last executing test programs: 10m35.732430097s ago: executing program 32 (id=86): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m3.241538777s ago: executing program 33 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m59.404362382s ago: executing program 34 (id=224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x8000) 9m8.521473036s ago: executing program 35 (id=422): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m23.402016164s ago: executing program 36 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5m19.961891892s ago: executing program 37 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x7ff, 0x0, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xf) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004b00004000640000000690780aa10108ac1414aa44140a01ffffffffffffaa7eac1414aa000080010703ef0000e50000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000790780000"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0x80, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x4, 0x3f, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0xd, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x2005, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x400, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x100006, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x2, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x31b9, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0x8001]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 4m56.644882254s ago: executing program 38 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 4m52.015750801s ago: executing program 39 (id=1449): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040854, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4m47.248082014s ago: executing program 1 (id=1464): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208108de, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB=',g=\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f00000023c0)="$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") r3 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(0x0) r4 = open(0x0, 0x169a7e, 0x68) fallocate(r4, 0x0, 0x9b1, 0x1001ed) fallocate(r4, 0x3, 0xf00, 0x10000) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 4m45.685770451s ago: executing program 1 (id=1467): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4m44.663103361s ago: executing program 1 (id=1474): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4m44.544089816s ago: executing program 1 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r1, &(0x7f0000004c40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4m44.505352039s ago: executing program 40 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0xfffffffffffffd11, &(0x7f0000000300)=0xffff7ffffffffffe) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000040)}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r6, 0x1e}) 4m44.374352555s ago: executing program 1 (id=1480): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 4m44.0720114s ago: executing program 1 (id=1481): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e02000000d1cd"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2076) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 4m43.946818105s ago: executing program 41 (id=1481): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e02000000d1cd"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2076) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 4m29.474080455s ago: executing program 6 (id=1517): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208108de, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB=',g=\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f00000023c0)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") r3 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(0x0) open(0x0, 0x169a7e, 0x68) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 4m27.664555003s ago: executing program 6 (id=1521): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xdb, 0x200b}, {0x1ff}]}, 0x18, 0x0) 4m26.693384321s ago: executing program 6 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0x80000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004000) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x80001) syz_open_procfs(0x0, 0x0) read$FUSE(r8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r9 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x2, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x3, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3504, 0x1, 0x1, 0x7}}, 0xe8) 4m24.694190518s ago: executing program 6 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4m23.02007437s ago: executing program 6 (id=1539): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xdb, 0x200b}, {0x1ff}]}, 0x18, 0x0) 4m22.760996483s ago: executing program 6 (id=1540): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpgrp(r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4m22.692268416s ago: executing program 42 (id=1540): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpgrp(r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3m33.80750787s ago: executing program 2 (id=1705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x8}}}}}, 0x0) 3m33.711957115s ago: executing program 2 (id=1707): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fallocate(r0, 0x0, 0x800657, 0x40000b9) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x6004}, @val={0x2, 0x80, 0x7, 0x49, 0xff, 0xe76a}, @llc={@snap={0xaa, 0x1, 'W', "3e9304", 0x88fb}}}, 0x16) 3m32.464333306s ago: executing program 2 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000003e83a89e7fa48314ada8533b89a740000701"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 3m32.151480821s ago: executing program 2 (id=1725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r2, &(0x7f0000004c40)={0x2020}, 0x2020) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x104) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x161811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3m31.895108294s ago: executing program 2 (id=1727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x100000000, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x1, 0x0, 0x29, 0x0, 0x6, 0x200000000000000, 0xbdb], 0xffff1001, 0xc7451}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xd, 0x1000000000, 0xb, 0x43, 0x9, 0x0, 0x2004cd, 0x0, 0x1000000, 0x7fffffff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x4, 0x2e, 0x80}, {0x5000, 0x2, 0x4, 0x0, 0x1, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xe000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0x20, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x7, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x4}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x3ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m31.613163618s ago: executing program 2 (id=1728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000040f00000008000300", @ANYRES32=r2, @ANYBLOB="05002d"], 0x34}}, 0x80) 3m31.170003069s ago: executing program 43 (id=1728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000040f00000008000300", @ANYRES32=r2, @ANYBLOB="05002d"], 0x34}}, 0x80) 3m28.915642719s ago: executing program 5 (id=1764): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffef010}]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 3m28.894459421s ago: executing program 5 (id=1765): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m28.865441202s ago: executing program 5 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x500}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PRIORITY={0x8, 0x6, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 3m28.807913655s ago: executing program 5 (id=1767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r2, &(0x7f0000004c40)={0x2020}, 0x2020) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x104) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x161811, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3m28.726725349s ago: executing program 5 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x100000000, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x1, 0x0, 0x29, 0x0, 0x6, 0x200000000000000, 0xbdb], 0xffff1001, 0xc7451}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xd, 0x1000000000, 0xb, 0x43, 0x9, 0x0, 0x2004cd, 0x0, 0x1000000, 0x7fffffff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x4, 0x2e, 0x80}, {0x5000, 0x2, 0x4, 0x0, 0x1, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xe000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0x20, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x7, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x4}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x3ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m28.30799137s ago: executing program 5 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="0100db75", 0x4, 0x200000e0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00001c3000/0x3000)=nil) 3m27.538956447s ago: executing program 44 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="0100db75", 0x4, 0x200000e0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00001c3000/0x3000)=nil) 4.662754441s ago: executing program 8 (id=4439): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffff9, 0x6, 0x8, 0xe1c, 0x1ff}}]}, {0x4}, {0xfffffffffffffe68, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 4.627195353s ago: executing program 8 (id=4440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x3, 0x0, @multicast2, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x1, 0x7, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x9, [{@remote, 0x2}, {@loopback, 0x7}, {@multicast1, 0xa721}, {@multicast1, 0xf}, {@remote, 0x7}]}]}}}}}}}}, 0x6e) 4.587699685s ago: executing program 8 (id=4441): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.885964969s ago: executing program 0 (id=4449): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.861352931s ago: executing program 0 (id=4450): socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 3.817571712s ago: executing program 0 (id=4451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffff9, 0x6, 0x8, 0xe1c, 0x1ff}}]}, {0x4}, {0xfffffffffffffe68, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 3.817109593s ago: executing program 0 (id=4452): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) write$char_usb(r1, &(0x7f00000006c0)="d8c462", 0x3) 3.495232878s ago: executing program 4 (id=4454): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.674507079s ago: executing program 4 (id=4458): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000001840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x8, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1d}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x5, 0xf9, 0x1, 0xc, 0xf4}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0xfff, 0x36}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0x5, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x38, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x80, 0x9, {0x7, 0x25, 0x1, 0x4, 0x8, 0x1000}}}}}}}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) 2.481935008s ago: executing program 7 (id=4462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd28, 0x30000, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.439353571s ago: executing program 7 (id=4463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffff9, 0x6, 0x8, 0xe1c, 0x1ff}}]}, {0x4}, {0xfffffffffffffe68, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 2.438865341s ago: executing program 7 (id=4464): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x108}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x10000, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 2.331929346s ago: executing program 7 (id=4465): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x44}}}}}]}}]}}, &(0x7f00000002c0)={0x31, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffea3, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x40, 0x7}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09"], 0x0) 1.63362553s ago: executing program 3 (id=4467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.576059133s ago: executing program 3 (id=4468): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.566110133s ago: executing program 8 (id=4469): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.546940864s ago: executing program 8 (id=4470): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 1.464010888s ago: executing program 3 (id=4471): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r2 = socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) 1.463875948s ago: executing program 8 (id=4472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.463815018s ago: executing program 45 (id=4472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 897.512656ms ago: executing program 4 (id=4474): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x0, r0}, 0x10) 880.079466ms ago: executing program 9 (id=4475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffff9, 0x6, 0x8, 0xe1c, 0x1ff}}]}, {0x4}, {0xfffffffffffffe68, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 795.039631ms ago: executing program 0 (id=4476): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x1, 0x84) socket(0xa, 0x1, 0x84) socket$inet(0x2, 0x3, 0x2) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 721.011035ms ago: executing program 4 (id=4477): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x200000000f, 0x187143) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x4, 0x2, 0x0, 0x1, 0x6, 0x11, "fee8a2ab78fc179fd1f8a0e91dda05000000000000040d9683dda1af0000000000bb5612060800d54eb92500008000", "2809a900000003ae48224ad54ac11d875375cab2420000b420a1a93c7d40f4767f9e01177d3dd40600000061ac000500800800", "90be8b1c55f96400", [0x7, 0x8000000000025e]}}) 720.457815ms ago: executing program 9 (id=4478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 691.691026ms ago: executing program 4 (id=4479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 616.04407ms ago: executing program 4 (id=4480): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 603.04741ms ago: executing program 3 (id=4481): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 592.53238ms ago: executing program 9 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) 495.937116ms ago: executing program 9 (id=4483): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 476.421666ms ago: executing program 9 (id=4484): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001b00)={@private0, @remote, @private0, 0x800, 0x7, 0x28, 0x0, 0x5, 0x102480004}) 457.866777ms ago: executing program 9 (id=4485): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 391.989251ms ago: executing program 3 (id=4486): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfb"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 314.224144ms ago: executing program 3 (id=4487): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) write$char_usb(r1, &(0x7f00000006c0)="d8c462", 0x3) 109.831555ms ago: executing program 7 (id=4488): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 47.273247ms ago: executing program 0 (id=4489): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0xfffffff9, 0x6, 0x8, 0xe1c, 0x1ff}}]}, {0x4}, {0xfffffffffffffe68, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 0s ago: executing program 7 (id=4490): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000eaff01"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="20310400000021"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 06][ T8317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.144758][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.155655][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.165443][ T8317] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 601.174456][ T8317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.183043][ T8317] usb 1-1: config 0 descriptor?? [ 601.204616][ T350] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 601.394641][ T350] usb 9-1: New USB device found, idVendor=045e, idProduct=044d, bcdDevice=db.e9 [ 601.403733][ T350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.411736][ T350] usb 9-1: Product: syz [ 601.415906][ T350] usb 9-1: Manufacturer: syz [ 601.420492][ T350] usb 9-1: SerialNumber: syz [ 601.655486][ T8317] hid-rmi 0003:0461:4E72.0021: unknown main item tag 0x2 [ 601.667009][ T8317] hid-rmi 0003:0461:4E72.0021: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 601.687385][T10116] tipc: Started in network mode [ 601.692304][T10116] tipc: Node identity fa44725b268c, cluster