last executing test programs: 21m40.749303781s ago: executing program 32 (id=1595): r0 = syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_get_params_sqe={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x78, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 21m34.483144788s ago: executing program 33 (id=1742): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2, 0x191) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 21m30.723035864s ago: executing program 34 (id=1814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) shutdown(r0, 0x1) 21m18.301739242s ago: executing program 35 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 21m18.253814279s ago: executing program 6 (id=2072): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 21m18.164980941s ago: executing program 6 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="010102007f"], 0x38}}, 0x0) 21m18.104893812s ago: executing program 6 (id=2074): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000440)) 21m18.044032597s ago: executing program 6 (id=2075): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m17.974436127s ago: executing program 6 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x9}, {0x0, 0xfff1}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000891}, 0x4041080) 21m17.70546451s ago: executing program 6 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB=' \x00', @ANYRES32=r1, @ANYBLOB="010102007f"], 0x38}}, 0x0) 21m17.614709531s ago: executing program 36 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB=' \x00', @ANYRES32=r1, @ANYBLOB="010102007f"], 0x38}}, 0x0) 21m17.415187092s ago: executing program 0 (id=2083): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x8f1, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 21m17.414516686s ago: executing program 0 (id=2084): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)='\v', 0x1}], 0x1) 21m17.273471407s ago: executing program 0 (id=2085): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4044015, &(0x7f0000000000)={0x11, 0x0, r1, 0x0, 0xfd, 0x0}, 0x14) 21m17.27320896s ago: executing program 0 (id=2086): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m17.184601341s ago: executing program 0 (id=2088): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0xc, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x132}}}, 0x0) 21m16.745298104s ago: executing program 0 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 21m16.65168501s ago: executing program 37 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 21m9.275442596s ago: executing program 8 (id=2238): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) unshare(0x400) openat$ppp(0xffffffffffffff9c, 0x0, 0x280303, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x80000) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21m9.213392853s ago: executing program 7 (id=2240): io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x60000, 0x3800, 0x4}) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x51, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7ae, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xfffffff8, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 21m8.494745399s ago: executing program 8 (id=2256): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x4044015, &(0x7f0000000000)={0x11, 0x0, r1, 0x0, 0xfd, 0x0}, 0x14) 21m8.445355518s ago: executing program 8 (id=2258): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) close(r1) 21m8.315112566s ago: executing program 7 (id=2260): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002"], 0x44) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) tkill(r5, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 21m8.314900517s ago: executing program 8 (id=2261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m8.253700754s ago: executing program 8 (id=2262): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x9}, {0x0, 0xfff1}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000891}, 0x4041080) 21m7.922522472s ago: executing program 4 (id=2263): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) socket(0x2b, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 21m7.922284914s ago: executing program 8 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) unshare(0x400) openat$ppp(0xffffffffffffff9c, 0x0, 0x280303, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x80000) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21m7.225732264s ago: executing program 38 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) unshare(0x400) openat$ppp(0xffffffffffffff9c, 0x0, 0x280303, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x80000) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21m7.20226225s ago: executing program 7 (id=2267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 21m7.201922492s ago: executing program 4 (id=2268): io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x60000, 0x3800, 0x4}) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x51, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7ae, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xfffffff8, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 21m7.133144461s ago: executing program 7 (id=2270): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m7.055396601s ago: executing program 7 (id=2271): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 21m6.809503933s ago: executing program 7 (id=2272): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 21m6.802734781s ago: executing program 39 (id=2272): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 21m5.953821477s ago: executing program 4 (id=2275): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r8, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 21m4.962567987s ago: executing program 4 (id=2278): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m4.850579578s ago: executing program 4 (id=2279): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 21m4.445322922s ago: executing program 4 (id=2280): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) r4 = syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x0, 0x0, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x1, 0x0, 0x2de, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x405027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r7, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r5, '\x00', {0x3, 0xb57, 0x100104, 0x0}}, &(0x7f0000001fc0)) 21m4.310504881s ago: executing program 40 (id=2280): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) r4 = syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x0, 0x0, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x1, 0x0, 0x2de, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x405027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r7, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r5, '\x00', {0x3, 0xb57, 0x100104, 0x0}}, &(0x7f0000001fc0)) 21m4.163603644s ago: executing program 9 (id=2282): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(0x0, 0xb4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r6, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000040)) lseek(r0, 0x851, 0x1) 21m3.202080148s ago: executing program 9 (id=2283): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="0148a215030000", 0x7, 0x4044015, &(0x7f0000000000)={0x11, 0x0, r1, 0x0, 0xfd, 0x0}, 0x14) 21m3.134694056s ago: executing program 9 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 21m3.075311358s ago: executing program 9 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 21m2.998986592s ago: executing program 9 (id=2286): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 21m2.765229052s ago: executing program 9 (id=2287): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 21m2.65211375s ago: executing program 41 (id=2287): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 5.869690756s ago: executing program 5 (id=6146): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5ef, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000002680)="e72caffb54bed62c", 0x8) 3.849397044s ago: executing program 3 (id=6161): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xfc00, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 3.728671112s ago: executing program 3 (id=6163): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(0x0, 0xa0) 3.701187516s ago: executing program 3 (id=6166): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='prev_pid == 9', 0xd) 3.607500726s ago: executing program 3 (id=6167): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.606092866s ago: executing program 3 (id=6170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x0, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xfffffffffffffdff, 0x2000001, 0x0, 0x8, 0x1, 0x101, 0x100, 0x4d], 0x0, 0x200100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.284537446s ago: executing program 2 (id=6175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000000010103fffffff10000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.277020826s ago: executing program 2 (id=6177): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(0x0, 0xa0) 3.229589633s ago: executing program 2 (id=6180): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.157395934s ago: executing program 2 (id=6182): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x2, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.860668785s ago: executing program 5 (id=6185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xfa, 0x2, 0xf, 0x6, 0x8001, 0x9}, {0x4, 0x1, 0x96, 0x4, 0x9, 0xa}, 0x9c51, 0x0, 0x187}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.809289028s ago: executing program 5 (id=6188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x7e34, 0x40, 0x5, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 2.737649791s ago: executing program 5 (id=6191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2.7373314s ago: executing program 5 (id=6192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.649672543s ago: executing program 5 (id=6194): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r0) 2.649379956s ago: executing program 1 (id=6195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 2.610097666s ago: executing program 1 (id=6196): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xfc00, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 2.605582703s ago: executing program 3 (id=6197): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r0) 2.549054619s ago: executing program 1 (id=6198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.469182329s ago: executing program 1 (id=6199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a090400000000000000000200000228000480240001800e000100696d6d65646961746500000010fd"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.465896148s ago: executing program 1 (id=6207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x1ac, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x17c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0x100, 0x3, [@m_sample={0x40, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "09dc9faff8587ce77b2e042788"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 170.067697ms ago: executing program 2 (id=6200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='fd/4\x00') 154.77587ms ago: executing program 1 (id=6209): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='fi', 0x2) 0s ago: executing program 2 (id=6201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) kernel console output (not intermixed with test programs): [ 1552.205533][T13348] appleir 0003:05AC:8243.003D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1552.243872][T19721] usb 7-1: USB disconnect, device number 3 [ 1552.298970][T25767] fido_id[25767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 1552.306546][T25761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5236'. [ 1552.317122][T19828] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 1552.329166][T19828] appleir 0003:05AC:8243.003E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1552.559775][T21052] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1552.584125][ T65] usb 8-1: USB disconnect, device number 4 [ 1552.642378][T25772] syzkaller0: entered promiscuous mode [ 1552.642455][T25772] syzkaller0: entered allmulticast mode [ 1552.712730][T21052] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1552.714220][T21052] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1552.714266][T21052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.714294][T21052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.714318][T21052] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1552.715511][T21052] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1552.715538][T21052] usb 10-1: Manufacturer: syz [ 1552.718244][T21052] usb 10-1: config 0 descriptor?? [ 1552.863333][T25776] syzkaller0: entered promiscuous mode [ 1552.863553][T25776] syzkaller0: entered allmulticast mode [ 1552.885746][T25776] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1552.889084][T25776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1553.206187][T21052] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 1553.227971][T21052] appleir 0003:05AC:8243.003F: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1553.464823][T20237] usb 10-1: USB disconnect, device number 15 [ 1554.609705][T20237] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1554.932134][T20237] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1555.024616][T20237] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1555.024678][T20237] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.024737][T20237] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.024750][T20237] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1555.038010][T25799] syzkaller0: entered promiscuous mode [ 1555.038031][T25799] syzkaller0: entered allmulticast mode [ 1555.051039][T25799] __nla_validate_parse: 2 callbacks suppressed [ 1555.051145][T25799] netlink: 2724 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1555.051282][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1555.051298][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1555.077938][T20237] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1555.078020][T20237] usb 10-1: Manufacturer: syz [ 1555.081534][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 1555.081547][ T43] audit: type=1800 audit(1788579636.414:5558): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=504403 res=0 errno=0 [ 1555.083663][T20237] usb 10-1: config 0 descriptor?? [ 1555.085819][ T43] audit: type=1800 audit(1788579636.414:5559): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=504433 res=0 errno=0 [ 1555.085848][ T43] audit: type=1800 