an invalid length. [ 2353.934010][ T2175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8173'. [ 2354.246936][T20677] cdc_ncm 3-1:1.1: bind() failure [ 2354.267390][T20677] usb 3-1: USB disconnect, device number 68 [ 2354.634947][T28554] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2355.020026][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2355.031686][ T5894] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2355.040465][ T5894] usb 4-1: can't read configurations, error -71 [ 2355.063734][T28554] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 2355.097372][T28554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2355.129982][T28554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.952554][T28554] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 2356.304269][T28554] usb 1-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 2356.313421][T28554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.335498][T28554] usb 1-1: config 0 descriptor?? [ 2356.345455][ T2197] [ 2356.347805][ T2197] ====================================================== [ 2356.354813][ T2197] WARNING: possible circular locking dependency detected [ 2356.361822][ T2197] syzkaller #0 Tainted: G L [ 2356.367779][ T2197] ------------------------------------------------------ [ 2356.374780][ T2197] syz.2.8179/2197 is trying to acquire lock: [ 2356.380735][ T2197] ffff88804d1ffb08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 2356.389150][ T2197] [ 2356.389150][ T2197] but task is already holding lock: [ 2356.396495][ T2197] ffff888057242868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2356.404737][ T2197] [ 2356.404737][ T2197] which lock already depends on the new lock. [ 2356.404737][ T2197] [ 2356.415120][ T2197] [ 2356.415120][ T2197] the existing dependency chain (in reverse order) is: [ 2356.424115][ T2197] [ 2356.424115][ T2197] -> #4 (&pipe->mutex){+.+.}-{4:4}: [ 2356.431478][ T2197] __mutex_lock+0x1aa/0x1b10 [ 2356.436575][ T2197] pipe_lock+0x64/0x80 [ 2356.441160][ T2197] iter_file_splice_write+0x1ea/0x12b0 [ 2356.447122][ T2197] do_splice+0x1478/0x1fc0 [ 2356.452039][ T2197] __do_splice+0x32a/0x360 [ 2356.456953][ T2197] __x64_sys_splice+0x187/0x250 [ 2356.462301][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.467303][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.473693][ T2197] [ 2356.473693][ T2197] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 2356.481056][ T2197] mnt_want_write+0x6f/0x450 [ 2356.486151][ T2197] ovl_create_object+0x12b/0x3b0 [ 2356.491680][ T2197] lookup_open.isra.0+0x12dc/0x1780 [ 2356.497380][ T2197] path_openat+0xa95/0x3140 [ 2356.502381][ T2197] do_filp_open+0x20b/0x470 [ 2356.507381][ T2197] do_sys_openat2+0x11f/0x280 [ 2356.512558][ T2197] __x64_sys_openat+0x174/0x210 [ 2356.517910][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.522915][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.529303][ T2197] [ 2356.529303][ T2197] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 2356.537960][ T2197] down_read+0x9b/0x460 [ 2356.542624][ T2197] lookup_slow+0x42/0x70 [ 2356.547370][ T2197] path_lookupat+0x5e9/0xc40 [ 2356.552465][ T2197] filename_lookup+0x224/0x5f0 [ 2356.557735][ T2197] kern_path+0x35/0x50 [ 2356.562309][ T2197] lookup_bdev+0xd8/0x280 [ 2356.567141][ T2197] resume_store+0x1d6/0x460 [ 2356.572140][ T2197] kobj_attr_store+0x58/0x80 [ 2356.577230][ T2197] sysfs_kf_write+0xf2/0x150 [ 2356.582321][ T2197] kernfs_fop_write_iter+0x3af/0x570 [ 2356.588104][ T2197] vfs_write+0x7d3/0x11d0 [ 2356.592937][ T2197] ksys_write+0x12a/0x250 [ 2356.597772][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.602776][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.609186][ T2197] [ 2356.609186][ T2197] -> #1 (&of->mutex){+.+.}-{4:4}: [ 2356.616382][ T2197] __mutex_lock+0x1aa/0x1b10 [ 2356.621489][ T2197] kernfs_seq_start+0x4f/0x2a0 [ 2356.626757][ T2197] traverse.part.0.constprop.0+0xaf/0x650 [ 2356.632986][ T2197] seq_read_iter+0x93c/0x12d0 [ 2356.638168][ T2197] kernfs_fop_read_iter+0x46c/0x610 [ 2356.643871][ T2197] do_iter_readv_writev+0x743/0x9e0 [ 2356.649568][ T2197] vfs_readv+0x4cb/0x8b0 [ 2356.654314][ T2197] do_preadv+0x1a6/0x270 [ 2356.659054][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.664067][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.670464][ T2197] [ 2356.670464][ T2197] -> #0 (&p->lock){+.+.