identity 4711 [ 601.700960][T10116] tipc: Enabled bearer , priority 0 [ 601.706377][ T350] usb 9-1: USB disconnect, device number 29 [ 601.714764][T10116] device syzkaller0 entered promiscuous mode [ 601.723027][T10116] tipc: Resetting bearer [ 601.729315][T10115] tipc: Resetting bearer [ 601.735961][T10115] tipc: Disabling bearer [ 601.825590][T10124] bridge0: port 3(syz_tun) entered blocking state [ 601.832054][T10124] bridge0: port 3(syz_tun) entered disabled state [ 601.839056][T10124] device syz_tun entered promiscuous mode [ 601.857412][ T8317] usb 1-1: USB disconnect, device number 38 [ 602.485440][T10150] bridge0: port 3(syz_tun) entered blocking state [ 602.492088][T10150] bridge0: port 3(syz_tun) entered disabled state [ 602.514035][T10155] mmap: syz.7.3043 (10155): VmData 29077504 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 602.553113][ T30] audit: type=1326 audit(1773742828.735:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10160 comm="syz.7.3046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06c9df7799 code=0x0 [ 602.654723][ T350] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 602.694723][ T8317] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 602.814075][ T8629] usb 5-1: USB disconnect, device number 34 [ 603.015022][ T350] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 603.032374][ T350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.043255][ T350] usb 1-1: config 0 has no interface number 0 [ 603.104890][ T8317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.115910][ T8317] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 603.125091][ T8317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.145763][ T8317] usb 4-1: config 0 descriptor?? [ 603.235072][ T350] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 603.261437][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.278177][T10186] bridge0: port 3(syz_tun) entered blocking state [ 603.280520][ T350] usb 1-1: Product: syz [ 603.289156][ T350] usb 1-1: Manufacturer: syz [ 603.289360][T10186] bridge0: port 3(syz_tun) entered disabled state [ 603.300571][ T350] usb 1-1: SerialNumber: syz [ 603.319901][ T350] usb 1-1: config 0 descriptor?? [ 603.484996][ T8317] usbhid 4-1:0.0: can't add hid device: -71 [ 603.492189][ T8317] usbhid: probe of 4-1:0.0 failed with error -71 [ 603.509778][ T8317] usb 4-1: USB disconnect, device number 38 [ 603.640276][ T512] usb 1-1: USB disconnect, device number 39 [ 603.800772][T10216] syz.7.3062 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 603.964866][ T8629] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 604.034872][ T8317] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 604.204893][ T8629] usb 9-1: Using ep0 maxpacket: 16 [ 604.205531][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3072'. [ 604.285066][ T8317] usb 4-1: Using ep0 maxpacket: 32 [ 604.335843][ T8629] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.354087][ T8629] usb 9-1: config 0 interface 0 has no altsetting 0 [ 604.366084][ T8629] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 604.376585][ T8629] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.391264][ T8629] usb 9-1: config 0 descriptor?? [ 604.405139][ T8317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.418533][ T8317] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 604.427700][ T8317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.444411][ T8317] usb 4-1: config 0 descriptor?? [ 604.465400][T10238] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 604.473337][T10238] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 604.639318][T10206] UDC core: couldn't find an available UDC or it's busy: -16 [ 604.653347][T10206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 604.687953][T10255] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3084'. [ 604.710322][T10144] UDC core: couldn't find an available UDC or it's busy: -16 [ 604.731287][T10144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 604.914005][ T30] audit: type=1400 audit(1773742831.094:1549): avc: denied { append } for pid=10261 comm="syz.4.3087" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 604.943187][ T8629] hid-generic 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 605.195352][T10270] UDC core: couldn't find an available UDC or it's busy: -16 [ 605.202834][T10270] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.359170][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3098'. [ 605.369148][T10289] device ip6gre1 entered promiscuous mode [ 605.375889][ T6396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.376894][T10289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.383419][ T6396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.405085][ T6396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.463344][T10206] UDC core: couldn't find an available UDC or it's busy: -16 [ 605.470825][T10206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.470897][ T6396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.495581][T10206] UDC core: couldn't find an available UDC or it's busy: -16 [ 605.503466][T10206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.515290][ T6396] usb 9-1: USB disconnect, device number 30 [ 605.583739][ T30] audit: type=1400 audit(1773742831.764:1550): avc: denied { setopt } for pid=10301 comm="syz.0.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 605.595122][ T8629] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 605.965166][ T8629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.976143][ T8629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.985899][ T8629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.998814][ T8629] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.007866][ T8629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.016957][ T8629] usb 5-1: config 0 descriptor?? [ 606.044888][T10313] tipc: Enabling of bearer rejected, failed to enable media [ 606.323954][ T1576] usb 4-1: USB disconnect, device number 39 [ 606.348758][T10319] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 606.395218][ T512] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.506073][ T8629] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 606.515080][ T8629] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 606.595220][ T289] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 606.719228][ T512] usb 5-1: USB disconnect, device number 35 [ 606.795317][ T1576] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 606.845253][ T289] usb 1-1: Using ep0 maxpacket: 8 [ 606.965270][ T289] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.973656][ T289] usb 1-1: config 179 has no interface number 0 [ 606.980056][ T289] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.991299][ T289] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 607.002523][ T289] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.013705][ T289] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 607.025142][ T289] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 607.038382][ T1576] usb 4-1: Using ep0 maxpacket: 32 [ 607.043519][ T289] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 607.052537][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.075332][T10317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 607.155351][ T1576] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 607.163511][ T1576] usb 4-1: config 0 has no interface number 0 [ 607.205302][ T8629] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 607.297848][ T289] usb 1-1: USB disconnect, device number 40 [ 607.315289][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 607.325335][ T1576] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.334510][ T1576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.342522][ T1576] usb 4-1: Product: syz [ 607.346785][ T1576] usb 4-1: Manufacturer: syz [ 607.351350][ T1576] usb 4-1: SerialNumber: syz [ 607.356649][ T1576] usb 4-1: config 0 descriptor?? [ 607.395662][ T1576] smsc95xx v2.0.0 [ 607.515329][ T512] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 607.565377][ T8629] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.574314][ T8629] usb 9-1: config 0 interface 0 has no altsetting 0 [ 607.735452][ T8629] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 607.744518][ T8629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 607.752643][ T8629] usb 9-1: Product: syz [ 607.756966][ T8629] usb 9-1: Manufacturer: syz [ 607.761540][ T8629] usb 9-1: SerialNumber: syz [ 607.766931][ T8629] usb 9-1: config 0 descriptor?? [ 607.835448][ T1576] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 607.846645][ T1576] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 607.875396][ T1576] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 607.886304][ T1576] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 607.893999][ T1576] usb 4-1: USB disconnect, device number 40 [ 607.896345][ T512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.910964][ T512] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 607.920157][ T512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.928947][ T512] usb 5-1: config 0 descriptor?? [ 608.007447][ T6396] usb 9-1: USB disconnect, device number 31 [ 608.265427][ T512] usbhid 5-1:0.0: can't add hid device: -71 [ 608.271393][ T512] usbhid: probe of 5-1:0.0 failed with error -71 [ 608.278865][ T512] usb 5-1: USB disconnect, device number 36 [ 608.365163][T10355] tipc: Enabled bearer , priority 0 [ 608.372086][T10355] device syzkaller0 entered promiscuous mode [ 608.380705][T10355] tipc: Resetting bearer [ 608.391097][T10354] tipc: Resetting bearer [ 608.397945][T10354] tipc: Disabling bearer [ 608.455444][T10363] binder: 10362:10363 ioctl c0306201 0 returned -14 [ 608.474497][ T30] audit: type=1400 audit(1773742834.654:1551): avc: denied { unmount } for pid=6948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 608.666570][T10371] device lo entered promiscuous mode [ 608.672325][T10371] device tunl0 entered promiscuous mode [ 608.678444][T10371] device gre0 entered promiscuous mode [ 608.684322][T10371] device gretap0 entered promiscuous mode [ 608.690589][T10371] device erspan0 entered promiscuous mode [ 608.697021][T10371] device ip_vti0 entered promiscuous mode [ 608.703087][T10371] device ip6_vti0 entered promiscuous mode [ 608.709295][T10371] device sit0 entered promiscuous mode [ 608.715122][T10371] device ip6tnl0 entered promiscuous mode [ 608.721634][T10371] device ip6gre0 entered promiscuous mode [ 608.727881][T10371] device syz_tun entered promiscuous mode [ 608.734044][T10371] device ip6gretap0 entered promiscuous mode [ 608.735456][ T512] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 608.740462][T10371] device bridge0 entered promiscuous mode [ 608.753797][T10371] device dummy0 entered promiscuous mode [ 608.759714][ T1576] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 608.767984][T10371] device veth0 entered promiscuous mode [ 608.774080][T10371] device veth1 entered promiscuous mode [ 608.780294][T10371] device wg0 entered promiscuous mode [ 608.786186][T10371] device wg1 entered promiscuous mode [ 608.791937][T10371] device wg2 entered promiscuous mode [ 608.798126][T10371] device veth0_to_bridge entered promiscuous mode [ 608.808350][T10371] device bridge_slave_0 entered promiscuous mode [ 608.814996][T10371] device veth1_to_bridge entered promiscuous mode [ 608.821961][T10371] device bridge_slave_1 entered promiscuous mode [ 608.828911][T10371] device veth1_to_bond entered promiscuous mode [ 608.835737][T10371] device bond_slave_1 entered promiscuous mode [ 608.842278][T10371] device veth0_to_team entered promiscuous mode [ 608.849215][T10371] device team_slave_0 entered promiscuous mode [ 608.855963][T10371] device veth1_to_team entered promiscuous mode [ 608.862518][T10371] device team_slave_1 entered promiscuous mode [ 608.868992][T10371] device veth0_to_batadv entered promiscuous mode [ 608.877001][T10371] device batadv_slave_0 entered promiscuous mode [ 608.883626][T10371] device veth1_to_batadv entered promiscuous mode [ 608.890695][T10371] device batadv_slave_1 entered promiscuous mode [ 608.897613][T10371] device xfrm0 entered promiscuous mode [ 608.903886][T10371] device veth0_to_hsr entered promiscuous mode [ 608.910631][T10371] device hsr_slave_0 entered promiscuous mode [ 608.917454][T10371] device veth1_to_hsr entered promiscuous mode [ 608.924049][T10371] device hsr_slave_1 entered promiscuous mode [ 608.930863][T10371] device veth1_virt_wifi entered promiscuous mode [ 608.937898][T10371] device veth0_virt_wifi entered promiscuous mode [ 608.944902][T10371] device veth1_vlan entered promiscuous mode [ 608.952035][T10371] device vlan0 entered promiscuous mode [ 608.958613][T10371] device vlan1 entered promiscuous mode [ 608.964756][T10371] device veth0_macvtap entered promiscuous mode [ 608.971762][T10371] device macsec0 entered promiscuous mode [ 608.978175][T10371] device tun0 entered promiscuous mode [ 608.983697][T10371] device sit1 entered promiscuous mode [ 608.992191][T10371] device tun1 entered promiscuous mode [ 608.997775][ T512] usb 5-1: Using ep0 maxpacket: 32 [ 609.005808][ T1576] usb 4-1: Using ep0 maxpacket: 8 [ 609.025524][ T1497] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.057986][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3141'. [ 609.137858][ T512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.148890][ T512] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 609.155586][ T1576] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 609.158509][ T512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.166570][ T1576] usb 4-1: config 179 has no interface number 0 [ 609.177483][ T512] usb 5-1: config 0 descriptor?? [ 609.180595][ T1576] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 609.196562][ T1576] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 609.208162][ T1576] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.219634][ T1576] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 609.231458][ T1576] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 609.245105][ T1576] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 609.254390][ T1576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.385907][T10367] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 609.418557][ T6396] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 609.441929][T10343] UDC core: couldn't find an available UDC or it's busy: -16 [ 609.449454][T10343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 609.515574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.620612][ T1576] usb 4-1: USB disconnect, device number 41 [ 609.635565][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 609.665572][ T6396] usb 9-1: Using ep0 maxpacket: 32 [ 609.755639][ T512] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.785647][ T6396] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 609.793739][ T6396] usb 9-1: config 0 has no interface number 0 [ 609.965664][ T6396] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 609.974760][ T6396] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.983131][ T6396] usb 9-1: Product: syz [ 609.987320][ T6396] usb 9-1: Manufacturer: syz [ 609.991897][ T6396] usb 9-1: SerialNumber: syz [ 609.997313][ T6396] usb 9-1: config 0 descriptor?? [ 610.036134][ T6396] smsc95xx v2.0.0 [ 610.135842][T10402] tipc: Enabled bearer , priority 0 [ 610.142687][T10402] device syzkaller0 entered promiscuous mode [ 610.150818][T10401] tipc: Resetting bearer [ 610.158075][T10401] tipc: Disabling bearer [ 610.475656][ T1576] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 610.475697][ T6396] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 610.494070][ T6396] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 610.515692][ T6396] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 610.526691][ T6396] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 610.535128][ T6396] usb 9-1: USB disconnect, device number 32 [ 610.725696][ T1576] usb 4-1: Using ep0 maxpacket: 32 [ 610.818810][ T1497] usb 5-1: USB disconnect, device number 37 [ 610.845910][ T1576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.856997][ T1576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.866957][ T1576] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 610.876236][ T1576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.884935][ T1576] usb 4-1: config 0 descriptor?? [ 611.185235][T10423] bridge0: port 3(syz_tun) entered blocking state [ 611.191720][T10423] bridge0: port 