audit(1788579636.414:5560): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=504410 res=0 errno=0 [ 1555.085869][ T43] audit: type=1800 audit(1788579636.414:5561): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=504411 res=0 errno=0 [ 1555.153890][T25801] syzkaller0: entered promiscuous mode [ 1555.153959][T25801] syzkaller0: entered allmulticast mode [ 1555.157829][T25801] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1555.157907][T25801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1555.157919][T25801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1555.348608][ T43] audit: type=1800 audit(1788579636.674:5562): pid=25808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5250" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 1555.484329][T25811] syzkaller0: entered promiscuous mode [ 1555.484383][T25811] syzkaller0: entered allmulticast mode [ 1555.502250][T25811] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1555.502495][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1555.502609][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1555.580932][T25789] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1555.591962][T20237] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1556.286470][T20237] appleir 0003:05AC:8243.0040: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1556.287599][ T43] audit: type=1800 audit(1788579637.614:5563): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=504432 res=0 errno=0 [ 1556.287897][T20237] usb 10-1: USB disconnect, device number 16 [ 1556.304585][ T43] audit: type=1800 audit(1788579637.634:5564): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=504412 res=0 errno=0 [ 1556.341274][T25813] fido_id[25813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 1556.619797][T19721] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1556.640312][ T5841] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1556.781993][T19721] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1556.783140][T19721] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1556.783174][T19721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.783193][T19721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.783211][T19721] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1556.784159][T19721] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1556.784178][T19721] usb 8-1: Manufacturer: syz [ 1556.787653][T19721] usb 8-1: config 0 descriptor?? [ 1556.789054][ T43] audit: type=1800 audit(1788579638.114:5565): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=504725 res=0 errno=0 [ 1556.795167][ T43] audit: type=1800 audit(1788579638.134:5566): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=504755 res=0 errno=0 [ 1556.796028][ T43] audit: type=1800 audit(1788579638.134:5567): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=504732 res=0 errno=0 [ 1556.862004][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1556.952341][ T5841] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1556.952402][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.952438][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.952464][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1557.103352][ T5841] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1557.103400][ T5841] usb 6-1: Manufacturer: syz [ 1557.205755][T19721] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 1557.211176][T19721] appleir 0003:05AC:8243.0041: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1557.399860][ T5841] usb 6-1: config 0 descriptor?? [ 1557.476786][T19828] usb 8-1: USB disconnect, device number 5 [ 1557.853067][ T5841] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 1558.502455][T25842] syzkaller0: entered promiscuous mode [ 1558.502576][T25842] syzkaller0: entered allmulticast mode [ 1558.546612][ T5841] appleir 0003:05AC:8243.0042: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1559.221403][ T5841] usb 6-1: USB disconnect, device number 14 [ 1559.679802][T19721] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1559.830578][T19721] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1559.836015][T19721] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1559.841845][T19721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.847523][T19721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.852225][T19721] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1559.860700][T19721] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1559.866756][T19721] usb 10-1: Manufacturer: syz [ 1559.882553][T19721] usb 10-1: config 0 descriptor?? [ 1560.323533][T19721] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 1560.333076][T19721] appleir 0003:05AC:8243.0043: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1560.341591][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 1560.341681][ T43] audit: type=1800 audit(1788579641.674:5594): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=505143 res=0 errno=0 [ 1560.360301][ T43] audit: type=1800 audit(1788579641.694:5595): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=505123 res=0 errno=0 [ 1560.375286][ T43] audit: type=1800 audit(1788579641.704:5596): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505164 res=0 errno=0 [ 1560.390657][ T43] audit: type=1800 audit(1788579641.724:5597): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505182 res=0 errno=0 [ 1560.404118][ T43] audit: type=1800 audit(1788579641.744:5598): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505204 res=0 errno=0 [ 1560.417691][ T43] audit: type=1800 audit(1788579641.754:5599): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505218 res=0 errno=0 [ 1560.491803][ T43] audit: type=1800 audit(1788579641.824:5600): pid=25861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=505184 res=0 errno=0 [ 1560.670159][T20237] usb 10-1: USB disconnect, device number 17 [ 1562.414607][T25881] netlink: 'syz.5.5276': attribute type 10 has an invalid length. [ 1562.663686][T25883] syzkaller0: entered promiscuous mode [ 1562.663821][T25883] syzkaller0: entered allmulticast mode [ 1563.850694][ T43] audit: type=1800 audit(1788579645.174:5601): pid=25890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5270" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 1564.759771][T13348] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1564.950609][T13348] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1564.958919][T13348] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1564.959033][T13348] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.959291][T13348] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.959351][T13348] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1564.983288][T13348] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1564.987118][T13348] usb 10-1: Manufacturer: syz [ 1564.999516][T13348] usb 10-1: config 0 descriptor?? [ 1565.020699][ T43] audit: type=1800 audit(1788579646.344:5602): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505351 res=0 errno=0 [ 1565.036083][T25905] netlink: 'syz.2.5275': attribute type 10 has an invalid length. [ 1565.119879][ T43] audit: type=1800 audit(1788579646.424:5603): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=505381 res=0 errno=0 [ 1565.513555][T13348] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 1565.518524][T13348] appleir 0003:05AC:8243.0044: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1565.528578][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 1565.528658][ T43] audit: type=1800 audit(1788579646.854:5606): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=505380 res=0 errno=0 [ 1565.534323][ T43] audit: type=1800 audit(1788579646.864:5607): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=505360 res=0 errno=0 [ 1565.601701][ T43] audit: type=1800 audit(1788579646.934:5608): pid=24622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505401 res=0 errno=0 [ 1565.635305][ T43] audit: type=1800 audit(1788579646.964:5609): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505419 res=0 errno=0 [ 1565.656225][ T43] audit: type=1800 audit(1788579646.984:5610): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505441 res=0 errno=0 [ 1565.707321][ T43] audit: type=1800 audit(1788579647.034:5611): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505455 res=0 errno=0 [ 1565.873956][T13348] usb 10-1: USB disconnect, device number 18 [ 1566.747405][T25914] netlink: 'syz.2.5278': attribute type 10 has an invalid length. [ 1566.788270][T25906] fido_id[25906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 1566.911596][T25910] netlink: 'syz.3.5277': attribute type 10 has an invalid length. [ 1567.586527][T25917] netlink: 'syz.5.5279': attribute type 10 has an invalid length. [ 1568.427239][T25920] netlink: 'syz.1.5280': attribute type 10 has an invalid length. [ 1569.416763][T25931] netlink: 'syz.1.5284': attribute type 10 has an invalid length. [ 1569.580939][T25934] netlink: 'syz.5.5282': attribute type 10 has an invalid length. [ 1571.278839][T25944] netlink: 'syz.1.5286': attribute type 10 has an invalid length. [ 1572.789157][T25952] netlink: 'syz.5.5287': attribute type 10 has an invalid length. [ 1573.341815][T25957] netlink: 'syz.1.5289': attribute type 10 has an invalid length. [ 1573.497440][T25961] netlink: 'syz.3.5288': attribute type 10 has an invalid length. [ 1573.805129][T25963] netlink: 'syz.2.5290': attribute type 10 has an invalid length. [ 1575.221274][T25965] syzkaller0: entered promiscuous mode [ 1575.223227][T25965] syzkaller0: entered allmulticast mode [ 1575.508213][T25972] netlink: 'syz.5.5292': attribute type 10 has an invalid length. [ 1575.782831][T25978] netlink: 'syz.3.5295': attribute type 10 has an invalid length. [ 1576.318393][T25981] netlink: 'syz.2.5294': attribute type 10 has an invalid length. [ 1577.606816][T25985] netlink: 'syz.1.5296': attribute type 10 has an invalid length. [ 1578.205688][T25992] netlink: 'syz.2.5298': attribute type 10 has an invalid length. [ 1578.986302][T25988] netlink: 'syz.5.5297': attribute type 10 has an invalid length. [ 1580.407681][T25999] syzkaller0: entered promiscuous mode [ 1580.407745][T25999] syzkaller0: entered allmulticast mode [ 1580.667092][T26010] netlink: 'syz.5.5302': attribute type 10 has an invalid length. [ 1582.248011][T26015] netlink: 'syz.3.5305': attribute type 10 has an invalid length. [ 1582.798834][T26025] netlink: 'syz.1.5306': attribute type 10 has an invalid length. [ 1585.133012][T26026] netlink: 'syz.2.5307': attribute type 10 has an invalid length. [ 1585.342786][T26029] netlink: 'syz.3.5308': attribute type 10 has an invalid length. [ 1586.469935][T26036] netlink: 'syz.1.5310': attribute type 10 has an invalid length. [ 1586.575559][T26038] netlink: 'syz.5.5309': attribute type 10 has an invalid length. [ 1586.683457][T26039] syzkaller0: entered promiscuous mode [ 1586.685356][T26039] syzkaller0: entered allmulticast mode [ 1586.991660][T26045] netlink: 'syz.2.5313': attribute type 10 has an invalid length. [ 1587.190127][T26047] netlink: 'syz.3.5312': attribute type 10 has an invalid length. [ 1588.988523][T26058] netlink: 'syz.3.5315': attribute type 10 has an invalid length. [ 1589.151071][T26059] netlink: 'syz.2.5316': attribute type 10 has an invalid length. [ 1590.400789][T26061] netlink: 'syz.1.5317': attribute type 10 has an invalid length. [ 1590.614431][T26066] netlink: 'syz.5.5318': attribute type 10 has an invalid length. [ 1591.662538][T26075] netlink: 'syz.2.5320': attribute type 10 has an invalid length. [ 1591.706276][T26076] netlink: 'syz.3.5319': attribute type 10 has an invalid length. [ 1592.002752][T26079] netlink: 'syz.1.5321': attribute type 10 has an invalid length. [ 1593.852505][T26081] netlink: 'syz.5.5322': attribute type 10 has an invalid length. [ 1594.439564][T26091] netlink: 'syz.2.5323': attribute type 10 has an invalid length. [ 1594.507589][T26092] netlink: 'syz.3.5324': attribute type 10 has an invalid length. [ 1596.589465][T26102] netlink: 'syz.5.5326': attribute type 10 has an invalid length. [ 1597.317982][T26106] netlink: 'syz.2.5327': attribute type 10 has an invalid length. [ 1598.911657][T26115] netlink: 'syz.1.5329': attribute type 10 has an invalid length. [ 1600.160334][T19828] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1600.327097][T26124] netlink: 'syz.2.5330': attribute type 10 has an invalid length. [ 1600.527752][T26127] netlink: 'syz.5.5331': attribute type 10 has an invalid length. [ 1600.711309][T19828] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1600.715398][T19828] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1600.718968][T19828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.730235][T19828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.733519][T19828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1600.738566][T19828] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1600.741544][T19828] usb 6-1: Manufacturer: syz [ 1600.746458][ T43] audit: type=1800 audit(1788579682.084:5612): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505742 res=0 errno=0 [ 1600.754764][ T43] audit: type=1800 audit(1788579682.094:5613): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=505772 res=0 errno=0 [ 1600.760728][ T43] audit: type=1800 audit(1788579682.094:5614): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=505749 res=0 errno=0 [ 1600.761476][ T43] audit: type=1800 audit(1788579682.104:5615): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=505750 res=0 errno=0 [ 1600.762322][ T43] audit: type=1800 audit(1788579682.104:5616): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=505771 res=0 errno=0 [ 1600.763150][ T43] audit: type=1800 audit(1788579682.104:5617): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=505751 res=0 errno=0 [ 1600.789290][T19828] usb 6-1: config 0 descriptor?? [ 1600.796536][ T43] audit: type=1800 audit(1788579682.134:5618): pid=26121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505792 res=0 errno=0 [ 1601.176385][T26131] netlink: 'syz.3.5333': attribute type 10 has an invalid length. [ 1601.312423][T26119] __nla_validate_parse: 3 callbacks suppressed [ 1601.314693][T26119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 1601.473045][T19828] usbhid 6-1:0.0: can't add hid device: -71 [ 1601.483324][T19828] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1601.541187][T19828] usb 6-1: USB disconnect, device number 15 [ 1602.314190][T26135] netlink: 'syz.2.5334': attribute type 10 has an invalid length. [ 1602.390714][T26139] netlink: 'syz.1.5336': attribute type 10 has an invalid length. [ 1602.481323][T26140] netlink: 'syz.5.5335': attribute type 10 has an invalid length. [ 1603.142061][T26144] netlink: 'syz.3.5337': attribute type 10 has an invalid length. [ 1603.831794][T26148] netlink: 