}-{4:4}: [ 2356.677490][ T2197] __lock_acquire+0x1542/0x22f0 [ 2356.682860][ T2197] lock_acquire+0x179/0x330 [ 2356.687866][ T2197] __mutex_lock+0x1aa/0x1b10 [ 2356.692963][ T2197] seq_read_iter+0xe1/0x12d0 [ 2356.698064][ T2197] kernfs_fop_read_iter+0x46c/0x610 [ 2356.703764][ T2197] copy_splice_read+0x618/0xc20 [ 2356.709113][ T2197] do_splice_read+0x285/0x370 [ 2356.714285][ T2197] splice_file_to_pipe+0x109/0x120 [ 2356.719892][ T2197] do_sendfile+0x400/0xe50 [ 2356.724812][ T2197] __x64_sys_sendfile64+0x1d8/0x220 [ 2356.730510][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.735514][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.741906][ T2197] [ 2356.741906][ T2197] other info that might help us debug this: [ 2356.741906][ T2197] [ 2356.752106][ T2197] Chain exists of: [ 2356.752106][ T2197] &p->lock --> sb_writers#6 --> &pipe->mutex [ 2356.752106][ T2197] [ 2356.763988][ T2197] Possible unsafe locking scenario: [ 2356.763988][ T2197] [ 2356.771412][ T2197] CPU0 CPU1 [ 2356.776751][ T2197] ---- ---- [ 2356.782092][ T2197] lock(&pipe->mutex); [ 2356.786223][ T2197] lock(sb_writers#6); [ 2356.792883][ T2197] lock(&pipe->mutex); [ 2356.799533][ T2197] lock(&p->lock); [ 2356.803316][ T2197] [ 2356.803316][ T2197] *** DEADLOCK *** [ 2356.803316][ T2197] [ 2356.811432][ T2197] 1 lock held by syz.2.8179/2197: [ 2356.816429][ T2197] #0: ffff888057242868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2356.825102][ T2197] [ 2356.825102][ T2197] stack backtrace: [ 2356.830971][ T2197] CPU: 0 UID: 0 PID: 2197 Comm: syz.2.8179 Tainted: G L syzkaller #0 PREEMPT(full) [ 2356.830991][ T2197] Tainted: [L]=SOFTLOCKUP [ 2356.830996][ T2197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2356.831005][ T2197] Call Trace: [ 2356.831009][ T2197] [ 2356.831015][ T2197] dump_stack_lvl+0x116/0x1f0 [ 2356.831033][ T2197] print_circular_bug+0x2db/0x410 [ 2356.831056][ T2197] check_noncircular+0x146/0x160 [ 2356.831075][ T2197] __lock_acquire+0x1542/0x22f0 [ 2356.831094][ T2197] lock_acquire+0x179/0x330 [ 2356.831111][ T2197] ? seq_read_iter+0xe1/0x12d0 [ 2356.831131][ T2197] ? __pfx___might_resched+0x10/0x10 [ 2356.831147][ T2197] __mutex_lock+0x1aa/0x1b10 [ 2356.831163][ T2197] ? seq_read_iter+0xe1/0x12d0 [ 2356.831183][ T2197] ? do_splice_read+0x285/0x370 [ 2356.831195][ T2197] ? do_sendfile+0x400/0xe50 [ 2356.831212][ T2197] ? __x64_sys_sendfile64+0x1d8/0x220 [ 2356.831224][ T2197] ? do_syscall_64+0xcd/0xf80 [ 2356.831239][ T2197] ? seq_read_iter+0xe1/0x12d0 [ 2356.831259][ T2197] ? __pfx___mutex_lock+0x10/0x10 [ 2356.831278][ T2197] ? set_page_refcounted+0x88/0x190 [ 2356.831297][ T2197] ? alloc_pages_bulk_noprof+0x78b/0x1010 [ 2356.831315][ T2197] ? seq_read_iter+0xe1/0x12d0 [ 2356.831335][ T2197] seq_read_iter+0xe1/0x12d0 [ 2356.831354][ T2197] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2356.831372][ T2197] kernfs_fop_read_iter+0x46c/0x610 [ 2356.831389][ T2197] copy_splice_read+0x618/0xc20 [ 2356.831403][ T2197] ? __pfx_copy_splice_read+0x10/0x10 [ 2356.831418][ T2197] ? __fget_files+0x204/0x3c0 [ 2356.831431][ T2197] ? __pfx_copy_splice_read+0x10/0x10 [ 2356.831443][ T2197] do_splice_read+0x285/0x370 [ 2356.831457][ T2197] splice_file_to_pipe+0x109/0x120 [ 2356.831473][ T2197] do_sendfile+0x400/0xe50 [ 2356.831492][ T2197] ? __pfx_do_sendfile+0x10/0x10 [ 2356.831511][ T2197] ? __x64_sys_futex+0x1e0/0x4c0 [ 2356.831522][ T2197] ? __x64_sys_futex+0x1e9/0x4c0 [ 2356.831534][ T2197] __x64_sys_sendfile64+0x1d8/0x220 [ 2356.831548][ T2197] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2356.831564][ T2197] do_syscall_64+0xcd/0xf80 [ 2356.831580][ T2197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.831593][ T2197] RIP: 0033:0x7f3d1938f749 [ 2356.831607][ T2197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2356.831620][ T2197] RSP: 002b:00007f3d1a2d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2356.831633][ T2197] RAX: ffffffffffffffda RBX: 00007f3d195e5fa0 RCX: 00007f3d1938f749 [ 2356.831642][ T2197] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 2356.831650][ T2197] RBP: 00007f3d19413f91 R08: 0000000000000000 R09: 0000000000000000 [ 2356.831658][ T2197] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2356.831666][ T2197] R13: 00007f3d195e6038 R14: 00007f3d195e5fa0 R15: 00007ffde66b53c8 [ 2356.831678][ T2197] [ 2357.544596][ T2184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.553055][ T2184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2357.672700][ T2210] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 2357.682621][ T30] audit: type=1400 audit(2000001615.894:2988): avc: denied { relabelto } for pid=2183 comm="syz.0.8176" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 2357.711439][ T30] audit: type=1400 audit(2000001615.894:2989): avc: denied { associate } for pid=2183 comm="syz.0.8176" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 2359.703633][T28554] usbhid 1-1:0.0: can't add hid device: -71 [ 2359.709676][T28554] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2359.726244][T28554] usb 1-1: USB disconnect, device number 71