3(syz_tun) entered disabled state [ 611.198590][T10423] device syz_tun entered promiscuous mode [ 611.325791][ T416] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 611.386962][ T1576] hid (null): bogus close delimiter [ 611.402228][ T1576] hid-generic 0003:057E:200E.0024: bogus close delimiter [ 611.438603][ T1576] hid-generic 0003:057E:200E.0024: item 0 2 2 10 parsing failed [ 611.446779][ T1576] hid-generic: probe of 0003:057E:200E.0024 failed with error -22 [ 611.596496][ T1497] usb 4-1: USB disconnect, device number 42 [ 611.711589][T10433] tipc: Enabled bearer , priority 0 [ 611.715876][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.721808][T10433] device syzkaller0 entered promiscuous mode [ 611.729229][ T416] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 611.744478][ T416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.752673][T10432] tipc: Resetting bearer [ 611.759883][ T416] usb 1-1: config 0 descriptor?? [ 611.762107][T10432] tipc: Disabling bearer [ 611.939767][T10437] tipc: Enabled bearer , priority 0 [ 611.946841][T10437] device syzkaller0 entered promiscuous mode [ 611.958041][T10434] tipc: Resetting bearer [ 611.965274][T10434] tipc: Disabling bearer [ 612.115891][ T416] usbhid 1-1:0.0: can't add hid device: -71 [ 612.119480][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 612.121964][ T416] usbhid: probe of 1-1:0.0 failed with error -71 [ 612.151348][ T416] usb 1-1: USB disconnect, device number 41 [ 612.153878][T10450] tipc: Enabled bearer , priority 0 [ 612.165516][T10450] device syzkaller0 entered promiscuous mode [ 612.173411][T10449] tipc: Resetting bearer [ 612.180517][T10449] tipc: Disabling bearer [ 612.275930][ T512] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 612.605933][ T416] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 612.635976][ T512] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.647093][ T512] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 612.656952][ T512] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 612.666016][ T512] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.859443][ T416] usb 1-1: Using ep0 maxpacket: 32 [ 612.916000][ T512] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 612.924105][ T512] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input16 [ 612.943466][ T512] input: failed to attach handler kbd to device input16, error: -5 [ 612.957464][ T512] usb 9-1: USB disconnect, device number 33 [ 612.996011][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.017168][ T416] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 613.026470][ T416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.038578][ T416] usb 1-1: config 0 descriptor?? [ 613.136076][ T1576] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 613.277686][T10419] UDC core: couldn't find an available UDC or it's busy: -16 [ 613.285063][T10419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 613.356017][ T1497] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 613.376024][ T1576] usb 4-1: Using ep0 maxpacket: 16 [ 613.500293][ T1576] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.511316][ T1576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 613.518297][ T1576] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 613.527577][ T1576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.539130][ T1576] usb 4-1: config 0 descriptor?? [ 613.758393][ T1497] usb 5-1: Using ep0 maxpacket: 8 [ 613.777143][T10454] UDC core: couldn't find an available UDC or it's busy: -16 [ 613.784564][T10454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 613.876124][ T1497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.018280][ T1576] hid-generic 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 614.056140][ T1497] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 614.065213][ T1497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.073202][ T1497] usb 5-1: Product: syz [ 614.077388][ T1497] usb 5-1: Manufacturer: syz [ 614.081969][ T1497] usb 5-1: SerialNumber: syz [ 614.268566][T10469] UDC core: couldn't find an available UDC or it's busy: -16 [ 614.275998][T10469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 614.307037][ T1497] usb 1-1: USB disconnect, device number 42 [ 614.330923][ T6396] usb 5-1: USB disconnect, device number 38 [ 614.484572][T10454] UDC core: couldn't find an available UDC or it's busy: -16 [ 614.492010][T10454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 614.506369][ T8317] usb 4-1: USB disconnect, device number 43 [ 614.666172][ T1497] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 615.106277][ T8317] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 615.216299][ T1497] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.226689][ T1497] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.386411][ T1497] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.395525][ T1497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.403539][ T1497] usb 1-1: Product: syz [ 615.406239][ T8317] usb 9-1: Using ep0 maxpacket: 32 [ 615.407768][ T1497] usb 1-1: Manufacturer: syz [ 615.417424][ T1497] usb 1-1: SerialNumber: syz [ 615.526350][ T8317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.537263][ T8317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.547042][ T8317] usb 9-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 615.556079][ T8317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.564822][ T8317] usb 9-1: config 0 descriptor?? [ 615.756444][ T1497] usb 1-1: 0:2 : does not exist [ 615.772402][ T1497] usb 1-1: USB disconnect, device number 43 [ 615.839044][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3183'. [ 616.008726][ T6396] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 616.012337][T10494] tipc: Enabled bearer , priority 0 [ 616.025376][T10494] tipc: Resetting bearer [ 616.032084][T10493] tipc: Disabling bearer [ 616.046590][ T8317] hid (null): bogus close delimiter [ 616.052506][ T8317] hid-generic 0003:057E:200E.0026: bogus close delimiter [ 616.059574][ T8317] hid-generic 0003:057E:200E.0026: item 0 2 2 10 parsing failed [ 616.067381][ T8317] hid-generic: probe of 0003:057E:200E.0026 failed with error -22 [ 616.372048][ T1497] usb 9-1: USB disconnect, device number 34 [ 616.398042][T10504] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3188'. [ 616.406385][ T6396] usb 5-1: Using ep0 maxpacket: 8 [ 616.526420][ T6396] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 616.534780][ T6396] usb 5-1: config 179 has no interface number 0 [ 616.541163][ T6396] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 616.552207][ T6396] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 616.563411][ T6396] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.574521][ T6396] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 616.604583][ T6396] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 616.617846][ T6396] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 616.626911][ T6396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.646500][T10489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 616.776456][ T1497] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 616.869333][ T8317] usb 5-1: USB disconnect, device number 39 [ 616.886435][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 617.016456][ T1497] usb 1-1: Using ep0 maxpacket: 8 [ 617.146485][ T1497] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.316585][ T1497] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 617.325823][ T1497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.334171][ T1497] usb 1-1: Product: syz [ 617.338542][ T1497] usb 1-1: Manufacturer: syz [ 617.343203][ T1497] usb 1-1: SerialNumber: syz [ 617.596561][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.612486][ T6396] usb 1-1: USB disconnect, device number 44 [ 617.686506][ T1497] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 617.891741][T10535] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3201'. [ 618.266643][ T1497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.276892][ T1497] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.285751][ T1497] usb 5-1: config 1 interface 0 has no altsetting 0 [ 618.361272][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 618.370843][ T1497] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.379933][ T1497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.388078][ T1497] usb 5-1: SerialNumber: syz [ 618.456638][ T6396] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 618.464270][ T350] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 618.667530][ T1497] usb 5-1: 0:2 : does not exist [ 618.673940][ T1497] usb 5-1: USB disconnect, device number 40 [ 618.706695][ T6396] usb 9-1: Using ep0 maxpacket: 8 [ 618.711830][ T350] usb 4-1: Using ep0 maxpacket: 16 [ 618.836746][ T6396] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 618.845097][ T350] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.855991][ T6396] usb 9-1: config 179 has no interface number 0 [ 618.862264][ T350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 618.868888][ T6396] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 618.880177][ T350] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 618.880728][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 618.889239][ T6396] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 618.889266][ T6396] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.927248][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.935422][ T6396] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 618.947057][ T350] usb 4-1: config 0 descriptor?? [ 618.952046][ T6396] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 618.965285][ T6396] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 618.974381][ T6396] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.996744][T10548] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 619.208309][T10546] UDC core: couldn't find an available UDC or it's busy: -16 [ 619.215842][T10546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 619.228189][ T1576] usb 9-1: USB disconnect, device number 35 [ 619.236695][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 619.287607][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3219'. [ 619.474799][ T350] hid-generic 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 619.719232][T10573] UDC core: couldn't find an available UDC or it's busy: -16 [ 619.726660][T10573] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 619.916712][ T30] audit: type=1400 audit(1773742846.093:1552): avc: denied { getopt } for pid=10588 comm="syz.8.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.937057][T10546] UDC core: couldn't find an available UDC or it's busy: -16 [ 619.944479][T10546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 619.987846][ T350] usb 4-1: USB disconnect, device number 44 [ 620.492064][ T30] audit: type=1400 audit(1773742846.673:1553): avc: denied { read } for pid=10619 comm="syz.0.3235" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 620.635413][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3236'. [ 620.827003][ T1497] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 620.937944][T10639] tmpfs: Unknown parameter 'quota' [ 621.357020][ T1497] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 621.369108][ T1497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.385403][ T1497] usb 9-1: Product: syz [ 621.389947][ T1497] usb 9-1: Manufacturer: syz [ 621.394567][ T1497] usb 9-1: SerialNumber: syz [ 621.403215][ T1497] usb 9-1: config 0 descriptor?? [ 621.414825][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 621.423710][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 622.107047][ T1576] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 622.198980][T10665] device syzkaller0 entered promiscuous mode [ 622.477488][ T1576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.518998][ T1576] usb 4-1: config 0 has no interfaces? [ 622.640987][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3257'. [ 622.697191][ T1576] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 622.706314][ T1576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.714357][ T1576] usb 4-1: Product: syz [ 622.718558][ T1576] usb 4-1: Manufacturer: syz [ 622.723158][ T1576] usb 4-1: SerialNumber: syz [ 622.728880][ T1576] usb 4-1: config 0 descriptor?? [ 622.887139][ T6396] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 623.347284][ T6396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.359229][ T6396] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 623.776522][ T6396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.867351][ T6396] usb 1-1: config 0 descriptor?? [ 624.119863][ T1497] usb 9-1: USB disconnect, device number 36 [ 624.277739][ T30] audit: type=1326 audit(1773742850.462:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c9df7799 code=0x7ffc0000 [ 624.301508][ T30] audit: type=1326 audit(1773742850.492:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c9df7799 code=0x7ffc0000 [ 624.325998][ T30] audit: type=1326 audit(1773742850.502:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f06c9df7799 code=0x7ffc0000 [ 624.351853][ T30] audit: type=1326 audit(1773742850.502:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c9df7799 code=0x7ffc0000 [ 624.375449][ T30] audit: type=1326 audit(1773742850.502:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c9df7799 code=0x7ffc0000 [ 624.617388][ T6396] usbhid 1-1:0.0: can't add hid device: -71 [ 624.623345][ T1497] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 624.630969][ T6396] usbhid: probe of 1-1:0.0 failed with error -71 [ 624.638628][ T6396] usb 1-1: USB disconnect, device number 45 [ 624.877391][ T1497] usb 9-1: Using ep0 maxpacket: 16 [ 624.904043][ T512] usb 4-1: USB disconnect, device number 45 [ 624.987435][ T6396] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 624.997497][ T1497] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.008664][ T1497] usb 9-1: config 0 interface 0 has no altsetting 0 [ 625.015270][ T1497] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 625.024340][ T1497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.033132][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3275'. [ 625.044339][ T1497] usb 9-1: config 0 descriptor?? [ 625.227420][ T6396] usb 1-1: Using ep0 maxpacket: 32 [ 625.288576][T10703] UDC core: couldn't find an available UDC or it's busy: -16 [ 625.296067][T10703] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 625.307515][ T512] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 625.427112][ T6396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.438120][ T6396] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 625.447133][ T6396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.455780][ T6396] usb 1-1: config 0 descriptor?? [ 625.539054][ T1497] hid-generic 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 625.614379][ T289] usb 1-1: USB disconnect, device number 46 [ 626.207624][ T512] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 626.216843][ T512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.225034][ T512] usb 4-1: Product: syz [ 626.229386][ T512] usb 4-1: Manufacturer: syz [ 626.234367][ T512] usb 4-1: SerialNumber: syz [ 626.239281][T10753] UDC core: couldn't find an available UDC or it's busy: -16 [ 626.248092][T10753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 626.557860][T10703] UDC core: couldn't find an available UDC or it's busy: -16 [ 626.570385][T10703] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 626.582037][T10703] UDC core: couldn't find an available UDC or it's busy: -16 [ 626.589511][T10703] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 626.597806][ T6396] usb 9-1: USB disconnect, device number 37 [ 626.847611][ T8317] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 627.149744][ T30] audit: type=1400 audit(1773742853.332:1559): avc: denied { mounton } for pid=10776 comm="syz.4.3294" path="/320/file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 627.174401][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3291'. [ 627.307756][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.323851][ T8317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.344928][ T8317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.371415][ T8317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.383867][ T8317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.405598][ T8317] usb 1-1: config 0 descriptor?? [ 627.645689][ T1576] usb 4-1: USB