'syz.2.5338': attribute type 10 has an invalid length. [ 1606.213884][T26160] netlink: 'syz.3.5341': attribute type 10 has an invalid length. [ 1606.300024][T26156] netlink: 'syz.1.5339': attribute type 10 has an invalid length. [ 1607.181616][T26164] netlink: 'syz.2.5342': attribute type 10 has an invalid length. [ 1607.248832][T26168] netlink: 'syz.5.5343': attribute type 10 has an invalid length. [ 1607.518598][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.518703][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.961296][T26173] netlink: 'syz.3.5344': attribute type 10 has an invalid length. [ 1609.393870][T26181] netlink: 'syz.2.5346': attribute type 10 has an invalid length. [ 1609.443110][T26174] netlink: 'syz.1.5345': attribute type 10 has an invalid length. [ 1609.475974][T26186] netlink: 'syz.5.5347': attribute type 10 has an invalid length. [ 1610.904962][T26195] netlink: 'syz.3.5348': attribute type 10 has an invalid length. [ 1611.148045][ T5841] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1611.206627][ T5841] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1611.439419][ T43] audit: type=1800 audit(1788579692.764:5619): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505844 res=0 errno=0 [ 1611.472853][ T5841] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1612.013282][T26202] netlink: 'syz.5.5351': attribute type 10 has an invalid length. [ 1612.137040][ T5841] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1612.334113][T26191] ceph: No mds server is up or the cluster is laggy [ 1612.415515][T26205] netlink: 'syz.2.5350': attribute type 10 has an invalid length. [ 1613.369145][T26210] netlink: 'syz.3.5352': attribute type 10 has an invalid length. [ 1614.773288][T26215] netlink: 'syz.1.5353': attribute type 10 has an invalid length. [ 1615.356610][T26221] netlink: 'syz.2.5355': attribute type 10 has an invalid length. [ 1615.911003][T26225] netlink: 'syz.3.5356': attribute type 10 has an invalid length. [ 1616.336658][T26228] netlink: 'syz.5.5357': attribute type 10 has an invalid length. [ 1616.761015][T26239] netlink: 'syz.1.5359': attribute type 10 has an invalid length. [ 1617.003191][T26242] netlink: 'syz.3.5360': attribute type 10 has an invalid length. [ 1617.063327][T26243] netlink: 'syz.2.5361': attribute type 10 has an invalid length. [ 1618.086778][T26249] netlink: 'syz.5.5362': attribute type 10 has an invalid length. [ 1619.090515][T26252] netlink: 'syz.3.5363': attribute type 10 has an invalid length. [ 1619.210932][T26255] netlink: 'syz.2.5364': attribute type 10 has an invalid length. [ 1619.698036][T26263] netlink: 'syz.5.5366': attribute type 10 has an invalid length. [ 1621.343213][T26265] netlink: 'syz.2.5367': attribute type 10 has an invalid length. [ 1622.045563][T26278] netlink: 'syz.1.5369': attribute type 10 has an invalid length. [ 1622.100718][T26280] netlink: 'syz.5.5368': attribute type 10 has an invalid length. [ 1622.140533][T26281] netlink: 'syz.3.5370': attribute type 10 has an invalid length. [ 1624.638953][T26288] netlink: 'syz.2.5372': attribute type 10 has an invalid length. [ 1625.086133][T26291] netlink: 'syz.3.5373': attribute type 10 has an invalid length. [ 1625.362113][T26299] netlink: 'syz.1.5374': attribute type 10 has an invalid length. [ 1625.900508][T26305] netlink: 'syz.5.5375': attribute type 10 has an invalid length. [ 1626.096743][T26311] netlink: 'syz.2.5377': attribute type 10 has an invalid length. [ 1627.810661][T26316] netlink: 'syz.1.5378': attribute type 10 has an invalid length. [ 1628.004673][T26322] netlink: 'syz.3.5379': attribute type 10 has an invalid length. [ 1628.055387][T26323] netlink: 'syz.5.5380': attribute type 10 has an invalid length. [ 1629.559752][ T65] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1629.718082][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1629.722140][ T65] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1629.737521][ T65] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1629.741640][ T65] usb 7-1: config 189 has no interface number 0 [ 1629.750453][ T65] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1629.765533][T26336] netlink: 'syz.5.5382': attribute type 10 has an invalid length. [ 1629.777588][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.782632][ T65] usb 7-1: Product: syz [ 1629.787700][ T65] usb 7-1: Manufacturer: syz [ 1629.787861][ T65] usb 7-1: SerialNumber: syz [ 1629.884040][ T43] audit: type=1800 audit(1788579711.214:5620): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505871 res=0 errno=0 [ 1629.894332][T26337] netlink: 'syz.3.5383': attribute type 10 has an invalid length. [ 1629.964598][ T43] audit: type=1800 audit(1788579711.254:5621): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=505903 res=0 errno=0 [ 1629.964980][ T43] audit: type=1800 audit(1788579711.264:5622): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=505878 res=0 errno=0 [ 1629.965187][ T43] audit: type=1800 audit(1788579711.274:5623): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=505879 res=0 errno=0 [ 1630.303936][T26342] netlink: 'syz.1.5384': attribute type 10 has an invalid length. [ 1631.609788][T13421] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1631.702318][ T65] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1631.707617][ T65] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1631.780487][T13421] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1631.788471][T13421] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1631.792107][T13421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.795720][T13421] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.799000][T13421] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1631.804797][T13421] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1631.807510][T13421] usb 8-1: Manufacturer: syz [ 1631.811646][ T43] audit: type=1800 audit(1788579713.144:5624): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=505947 res=0 errno=0 [ 1631.819581][ T43] audit: type=1800 audit(1788579713.144:5625): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=505977 res=0 errno=0 [ 1631.827036][ T43] audit: type=1800 audit(1788579713.154:5626): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=505954 res=0 errno=0 [ 1631.827551][ T43] audit: type=1800 audit(1788579713.154:5627): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=505955 res=0 errno=0 [ 1631.827978][ T43] audit: type=1800 audit(1788579713.154:5628): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=505976 res=0 errno=0 [ 1631.828537][ T43] audit: type=1800 audit(1788579713.154:5629): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=505956 res=0 errno=0 [ 1631.829958][T13421] usb 8-1: config 0 descriptor?? [ 1631.862184][ T65] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1631.862816][ T65] safe_serial 7-1:189.127: safe_serial converter detected [ 1631.862928][ T65] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1631.979866][ T65] usb 7-1: USB disconnect, device number 4 [ 1632.279983][T26352] netlink: 'syz.5.5389': attribute type 10 has an invalid length. [ 1632.349999][T26353] netlink: 'syz.2.5388': attribute type 10 has an invalid length. [ 1632.848257][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1632.929502][T13421] usbhid 8-1:0.0: can't add hid device: -71 [ 1632.932353][T13421] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1632.952924][T13421] usb 8-1: USB disconnect, device number 6 [ 1634.034440][T26355] netlink: 'syz.1.5387': attribute type 10 has an invalid length. [ 1634.209923][T26362] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 1634.443006][T26367] netlink: 'syz.3.5392': attribute type 10 has an invalid length. [ 1636.443393][T26372] netlink: 'syz.1.5393': attribute type 10 has an invalid length. [ 1636.792259][T26377] netlink: 'syz.5.5394': attribute type 10 has an invalid length. [ 1637.572888][T26383] netlink: 'syz.2.5396': attribute type 10 has an invalid length. [ 1638.366366][T26390] netlink: 'syz.1.5406': attribute type 10 has an invalid length. [ 1638.514777][T26387] netlink: 'syz.3.5397': attribute type 10 has an invalid length. [ 1639.079349][T26394] netlink: 'syz.5.5398': attribute type 10 has an invalid length. [ 1639.700935][T13421] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1639.702744][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 1639.702758][ T43] audit: type=1800 audit(1788579721.024:5635): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506071 res=0 errno=0 [ 1639.703339][T13421] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1639.960465][T13421] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1640.122300][T26406] netlink: 'syz.2.5402': attribute type 10 has an invalid length. [ 1640.438492][T26409] netlink: 'syz.1.5401': attribute type 10 has an invalid length. [ 1640.487204][T13421] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1640.789781][T26396] ceph: No mds server is up or the cluster is laggy [ 1641.552008][ T43] audit: type=1800 audit(1788579722.884:5636): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506090 res=0 errno=0 [ 1641.562826][T23735] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1641.568003][T23735] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1641.830141][T23735] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1642.243448][T26423] netlink: 'syz.3.5405': attribute type 10 has an invalid length. [ 1642.340703][T23735] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1642.619861][T26416] ceph: No mds server is up or the cluster is laggy [ 1642.809781][T19856] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1642.961429][T19856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1642.967466][T19856] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1642.971349][T19856] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 1642.974070][T19856] usb 6-1: config 189 has no interface number 0 [ 1642.976452][T19856] usb 6-1: config 189 interface 127 has no altsetting 0 [ 1642.980282][T19856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.983395][T19856] usb 6-1: Product: syz [ 1642.985068][T19856] usb 6-1: Manufacturer: syz [ 1642.985129][T19856] usb 6-1: SerialNumber: syz [ 1643.075333][ T43] audit: type=1800 audit(1788579724.404:5637): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506117 res=0 errno=0 [ 1643.076475][ T43] audit: type=1800 audit(1788579724.404:5638): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=506149 res=0 errno=0 [ 1643.076828][ T43] audit: type=1800 audit(1788579724.404:5639): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=506124 res=0 errno=0 [ 1643.096281][ T43] audit: type=1800 audit(1788579724.404:5640): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=506125 res=0 errno=0 [ 1643.152209][ T43] audit: type=1800 audit(1788579724.484:5641): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506183 res=0 errno=0 [ 1643.153668][T23735] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1643.423856][T13373] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1643.434851][T26437] netlink: 'syz.5.5410': attribute type 10 has an invalid length. [ 1643.956598][T13373] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1644.219803][T26431] ceph: No mds server is up or the cluster is laggy [ 1644.284433][T19856] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1644.291948][T19856] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1644.292053][T19856] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 1644.292631][T19856] safe_serial 6-1:189.127: safe_serial converter detected [ 1644.292747][T19856] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 1644.297404][ T43] audit: type=1800 audit(1788579725.624:5642): pid=26399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=506146 res=0 errno=0 [ 1644.298646][T19856] usb 6-1: USB disconnect, device number 16 [ 1645.041635][T26452] netlink: 'syz.3.5414': attribute type 10 has an invalid length. [ 1645.042261][T26451] netlink: 'syz.2.5413': attribute type 10 has an invalid length. [ 1645.145126][T26456] netlink: 'syz.1.5415': attribute type 10 has an invalid length. [ 1645.537803][T26461] netlink: 'syz.5.5416': attribute type 10 has an invalid length. [ 1647.128580][T26469] netlink: 'syz.2.5417': attribute type 10 has an invalid length. [ 1647.391117][T26467] netlink: 'syz.5.5418': attribute type 10 has an invalid length. [ 1647.486373][T26474] netlink: 'syz.3.5419': attribute type 10 has an invalid length. [ 1648.783180][T26475] netlink: 'syz.1.5427': attribute type 10 has an invalid length. [ 1649.380777][T26479] netlink: 'syz.2.5420': attribute type 10 has an invalid length. [ 1649.850875][T26485] ceph: No mds server is up or the cluster is laggy [ 1649.854567][T13421] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1650.611209][T13421] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1650.771762][T13421] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1650.774301][T13421] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1650.778194][T13421] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1650.781088][T13421] usb 7-1: config 189 has no interface number 0 [ 1650.783970][T13421] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1650.791089][T13421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.791124][T13421] usb 7-1: Product: syz [ 1650.791151][T13421] usb 7-1: Manufacturer: syz [ 1650.791173][T13421] usb 7-1: SerialNumber: syz [ 1650.808935][ T43] audit: type=1800 audit(1788579732.134:5643): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506253 res=0 errno=0 [ 1650.823918][ T43] audit: type=1800 audit(1788579732.154:5644): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=506285 res=0 errno=0 [ 1650.835992][ T43] audit: type=1800 audit(1788579732.174:5645): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=506260 res=0 errno=0 [ 1650.846100][ T43] audit: type=1800 audit(1788579732.184:5646): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=506261 res=0 errno=0 [ 1651.229247][T26499] netlink: 'syz.1.5426': attribute type 10 has an invalid length. [ 1651.788062][T26508] netlink: 'syz.5.5429': attribute type 10 has an invalid length. [ 1652.562832][T26512] netlink: 'syz.3.5430': attribute type 10 has an invalid length. [ 1653.318697][T26517] netlink: 'syz.5.5432': attribute type 10 has an invalid length. [ 1654.856534][T13421] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1654.861525][T13421] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1654.872988][T13421] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1654.897711][T13421] safe_serial 7-1:189.127: safe_serial converter detected [ 1654.906513][T13421] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1654.954743][ T43] audit: type=1800 audit(1788579736.284:5647): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=506282 res=0 errno=0 [ 1654.982334][ T43] audit: type=1800 audit(1788579736.314:5648): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=506283 res=0 errno=0 [ 1654.994821][ T43] audit: type=1800 audit(1788579736.324:5649): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=506262 res=0 errno=0 [ 1654.997108][T13421] usb 7-1: USB disconnect, device number 5 [ 1655.011458][ T43] audit: type=1800 audit(1788579736.344:5650): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=506284 res=0 errno=0 [ 1655.181448][T26528] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 1655.462622][T26530] netlink: 'syz.1.5434': attribute type 10 has an invalid length. [ 1656.276920][ T43] audit: type=1800 audit(1788579737.604:5651): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506343 res=0 errno=0 [ 1656.287049][T21052] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1656.546897][T21052] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1656.825690][T26542] ceph: No mds server is up or the cluster is laggy [ 1656.826721][T13348] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1656.835184][ T43] audit: type=1800 audit(1788579738.174:5652): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506362 res=0 errno=0 [ 1657.053337][T21052] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1657.340710][T26534] ceph: No mds server is up or the cluster is laggy [ 1658.309898][T26565] netlink: 'syz.5.5443': attribute type 10 has an invalid length. [ 1658.649818][T21052] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1658.814596][T21052] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1658.817936][T21052] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1658.829504][T21052] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 1658.835853][T21052] usb 8-1: config 189 has no interface number 0 [ 1658.842766][T21052] usb 8-1: config 189 interface 127 has no altsetting 0 [ 1658.865134][T21052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.869451][T21052] usb 8-1: Product: syz [ 1658.877261][T21052] usb 8-1: Manufacturer: syz [ 1658.880021][T21052] usb 8-1: SerialNumber: syz [ 1658.902728][ T43] audit: type=1800 audit(1788579740.224:5653): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506389 res=0 errno=0 [ 1658.919231][ T43] audit: type=1800 audit(1788579740.254:5654): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=506421 res=0 errno=0 [ 1658.937480][ T43] audit: type=1800 audit(1788579740.264:5655): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=506396 res=0 errno=0 [ 1658.958877][ T43] audit: type=1800 audit(1788579740.284:5656): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=506397 res=0 errno=0 [ 1659.093435][T26570] netlink: 'syz.1.5445': attribute type 10 has an invalid length. [ 1659.927266][T26576] netlink: 'syz.2.5446': attribute type 10 has an invalid length. [ 1661.796381][T21052] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1661.796459][T21052] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1661.808611][T21052] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 1661.811235][T21052] safe_serial 8-1:189.127: safe_serial converter detected [ 1661.811701][T21052] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 1661.958468][T21052] usb 8-1: USB disconnect, device number 7 [ 1662.007309][ T43] audit: type=1800 audit(1788579743.264:5657): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=506418 res=0 errno=0 [ 1662.085752][ T43] audit: type=1800 audit(1788579743.404:5658): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=506419 res=0 errno=0 [ 1662.086067][ T43] audit: type=1800 audit(1788579743.404:5659): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=506398 res=0 errno=0 [ 1662.191033][T26590] netlink: 'syz.1.5456': attribute type 10 has an invalid length. [ 1662.337117][T26592] netlink: 'syz.3.5449': attribute type 10 has an invalid length. [ 1663.199961][T26584] ceph: No mds server is up or the cluster is laggy [ 1663.201363][T19828] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1663.290693][ T43] audit: type=1800 audit(1788579744.564:5660): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506479 res=0 errno=0 [ 1663.710153][T21052] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1663.891074][T21052] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1663.894808][T21052] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1663.907789][T21052] usb 10-1: config 189 has an invalid interface number: 127 but max is 0 [ 1663.912753][T21052] usb 10-1: config 189 has no interface number 0 [ 1663.916906][T21052] usb 10-1: config 189 interface 127 has no altsetting 0 [ 1663.931673][T21052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.936004][T21052] usb 10-1: Product: syz [ 1663.939460][T21052] usb 10-1: Manufacturer: syz [ 1663.943519][T21052] usb 10-1: SerialNumber: syz [ 1664.080523][ T43] audit: type=1800 audit(1788579745.304:5661): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506506 res=0 errno=0 [ 1664.090614][ T43] audit: type=1800 audit(1788579745.424:5662): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=506538 res=0 errno=0 [ 1664.101387][ T43] audit: type=1800 audit(1788579745.424:5663): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=506513 res=0 errno=0 [ 1664.106621][ T43] audit: type=1800 audit(1788579745.434:5664): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=506514 res=0 errno=0 [ 1664.335458][T26608] netlink: 'syz.2.5453': attribute type 10 has an invalid length. [ 1665.472410][T19828] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1665.472656][T26615] ceph: No mds server is up or the cluster is laggy [ 1665.488457][ T43] audit: type=1800 audit(1788579746.814:5665): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506572 res=0 errno=0 [ 1665.938775][T26622] netlink: 'syz.1.5457': attribute type 10 has an invalid length. [ 1667.468497][T26629] netlink: 'syz.3.5459': attribute type 10 has an invalid length. [ 1667.831155][T26632] netlink: 'syz.2.5460': attribute type 10 has an invalid length. [ 1668.036597][T21052] usbserial_generic 10-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1668.036651][T21052] usbserial_generic 10-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1668.036694][T21052] usbserial_generic 10-1:189.127: device has no bulk endpoints [ 1668.037010][T21052] safe_serial 10-1:189.127: safe_serial converter detected [ 1668.037072][T21052] safe_serial 10-1:189.127: probe with driver safe_serial failed with error -22 [ 1668.040336][T21052] usb 10-1: USB disconnect, device number 19 [ 1668.049433][ T43] audit: type=1800 audit(1788579749.384:5666): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=506535 res=0 errno=0 [ 1668.049461][ T43] audit: type=1800 audit(1788579749.384:5667): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=506536 res=0 errno=0 [ 1668.049480][ T43] audit: type=1800 audit(1788579749.384:5668): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=506515 res=0 errno=0 [ 1668.054582][ T43] audit: type=1800 audit(1788579749.384:5669): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=506537 res=0 errno=0 [ 1668.951068][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.951161][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.008110][T26637] ceph: No mds server is up or the cluster is laggy [ 1669.008846][ T5840] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1669.017767][ T43] audit: type=1800 audit(1788579750.344:5670): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=506615 res=0 errno=0 [ 1669.533185][T26652] netlink: 'syz.3.5463': attribute type 10 has an invalid length. [ 1670.865067][T26663] netlink: 'syz.1.5468': attribute type 10 has an invalid length. [ 1671.311632][T26665] netlink: 'syz.5.5467': attribute type 10 has an invalid length. [ 1675.042173][T26806] å1ÿ: renamed from syz_tun (while UP) [ 1675.191995][T26826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1675.194783][T26829] openvswitch: netlink: EtherType 500 is less than min 600 [ 1675.211477][T26831] nbd: must specify at least one socket [ 1675.297334][T26845] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 1675.297951][T26845] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 1675.298282][T26845] netlink: 'syz.2.5552': attribute type 29 has an invalid length. [ 1675.311660][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5553'. [ 1675.585098][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5569'. [ 1675.612566][ T43] audit: type=1800 audit(1788579756.944:5671): pid=26881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=507721 res=0 errno=0 [ 1675.705116][ T43] audit: type=1800 audit(1788579757.034:5672): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=507924 res=0 errno=0 [ 1675.724908][T26896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1675.729382][T26896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1675.740457][T26898] netlink: 'syz.3.5577': attribute type 10 has an invalid length. [ 1675.740567][T26898] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 1675.849762][T26917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1675.951094][T26935] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 1675.951160][T26935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1676.329102][T26974] netlink: 'syz.1.5615': attribute type 16 has an invalid length. [ 1676.329168][T26974] netlink: 'syz.1.5615': attribute type 4 has an invalid length. [ 1676.329220][T26974] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5615'. [ 1676.401728][T26993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1676.418033][T23089] tipc: Subscription rejected, illegal request [ 1676.471269][T27008] netlink: 'syz.3.5632': attribute type 2 has an invalid length. [ 1676.471355][T27008] netlink: 'syz.3.5632': attribute type 2 has an invalid length. [ 1676.479268][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5634'. [ 1676.599851][T27031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1677.147637][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1677.155519][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1677.455773][T27070] netlink: 'syz.3.5661': attribute type 29 has an invalid length. [ 1679.437850][T27152] Driver unsupported XDP return value 0 on prog (id 149) dev N/A, expect packet loss! [ 1681.088151][T27225] netlink: 'syz.2.5734': attribute type 10 has an invalid length. [ 1681.942385][T27231] netlink: 'syz.1.5738': attribute type 10 has an invalid length. [ 1682.303578][T27234] netlink: 'syz.3.5737': attribute type 10 has an invalid length. [ 1683.666158][T27236] netlink: 'syz.5.5736': attribute type 10 has an invalid length. [ 1684.077371][T27248] netlink: 'syz.1.5742': attribute type 10 has an invalid length. [ 1684.096182][T27249] netlink: 'syz.3.5741': attribute type 10 has an invalid length. [ 1684.650088][T27253] netlink: 'syz.2.5743': attribute type 10 has an invalid length. [ 1685.123755][T27257] netlink: 'syz.5.5744': attribute type 10 has an invalid length. [ 1685.688519][T27263] netlink: 'syz.1.5745': attribute type 10 has an invalid length. [ 1685.895508][T27265] __nla_validate_parse: 12 callbacks suppressed [ 1685.895608][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1686.220766][T27267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1687.313090][T27287] netlink: 'syz.2.5751': attribute type 10 has an invalid length. [ 1687.504501][T27289] netlink: 'syz.1.5753': attribute type 10 has an invalid length. [ 1689.496529][T27284] ceph: No mds server is up or the cluster is laggy [ 1689.502621][T21052] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1689.575856][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1689.775496][T27312] netlink: 'syz.3.5757': attribute type 10 has an invalid length. [ 1689.823632][T27316] netlink: 'syz.2.5762': attribute type 10 has an invalid length. [ 1689.970280][T27320] netlink: 'syz.5.5764': attribute type 10 has an invalid length. [ 1690.039520][T27321] netlink: 'syz.1.5765': attribute type 10 has an invalid length. [ 1691.976882][T27328] netlink: 'syz.5.5768': attribute type 10 has an invalid length. [ 1692.479920][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5770'. [ 1693.448297][T27341] syzkaller0: entered promiscuous mode [ 1693.448376][T27341] syzkaller0: entered allmulticast mode [ 1693.993158][T27351] netlink: 'syz.3.5776': attribute type 10 has an invalid length. [ 1694.144370][T27358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1694.183257][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1694.395922][T27366] netlink: 'syz.2.5782': attribute type 10 has an invalid length. [ 1695.244189][ T43] audit: type=1800 audit(1788579776.564:5673): pid=27372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5785" name="ifindex" dev="sysfs" ino=391290 res=0 errno=0 [ 1695.537641][T27374] netlink: 'syz.5.5786': attribute type 10 has an invalid length. [ 1696.353957][ T43] audit: type=1800 audit(1788579777.684:5674): pid=27376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5787" name="ifindex" dev="sysfs" ino=444548 res=0 errno=0 [ 1696.659478][T27380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1696.989110][T27384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1697.576848][T27392] netlink: 'syz.3.5793': attribute type 10 has an invalid length. [ 1698.469107][T21052] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1698.873941][T21052] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1698.874016][T21052] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1699.020193][T21052] usb 10-1: config 189 has an invalid interface number: 127 but max is 0 [ 1699.020247][T21052] usb 10-1: config 189 has no interface number 0 [ 1699.020304][T21052] usb 10-1: config 189 interface 127 has no altsetting 0 [ 1699.225143][T21052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.225200][T21052] usb 10-1: Product: syz [ 1699.285066][T21052] usb 10-1: Manufacturer: syz [ 1699.318810][T21052] usb 10-1: SerialNumber: syz [ 1699.377829][ T43] audit: type=1800 audit(1788579780.704:5675): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=508385 res=0 errno=0 [ 1699.393245][ T43] audit: type=1800 audit(1788579780.724:5676): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=508417 res=0 errno=0 [ 1699.404892][ T43] audit: type=1800 audit(1788579780.734:5677): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=508392 res=0 errno=0 [ 1699.415155][ T43] audit: type=1800 audit(1788579780.744:5678): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=508393 res=0 errno=0 [ 1699.636912][T27408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5799'. [ 1699.719851][T21052] usbserial_generic 