disconnect, device number 46 [ 627.970903][ T8317] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 627.985039][ T8317] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 628.247193][ T1576] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 628.255184][ T289] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 628.497799][ T289] usb 9-1: Using ep0 maxpacket: 16 [ 628.502990][ T1576] usb 4-1: Using ep0 maxpacket: 16 [ 628.627931][ T1576] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.638982][ T289] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.649900][ T289] usb 9-1: config 0 interface 0 has no altsetting 0 [ 628.656526][ T1576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 628.663182][ T289] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 628.672247][ T1576] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 628.681315][ T289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.689332][ T1576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.698541][ T289] usb 9-1: config 0 descriptor?? [ 628.703588][ T1576] usb 4-1: config 0 descriptor?? [ 628.797177][T10822] tipc: Enabling of bearer rejected, failed to enable media [ 628.948851][T10805] UDC core: couldn't find an available UDC or it's busy: -16 [ 628.949085][T10803] UDC core: couldn't find an available UDC or it's busy: -16 [ 628.956245][T10805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 628.971358][T10803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.189636][ T289] hid-generic 0003:1E71:2009.002A: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 629.209515][ T1576] hid-generic 0003:1E71:2009.002B: hidraw2: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 629.427940][ T8629] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 629.441372][T10837] UDC core: couldn't find an available UDC or it's busy: -16 [ 629.448954][T10837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.457144][T10837] UDC core: couldn't find an available UDC or it's busy: -16 [ 629.464575][T10837] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.472532][T10805] UDC core: couldn't find an available UDC or it's busy: -16 [ 629.479913][T10805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.488027][ T1576] usb 9-1: USB disconnect, device number 38 [ 629.661864][T10803] UDC core: couldn't find an available UDC or it's busy: -16 [ 629.669390][T10803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 629.678658][ T512] usb 4-1: USB disconnect, device number 47 [ 629.828024][ T8629] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 629.836221][ T8629] usb 5-1: config 0 has no interface number 0 [ 629.842373][ T8629] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 629.953724][T10851] tipc: Enabled bearer , priority 0 [ 629.962020][T10851] tipc: Resetting bearer [ 629.969010][T10850] tipc: Disabling bearer [ 630.042184][ T8629] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 630.051447][ T8629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.059922][ T8629] usb 5-1: Product: syz [ 630.064136][ T8629] usb 5-1: Manufacturer: syz [ 630.068915][ T8629] usb 5-1: SerialNumber: syz [ 630.074200][ T8629] usb 5-1: config 0 descriptor?? [ 630.328140][ T6396] usb 1-1: USB disconnect, device number 47 [ 630.437630][ T30] audit: type=1400 audit(1773742856.611:1560): avc: denied { create } for pid=10870 comm="syz.0.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 630.449148][ T1576] usb 5-1: USB disconnect, device number 41 [ 630.667794][T10889] tipc: Enabling of bearer rejected, failed to enable media [ 630.938087][ T8629] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 631.148138][ T6396] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 631.178168][ T8629] usb 4-1: Using ep0 maxpacket: 16 [ 631.298230][ T8629] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.309158][ T8629] usb 4-1: config 0 interface 0 has no altsetting 0 [ 631.315780][ T8629] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 631.324839][ T8629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.333431][ T8629] usb 4-1: config 0 descriptor?? [ 631.398166][ T6396] usb 9-1: Using ep0 maxpacket: 16 [ 631.528299][ T6396] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.539401][ T6396] usb 9-1: config 0 interface 0 has no altsetting 0 [ 631.546058][ T6396] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 631.555271][ T6396] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.566798][ T6396] usb 9-1: config 0 descriptor?? [ 631.581901][T10885] UDC core: couldn't find an available UDC or it's busy: -16 [ 631.589499][T10885] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 631.821547][T10895] UDC core: couldn't find an available UDC or it's busy: -16 [ 631.829156][T10895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 631.844900][ T8629] hid-generic 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 632.096783][T10910] UDC core: couldn't find an available UDC or it's busy: -16 [ 632.104465][T10910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.108727][ T6396] hid-generic 0003:1E71:2009.002D: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 632.180865][T10910] UDC core: couldn't find an available UDC or it's busy: -16 [ 632.196523][T10910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.230621][T10910] UDC core: couldn't find an available UDC or it's busy: -16 [ 632.238135][T10910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.545800][T10895] UDC core: couldn't find an available UDC or it's busy: -16 [ 632.553235][T10895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.561462][ T1576] usb 9-1: USB disconnect, device number 39 [ 632.790474][ T30] audit: type=1400 audit(1773742858.971:1561): avc: denied { name_bind } for pid=10925 comm="syz.4.3347" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 632.818536][ T30] audit: type=1400 audit(1773742858.971:1562): avc: denied { node_bind } for pid=10925 comm="syz.4.3347" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 633.217550][ T30] audit: type=1326 audit(1773742859.391:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.0.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7fc00000 [ 633.378432][ T8629] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 633.599004][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 633.680584][ T512] usb 4-1: USB disconnect, device number 48 [ 633.748477][ T8629] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 633.768462][ T8629] usb 9-1: config 0 has no interface number 0 [ 633.783500][ T8629] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.080431][ T8629] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 634.090091][ T8629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.100919][ T8629] usb 9-1: Product: syz [ 634.105383][ T8629] usb 9-1: Manufacturer: syz [ 634.112318][ T8629] usb 9-1: SerialNumber: syz [ 634.154883][ T8629] usb 9-1: config 0 descriptor?? [ 634.472991][ T8629] usb 9-1: USB disconnect, device number 40 [ 635.300439][ T1524] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 635.599029][ T1524] usb 1-1: Using ep0 maxpacket: 16 [ 635.677098][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3372'. [ 635.718786][ T1524] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.729817][ T1524] usb 1-1: config 0 interface 0 has no altsetting 0 [ 635.736477][ T1524] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 635.745805][ T1524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.755528][ T1524] usb 1-1: config 0 descriptor?? [ 635.980627][ T45] device bridge_slave_1 left promiscuous mode [ 635.987088][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.996273][ T45] device bridge_slave_0 left promiscuous mode [ 636.004544][T10983] UDC core: couldn't find an available UDC or it's busy: -16 [ 636.012175][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.019909][T10983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.029407][ T45] device veth1_macvtap left promiscuous mode [ 636.036407][ T45] device veth0_vlan left promiscuous mode [ 636.260530][ T1524] hid-generic 0003:1E71:2009.002E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 636.448367][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 636.511181][T11025] UDC core: couldn't find an available UDC or it's busy: -16 [ 636.518625][T11025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.526626][T11025] UDC core: couldn't find an available UDC or it's busy: -16 [ 636.534049][T11025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.542358][T10983] UDC core: couldn't find an available UDC or it's busy: -16 [ 636.552678][T10983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.580243][ T1524] usb 1-1: USB disconnect, device number 48 [ 637.046717][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3389'. [ 637.130305][ T30] audit: type=1400 audit(1773742863.311:1564): avc: denied { read } for pid=11054 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 637.693181][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 638.048954][ T1524] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 638.108951][ T8629] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 638.409057][ T1524] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.419201][ T1524] usb 1-1: config 0 has no interfaces? [ 638.489083][ T8629] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.500063][ T8629] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.509833][ T8629] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.522752][ T8629] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.531807][ T8629] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.540644][ T8629] usb 9-1: config 0 descriptor?? [ 638.589168][ T1524] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 638.598409][ T1524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.606867][ T1524] usb 1-1: Product: syz [ 638.611292][ T1524] usb 1-1: Manufacturer: syz [ 638.615915][ T1524] usb 1-1: SerialNumber: syz [ 638.643839][ T1524] usb 1-1: config 0 descriptor?? [ 638.652786][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3405'. [ 638.773799][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 639.023816][ T8629] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 639.038304][ T8629] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 639.131788][T11105] overlayfs: failed to clone upperpath [ 640.821265][ T8629] usb 1-1: USB disconnect, device number 49 [ 640.836628][ T6396] kernel write not supported for file /uhid (pid: 6396 comm: kworker/0:10) [ 640.852812][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 640.939621][ T30] audit: type=1400 audit(1773742867.120:1565): avc: denied { append } for pid=11138 comm="syz.4.3421" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 641.309398][ T8629] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 641.311972][ T1524] usb 9-1: USB disconnect, device number 41 [ 641.559403][ T8629] usb 1-1: Using ep0 maxpacket: 16 [ 641.679416][ T8629] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.690362][ T8629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 641.697002][ T8629] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 641.706309][ T8629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.721866][ T8629] usb 1-1: config 0 descriptor?? [ 641.789329][ T1524] kernel write not supported for file /uhid (pid: 1524 comm: kworker/0:8) [ 641.977677][T11137] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.985233][T11137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 642.230811][ T8629] hid-generic 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 642.432744][T11137] UDC core: couldn't find an available UDC or it's busy: -16 [ 642.440233][T11137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 642.648265][T11137] UDC core: couldn't find an available UDC or it's busy: -16 [ 642.655710][T11137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 642.663690][ T8629] usb 1-1: USB disconnect, device number 50 [ 642.909524][ T1524] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 643.034137][T11198] tipc: Enabling of bearer rejected, failed to enable media [ 643.362116][ T1524] usb 5-1: config 0 has no interfaces? [ 643.749709][ T1524] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 643.758781][ T1524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.779761][ T1524] usb 5-1: Product: syz [ 643.783949][ T1524] usb 5-1: Manufacturer: syz [ 643.788537][ T1524] usb 5-1: SerialNumber: syz [ 643.810429][ T1524] usb 5-1: config 0 descriptor?? [ 643.920249][T11226] tipc: Enabling of bearer rejected, failed to enable media [ 644.139669][ T1576] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 644.499838][ T1576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.510801][ T1576] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 644.519873][ T1576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.528415][ T1576] usb 9-1: config 0 descriptor?? [ 644.727184][T11242] IPv6: NLM_F_CREATE should be specified when creating new route [ 644.879830][ T1576] usbhid 9-1:0.0: can't add hid device: -71 [ 644.886135][ T1576] usbhid: probe of 9-1:0.0 failed with error -71 [ 644.893592][ T1576] usb 9-1: USB disconnect, device number 42 [ 645.277459][T11262] tipc: Enabling of bearer rejected, failed to enable media [ 645.352212][ T30] audit: type=1400 audit(1773742871.540:1566): avc: denied { read } for pid=11265 comm="syz.3.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 645.389838][ T1576] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 645.639850][ T1576] usb 9-1: Using ep0 maxpacket: 32 [ 645.653423][ T289] usb 5-1: USB disconnect, device number 42 [ 645.760377][ T1576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.771411][ T1576] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 645.780681][ T1576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.804350][ T1576] usb 9-1: config 0 descriptor?? [ 646.051932][ T6396] usb 9-1: USB disconnect, device number 43 [ 646.069906][ T289] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 646.188634][T11297] tipc: Enabling of bearer rejected, failed to enable media [ 646.235780][ T30] audit: type=1400 audit(1773742872.420:1567): avc: denied { remount } for pid=11304 comm="syz.0.3486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.235798][T11305] tmpfs: Unsupported parameter 'mpol' [ 646.309954][ T289] usb 5-1: Using ep0 maxpacket: 16 [ 646.430023][ T289] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.441351][ T289] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.448265][ T289] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 646.457653][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.470750][ T289] usb 5-1: config 0 descriptor?? [ 646.537113][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 646.695434][ T30] audit: type=1400 audit(1773742872.879:1568): avc: denied { watch watch_reads } for pid=11336 comm="syz.3.3504" path="/353" dev="tmpfs" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 646.719398][T11271] UDC core: couldn't find an available UDC or it's busy: -16 [ 646.737102][T11271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 646.899458][T11359] tipc: Enabling of bearer rejected, failed to enable media [ 646.970926][T11271] UDC core: couldn't find an available UDC or it's busy: -16 [ 646.978373][T11271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.168755][ T30] audit: type=1400 audit(1773742873.349:1569): avc: denied { bind } for pid=11371 comm="syz.7.