10-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1699.725016][T21052] usbserial_generic 10-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1699.729239][T21052] usbserial_generic 10-1:189.127: device has no bulk endpoints [ 1699.732537][T21052] safe_serial 10-1:189.127: safe_serial converter detected [ 1699.737352][T21052] safe_serial 10-1:189.127: probe with driver safe_serial failed with error -22 [ 1699.742349][ T43] audit: type=1800 audit(1788579781.084:5679): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=508414 res=0 errno=0 [ 1699.751244][ T43] audit: type=1800 audit(1788579781.094:5680): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=508415 res=0 errno=0 [ 1699.762513][ T43] audit: type=1800 audit(1788579781.094:5681): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=508394 res=0 errno=0 [ 1699.769897][T21052] usb 10-1: USB disconnect, device number 20 [ 1699.773932][ T43] audit: type=1800 audit(1788579781.104:5682): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=508416 res=0 errno=0 [ 1699.837718][T27414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.882534][T27417] syzkaller0: entered promiscuous mode [ 1699.882615][T27417] syzkaller0: entered allmulticast mode [ 1700.054960][T27425] netlink: 'syz.1.5804': attribute type 10 has an invalid length. [ 1700.820368][T25469] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1701.830889][ T43] audit: type=1800 audit(1788579783.164:5683): pid=27433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5808" name="ifindex" dev="sysfs" ino=391290 res=0 errno=0 [ 1702.364456][T25469] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1702.364672][T25469] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1702.549836][T25469] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 1702.549895][T25469] usb 8-1: config 189 has no interface number 0 [ 1702.549983][T25469] usb 8-1: config 189 interface 127 has no altsetting 0 [ 1702.556769][T25469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.556798][T25469] usb 8-1: Product: syz [ 1702.556812][T25469] usb 8-1: Manufacturer: syz [ 1702.556825][T25469] usb 8-1: SerialNumber: syz [ 1702.888682][ T43] audit: type=1800 audit(1788579784.214:5684): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=508560 res=0 errno=0 [ 1702.912265][ T43] audit: type=1800 audit(1788579784.244:5685): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=508592 res=0 errno=0 [ 1702.916608][ T43] audit: type=1800 audit(1788579784.244:5686): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=508567 res=0 errno=0 [ 1702.916772][ T43] audit: type=1800 audit(1788579784.244:5687): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=508568 res=0 errno=0 [ 1703.722582][T25469] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1703.722697][T25469] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1703.799723][T25469] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 1703.800246][T25469] safe_serial 8-1:189.127: safe_serial converter detected [ 1703.800357][T25469] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 1703.802317][ T43] audit: type=1800 audit(1788579785.134:5688): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=508589 res=0 errno=0 [ 1703.802913][T25469] usb 8-1: USB disconnect, device number 8 [ 1703.804409][ T43] audit: type=1800 audit(1788579785.134:5689): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=508590 res=0 errno=0 [ 1703.805369][ T43] audit: type=1800 audit(1788579785.134:5690): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=508569 res=0 errno=0 [ 1703.806605][ T43] audit: type=1800 audit(1788579785.134:5691): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=508591 res=0 errno=0 [ 1703.886719][T27440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1704.146416][T27446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1704.233123][T27448] syzkaller0: entered promiscuous mode [ 1704.233190][T27448] syzkaller0: entered allmulticast mode [ 1706.937946][T27469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5820'. [ 1707.191277][T27477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.529857][T13421] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1707.931028][T13421] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1707.931119][T13421] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1708.321522][T13421] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1708.321594][T13421] usb 7-1: config 189 has no interface number 0 [ 1708.321887][T13421] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1708.465505][T13421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.465553][T13421] usb 7-1: Product: syz [ 1708.465593][T13421] usb 7-1: Manufacturer: syz [ 1708.465602][T13421] usb 7-1: SerialNumber: syz [ 1708.659865][ T43] audit: type=1800 audit(1788579789.984:5692): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=508735 res=0 errno=0 [ 1708.681902][ T43] audit: type=1800 audit(1788579790.004:5693): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=508767 res=0 errno=0 [ 1708.706938][ T43] audit: type=1800 audit(1788579790.034:5694): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=508742 res=0 errno=0 [ 1708.727581][ T43] audit: type=1800 audit(1788579790.054:5695): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=508743 res=0 errno=0 [ 1708.742493][T27492] syzkaller0: entered promiscuous mode [ 1708.744805][T27492] syzkaller0: entered allmulticast mode [ 1708.881034][T27498] netlink: 'syz.5.5830': attribute type 10 has an invalid length. [ 1709.338415][T13421] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1709.338462][T13421] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1709.338528][T13421] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1709.338872][T13421] safe_serial 7-1:189.127: safe_serial converter detected [ 1709.338932][T13421] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1709.340067][T13421] usb 7-1: USB disconnect, device number 6 [ 1709.350452][ T43] audit: type=1800 audit(1788579790.674:5696): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=508764 res=0 errno=0 [ 1709.358338][ T43] audit: type=1800 audit(1788579790.684:5697): pid=27482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=508765 res=0 errno=0 [ 1709.593131][T27505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.429748][T13421] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1713.582218][T13421] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1713.582316][T13421] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1713.583660][T13421] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1713.583685][T13421] usb 7-1: config 189 has no interface number 0 [ 1713.583711][T13421] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1713.586200][T13421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.586223][T13421] usb 7-1: Product: syz [ 1713.586239][T13421] usb 7-1: Manufacturer: syz [ 1713.586252][T13421] usb 7-1: SerialNumber: syz [ 1713.591991][ T43] audit: type=1800 audit(1788579794.924:5698): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=508841 res=0 errno=0 [ 1713.596711][ T43] audit: type=1800 audit(1788579794.924:5699): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=508873 res=0 errno=0 [ 1713.598098][ T43] audit: type=1800 audit(1788579794.924:5700): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=508848 res=0 errno=0 [ 1713.599387][ T43] audit: type=1800 audit(1788579794.924:5701): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=508849 res=0 errno=0 [ 1713.646628][T19828] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1713.916730][T19828] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1713.916800][T19828] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1713.926905][T19828] usb 10-1: config 189 has an invalid interface number: 127 but max is 0 [ 1713.926972][T19828] usb 10-1: config 189 has no interface number 0 [ 1713.935845][T19828] usb 10-1: config 189 interface 127 has no altsetting 0 [ 1713.948853][T19828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.953397][T19828] usb 10-1: Product: syz [ 1713.956705][T19828] usb 10-1: Manufacturer: syz [ 1713.958942][T19828] usb 10-1: SerialNumber: syz [ 1713.986479][ T43] audit: type=1800 audit(1788579795.314:5702): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=508907 res=0 errno=0 [ 1714.027030][ T43] audit: type=1800 audit(1788579795.354:5703): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=508939 res=0 errno=0 [ 1714.052140][ T43] audit: type=1800 audit(1788579795.384:5704): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=508914 res=0 errno=0 [ 1714.064806][ T43] audit: type=1800 audit(1788579795.394:5705): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=508915 res=0 errno=0 [ 1715.186723][T27552] syzkaller0: entered promiscuous mode [ 1715.186780][T27552] syzkaller0: entered allmulticast mode [ 1715.252865][T13421] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1715.252922][T13421] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1715.252988][T13421] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1715.253359][T13421] safe_serial 7-1:189.127: safe_serial converter detected [ 1715.253417][T13421] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1715.254950][ T43] audit: type=1800 audit(1788579796.584:5706): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=508870 res=0 errno=0 [ 1715.255514][ T43] audit: type=1800 audit(1788579796.584:5707): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=508871 res=0 errno=0 [ 1715.256017][ T43] audit: type=1800 audit(1788579796.584:5708): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=508850 res=0 errno=0 [ 1715.256497][ T43] audit: type=1800 audit(1788579796.584:5709): pid=27532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=508872 res=0 errno=0 [ 1715.291102][T13421] usb 7-1: USB disconnect, device number 7 [ 1716.679039][T19828] usbserial_generic 10-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1716.679076][T19828] usbserial_generic 10-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1716.679116][T19828] usbserial_generic 10-1:189.127: device has no bulk endpoints [ 1716.679463][T19828] safe_serial 10-1:189.127: safe_serial converter detected [ 1716.679559][T19828] safe_serial 10-1:189.127: probe with driver safe_serial failed with error -22 [ 1717.118580][T19828] usb 10-1: USB disconnect, device number 21 [ 1717.200616][ T43] audit: type=1800 audit(1788579798.524:5710): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=508936 res=0 errno=0 [ 1717.201716][ T43] audit: type=1800 audit(1788579798.524:5711): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=508937 res=0 errno=0 [ 1718.716430][T27576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.805506][T27582] syzkaller0: entered promiscuous mode [ 1718.805600][T27582] syzkaller0: entered allmulticast mode [ 1719.000916][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 1719.001011][ T43] audit: type=1800 audit(1788579800.334:5714): pid=27584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5857" name="ifindex" dev="sysfs" ino=424213 res=0 errno=0 [ 1720.688341][T27597] netlink: 'syz.5.5861': attribute type 10 has an invalid length. [ 1721.469945][T27600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.041385][T27615] syzkaller0: entered promiscuous mode [ 1722.043232][T27615] syzkaller0: entered allmulticast mode [ 1723.665326][T27626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1724.289543][T27633] netlink: 'syz.3.5873': attribute type 10 has an invalid length. [ 1728.086151][T27656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.157564][T27677] syzkaller0: entered promiscuous mode [ 1729.157736][T27677] syzkaller0: entered allmulticast mode [ 1730.383787][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.383863][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.598949][T27692] netlink: 'syz.3.5892': attribute type 10 has an invalid length. [ 1732.833122][ T43] audit: type=1800 audit(1788579814.164:5715): pid=27706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5898" name="ifindex" dev="sysfs" ino=399011 res=0 errno=0 [ 1739.194311][ T43] audit: type=1800 audit(1788579820.524:5716): pid=27767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5922" name="ifindex" dev="sysfs" ino=444548 res=0 errno=0 [ 1739.238961][T27769] netlink: 'syz.5.5916': attribute type 10 has an invalid length. [ 1739.418734][T27775] netlink: 'syz.2.5923': attribute type 10 has an invalid length. [ 1740.019481][ T43] audit: type=1800 audit(1788579821.314:5717): pid=27780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5925" name="ifindex" dev="sysfs" ino=444548 res=0 errno=0 [ 1740.862884][T27777] netlink: 'syz.1.5921': attribute type 10 has an invalid length. [ 1741.761845][T27803] netlink: 'syz.1.5934': attribute type 10 has an invalid length. [ 1742.307531][T27806] syzkaller0: left promiscuous mode [ 1742.307718][T27806] syzkaller0: left allmulticast mode [ 1743.223041][T27823] capability: warning: `syz.1.5940' uses 32-bit capabilities (legacy support in use) [ 1743.368149][ T43] audit: type=1800 audit(1788579824.694:5718): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5946" name="ifindex" dev="sysfs" ino=399011 res=0 errno=0 [ 1743.462446][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5949'. [ 1743.520968][ T43] audit: type=1800 audit(1788579824.854:5719): pid=27843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5950" name="ifindex" dev="sysfs" ino=391290 res=0 errno=0 [ 1745.074842][ T43] audit: type=1800 audit(1788579826.404:5720): pid=27856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5955" name="ifindex" dev="sysfs" ino=424213 res=0 errno=0 [ 1745.168728][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1745.173997][T27859] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1745.177896][T27859] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1745.526664][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5959'. [ 1747.783919][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1747.784484][T27883] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1747.784500][T27883] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1747.925958][T27895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5971'. [ 1748.009181][T27904] lo speed is unknown, defaulting to 1000 [ 1748.011779][T27904] lo speed is unknown, defaulting to 1000 [ 1748.013140][T27904] lo speed is unknown, defaulting to 1000 [ 1748.024925][T27908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 1748.313149][ T43] audit: type=1800 audit(1788579829.644:5721): pid=27920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5982" name="UDC" dev="configfs" ino=183149 res=0 errno=0 [ 