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 647.188296][T11271] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.195976][T11271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.270056][ T289] usbhid 5-1:0.0: can't add hid device: -71 [ 647.276043][ T289] usbhid: probe of 5-1:0.0 failed with error -71 [ 647.286637][ T289] usb 5-1: USB disconnect, device number 43 [ 647.436228][T11384] tipc: Enabling of bearer rejected, failed to enable media [ 647.440131][ T1576] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 647.445116][ T30] audit: type=1400 audit(1773742873.619:1570): avc: denied { mount } for pid=11385 comm="syz.3.3523" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 647.731836][T11400] binder: 11399:11400 ioctl 4018620d 0 returned -22 [ 647.810167][ T1576] usb 1-1: config 0 has no interfaces? [ 647.888655][T11412] tipc: Enabled bearer , priority 0 [ 647.896956][T11412] tipc: Resetting bearer [ 647.908440][T11411] tipc: Disabling bearer [ 647.970197][ T1576] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 647.989581][ T1576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.998931][ T1576] usb 1-1: Product: syz [ 648.003956][ T1576] usb 1-1: Manufacturer: syz [ 648.008635][ T1576] usb 1-1: SerialNumber: syz [ 648.015476][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3538'. [ 648.025681][ T1576] usb 1-1: config 0 descriptor?? [ 648.470199][ T6508] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 648.663994][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3558'. [ 648.710205][ T6508] usb 5-1: Using ep0 maxpacket: 16 [ 648.830254][ T6508] usb 5-1: config 128 has too many interfaces: 104, using maximum allowed: 32 [ 648.843233][ T6508] usb 5-1: config 128 has an invalid interface number: 123 but max is 103 [ 648.851771][ T6508] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 648.862318][ T6508] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 104 [ 648.871585][ T6508] usb 5-1: config 128 has no interface number 0 [ 648.877940][ T6508] usb 5-1: config 128 interface 123 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 648.891491][ T6508] usb 5-1: config 128 interface 123 has no altsetting 0 [ 648.924642][T11471] device syzkaller0 entered promiscuous mode [ 649.050339][ T6508] usb 5-1: New USB device found, idVendor=1740, idProduct=9701, bcdDevice=25.31 [ 649.059439][ T6508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.067449][ T6508] usb 5-1: Product: syz [ 649.071629][ T6508] usb 5-1: Manufacturer: syz [ 649.076226][ T6508] usb 5-1: SerialNumber: syz [ 649.363559][ T6508] usb 5-1: USB disconnect, device number 44 [ 649.489308][ T30] audit: type=1326 audit(1773742875.669:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.512994][ T30] audit: type=1326 audit(1773742875.669:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.521129][T11491] tipc: Failed to remove unknown binding: 66,0,0/0:3210309214/3210309215 [ 649.537265][ T30] audit: type=1326 audit(1773742875.679:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.551225][T11491] tipc: Failed to remove unknown binding: 66,0,0/0:3210309214/3210309215 [ 649.568790][ T30] audit: type=1326 audit(1773742875.679:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.601676][ T30] audit: type=1326 audit(1773742875.679:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.625381][ T30] audit: type=1326 audit(1773742875.679:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11488 comm="syz.3.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a55fa799 code=0x7ffc0000 [ 649.902499][T11502] binder: 11501:11502 ioctl 4018620d 0 returned -22 [ 649.909664][T11502] binder: BINDER_SET_CONTEXT_MGR already set [ 649.916018][T11502] binder: 11501:11502 ioctl 40046207 0 returned -16 [ 650.109428][T11523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.116675][T11523] IPv6: NLM_F_CREATE should be set when creating new route [ 650.160768][T11523] device veth3 left promiscuous mode [ 650.166294][T11523] device veth5 left promiscuous mode [ 650.179247][ T1497] usb 1-1: USB disconnect, device number 51 [ 650.206824][T11537] device syzkaller0 entered promiscuous mode [ 650.460429][ T6508] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 650.640456][ T1497] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 650.820581][ T6508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.831498][ T6508] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 650.840527][ T6508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.849275][ T6508] usb 5-1: config 0 descriptor?? [ 651.010566][ T1497] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 651.024187][ T1497] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 651.180597][ T6508] usbhid 5-1:0.0: can't add hid device: -71 [ 651.186627][ T6508] usbhid: probe of 5-1:0.0 failed with error -71 [ 651.194088][ T6508] usb 5-1: USB disconnect, device number 45 [ 651.201670][ T1497] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 651.211060][ T1497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.219063][ T1497] usb 1-1: Product: syz [ 651.223317][ T1497] usb 1-1: Manufacturer: syz [ 651.227900][ T1497] usb 1-1: SerialNumber: syz [ 651.233146][ T1497] usb 1-1: config 0 descriptor?? [ 652.146940][ T4703] tipc: Disabling bearer [ 652.152463][ T4703] tipc: Left network mode [ 652.788389][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 652.788404][ T30] audit: type=1400 audit(1773742878.969:1580): avc: denied { write } for pid=11619 comm="syz.8.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 652.863101][ T302] usb 1-1: USB disconnect, device number 52 [ 653.061802][ T4703] device bridge_slave_1 left promiscuous mode [ 653.070560][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.094137][ T4703] device bridge_slave_0 left promiscuous mode [ 653.110410][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.147746][ T4703] device veth1_macvtap left promiscuous mode [ 653.153835][ T4703] device veth0_vlan left promiscuous mode [ 653.176670][T11656] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 653.240750][ T1576] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 653.333664][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3641'. [ 653.347003][T11663] device syzkaller0 entered promiscuous mode [ 653.398156][T11674] bridge0: port 1(syz_tun) entered blocking state [ 653.404675][T11674] bridge0: port 1(syz_tun) entered disabled state [ 653.480815][ T1576] usb 5-1: Using ep0 maxpacket: 16 [ 653.601397][ T1576] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.624124][ T1576] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.633294][ T1576] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 653.658722][ T1576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.681198][ T1576] usb 5-1: config 0 descriptor?? [ 653.788612][T11698] netlink: 'syz.3.3656': attribute type 30 has an invalid length. [ 653.844184][T11702] device syzkaller0 entered promiscuous mode [ 653.921762][T11639] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.933574][T11639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.955939][T11711] device syzkaller0 entered promiscuous mode [ 654.201836][ T1576] hid-generic 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 654.234483][ T8513] device syz_tun left promiscuous mode [ 654.239965][ T8513] bridge0: port 3(syz_tun) entered disabled state [ 654.393744][T11639] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.407223][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.414755][T11639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.422492][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.432073][T11723] device bridge_slave_0 entered promiscuous mode [ 654.500936][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.518181][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.535988][T11723] device bridge_slave_1 entered promiscuous mode [ 654.646772][T11639] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.663939][T11639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.674821][T11639] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.682926][T11639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.694681][ T1576] usb 5-1: USB disconnect, device number 46 [ 654.881939][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.890405][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.904692][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.916204][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.929554][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.936615][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.951217][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.964308][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.975747][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.988045][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.995089][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.008963][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.021022][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.039042][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.053514][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.061936][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.075279][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.084315][ T30] audit: type=1326 audit(1773742881.268:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.085517][T11723] device veth0_vlan entered promiscuous mode [ 655.120185][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.128231][ T30] audit: type=1326 audit(1773742881.268:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.129720][T11723] device veth1_macvtap entered promiscuous mode [ 655.163223][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.176532][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.209889][T11757] device syzkaller0 entered promiscuous mode [ 655.216095][ T30] audit: type=1326 audit(1773742881.288:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.283376][ T30] audit: type=1326 audit(1773742881.288:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.388563][ T30] audit: type=1326 audit(1773742881.288:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.475186][ T30] audit: type=1326 audit(1773742881.288:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.499616][ T30] audit: type=1326 audit(1773742881.288:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.523942][ T30] audit: type=1326 audit(1773742881.288:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.789515][ T30] audit: type=1326 audit(1773742881.288:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f57836a1799 code=0x7ffc0000 [ 655.873689][ T6508] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 656.071249][ T1576] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 656.121234][ T6508] usb 5-1: Using ep0 maxpacket: 16 [ 656.309090][ T6508] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.320907][ T6508] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.390998][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3691'. [ 656.401241][ T1576] usb 8-1: Using ep0 maxpacket: 16 [ 656.413707][T11802] device syzkaller0 entered promiscuous mode [ 656.531396][ T6508] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.541287][ T1576] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.552974][ T6508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.561079][ T1576] usb 8-1: config 0 interface 0 has no altsetting 0 [ 656.569996][ T6508] usb 5-1: Product: syz [ 656.575206][ T1576] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 656.584448][ T6508] usb 5-1: Manufacturer: syz [ 656.593951][ T6508] usb 5-1: SerialNumber: syz [ 656.598589][ T1576] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.615171][ T1576] usb 8-1: config 0 descriptor?? [ 656.862813][T11789] UDC core: couldn't find an available UDC or it's busy: -16 [ 656.871301][T11789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 656.931456][ T6508] usb 5-1: 0:2 : does not exist [ 656.945782][ T6508] usb 5-1: USB disconnect, device number 47 [ 657.077245][T11835] device syzkaller0 entered promiscuous mode [ 657.122845][ T1576] hid-generic 0003:1E71:2009.0032: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 657.323226][T11789] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.330699][T11789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.539996][T11789] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.550728][T11789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.583926][T11789] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.608921][T11789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.624043][T11872] device syzkaller0 entered promiscuous mode [ 657.632053][ T302] usb 8-1: USB disconnect, device number 20 [ 657.840073][T11897] netlink: 64126 bytes leftover after parsing attributes in process `syz.0.3730'. [ 658.010005][T11904] device syzkaller0 entered promiscuous mode [ 658.406635][T11991] device syzkaller0 entered promiscuous mode [ 658.448280][T11996] xt_hashlimit: size too large, truncated to 1048576 [ 658.571434][ T289] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 658.784252][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 658.831447][ T289] usb 8-1: Using ep0 maxpacket: 16 [ 658.851440][ T350] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 658.870144][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 658.870158][ T30] audit: type=1400 audit(1773742885.048:1593): avc: denied { getopt } for pid=12009 comm="syz.3.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.951493][ T289] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.998896][ T289] usb 8-1: config 0 interface 0 has no altsetting 0 [ 659.006017][ T289] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 659.015602][ T289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.024511][ T289] usb 8-1: config 0 descriptor?? [ 659.111450][ T350] usb 5-1: Using ep0 maxpacket: 16 [ 659.241542][ T350] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.260183][ T350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 659.267988][T11974] UDC core: couldn't find an available UDC or it's busy: -16 [ 659.279024][T11974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 659.289933][ T350] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 659.317825][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.341985][ T350] usb 5-1: config 0 descriptor?? [ 659.543754][ T289] hid-generic 0003:1E71:2009.0033: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 659.598113][T12003] UDC core: couldn't find an available UDC or it's busy: -16 [ 659.611594][T12003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 659.743798][T11974] UDC core: couldn't find an available UDC or it's busy: -16 [ 659.755591][T11974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 659.863853][ T350] hid-generic 0003:1E71:2009.0034: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 659.971334][T11974] UDC core: couldn't find an available UDC or it's busy: -16 [ 659.987128][T11974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 659.997653][T11974] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.005948][T11974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.014864][T12053] device syzkaller0 entered promiscuous mode [ 660.014943][ T289] usb 8-1: USB disconnect, device number 21 [ 660.065733][T12003] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.077919][T12003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.203452][T12084] tipc: Enabling of bearer rejected, failed to enable media [ 660.214579][T12085] device syzkaller0 entered promiscuous mode [ 660.333770][T12003] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.348958][T12003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.382110][ T350] usb 5-1: USB disconnect, device number 48 [ 660.432406][T12098] device syzkaller0 entered promiscuous mode [ 660.676041][T12125] device bridge2 entered promiscuous mode [ 660.688778][ T30] audit: type=1400 audit(1773742886.868:1594): avc: denied { bind } for pid=12126 comm="syz.3.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 660.821705][ T289] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 660.962049][T12138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3825'. [ 661.042572][T12148] device syzkaller0 entered promiscuous mode [ 661.191887][ T289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.203137][ T289] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 661.213415][ T289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.239862][ T289] usb 8-1: config 0 descriptor?? [ 661.529392][T12112] UDC core: couldn't find an available UDC or it's busy: -16 [ 661.536813][T12112] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 661.555528][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3834'. [ 661.691961][ T289] usbhid 8-1:0.0: can't add hid device: -71 [ 661.698407][ T289] usbhid: probe of 8-1:0.0 failed with error -71 [ 661.717364][T12169] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3838'. [ 661.727802][ T289] usb 8-1: USB disconnect, device number 22 [ 661.890342][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3841'. [ 662.189903][ T30] audit: type=1400 audit(1773742888.368:1595): avc: denied { create } for pid=12184 comm="syz.3.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 662.271834][ T350] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 662.350463][T12198] device syzkaller0 entered promiscuous mode [ 662.456581][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3859'. [ 662.503125][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3856'. [ 662.512735][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.519916][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.572336][ T350] usb 5-1: Using ep0 maxpacket: 16 [ 662.684604][T12237] raw_sendmsg: syz.0.3868 forgot to set AF_INET. Fix it! [ 662.692038][ T350] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.726949][ T350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 662.734465][ T350] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 662.744619][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.759202][T12239] device syzkaller0 entered promiscuous mode [ 662.790826][ T350] usb 5-1: config 0 descriptor?? [ 663.035367][T12179] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.172114][T12179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.332581][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 663.472935][T12179] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.490588][T12179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.505376][T12271] bridge0: port 3(syz_tun) entered blocking state [ 663.513672][T12271] bridge0: port 3(syz_tun) entered disabled state [ 663.520476][T12271] device syz_tun entered promiscuous mode [ 663.559002][T12273] tipc: Enabled bearer , priority 0 [ 663.621878][T12273] device syzkaller0 entered promiscuous mode [ 663.639526][T12272] tipc: Resetting bearer [ 663.699676][T12272] tipc: Disabling bearer [ 663.727513][T12179] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.747122][T12179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.757423][T12285] tipc: Enabling of bearer rejected, failed to enable media [ 663.767289][T12179] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.775936][T12285] device syzkaller0 entered promiscuous mode [ 663.783565][T12179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.932484][ T350] usbhid 5-1:0.0: can't add hid device: -71 [ 663.939348][ T350] usbhid: probe of 5-1:0.0 failed with error -71 [ 663.992079][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'. [ 664.019185][ T350] usb 5-1: USB disconnect, device number 49 [ 664.365013][ T30] audit: type=1400 audit(1773742890.547:1596): avc: denied { shutdown } for pid=12302 comm="syz.8.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 664.547598][T12316] tipc: Started in network mode [ 664.552788][T12316] tipc: Node identity ce90a2f1177a, cluster identity 4711 [ 664.610970][T12316] tipc: Enabled bearer , priority 0 [ 664.618231][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'. [ 664.683135][T12317] device syzkaller0 entered promiscuous mode [ 664.694035][T12323] tipc: Enabling of bearer rejected, failed to enable media [ 664.707958][T12323] device syzkaller0 entered promiscuous mode [ 664.728296][T12313] tipc: Resetting bearer [ 664.758476][T12313] tipc: Disabling bearer [ 664.961384][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3914'. [ 665.271511][T12376] tipc: Enabled bearer , priority 0 [ 665.301641][T12376] device syzkaller0 entered promiscuous mode [ 665.340201][T12375] tipc: Resetting bearer [ 665.373966][T12375] tipc: Disabling bearer [ 665.401118][T12379] tipc: Enabling of bearer rejected, failed to enable media [ 665.419986][T12379] device syzkaller0 entered promiscuous mode [ 665.572689][ T30] audit: type=1400 audit(1773742891.747:1597): avc: denied { create } for pid=12399 comm="syz.3.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 665.610770][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3939'. [ 666.002794][ T30] audit: type=1400 audit(1773742892.187:1598): avc: denied { write } for pid=12441 comm="syz.3.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 666.242401][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.301619][T12478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=12478 comm=syz.8.3973 [ 667.049894][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4004'. [ 667.128450][T12546] bridge1: port 1(erspan0) entered blocking state [ 667.159684][T12546] bridge1: port 1(erspan0) entered disabled state [ 667.173786][T12557] xt_hashlimit: max too large, truncated to 1048576 [ 667.176017][T12546] device erspan0 entered promiscuous mode [ 667.180598][T12557] xt_bpf: check failed: parse error [ 667.215402][T12546] bridge1: port 1(erspan0) entered blocking state [ 667.221882][T12546] bridge1: port 1(erspan0) entered forwarding state [ 667.307972][T12567] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4013'. [ 667.645076][T12613] netlink: 'syz.7.4035': attribute type 30 has an invalid length. [ 667.851738][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4042'. [ 668.168029][ T30] audit: type=1400 audit(1773742894.347:1599): avc: denied { read } for pid=12647 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 668.196043][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4050'. [ 668.338655][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4054'. [ 668.382634][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4051'. [ 668.529691][ T30] audit: type=1400 audit(1773742894.707:1600): avc: denied { create } for pid=12662 comm="syz.4.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 668.561947][ T30] audit: type=1400 audit(1773742894.707:1601): avc: denied { connect } for pid=12662 comm="syz.4.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 668.617406][T12673] tipc: Enabling of bearer rejected, failed to enable media [ 668.724327][T12684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23056 sclass=netlink_route_socket pid=12684 comm=syz.3.4065 [ 669.231489][T12713] tipc: Enabling of bearer rejected, failed to enable media [ 669.250980][T12716] __nla_validate_parse: 1 callbacks suppressed [ 669.250998][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4075'. [ 669.276704][T12713] device syzkaller0 entered promiscuous mode [ 669.483515][ T1497] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 669.522192][T12731] bridge1: port 1(erspan0) entered disabled state [ 669.654214][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4081'. [ 669.703993][T12731] netlink: 'syz.7.4084': attribute type 13 has an invalid length. [ 669.742745][ T1497] usb 9-1: Using ep0 maxpacket: 16 [ 669.747974][ T30] audit: type=1400 audit(1773742895.927:1602): avc: denied { relabelfrom } for pid=12730 comm="syz.7.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 669.797283][ T30] audit: type=1400 audit(1773742895.927:1603): avc: denied { relabelto } for pid=12730 comm="syz.7.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 669.849903][T12751] tipc: Enabling of bearer rejected, failed to enable media [ 669.859262][T12751] device syzkaller0 entered promiscuous mode [ 669.882769][ T1497] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.894988][ T1497] usb 9-1: config 0 interface 0 has no altsetting 0 [ 669.902885][ T1497] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 669.912004][ T1497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.943173][ T1497] usb 9-1: config 0 descriptor?? [ 670.099645][T12779] tipc: Enabled bearer , priority 0 [ 670.111830][T12779] device syzkaller0 entered promiscuous mode [ 670.124505][T12779] tipc: Resetting bearer [ 670.130914][T12778] tipc: Resetting bearer [ 670.137271][T12778] tipc: Disabling bearer [ 670.184258][T12714] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.191718][T12714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.270548][T12788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4107'. [ 670.423203][T12714] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.430752][T12714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.623440][ T30] audit: type=1400 audit(1773742896.807:1604): avc: denied { create } for pid=12814 comm="syz.7.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 670.674389][T12714] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.681963][T12714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.689940][T12714] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.701101][T12714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.760407][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 670.772978][ T1497] usbhid 9-1:0.0: can't add hid device: -71 [ 670.778951][ T1497] usbhid: probe of 9-1:0.0 failed with error -71 [ 670.787587][ T1497] usb 9-1: USB disconnect, device number 44 [ 671.482912][ T1497] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 671.509188][T12870] tipc: Enabled bearer , priority 0 [ 671.516698][T12870] device syzkaller0 entered promiscuous mode [ 671.527390][T12870] tipc: Resetting bearer [ 671.534571][T12869] tipc: Resetting bearer [ 671.540947][T12869] tipc: Disabling bearer [ 671.594070][T12876] device syzkaller0 entered promiscuous mode [ 671.729923][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4150'. [ 671.738955][ T1497] usb 9-1: Using ep0 maxpacket: 16 [ 671.863015][ T1497] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.873968][ T1497] usb 9-1: config 0 interface 0 has no altsetting 0 [ 671.880584][ T1497] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 671.889647][ T1497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.898417][ T1497] usb 9-1: config 0 descriptor?? [ 671.912959][ T6508] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 671.950203][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4152'. [ 672.014781][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 672.193006][ T6508] usb 1-1: Using ep0 maxpacket: 16 [ 672.313118][ T6508] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.324168][ T6508] usb 1-1: config 0 interface 0 has no altsetting 0 [ 672.330789][ T6508] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 672.340119][ T6508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.348967][ T6508] usb 1-1: config 0 descriptor?? [ 672.374628][ T1497] hid-generic 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 672.521756][T12923] device syzkaller0 entered promiscuous mode [ 672.594255][T12886] UDC core: couldn't find an available UDC or it's busy: -16 [ 672.601705][T12886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 672.625365][T12926] UDC core: couldn't find an available UDC or it's busy: -16 [ 672.632798][T12926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 672.793174][T12930] tipc: Enabling of bearer rejected, failed to enable media [ 672.813638][T12886] UDC core: couldn't find an available UDC or it's busy: -16 [ 672.821131][T12886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 672.840930][T12864] UDC core: couldn't find an available UDC or it's busy: -16 [ 672.848429][T12864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 672.856469][ T1576] usb 9-1: USB disconnect, device number 45 [ 672.957231][T12954] netlink: 'syz.7.4179': attribute type 8 has an invalid length. [ 673.070477][T12886] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.081532][T12886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.097416][T12886] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.125358][T12886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.203182][ T6508] usbhid 1-1:0.0: can't add hid device: -71 [ 673.205430][T12985] ------------[ cut here ]------------ [ 673.209191][ T6508] usbhid: probe of 1-1:0.0 failed with error -71 [ 673.214677][T12985] trace type BPF program uses run-time allocation [ 673.227973][T12985] WARNING: CPU: 0 PID: 12985 at kernel/bpf/verifier.c:11718 check_map_prog_compatibility+0x6cd/0x870 [ 673.239239][T12985] Modules linked in: [ 673.240330][ T6508] usb 1-1: USB disconnect, device number 53 [ 673.248635][T12985] CPU: 0 PID: 12985 Comm: syz.4.4193 Tainted: G W syzkaller #0 [ 673.260761][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.271129][T12985] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 673.279377][T12985] Code: ee ff 48 c7 c6 80 44 48 85 4c 8b 65 d0 e9 fd fc ff ff e8 96 1c ee ff c6 05 b4 7d 6a 05 01 48 c7 c7 e0 40 48 85 e8 a3 33 2f 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 673.299627][T12985] RSP: 0018:ffffc90000a67428 EFLAGS: 00010246 [ 673.306170][T12985] RAX: 0d2337ecfc951f00 RBX: 0000000000000001 RCX: 0000000000080000 [ 673.314529][T12985] RDX: ffffc90001d79000 RSI: 0000000000059dae RDI: 0000000000059daf [ 673.322568][T12985] RBP: ffffc90000a67470 R08: ffff8881f7032f3f R09: 1ffff1103ee065e7 [ 673.338408][T12985] R10: dffffc0000000000 R11: ffffed103ee065e8 R12: ffff88814bc1c000 [ 673.355226][T12985] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88810abd8800 [ 673.374635][T12985] FS: 00007f8cd33326c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 673.398015][ T30] audit: type=1400 audit(1773742899.576:1605): avc: denied { connect } for pid=12987 comm="syz.7.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 673.437342][T12985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.477029][T12985] CR2: 00007f1eb0d00ff8 CR3: 00000001187e1000 CR4: 00000000003506b0 [ 673.487708][T12985] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 673.526756][ T30] audit: type=1400 audit(1773742899.706:1606): avc: denied { setopt } for pid=12999 comm="syz.8.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 673.528766][T12985] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 673.554375][T12985] Call Trace: [ 673.557704][T12985] [ 673.560634][T12985] resolve_pseudo_ldimm64+0x656/0x1180 [ 673.566239][T12985] ? check_attach_btf_id+0xd70/0xd70 [ 673.571871][T12985] ? __mark_reg_known+0x1b0/0x1b0 [ 673.577064][T13000] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4200'. [ 673.577036][T12985] ? security_capable+0x87/0xb0 [ 673.591026][T12985] bpf_check+0x32c7/0xf370 [ 673.600456][T12985] ? 0xffffffffa001a000 [ 673.605099][T12985] ? is_bpf_text_address+0x177/0x190 [ 673.616842][T12985] ? bpf_get_btf_vmlinux+0x60/0x60 [ 673.626950][T12985] ? unwind_get_return_address+0x4d/0x90 [ 673.632819][T12985] ? stack_trace_save+0xf0/0xf0 [ 673.643172][T12985] ? arch_stack_walk+0xee/0x140 [ 673.648141][T12985] ? stack_trace_save+0xa6/0xf0 [ 673.653357][T12985] ? __stack_depot_save+0x34/0x480 [ 673.658728][T12985] ? __kasan_slab_alloc+0x69/0xf0 [ 673.681032][T12985] ? __kasan_kmalloc+0xec/0x110 [ 673.688554][T12985] ? __kasan_kmalloc+0xda/0x110 [ 673.693755][T12985] ? kmem_cache_alloc_trace+0x119/0x270 [ 673.696344][T13010] device syzkaller0 entered promiscuous mode [ 673.699398][T12985] ? selinux_bpf_prog_alloc+0x51/0x140 [ 673.723193][T12985] ? security_bpf_prog_alloc+0x62/0x90 [ 673.733289][T12985] ? bpf_prog_load+0x9f4/0x1640 [ 673.740911][T12985] ? __sys_bpf+0x51d/0x7d0 [ 673.763236][T12985] ? __x64_sys_bpf+0x7c/0x90 [ 673.767912][T12985] ? x64_sys_call+0x4b9/0x9a0 [ 673.806847][T12985] ? do_syscall_64+0x4c/0xa0 [ 673.811583][T12985] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 673.825497][T13022] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4209'. [ 673.843534][T12985] ? check_stack_object+0x81/0x140 [ 673.848773][T12985] ? memset+0x35/0x40 [ 673.852856][T12985] ? bpf_obj_name_cpy+0x193/0x1e0 [ 673.867517][T12985] bpf_prog_load+0x10c4/0x1640 [ 673.872931][T12985] ? map_freeze+0x360/0x360 [ 673.877591][T12985] ? selinux_bpf+0xc7/0xf0 [ 673.882009][T12985] ? security_bpf+0x82/0xa0 [ 673.892752][T12985] __sys_bpf+0x51d/0x7d0 [ 673.897153][T12985] ? bpf_link_show_fdinfo+0x330/0x330 [ 673.902554][T12985] ? __kasan_check_write+0x14/0x20 [ 673.917168][T12985] ? switch_fpu_return+0x15d/0x2c0 [ 673.944026][T12985] __x64_sys_bpf+0x7c/0x90 [ 673.948638][T12985] x64_sys_call+0x4b9/0x9a0 [ 673.953444][T12985] do_syscall_64+0x4c/0xa0 [ 673.957995][T12985] ? clear_bhb_loop+0x50/0xa0 [ 673.962730][T12985] ? clear_bhb_loop+0x50/0xa0 [ 673.968145][T12985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 673.974137][T12985] RIP: 0033:0x7f8cd48d7799 [ 673.978601][T12985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.978664][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 674.007269][T12985] RSP: 002b:00007f8cd3332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.015725][T12985] RAX: ffffffffffffffda RBX: 00007f8cd4b50fa0 RCX: 00007f8cd48d7799 [ 674.023825][T12985] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 674.031796][T12985] RBP: 00007f8cd496dc99 R08: 0000000000000000 R09: 0000000000000000 [ 674.039833][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.047817][T12985] R13: 00007f8cd4b51038 R14: 00007f8cd4b50fa0 R15: 00007ffc745c9868 [ 674.063203][ T42] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 674.064127][T12985] [ 674.093338][T12985] ---[ end trace 0b1f51e8898b2035 ]--- [ 674.144207][T13041] device syzkaller0 entered promiscuous mode [ 674.274161][T13055] device lo left promiscuous mode [ 674.283310][T13055] device tunl0 left promiscuous mode [ 674.302137][T13055] device gre0 left promiscuous mode [ 674.310075][T13055] device gretap0 left promiscuous mode [ 674.316726][T13055] device