1748.323483][T27920] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1748.323985][T27920] udc usbip-vudc.0: failed to start g1: -19 [ 1748.336218][T27920] UDC core: g1: couldn't find an available UDC or it's busy [ 1748.345589][ T5840] lo speed is unknown, defaulting to 1000 [ 1748.349882][T27904] infiniband syz0: set active [ 1748.349897][T27904] infiniband syz0: added lo [ 1748.417505][T27904] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1748.417626][T27904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1748.432154][T27904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1748.452264][ T43] audit: type=1800 audit(1788579829.784:5722): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=512765 res=0 errno=0 [ 1748.462591][T27904] RDS/IB: syz0: added [ 1748.462822][T27904] smc: adding ib device syz0 with port count 1 [ 1748.462884][T27904] smc: ib device syz0 port 1 has no pnetid [ 1748.467435][ T5840] lo speed is unknown, defaulting to 1000 [ 1748.476293][T27904] lo speed is unknown, defaulting to 1000 [ 1748.511669][ T43] audit: type=1800 audit(1788579829.844:5723): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=512780 res=0 errno=0 [ 1748.519631][ T43] audit: type=1800 audit(1788579829.844:5724): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=512795 res=0 errno=0 [ 1748.684005][T27904] lo speed is unknown, defaulting to 1000 [ 1748.780010][T27904] lo speed is unknown, defaulting to 1000 [ 1748.859941][T11791] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1748.901471][T27904] lo speed is unknown, defaulting to 1000 [ 1748.997596][T27904] lo speed is unknown, defaulting to 1000 [ 1749.010915][T11791] usb 6-1: Using ep0 maxpacket: 16 [ 1749.013564][T11791] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1749.013793][T11791] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1749.022417][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.027797][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.036133][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.041662][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.046838][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.054721][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.063445][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.069356][T11791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.076847][T11791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1749.079695][T11791] usb 6-1: SerialNumber: syz [ 1749.086478][T11791] usb 6-1: config 0 descriptor?? [ 1749.103441][T11791] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 1749.106551][ T43] audit: type=1800 audit(1788579830.434:5725): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=526947 res=0 errno=0 [ 1749.139346][ T43] audit: type=1800 audit(1788579830.464:5726): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=526992 res=0 errno=0 [ 1749.160345][ T43] audit: type=1800 audit(1788579830.494:5727): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=526957 res=0 errno=0 [ 1749.225875][ T43] audit: type=1800 audit(1788579830.554:5728): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=526958 res=0 errno=0 [ 1749.256614][ T43] audit: type=1800 audit(1788579830.584:5729): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=526960 res=0 errno=0 [ 1749.326392][T27928] input: syz1 as /devices/virtual/input/input6 [ 1749.370869][ T5840] usb 6-1: USB disconnect, device number 17 [ 1749.372634][ T5130] bcm5974 6-1:0.0: could not read from device [ 1749.376068][ T5130] bcm5974 6-1:0.0: could not read from device [ 1749.495920][T27936] __nla_validate_parse: 2 callbacks suppressed [ 1749.496421][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5988'. [ 1749.496889][T27936] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5988'. [ 1749.496899][T27936] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5988'. [ 1749.502650][T27816] udevd[27816]: setting mode of /dev/bus/usb/006/017 to 020664 failed: No such file or directory [ 1749.505971][T27816] udevd[27816]: setting owner of /dev/bus/usb/006/017 to uid=0, gid=0 failed: No such file or directory [ 1749.621915][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1749.622831][T27938] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1749.622848][T27938] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1749.777859][T27943] netlink: 'syz.2.5989': attribute type 10 has an invalid length. [ 1750.142386][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 1750.142496][ T43] audit: type=1800 audit(1788579831.474:5734): pid=27957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5998" name="UDC" dev="configfs" ino=185025 res=0 errno=0 [ 1750.144564][T27957] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1750.144757][T27957] udc usbip-vudc.0: failed to start g1: -19 [ 1750.145295][T27957] UDC core: g1: couldn't find an available UDC or it's busy [ 1750.225197][T27963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1750.225928][T27963] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1750.227870][T27963] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1750.268967][ T43] audit: type=1800 audit(1788579831.594:5735): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=528616 res=0 errno=0 [ 1751.225179][T27983] jffs2: notice: (27983) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1751.381000][T27988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1751.566091][ T43] audit: type=1800 audit(1788579832.894:5736): pid=27995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6019" name="UDC" dev="configfs" ino=183800 res=0 errno=0 [ 1751.574357][T27995] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1751.574466][T27995] udc usbip-vudc.0: failed to start g1: -19 [ 1751.574837][T27995] UDC core: g1: couldn't find an available UDC or it's busy [ 1751.749477][T28003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1751.778838][ T43] audit: type=1800 audit(1788579833.104:5737): pid=28008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6016" name="UDC" dev="configfs" ino=186448 res=0 errno=0 [ 1751.788244][T28008] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1751.788373][T28008] udc usbip-vudc.0: failed to start g1: -19 [ 1751.796941][T28008] UDC core: g1: couldn't find an available UDC or it's busy [ 1751.954258][T28015] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1752.161997][ T43] audit: type=1800 audit(1788579833.494:5738): pid=28028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6025" name="UDC" dev="configfs" ino=183883 res=0 errno=0 [ 1752.168014][T28028] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1752.168148][T28028] udc usbip-vudc.0: failed to start g1: -19 [ 1752.175264][T28028] UDC core: g1: couldn't find an available UDC or it's busy [ 1753.233929][T28067] netlink: 'syz.5.6042': attribute type 10 has an invalid length. [ 1754.500023][T13373] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1754.670277][T13373] usb 7-1: Using ep0 maxpacket: 16 [ 1754.674877][T13373] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1754.682052][T13373] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 1754.691772][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.702598][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.709919][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.715629][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.721603][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.727637][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.734918][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.740609][T13373] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.747333][T13373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1754.750966][T13373] usb 7-1: SerialNumber: syz [ 1754.766619][T13373] usb 7-1: config 0 descriptor?? [ 1754.774724][ T43] audit: type=1800 audit(1788579836.104:5739): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=528747 res=0 errno=0 [ 1754.850801][ T43] audit: type=1800 audit(1788579836.184:5740): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=528777 res=0 errno=0 [ 1754.874403][ T43] audit: type=1800 audit(1788579836.204:5741): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=528754 res=0 errno=0 [ 1754.897616][T13373] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 1754.910054][ T43] audit: type=1800 audit(1788579836.234:5742): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=528755 res=0 errno=0 [ 1754.915816][ T43] audit: type=1800 audit(1788579836.244:5743): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=528756 res=0 errno=0 [ 1755.183402][ T43] audit: type=1800 audit(1788579836.514:5744): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=528861 res=0 errno=0 [ 1755.189119][ T43] audit: type=1800 audit(1788579836.514:5745): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=528876 res=0 errno=0 [ 1755.192590][ T43] audit: type=1800 audit(1788579836.524:5746): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=528879 res=0 errno=0 [ 1755.192618][ T43] audit: type=1800 audit(1788579836.524:5747): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=528878 res=0 errno=0 [ 1755.194857][ T43] audit: type=1800 audit(1788579836.524:5748): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=528877 res=0 errno=0 [ 1755.194885][ T43] audit: type=1800 audit(1788579836.524:5749): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=528868 res=0 errno=0 [ 1755.194906][ T43] audit: type=1800 audit(1788579836.524:5750): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=528871 res=0 errno=0 [ 1755.195251][ T43] audit: type=1800 audit(1788579836.524:5751): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=528864 res=0 errno=0 [ 1755.202350][T28077] input: syz1 as /devices/virtual/input/input8 [ 1755.265050][ T5130] bcm5974 7-1:0.0: could not read from device [ 1755.295218][ T5130] bcm5974 7-1:0.0: could not read from device [ 1755.306900][T28095] syzkaller0: entered promiscuous mode [ 1755.306959][T28095] syzkaller0: entered allmulticast mode [ 1755.310937][ T5130] bcm5974 7-1:0.0: could not read from device [ 1755.320233][ T5130] bcm5974 7-1:0.0: could not read from device [ 1755.323647][T13373] usb 7-1: USB disconnect, device number 8 [ 1755.363213][ T43] audit: type=1800 audit(1788579836.694:5752): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=528776 res=0 errno=0 [ 1755.369305][ T43] audit: type=1800 audit(1788579836.694:5753): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=29792 res=0 errno=0 [ 1755.490037][T28099] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1755.490295][T28099] udc usbip-vudc.0: failed to start g1: -19 [ 1755.502691][T28099] UDC core: g1: couldn't find an available UDC or it's busy [ 1755.661209][T28105] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1755.661371][T28105] udc usbip-vudc.0: failed to start g1: -19 [ 1755.663878][T28105] UDC core: g1: couldn't find an available UDC or it's busy [ 1755.836068][T28119] jffs2: notice: (28119) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1755.843908][T28119] overlayfs: failed to resolve './file1': -2 [ 1755.967029][T28128] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1755.967253][T28128] udc usbip-vudc.0: failed to start g1: -19 [ 1755.967992][T28128] UDC core: g1: couldn't find an available UDC or it's busy [ 1756.033191][T28133] syzkaller0: entered promiscuous mode [ 1756.033267][T28133] syzkaller0: entered allmulticast mode [ 1756.187769][T28135] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1756.188028][T28135] udc usbip-vudc.0: failed to start g1: -19 [ 1756.188715][T28135] UDC core: g1: couldn't find an available UDC or it's busy [ 1756.776489][T28150] __nla_validate_parse: 2 callbacks suppressed [ 1756.776561][T28150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 1756.777339][T28150] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6080'. [ 1756.777355][T28150] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6080'. [ 1756.840992][T13373] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1756.844514][T28154] syzkaller0: entered promiscuous mode [ 1756.846393][T28154] syzkaller0: entered allmulticast mode [ 1756.999861][T13373] usb 10-1: Using ep0 maxpacket: 16 [ 1757.002677][T13373] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1757.002784][T13373] usb 10-1: too many configurations: 123, using maximum allowed: 8 [ 1757.009727][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.015138][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.019574][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.020469][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.021297][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.023564][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.024398][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.025188][T13373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.026029][T13373] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1757.026042][T13373] usb 10-1: SerialNumber: syz [ 1757.027951][T13373] usb 10-1: config 0 descriptor?? [ 1757.035733][T13373] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input9 [ 1757.273529][T28174] netlink: 'syz.2.6089': attribute type 10 has an invalid length. [ 1757.361685][T28140] input: syz1 as /devices/virtual/input/input10 [ 1757.385391][ T5130] bcm5974 10-1:0.0: could not read from device [ 1757.388987][ T5130] bcm5974 10-1:0.0: could not read from device [ 1757.460128][ T5130] bcm5974 10-1:0.0: could not read from device [ 1757.489355][ T5130] bcm5974 10-1:0.0: could not read from device [ 1757.533220][T13373] usb 10-1: USB disconnect, device number 22 [ 1757.992406][T13348] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1758.003596][T28186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6096'. [ 1758.088418][T28188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6097'. [ 1758.101002][T28188] bond0: entered promiscuous mode [ 1758.101082][T28188] bond_slave_0: entered promiscuous mode [ 1758.101612][T28188] bond_slave_1: entered promiscuous mode [ 1758.103302][T28188] batadv0: entered promiscuous mode [ 1758.107584][T28188] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1758.139773][T13348] usb 8-1: Using ep0 maxpacket: 8 [ 1758.142727][T13348] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1758.148443][T13348] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1758.153009][T13348] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1758.156863][T13348] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1758.160674][T13348] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1758.160701][T13348] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1758.160720][T13348] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1758.160745][T13348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.395143][T13348] usb 