erspan0 left promiscuous mode [ 674.323404][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 674.328719][T13055] device ip_vti0 left promiscuous mode [ 674.335430][T13055] device ip6_vti0 left promiscuous mode [ 674.342828][T13055] device sit0 left promiscuous mode [ 674.349684][T13055] device ip6tnl0 left promiscuous mode [ 674.355774][T13055] device ip6gre0 left promiscuous mode [ 674.362406][T13055] device ip6gretap0 left promiscuous mode [ 674.368892][T13055] device bridge0 left promiscuous mode [ 674.374600][T13055] device dummy0 left promiscuous mode [ 674.380597][T13055] device veth0 left promiscuous mode [ 674.386918][T13055] device veth1 left promiscuous mode [ 674.393274][T13055] device wg0 left promiscuous mode [ 674.399051][T13055] device wg1 left promiscuous mode [ 674.405389][T13055] device wg2 left promiscuous mode [ 674.411349][T13055] device veth0_to_bridge left promiscuous mode [ 674.419709][T13055] device veth1_to_bridge left promiscuous mode [ 674.427585][T13055] device veth0_to_bond left promiscuous mode [ 674.434326][T13055] device bond_slave_0 left promiscuous mode [ 674.440429][T13055] device veth1_to_bond left promiscuous mode [ 674.449144][T13055] device bond_slave_1 left promiscuous mode [ 674.455423][T13055] device veth0_to_team left promiscuous mode [ 674.462093][T13055] device team_slave_0 left promiscuous mode [ 674.468671][T13055] device veth1_to_team left promiscuous mode [ 674.483733][T13055] device team_slave_1 left promiscuous mode [ 674.484373][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 674.502385][T13055] device veth0_to_batadv left promiscuous mode [ 674.516101][T13055] device batadv_slave_0 left promiscuous mode [ 674.524386][T13055] device veth1_to_batadv left promiscuous mode [ 674.534033][T13055] device batadv_slave_1 left promiscuous mode [ 674.541274][T13055] device xfrm0 left promiscuous mode [ 674.550005][T13055] device veth0_to_hsr left promiscuous mode [ 674.556991][T13055] device hsr_slave_0 left promiscuous mode [ 674.565198][T13055] device veth1_to_hsr left promiscuous mode [ 674.571848][T13055] device hsr_slave_1 left promiscuous mode [ 674.578329][T13055] device veth1_virt_wifi left promiscuous mode [ 674.584754][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.595126][T13055] device veth0_virt_wifi left promiscuous mode [ 674.595253][ T42] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 674.610265][T13055] device veth1_vlan left promiscuous mode [ 674.618165][T13055] device vlan0 left promiscuous mode [ 674.623713][T13055] device vlan1 left promiscuous mode [ 674.629782][T13055] device veth0_macvtap left promiscuous mode [ 674.636711][T13055] device macsec0 left promiscuous mode [ 674.642678][T13055] device tun0 left promiscuous mode [ 674.648382][T13055] device erspan1 left promiscuous mode [ 674.763399][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=4041, bcdDevice=40.25 [ 674.772488][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.782524][ T42] usb 1-1: Product: syz [ 674.791398][ T30] audit: type=1400 audit(1773742900.966:1607): avc: denied { create } for pid=13089 comm="syz.3.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 674.811222][ T42] usb 1-1: Manufacturer: syz [ 674.826414][ T42] usb 1-1: SerialNumber: syz [ 674.832729][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4242'. [ 674.973334][ T1576] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 674.978748][T13101] tipc: Started in network mode [ 674.986751][T13101] tipc: Node identity b2f805648496, cluster identity 4711 [ 674.994093][T13101] tipc: Enabled bearer , priority 0 [ 675.002123][T13101] device syzkaller0 entered promiscuous mode [ 675.009733][T13100] tipc: Resetting bearer [ 675.016861][T13100] tipc: Disabling bearer [ 675.066516][T13016] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.077258][T13016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.112257][ T30] audit: type=1400 audit(1773742901.286:1608): avc: denied { create } for pid=13106 comm="syz.8.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 675.125042][ T42] usb 1-1: USB disconnect, device number 54 [ 675.149921][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4249'. [ 675.161716][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4249'. [ 675.213371][ T1576] usb 8-1: Using ep0 maxpacket: 16 [ 675.333543][ T1576] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.345049][ T1576] usb 8-1: config 0 interface 0 has no altsetting 0 [ 675.351639][ T1576] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 675.360802][ T1576] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.369556][ T1576] usb 8-1: config 0 descriptor?? [ 675.614301][T13087] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.623405][T13087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.633764][T13127] tipc: Enabled bearer , priority 0 [ 675.641290][T13127] device syzkaller0 entered promiscuous mode [ 675.649230][T13126] tipc: Resetting bearer [ 675.656764][T13126] tipc: Disabling bearer [ 675.813778][T13153] device syzkaller0 entered promiscuous mode [ 675.836726][T13158] device lo left promiscuous mode [ 675.841958][T13158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.884602][ T1576] hid-generic 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 676.095055][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4287'. [ 676.135822][T13200] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.149180][T13200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.220895][ T30] audit: type=1400 audit(1773742902.396:1609): avc: denied { getopt } for pid=13209 comm="syz.4.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 676.287266][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4300'. [ 676.300435][T13225] tipc: Enabled bearer , priority 0 [ 676.307445][T13225] device syzkaller0 entered promiscuous mode [ 676.316682][T13224] tipc: Resetting bearer [ 676.324900][T13224] tipc: Disabling bearer [ 676.398459][ T30] audit: type=1400 audit(1773742902.576:1610): avc: denied { create } for pid=13209 comm="syz.4.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 676.425752][T13087] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.434931][T13087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.445969][T13087] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.453547][T13087] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.464484][ T1576] usb 8-1: USB disconnect, device number 23 [ 676.545544][T13252] tipc: Enabled bearer , priority 0 [ 676.552871][T13252] device syzkaller0 entered promiscuous mode [ 676.565460][T13252] tipc: Resetting bearer [ 676.571761][T13251] tipc: Resetting bearer [ 676.581942][T13251] tipc: Disabling bearer [ 676.601373][T13260] tipc: Enabled bearer , priority 0 [ 676.614677][T13260] device syzkaller0 entered promiscuous mode [ 676.622294][T13259] tipc: Resetting bearer [ 676.629673][T13259] tipc: Disabling bearer [ 676.805952][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4333'. [ 676.825220][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4333'. [ 676.834523][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4333'. [ 676.843447][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4333'. [ 676.853110][ T30] audit: type=1400 audit(1773742903.036:1611): avc: denied { create } for pid=13297 comm="syz.3.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 676.874014][ T30] audit: type=1400 audit(1773742903.036:1612): avc: denied { getopt } for pid=13297 comm="syz.3.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 676.906267][T13301] tipc: Enabled bearer , priority 0 [ 676.913190][T13301] device syzkaller0 entered promiscuous mode [ 676.920707][T13300] tipc: Resetting bearer [ 676.927533][T13300] tipc: Disabling bearer [ 676.948177][T13304] xt_hashlimit: size too large, truncated to 1048576 [ 677.039928][ T30] audit: type=1400 audit(1773742903.216:1613): avc: denied { getopt } for pid=13309 comm="syz.8.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 677.410033][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 677.491240][T13366] tipc: Enabled bearer , priority 0 [ 677.499494][T13366] tipc: Resetting bearer [ 677.506172][T13365] tipc: Disabling bearer [ 677.573689][ T1524] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 677.656570][T13382] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 677.800329][T13393] tipc: Enabled bearer , priority 0 [ 677.810985][T13393] tipc: Resetting bearer [ 677.816857][ T1524] usb 8-1: Using ep0 maxpacket: 16 [ 677.823555][T13392] tipc: Disabling bearer [ 677.943744][ T1524] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.955156][ T1524] usb 8-1: config 0 interface 0 has no altsetting 0 [ 677.961767][ T1524] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 677.970971][ T1524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.979849][ T1524] usb 8-1: config 0 descriptor?? [ 678.224590][T13335] UDC core: couldn't find an available UDC or it's busy: -16 [ 678.232023][T13335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.490481][T13424] netlink: 'syz.0.4385': attribute type 13 has an invalid length. [ 678.536498][ T1524] hid-generic 0003:1E71:2009.0037: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 678.545364][ T30] audit: type=1400 audit(1773742904.716:1614): avc: denied { nlmsg_read } for pid=13433 comm="syz.0.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 678.789071][T13451] UDC core: couldn't find an available UDC or it's busy: -16 [ 678.796682][T13451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.986119][T13456] netlink: 'syz.3.4398': attribute type 13 has an invalid length. [ 679.055189][T13335] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.062724][T13335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.063812][ T42] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 679.071132][T13335] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.085719][T13335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.114254][ T1497] usb 8-1: USB disconnect, device number 24 [ 679.323849][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 679.448386][ T42] usb 1-1: config 8 has an invalid interface number: 128 but max is 0 [ 679.456899][ T42] usb 1-1: config 8 has no interface number 0 [ 679.463015][ T42] usb 1-1: config 8 interface 128 has no altsetting 0 [ 679.714216][ T42] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 679.725449][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.733514][ T42] usb 1-1: Product: syz [ 679.737742][ T42] usb 1-1: Manufacturer: syz [ 679.742348][ T42] usb 1-1: SerialNumber: syz [ 679.993943][ T1497] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 680.013960][ T6508] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 680.075324][ T42] usb 1-1: USB disconnect, device number 55 [ 680.254292][ T6508] usb 9-1: Using ep0 maxpacket: 32 [ 680.374023][ T1497] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.384930][ T1497] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.443986][ T6508] usb 9-1: unable to get BOS descriptor or descriptor too short [ 680.449859][T13499] __nla_validate_parse: 8 callbacks suppressed [ 680.449875][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4417'. [ 680.466827][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4417'. [ 680.475924][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4417'. [ 680.475935][ T1497] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 680.494289][ T1497] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 680.502324][ T1497] usb 8-1: Manufacturer: syz [ 680.508935][ T1497] usb 8-1: config 0 descriptor?? [ 680.534059][ T6508] usb 9-1: config 1 has an invalid interface number: 170 but max is 0 [ 680.542482][ T6508] usb 9-1: config 1 has no interface number 0 [ 680.548784][ T6508] usb 9-1: config 1 interface 170 has no altsetting 0 [ 680.714082][ T6508] usb 9-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 680.727229][ T6508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.735442][ T6508] usb 9-1: Product: syz [ 680.739613][ T6508] usb 9-1: Manufacturer: syz [ 680.744335][ T6508] usb 9-1: SerialNumber: syz [ 680.876157][T13514] tipc: Enabling of bearer rejected, failed to enable media [ 681.140283][ T302] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 681.175009][ T6508] usb 9-1: USB disconnect, device number 46 [ 681.388018][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 681.475795][ T1497] input: syz Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input18 [ 681.489608][ T1497] input: syz Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input19 [ 681.502737][ T1497] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.7-1/input0 [ 681.514125][ T302] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.548707][ T302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 681.557471][ T302] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 681.566834][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.596893][ T302] usb 5-1: config 0 descriptor?? [ 681.681968][ T42] usb 8-1: USB disconnect, device number 25 [ 681.686002][ T30] audit: type=1400 audit(1773742907.865:1615): avc: denied { name_bind } for pid=13543 comm="syz.0.4434" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 681.764186][ T30] audit: type=1400 audit(1773742907.885:1616): avc: denied { node_bind } for pid=13543 comm="syz.0.4434" saddr=fe80::bb src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 681.835335][T13510] UDC core: couldn't find an available UDC or it's busy: -16 [ 681.842796][T13510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 681.918006][ T30] audit: type=1400 audit(1773742908.095:1617): avc: denied { write } for pid=13553 comm="syz.8.4438" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 681.940474][ T30] audit: type=1400 audit(1773742908.095:1618): avc: denied { open } for pid=13553 comm="syz.8.4438" path="/463/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 681.973802][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4439'. [ 681.982860][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4439'. [ 681.992100][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4439'. [ 682.024713][T13559] device syzkaller1 entered promiscuous mode [ 682.085483][ T302] hid-generic 0003:1E71:2009.0039: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 682.318121][T13571] tipc: Enabling of bearer rejected, failed to enable media [ 682.334422][ T1497] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 682.342470][T13574] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.350505][T13574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.560416][T13510] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.568283][T13510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.581966][T13510] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.596001][T13510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.616468][ T1524] usb 5-1: USB disconnect, device number 50 [ 682.724256][ T1497] usb 9-1: Using ep0 maxpacket: 32 [ 682.797436][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4451'. [ 682.806664][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4451'. [ 682.815645][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4451'. [ 682.854299][ T1497] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.034311][ T1497] usb 9-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 683.043396][ T1497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.051414][ T1497] usb 9-1: Product: syz [ 683.055603][ T1497] usb 9-1: Manufacturer: syz [ 683.060196][ T1497] usb 9-1: SerialNumber: syz [ 683.065692][ T1497] usb 9-1: config 0 descriptor?? [ 683.094250][ T42] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 683.209990][T13601] tipc: Enabling of bearer rejected, failed to enable media [ 683.285027][T13606] mmap: syz.7.4455 (13606) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 683.344259][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 683.464333][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.475295][ T42] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.484470][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.493001][ T42] usb 1-1: config 0 descriptor?? [ 684.192982][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4463'. [ 684.244239][ T42] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 684.484243][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 684.544307][ T6508] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 684.644449][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 684.784272][ T6508] usb 8-1: Using ep0 maxpacket: 16 [ 684.884386][ T42] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.893489][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.901510][ T42] usb 5-1: Product: syz [ 684.905749][ T6508] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.916631][ T42] usb 5-1: Manufacturer: syz [ 684.921210][ T42] usb 5-1: SerialNumber: syz [ 684.925806][ T6508] usb 8-1: config 0 interface 0 has no altsetting 0 [ 684.932406][ T6508] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 684.941751][ T6508] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.950686][ T6508] usb 8-1: config 0 descriptor?? [ 685.016313][T13634] tipc: Enabling of bearer rejected, failed to enable media [ 685.072304][ T1497] usb 9-1: USB disconnect, device number 47 [ 685.105030][ T6829] device syz_tun left promiscuous mode [ 685.110643][ T6829] bridge0: port 3(syz_tun) entered disabled state [ 685.149246][ T326] tipc: Left network mode [ 685.230438][T13630] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.237986][T13630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.260679][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.267810][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.275418][T13642] device bridge_slave_0 entered promiscuous mode [ 685.283138][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.290299][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.297844][T13642] device bridge_slave_1 entered promiscuous mode [ 685.340619][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.347666][T13642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.354947][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.361955][T13642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.369439][ T42] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 685.386048][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.393624][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.400845][ T42] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 685.406698][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.415829][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.424085][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.431131][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.439415][ T42] usb 5-1: USB disconnect, device number 51 [ 685.447519][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.456140][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.463184][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.466773][ T6508] hid-generic 0003:1E71:2009.003A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 685.482742][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.495843][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.510479][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.521918][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.530079][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.537696][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.547994][T13642] device veth0_vlan entered promiscuous mode [ 685.558132][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.567076][T13642] device veth1_macvtap entered promiscuous mode [ 685.576426][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.587095][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.685439][ T326] device bridge_slave_1 left promiscuous mode [ 685.691649][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.699223][ T326] device bridge_slave_0 left promiscuous mode [ 685.705430][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.718734][T13652] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.726703][T13652] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.843151][ T1524] usb 1-1: USB disconnect, device number 56 [ 685.887121][T13656] __nla_validate_parse: 2 callbacks suppressed [ 685.887138][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4475'. [ 685.902435][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4475'. [ 685.911401][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4475'. [ 685.934535][T13662] tipc: Started in network mode [ 685.939440][T13662] tipc: Node identity 4a88de9c4f9e, cluster identity 4711 [ 685.946669][T13662] tipc: Enabled bearer , priority 0 [ 685.959176][T13662] device syzkaller0 entered promiscuous mode [ 685.967680][T13662] tipc: Resetting bearer [ 685.974050][T13661] tipc: Resetting bearer [ 685.980949][T13661] tipc: Disabling bearer [ 685.987125][T13630] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.994977][T13630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.005730][T13630] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.013121][T13630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.024460][ T302] usb 8-1: USB disconnect, device number 26 [ 686.454253][ T1576] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 686.613501][T13692] ================================================================== [ 686.621678][T13692] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 686.629887][T13692] Read of size 8 at addr ffff888116aec0c0 by task syz.0.4489/13692 [ 686.637754][T13692] [ 686.640055][T13692] CPU: 0 PID: 13692 Comm: syz.0.4489 Tainted: G W syzkaller #0 [ 686.648880][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.658930][T13692] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 686.662190][T13692] [ 686.665116][T13692] __dump_stack+0x21/0x30 [ 686.669516][T13692] dump_stack_lvl+0x110/0x170 [ 686.674200][T13692] ? show_regs_print_info+0x20/0x20 [ 686.679401][T13692] ? load_image+0x3e0/0x3e0 [ 686.683903][T13692] print_address_description+0x7f/0x2c0 [ 686.689449][T13692] ? tc_setup_flow_action+0x870/0x3240 [ 686.694303][ T1576] usb 10-1: Using ep0 maxpacket: 32 [ 686.694900][T13692] kasan_report+0xf1/0x140 [ 686.694924][T13692] ? tc_setup_flow_action+0x870/0x3240 [ 686.710009][T13692] __asan_report_load8_noabort+0x14/0x20 [ 686.715640][T13692] tc_setup_flow_action+0x870/0x3240 [ 686.720926][T13692] mall_replace_hw_filter+0x2cc/0x8b0 [ 686.724771][ T30] audit: type=1400 audit(1773742912.845:1619): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14824]" dev="pipefs" ino=14824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 686.726360][T13692] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 686.749998][ T1576] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 686.755581][T13692] ? mall_set_parms+0x520/0x520 [ 686.755608][T13692] ? tcf_exts_destroy+0xb0/0xb0 [ 686.755624][T13692] ? pcpu_alloc+0x1170/0x16e0 [ 686.777709][T13692] ? mall_set_parms+0x1e8/0x520 [ 686.782564][T13692] mall_change+0x544/0x760 [ 686.786983][T13692] ? __kasan_check_write+0x14/0x20 [ 686.792099][T13692] ? mall_get+0xa0/0xa0 [ 686.796254][T13692] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 686.802151][T13692] tc_new_tfilter+0x12e5/0x18e0 [ 686.807004][T13692] ? tcf_gate_entry_destructor+0x20/0x20 [ 686.812638][T13692] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 686.818461][T13692] ? security_capable+0x87/0xb0 [ 686.823309][T13692] ? ns_capable+0x8c/0xf0 [ 686.827704][T13692] ? netlink_net_capable+0x125/0x160 [ 686.832990][T13692] ? tcf_gate_entry_destructor+0x20/0x20 [ 686.838619][T13692] rtnetlink_rcv_msg+0x871/0xce0 [ 686.843650][T13692] ? rtnetlink_bind+0x80/0x80 [ 686.844310][ T1576] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 686.848325][T13692] ? avc_has_perm_noaudit+0x391/0x490 [ 686.861708][T13692] ? memcpy+0x56/0x70 [ 686.865685][T13692] ? avc_has_perm_noaudit+0x30b/0x490 [ 686.871053][T13692] ? arch_stack_walk+0xee/0x140 [ 686.875904][T13692] ? avc_denied+0x1b0/0x1b0 [ 686.879287][ T1576] usb 10-1: config 0 has no interface number 0 [ 686.880402][T13692] ? stack_trace_save+0xa6/0xf0 [ 686.891355][T13692] ? avc_has_perm+0x163/0x250 [ 686.896016][T13692] ? avc_has_perm_noaudit+0x490/0x490 [ 686.901370][T13692] ? x64_sys_call+0x4b/0x9a0 [ 686.905941][T13692] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 686.911361][T13692] netlink_rcv_skb+0x1f5/0x440 [ 686.916111][T13692] ? rtnetlink_bind+0x80/0x80 [ 686.920769][T13692] ? netlink_ack+0xb50/0xb50 [ 686.925347][T13692] ? __netlink_lookup+0x387/0x3b0 [ 686.930349][T13692] rtnetlink_rcv+0x1c/0x20 [ 686.934746][T13692] netlink_unicast+0x876/0xa40 [ 686.939489][T13692] netlink_sendmsg+0x879/0xb80 [ 686.944233][T13692] ? netlink_getsockopt+0x530/0x530 [ 686.949411][T13692] ? do_futex+0xde8/0x2800 [ 686.953881][T13692] ? security_socket_sendmsg+0x82/0xa0 [ 686.959320][T13692] ? netlink_getsockopt+0x530/0x530 [ 686.964499][T13692] ____sys_sendmsg+0x5b7/0x8f0 [ 686.969321][T13692] ? __sys_sendmsg_sock+0x40/0x40 [ 686.974327][T13692] ? import_iovec+0x7c/0xb0 [ 686.978820][T13692] ___sys_sendmsg+0x236/0x2e0 [ 686.983479][T13692] ? __sys_sendmsg+0x280/0x280 [ 686.988225][T13692] ? sock_show_fdinfo+0xa0/0xa0 [ 686.993056][T13692] ? __fdget+0x1a1/0x230 [ 686.997297][T13692] __x64_sys_sendmsg+0x206/0x2f0 [ 687.002217][T13692] ? ___sys_sendmsg+0x2e0/0x2e0 [ 687.007049][T13692] ? __kasan_check_write+0x14/0x20 [ 687.012141][T13692] ? switch_fpu_return+0x15d/0x2c0 [ 687.017232][T13692] x64_sys_call+0x4b/0x9a0 [ 687.021630][T13692] do_syscall_64+0x4c/0xa0 [ 687.026030][T13692] ? clear_bhb_loop+0x50/0xa0 [ 687.030685][T13692] ? clear_bhb_loop+0x50/0xa0 [ 687.035346][T13692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.041218][T13692] RIP: 0033:0x7f57836a1799 [ 687.045616][T13692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.065198][T13692] RSP: 002b:00007f57820fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.073588][T13692] RAX: ffffffffffffffda RBX: 00007f578391afa0 RCX: 00007f57836a1799 [ 687.081542][T13692] RDX: 0000000000004040 RSI: 0000200000000580 RDI: 0000000000000009 [ 687.089495][T13692] RBP: 00007f5783737c99 R08: 0000000000000000 R09: 0000000000000000 [ 687.097447][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.105394][T13692] R13: 00007f578391b038 R14: 00007f578391afa0 R15: 00007ffcb83baf88 [ 687.113345][T13692] [ 687.116340][T13692] [ 687.118642][T13692] Allocated by task 13590: [ 687.123031][T13692] __kasan_kmalloc+0xda/0x110 [ 687.127691][T13692] __kmalloc+0x13d/0x2c0 [ 687.131911][T13692] tcf_idr_create+0x5f/0x790 [ 687.136476][T13692] tcf_idr_create_from_flags+0x61/0x70 [ 687.141912][T13692] tcf_gact_init+0x342/0x570 [ 687.146478][T13692] tcf_action_init_1+0x3ff/0x6b0 [ 687.151390][T13692] tcf_action_init+0x233/0x7a0 [ 687.156127][T13692] tc_ctl_action+0x411/0xb20 [ 687.160698][T13692] rtnetlink_rcv_msg+0xa4b/0xce0 [ 687.165616][T13692] netlink_rcv_skb+0x1f5/0x440 [ 687.170355][T13692] rtnetlink_rcv+0x1c/0x20 [ 687.174751][T13692] netlink_unicast+0x876/0xa40 [ 687.179489][T13692] netlink_sendmsg+0x879/0xb80 [ 687.184226][T13692] ____sys_sendmsg+0x5b7/0x8f0 [ 687.188968][T13692] ___sys_sendmsg+0x236/0x2e0 [ 687.193621][T13692] __x64_sys_sendmsg+0x206/0x2f0 [ 687.198538][T13692] x64_sys_call+0x4b/0x9a0 [ 687.202930][T13692] do_syscall_64+0x4c/0xa0 [ 687.207327][T13692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.213198][T13692] [ 687.215496][T13692] Last potentially related work creation: [ 687.221180][T13692] kasan_save_stack+0x3a/0x60 [ 687.225833][T13692] __kasan_record_aux_stack+0xd2/0x100 [ 687.231267][T13692] kasan_record_aux_stack_noalloc+0xb/0x10 [ 687.237049][T13692] call_rcu+0x10b/0xf80 [ 687.241251][T13692] neigh_parms_release+0x1dd/0x220 [ 687.246339][T13692] inetdev_event+0x82e/0x10a0 [ 687.251015][T13692] raw_notifier_call_chain+0x90/0x100 [ 687.256421][T13692] unregister_netdevice_many+0x10a1/0x1aa0 [ 687.262224][T13692] default_device_exit_batch+0x35e/0x3c0 [ 687.267853][T13692] cleanup_net+0x60a/0xae0 [ 687.272258][T13692] process_one_work+0x6be/0xba0 [ 687.277151][T13692] worker_thread+0xa59/0x1200 [ 687.281808][T13692] kthread+0x411/0x500 [ 687.285857][T13692] ret_from_fork+0x1f/0x30 [ 687.290252][T13692] [ 687.292555][T13692] The buggy address belongs to the object at ffff888116aec000 [ 687.292555][T13692] which belongs to the cache kmalloc-192 of size 192 [ 687.306589][T13692] The buggy address is located 0 bytes to the right of [ 687.306589][T13692] 192-byte region [ffff888116aec000, ffff888116aec0c0) [ 687.320187][T13692] The buggy address belongs to the page: [ 687.325810][T13692] page:ffffea00045abb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116aec [ 687.336369][T13692] flags: 0x4000000000000200(slab|zone=1) [ 687.342005][T13692] raw: 4000000000000200 ffffea00047a4b00 0000000200000002 ffff888100042c00 [ 687.350574][T13692] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 687.359132][T13692] page dumped because: kasan: bad access detected [ 687.365518][T13692] page_owner tracks the page as allocated [ 687.371209][T13692] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 114, ts 4345443431, free_ts 0 [ 687.386204][T13692] post_alloc_hook+0x192/0x1b0 [ 687.390978][T13692] prep_new_page+0x1c/0x110 [ 687.395461][T13692] get_page_from_freelist+0x2d3a/0x2dc0 [ 687.400987][T13692] __alloc_pages+0x1a2/0x460 [ 687.405562][T13692] new_slab+0xa1/0x4d0 [ 687.409613][T13692] ___slab_alloc+0x381/0x810 [ 687.414195][T13692] __slab_alloc+0x49/0x90 [ 687.418515][T13692] kmem_cache_alloc_trace+0x146/0x270 [ 687.423872][T13692] kernfs_fop_open+0x343/0xb30 [ 687.428706][T13692] do_dentry_open+0x834/0x1010 [ 687.433455][T13692] vfs_open+0x73/0x80 [ 687.437415][T13692] path_openat+0x26a6/0x2f20 [ 687.441994][T13692] do_filp_open+0x1e2/0x410 [ 687.446498][T13692] do_sys_openat2+0x15e/0x7f0 [ 687.451180][T13692] __x64_sys_openat+0x136/0x160 [ 687.456013][T13692] x64_sys_call+0x219/0x9a0 [ 687.460502][T13692] page_owner free stack trace missing [ 687.465843][T13692] [ 687.468146][T13692] Memory state around the buggy address: [ 687.473754][T13692] ffff888116aebf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.481795][T13692] ffff888116aec000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.489838][T13692] >ffff888116aec080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 687.497875][T13692] ^ [ 687.504003][T13692] ffff888116aec100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 687.512045][T13692] ffff888116aec180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 687.520105][T13692] ================================================================== [ 687.528147][T13692] Disabling lock debugging due to kernel taint [ 687.568524][ T30] audit: type=1400 audit(1773742913.745:1620): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 687.597282][ T1576] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.608920][ T1576] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 687.619853][T13690] device syz_tun left promiscuous mode [ 687.626420][ T30] audit: type=1400 audit(1773742913.745:1621): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.647782][T13690] bridge0: port 3(syz_tun) entered disabled state [ 687.655838][ T30] audit: type=1400 audit(1773742913.745:1622): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.677329][ T30] audit: type=1400 audit(1773742913.745:1623): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.694294][ T302] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 687.698293][ T30] audit: type=1400 audit(1773742913.745:1624): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.726167][ T30] audit: type=1400 audit(1773742913.745:1625): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.749920][ T30] audit: type=1400 audit(1773742913.745:1626): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 687.776715][T13692] bridge0: port 1(syz_tun) entered disabled state [ 687.785997][T13685] device syz_tun left promiscuous mode [ 687.791457][T13685] bridge0: port 3(syz_tun) entered disabled state [ 687.800454][T13677] bridge0: port 3(syz_tun) entered disabled state [ 687.818731][ T326] tipc: Left network mode [ 687.854332][ T1576] usb 10-1: unable to read config index 1 descriptor/start: -71 [ 687.861990][ T1576] usb 10-1: can't read configurations, error -71 [ 688.794930][ T326] device bridge_slave_1 left promiscuous mode [ 688.801036][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.808624][ T326] device bridge_slave_0 left promiscuous mode [ 688.814786][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.822543][ T326] device veth1_macvtap left promiscuous mode [ 688.828571][ T326] device veth0_vlan left promiscuous mode [ 689.365682][ T326] tipc: Left network mode [ 690.325554][ T326] device bridge_slave_1 left promiscuous mode [ 690.331665][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.339173][ T326] device bridge_slave_0 left promiscuous mode [ 690.345303][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.353342][ T326] device veth1_macvtap left promiscuous mode [ 690.359382][ T326] device veth0_vlan left promiscuous mode