8-1: usb_control_msg returned -32 [ 1758.395211][T13348] usbtmc 8-1:16.0: can't read capabilities [ 1758.403110][T28182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.403472][T28182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.459854][T22094] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1758.610520][T22094] usb 10-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 1758.611809][T22094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.618202][T28182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.621868][T28182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.679704][T22094] rc_core: IR keymap rc-rc6-mce not found [ 1758.679760][T22094] Registered IR keymap rc-empty [ 1758.835831][T28219] netlink: 'syz.2.6112': attribute type 10 has an invalid length. [ 1758.840270][T28219] syz_tun: entered promiscuous mode [ 1758.846812][T28219] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1758.896010][T28221] syzkaller0: entered promiscuous mode [ 1758.896069][T28221] syzkaller0: entered allmulticast mode [ 1758.984209][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1758.985075][T28222] usbtmc 8-1:16.0: Unable to send data, error -71 [ 1759.039754][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.060016][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.081612][T22094] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/rc/rc0 [ 1759.085615][T22094] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/rc/rc0/input11 [ 1759.093500][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.110007][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.130112][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.150073][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.170798][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.190075][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.210112][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.230300][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.250010][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.270280][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.290329][T22094] mceusb 10-1:1.0: Error: mce write urb status = -71 [ 1759.311223][T22094] mceusb 10-1:1.0: Registered with mce emulator interface version 1 [ 1759.315264][T22094] mceusb 10-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1759.321646][T22094] usb 10-1: USB disconnect, device number 23 [ 1759.572709][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'. [ 1759.578699][T28229] bond0: entered promiscuous mode [ 1759.578752][T28229] bond_slave_0: entered promiscuous mode [ 1759.578895][T28229] bond_slave_1: entered promiscuous mode [ 1759.581868][T28229] batadv0: entered promiscuous mode [ 1759.582519][T28229] debugfs: 'hsr1' already exists in 'hsr' [ 1759.582542][T28229] Cannot create hsr debugfs directory [ 1759.583143][T28229] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1759.709510][T28241] netlink: 'syz.5.6121': attribute type 10 has an invalid length. [ 1759.714811][T28241] å1ÿ: entered promiscuous mode [ 1759.744142][T28241] bond0: (slave cå1ÿ): Enslaving as an active interface with an up link [ 1759.756106][T28242] netlink: 'syz.1.6122': attribute type 10 has an invalid length. [ 1760.761242][ T1342] usb 8-1: USB disconnect, device number 9 [ 1760.836353][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 1760.836430][ T43] audit: type=1800 audit(1788579842.164:5808): pid=28263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6131" name="UDC" dev="configfs" ino=187630 res=0 errno=0 [ 1760.837167][T28263] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1760.837281][T28263] udc usbip-vudc.0: failed to start g1: -19 [ 1760.838910][T28263] UDC core: g1: couldn't find an available UDC or it's busy [ 1761.197363][T28281] syzkaller0: entered promiscuous mode [ 1761.197440][T28281] syzkaller0: entered allmulticast mode [ 1761.338631][ T43] audit: type=1800 audit(1788579842.664:5809): pid=28288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6141" name="UDC" dev="configfs" ino=188468 res=0 errno=0 [ 1761.340320][T28288] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1761.342213][T28288] udc usbip-vudc.0: failed to start g1: -19 [ 1761.343717][T28288] UDC core: g1: couldn't find an available UDC or it's busy [ 1761.599745][T19856] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1761.759678][T19856] usb 6-1: Using ep0 maxpacket: 16 [ 1761.762788][T19856] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1761.766617][T19856] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1761.771098][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.775743][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.781436][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.785944][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.790864][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.795734][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.799302][T28296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.802879][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.807916][T19856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.813184][T19856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1761.816437][T19856] usb 6-1: SerialNumber: syz [ 1761.820501][T19856] usb 6-1: config 0 descriptor?? [ 1761.822175][ T43] audit: type=1800 audit(1788579843.154:5810): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=530196 res=0 errno=0 [ 1761.823787][ T43] audit: type=1800 audit(1788579843.154:5811): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=530226 res=0 errno=0 [ 1761.824558][ T43] audit: type=1800 audit(1788579843.154:5812): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=530203 res=0 errno=0 [ 1761.824941][ T43] audit: type=1800 audit(1788579843.154:5813): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=530204 res=0 errno=0 [ 1761.825776][ T43] audit: type=1800 audit(1788579843.154:5814): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=530205 res=0 errno=0 [ 1761.862191][T19856] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 1762.072258][ T43] audit: type=1800 audit(1788579843.404:5815): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=530318 res=0 errno=0 [ 1762.072383][T28290] input: syz1 as /devices/virtual/input/input13 [ 1762.083593][ T43] audit: type=1800 audit(1788579843.414:5816): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=530333 res=0 errno=0 [ 1762.092309][ T43] audit: type=1800 audit(1788579843.424:5817): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=530336 res=0 errno=0 [ 1762.256532][T28304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1762.259819][ T1342] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1762.429859][ T1342] usb 10-1: Using ep0 maxpacket: 8 [ 1762.430522][ T1342] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1762.431610][ T1342] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1762.431647][ T1342] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1762.431669][ T1342] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1762.431689][ T1342] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1762.431757][ T1342] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1762.431776][ T1342] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1762.431809][ T1342] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.643238][ T1342] usb 10-1: usb_control_msg returned -32 [ 1762.643295][ T1342] usbtmc 10-1:16.0: can't read capabilities [ 1762.644818][T28301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.645105][T28301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.765754][T28314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1762.787457][T28316] syzkaller0: entered promiscuous mode [ 1762.787538][T28316] syzkaller0: entered allmulticast mode [ 1762.849891][T28301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.850362][T28301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.167434][T28327] netlink: 'syz.3.6156': attribute type 10 has an invalid length. [ 1763.218619][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1763.218960][T28328] usbtmc 10-1:16.0: Unable to send data, error -71 [ 1763.852430][T28336] syzkaller0: entered promiscuous mode [ 1763.852490][T28336] syzkaller0: entered allmulticast mode [ 1763.959746][T28338] syzkaller0: entered promiscuous mode [ 1763.960603][T28338] syzkaller0: entered allmulticast mode [ 1763.986122][T28338] tipc: Started in network mode [ 1763.987991][T28338] tipc: Node identity 9625204468cd, cluster identity 4711 [ 1763.998217][T28338] tipc: Enabled bearer , priority 0 [ 1764.009350][T28337] tipc: Resetting bearer [ 1764.031462][T28337] tipc: Disabling bearer [ 1764.085828][T28340] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1764.129505][T28342] syz_tun: entered allmulticast mode [ 1764.166433][T28345] jffs2: notice: (28345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1764.206637][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1764.374041][ T5130] bcm5974 6-1:0.0: could not read from device [ 1764.380633][ T5130] bcm5974 6-1:0.0: could not read from device [ 1764.383819][T19856] usb 6-1: USB disconnect, device number 18 [ 1764.410268][T28366] syzkaller0: entered promiscuous mode [ 1764.412202][T28366] syzkaller0: entered allmulticast mode [ 1764.438524][T28364] syz.2.6179 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1764.438594][T28364] CPU: 2 UID: 0 PID: 28364 Comm: syz.2.6179 Not tainted syzkaller #0 PREEMPT(full) [ 1764.438621][T28364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1764.438631][T28364] Call Trace: [ 1764.438636][T28364] [ 1764.438642][T28364] dump_stack_lvl+0x100/0x190 [ 1764.438662][T28364] dump_header+0xfb/0x606 [ 1764.438676][T28364] oom_kill_process.cold+0xd/0x380 [ 1764.438692][T28364] out_of_memory+0x340/0x14f0 [ 1764.438711][T28364] ? __pfx_out_of_memory+0x10/0x10 [ 1764.438732][T28364] mem_cgroup_out_of_memory+0xc6/0x130 [ 1764.438745][T28364] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1764.438757][T28364] ? find_held_lock+0x2b/0x80 [ 1764.438772][T28364] ? do_raw_spin_unlock+0x145/0x1e0 [ 1764.438790][T28364] ? _raw_spin_unlock+0x28/0x50 [ 1764.438805][T28364] try_charge_memcg+0x783/0xf60 [ 1764.438825][T28364] ? __pfx_try_charge_memcg+0x10/0x10 [ 1764.438841][T28364] ? find_held_lock+0x2b/0x80 [ 1764.438852][T28364] ? rcu_read_unlock+0x17/0x60 [ 1764.438869][T28364] ? rcu_read_unlock+0x17/0x60 [ 1764.438890][T28364] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 1764.438913][T28364] ? kasan_save_track+0x14/0x30 [ 1764.438927][T28364] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 1764.438940][T28364] ? seq_open+0x55/0x170 [ 1764.438960][T28364] seq_open+0x55/0x170 [ 1764.438977][T28364] kernfs_fop_open+0x590/0xd50 [ 1764.438997][T28364] do_dentry_open+0x6ab/0x14d0 [ 1764.439009][T28364] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1764.439029][T28364] vfs_open+0x82/0x3f0 [ 1764.439046][T28364] path_openat+0x19fa/0x2440 [ 1764.439062][T28364] ? __pfx_path_openat+0x10/0x10 [ 1764.439079][T28364] do_file_open+0x20e/0x430 [ 1764.439093][T28364] ? __pfx_do_file_open+0x10/0x10 [ 1764.439123][T28364] ? _raw_spin_unlock+0x28/0x50 [ 1764.439137][T28364] ? alloc_fd+0x471/0x7a0 [ 1764.439155][T28364] do_sys_openat2+0x10f/0x1e0 [ 1764.439172][T28364] ? __pfx_do_sys_openat2+0x10/0x10 [ 1764.439187][T28364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1764.439207][T28364] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1764.439223][T28364] __ia32_compat_sys_openat+0x12d/0x210 [ 1764.439241][T28364] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1764.439264][T28364] do_int80_emulation+0x166/0x650 [ 1764.439281][T28364] asm_int80_emulation+0x1a/0x20 [ 1764.439294][T28364] RIP: 0023:0xf71875ab [ 1764.439304][T28364] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1764.439315][T28364] RSP: 002b:00000000f543d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1764.439327][T28364] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f543d490 [ 1764.439334][T28364] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1764.439341][T28364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1764.439348][T28364] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1764.439355][T28364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1764.439369][T28364] [ 1764.450644][T28364] memory: usage 8kB, limit 8kB, failcnt 21 [ 1764.450656][T28364] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1764.450664][T28364] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1764.450671][T28364] Memory cgroup stats for /syz2/test: [ 1764.450863][T28364] cache 0 [ 1764.450869][T28364] rss 0 [ 1764.450874][T28364] rss_huge 0 [ 1764.450878][T28364] shmem 0 [ 1764.450882][T28364] mapped_file 0 [ 1764.450887][T28364] dirty 0 [ 1764.450891][T28364] writeback 0 [ 1764.450896][T28364] workingset_refault_anon 0 [ 1764.451508][T28364] workingset_refault_file 0 [ 1764.451517][T28364] swap 0 [ 1764.451521][T28364] swapcached 0 [ 1764.451526][T28364] pgpgin 0 [ 1764.451531][T28364] pgpgout 0 [ 1764.451535][T28364] pgfault 0 [ 1764.451543][T28364] pgmajfault 0 [ 1764.451548][T28364] inactive_anon 0 [ 1764.451553][T28364] active_anon 0 [ 1764.451558][T28364] inactive_file 0 [ 1764.451562][T28364] active_file 0 [ 1764.451566][T28364] unevictable 0 [ 1764.451571][T28364] hierarchical_memory_limit 8192 [ 1764.451576][T28364] hierarchical_memsw_limit 9223372036854771712 [ 1764.451581][T28364] total_cache 0 [ 1764.451586][T28364] total_rss 0 [ 1764.451590][T28364] total_rss_huge 0 [ 1764.451594][T28364] total_shmem 0 [ 1764.451599][T28364] total_mapped_file 0 [ 1764.451604][T28364] total_dirty 0 [ 1764.451608][T28364] total_writeback 0 [ 1764.451613][T28364] total_workingset_refault_anon 0 [ 1764.451618][T28364] total_workingset_refault_file 0 [ 1764.451623][T28364] total_swap 0 [ 1764.451628][T28364] total_swapcached 0 [ 1764.451632][T28364] total_pgpgin 0 [ 1764.451637][T28364] total_pgpgout 0 [ 1764.451641][T28364] total_pgfault 0 [ 1764.451646][T28364] total_pgmajfault 0 [ 1764.451651][T28364] total_inactive_anon 0 [ 1764.451655][T28364] total_active_anon 0 [ 1764.451659][T28364] total_inactive_file 0 [ 1764.451663][T28364] total_active_file 0 [ 1764.451667][T28364] total_unevictable 0 [ 1764.451672][T28364] anon_cost 0 [ 1764.451676][T28364] file_cost 0 [ 1764.451680][T28364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.6179,pid=28363,uid=0 [ 1764.452406][T28364] Memory cgroup out of memory: Killed process 28363 (syz.2.6179) total-vm:104072kB, anon-rss:216kB, file-rss:23016kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1764.466419][T28366] tipc: Started in network mode [ 1764.466438][T28366] tipc: Node identity 323d76cdee84, cluster identity 4711 [ 1764.466631][T28366] tipc: Enabled bearer , priority 0 [ 1764.475221][T28365] tipc: Resetting bearer [ 1764.497812][T28365] tipc: Disabling bearer [ 1764.592145][T28370] syz_tun: entered allmulticast mode [ 1764.613778][T28372] netlink: 'syz.2.6175': attribute type 1 has an invalid length. [ 1764.613798][T28372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1764.645271][T28376] jffs2: notice: (28376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1764.969803][T19856] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1765.021091][T22094] usb 10-1: USB disconnect, device number 24 [ 1765.040286][T28393] netlink: 'syz.1.6186': attribute type 1 has an invalid length. [ 1765.042922][T28393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1765.063073][T28395] tipc: Started in network mode [ 1765.063140][T28395] tipc: Node identity , cluster identity 4711 [ 1765.063188][T28395] tipc: Failed to obtain node identity [ 1765.063218][T28395] tipc: Enabling of bearer rejected, failed to enable media [ 1765.106195][T28399] å1ÿ: entered allmulticast mode [ 1765.131872][T28401] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1765.135551][T28401] udc usbip-vudc.0: failed to start g1: -19 [ 1765.137783][T28401] UDC core: g1: couldn't find an available UDC or it's busy [ 1765.140251][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6191'. [ 1765.141651][T19856] usb 7-1: Using ep0 maxpacket: 16 [ 1765.146269][T19856] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1765.146291][T19856] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 1765.153244][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.157234][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.164213][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.167683][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.175368][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.179855][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.184658][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.188298][T19856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.192737][T19856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1765.195310][T19856] usb 7-1: SerialNumber: syz [ 1765.199000][T19856] usb 7-1: config 0 descriptor?? [ 1765.203655][T19856] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 1765.286033][T28413] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1765.416921][T28385] input: syz1 as /devices/virtual/input/input15 [ 1765.464211][T28421] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1765.464282][T28421] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1765.489777][ T5840] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1765.579812][T13348] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1765.650017][ T5840] usb 10-1: Using ep0 maxpacket: 32 [ 1765.650751][ T5840] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1765.651592][ T5840] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.651617][ T5840] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1765.651632][ T5840] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1765.651647][ T5840] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1765.672048][ T5840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.672099][ T5840] usb 10-1: Product: syz [ 1765.672138][ T5840] usb 10-1: Manufacturer: syz [ 1765.672148][ T5840] usb 10-1: SerialNumber: syz [ 1765.678542][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1765.682772][ T5840] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input16 [ 1765.729728][T13348] usb 8-1: Using ep0 maxpacket: 32 [ 1765.730208][T13348] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1765.730980][T13348] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.731001][T13348] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1765.731014][T13348] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1765.731028][T13348] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1765.753729][T13348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.753788][T13348] usb 8-1: Product: syz [ 1765.753802][T13348] usb 8-1: Manufacturer: syz [ 1765.753814][T13348] usb 8-1: SerialNumber: syz [ 1765.760310][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1765.764983][T13348] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input17 [ 1767.729841][ T5130] bcm5974 7-1:0.0: could not read from device [ 1767.733310][ T5130] bcm5974 7-1:0.0: could not read from device [ 1767.735979][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 1767.736043][ T43] audit: type=1800 audit(1788579849.064:5861): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=531033 res=0 errno=0 [ 1767.738127][ T5130] bcm5974 7-1:0.0: could not read from device [ 1767.740444][T19856] usb 7-1: USB disconnect, device number 9 [ 1767.746359][ T43] audit: type=1800 audit(1788579849.084:5862): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=531073 res=0 errno=0 [ 1767.748400][ T43] audit: type=1800 audit(1788579849.084:5863): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=531089 res=0 errno=0 [ 1767.755237][ T43] audit: type=1800 audit(1788579849.094:5864): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=531092 res=0 errno=0 [ 1767.759785][ T43] audit: type=1800 audit(1788579849.094:5865): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=531091 res=0 errno=0 [ 1767.759836][ T43] audit: type=1800 audit(1788579849.094:5866): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=531090 res=0 errno=0 [ 1767.759872][ T43] audit: type=1800 audit(1788579849.094:5867): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=531081 res=0 errno=0 [ 1767.759910][ T43] audit: type=1800 audit(1788579849.094:5868): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconf ** replaying previous printk message ** [ 1767.759910][ T43] audit: type=1800 audit(1788579849.094:5868): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=531084 res=0 errno=0 [ 1767.763288][ T43] audit: type=1800 audit(1788579849.094:5869): pid=28177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=531077 res=0 errno=0 [ 1767.778279][ T43] audit: type=1800 audit(1788579849.104:5870): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=531105 res=0 errno=0 [ 1767.780278][T28428] syz.2.6200 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1767.780300][T28428] CPU: 0 UID: 0 PID: 28428 Comm: syz.2.6200 Not tainted syzkaller #0 PREEMPT(full) [ 1767.780316][T28428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1767.780325][T28428] Call Trace: [ 1767.780331][T28428] [ 1767.780337][T28428] dump_stack_lvl+0x100/0x190 [ 1767.780356][T28428] dump_header+0xfb/0x606 [ 1767.780371][T28428] oom_kill_process.cold+0xd/0x380 [ 1767.780387][T28428] out_of_memory+0x340/0x14f0 [ 1767.780408][T28428] ? __pfx_out_of_memory+0x10/0x10 [ 1767.780427][T28428] mem_cgroup_out_of_memory+0xc6/0x130 [ 1767.780441][T28428] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1767.780470][T28428] ? find_held_lock+0x2b/0x80 [ 1767.780488][T28428] ? do_raw_spin_unlock+0x145/0x1e0 [ 1767.780507][T28428] ? _raw_spin_unlock+0x28/0x50 [ 1767.780523][T28428] try_charge_memcg+0x783/0xf60 [ 1767.780547][T28428] ? __pfx_try_charge_memcg+0x10/0x10 [ 1767.780565][T28428] ? find_held_lock+0x2b/0x80 [ 1767.780576][T28428] ? rcu_read_unlock+0x17/0x60 [ 1767.780593][T28428] ? rcu_read_unlock+0x17/0x60 [ 1767.780615][T28428] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 1767.780638][T28428] ? kasan_save_track+0x14/0x30 [ 1767.780653][T28428] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 1767.780666][T28428] ? alloc_empty_file+0x5b/0x1c0 [ 1767.780685][T28428] alloc_empty_file+0x5b/0x1c0 [ 1767.780701][T28428] path_openat+0xdb/0x2440 [ 1767.780717][T28428] ? __pfx_path_openat+0x10/0x10 [ 1767.780734][T28428] do_file_open+0x20e/0x430 [ 1767.780749][T28428] ? __pfx_do_file_open+0x10/0x10 [ 1767.780773][T28428] ? _raw_spin_unlock+0x28/0x50 [ 1767.780786][T28428] ? alloc_fd+0x471/0x7a0 [ 1767.780803][T28428] do_sys_openat2+0x10f/0x1e0 [ 1767.780819][T28428] ? __pfx_do_sys_openat2+0x10/0x10 [ 1767.780836][T28428] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1767.780856][T28428] __ia32_compat_sys_openat+0x12d/0x210 [ 1767.780873][T28428] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1767.780897][T28428] __do_fast_syscall_32+0x13a/0x8b0 [ 1767.780916][T28428] do_fast_syscall_32+0x32/0x70 [ 1767.780932][T28428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1767.780947][T28428] RIP: 0023:0xf704efec [ 1767.780962][T28428] Code: Unable to access opcode bytes at 0xf704efc2. [ 1767.780968][T28428] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1767.780980][T28428] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 1767.780987][T28428] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1767.780994][T28428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1767.781001][T28428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1767.781008][T28428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1767.781023][T28428] [ 1767.786712][T28430] LUN: removable file: (no medium) [ 1767.788251][T28428] memory: usage 8kB, limit 8kB, failcnt 57 [ 1767.788264][T28428] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1767.788272][T28428] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 1767.788279][T28428] Memory cgroup stats for /syz2/test: [ 1767.788591][T28428] cache 0 [ 1767.788599][T28428] rss 0 [ 1767.788603][T28428] rss_huge 0 [ 1767.788608][T28428] shmem 0 [ 1767.788612][T28428] mapped_file 0 [ 1767.788617][T28428] dirty 0 [ 1767.788621][T28428] writeback 0 [ 1767.788626][T28428] workingset_refault_anon 0 [ 1767.788631][T28428] workingset_refault_file 0 [ 1767.788636][T28428] swap 0 [ 1767.788641][T28428] swapcached 0 [ 1767.788645][T28428] pgpgin 0 [ 1767.788650][T28428] pgpgout 0 [ 1767.788654][T28428] pgfault 7 [ 1767.788659][T28428] pgmajfault 0 [ 1767.788663][T28428] inactive_anon 0 [ 1767.788667][T28428] active_anon 0 [ 1767.788671][T28428] inactive_file 0 [ 1767.788675][T28428] active_file 0 [ 1767.788679][T28428] unevictable 0 [ 1767.788683][T28428] hierarchical_memory_limit 8192 [ 1767.788688][T28428] hierarchical_memsw_limit 9223372036854771712 [ 1767.788693][T28428] total_cache 0 [ 1767.788697][T28428] total_rss 0 [ 1767.788701][T28428] total_rss_huge 0 [ 1767.788705][T28428] total_shmem 0 [ 1767.788709][T28428] total_mapped_file 0 [ 1767.788714][T28428] total_dirty 0 [ 1767.788718][T28428] total_writeback 0 [ 1767.788722][T28428] total_workingset_refault_anon 0 [ 1767.788727][T28428] total_workingset_refault_file 0 [ 1767.788731][T28428] total_swap 0 [ 1767.788735][T28428] total_swapcached 0 [ 1767.788739][T28428] total_pgpgin 0 [ 1767.788744][T28428] total_pgpgout 0 [ 1767.788748][T28428] total_pgfault 7 [ 1767.788751][T28428] total_pgmajfault 0 [ 1767.788755][T28428] total_inactive_anon 0 [ 1767.788760][T28428] total_active_anon 0 [ 1767.788764][T28428] total_inactive_file 0 [ 1767.788768][T28428] total_active_file 0 [ 1767.788772][T28428] total_unevictable 0 [ 1767.788776][T28428] anon_cost 0 [ 1767.788780][T28428] file_cost 0 [ 1767.788784][T28428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.6200,pid=28427,uid=0 [ 1767.794042][T28428] Memory cgroup out of memory: Killed process 28427 (syz.2.6200) total-vm:104072kB, anon-rss:216kB, file-rss:22804kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1767.800107][T28430] [ 1767.881176][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1767.985263][T28430] ====================================================== [ 1767.987372][T28430] WARNING: possible circular locking dependency detected [ 1767.989457][T28430] syzkaller #0 Not tainted [ 1767.991059][T28430] ------------------------------------------------------ [ 1767.993481][T28430] syz.1.6209/28430 is trying to acquire lock: [ 1767.995581][T28430] ffff88805a926460 (sb_writers#5){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 1767.998173][T28430] [ 1767.998173][T28430] but task is already holding lock: [ 1768.000404][T28430] ffff88801cb1f120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1768.003287][T28430] [ 1768.003287][T28430] which lock already depends on the new lock. [ 1768.003287][T28430] [ 1768.006692][T28430] [ 1768.006692][T28430] the existing dependency chain (in reverse order) is: [ 1768.009532][T28430] [ 1768.009532][T28430] -> #3 (&common->filesem){++++}-{4:4}: [ 1768.012122][T28430] lock_acquire+0x1d1/0x380 [ 1768.013899][T28430] down_read+0x99/0x4c0 [ 1768.015444][T28430] fsg_show_file+0x20/0x180 [ 1768.016995][T28430] configfs_read_iter+0x426/0x6f0 [ 1768.018673][T28430] __kernel_read+0x397/0xad0 [ 1768.020234][T28430] integrity_kernel_read+0x7e/0xb0 [ 1768.021924][T28430] ima_calc_file_hash_tfm+0x25e/0x350 [ 1768.023680][T28430] ima_calc_file_hash+0x1e3/0x380 [ 1768.025320][T28430] ima_collect_measurement+0x94f/0xb30 [ 1768.027386][T28430] process_measurement+0xdfe/0x2350 [ 1768.029529][T28430] ima_file_check+0xcc/0x120 [ 1768.031275][T28430] security_file_post_open+0xc4/0x210 [ 1768.033056][T28430] path_openat+0x5cd/0x2440 [ 1768.034764][T28430] do_file_open+0x20e/0x430 [ 1768.036312][T28430] do_sys_openat2+0x10f/0x1e0 [ 1768.037884][T28430] __ia32_compat_sys_openat+0x12d/0x210 [ 1768.039768][T28430] __do_fast_syscall_32+0x13a/0x8b0 [ 1768.041515][T28430] do_fast_syscall_32+0x32/0x70 [ 1768.043198][T28430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.045264][T28430] [ 1768.045264][T28430] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 1768.047473][T28430] lock_acquire+0x1d1/0x380 [ 1768.049029][T28430] down_read+0x99/0x4c0 [ 1768.050505][T28430] __configfs_open_file+0xe8/0x9c0 [ 1768.052392][T28430] do_dentry_open+0x6ab/0x14d0 [ 1768.054016][T28430] vfs_open+0x82/0x3f0 [ 1768.055418][T28430] dentry_open+0x71/0xd0 [ 1768.056857][T28430] ima_calc_file_hash+0xe1/0x380 [ 1768.058471][T28430] ima_collect_measurement+0x94f/0xb30 [ 1768.060273][T28430] process_measurement+0xdfe/0x2350 [ 1768.062013][T28430] ima_file_check+0xcc/0x120 [ 1768.063596][T28430] security_file_post_open+0xc4/0x210 [ 1768.065517][T28430] path_openat+0x5cd/0x2440 [ 1768.067138][T28430] do_file_open+0x20e/0x430 [ 1768.068700][T28430] do_sys_openat2+0x10f/0x1e0 [ 1768.070301][T28430] __ia32_compat_sys_openat+0x12d/0x210 [ 1768.072156][T28430] __do_fast_syscall_32+0x13a/0x8b0 [ 1768.073865][T28430] do_fast_syscall_32+0x32/0x70 [ 1768.075487][T28430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.077503][T28430] [ 1768.077503][T28430] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1768.080071][T28430] lock_acquire+0x1d1/0x380 [ 1768.081602][T28430] __mutex_lock+0x1a4/0x1bd0 [ 1768.083188][T28430] process_measurement+0x5ab/0x2350 [ 1768.084887][T28430] ima_file_check+0xcc/0x120 [ 1768.086468][T28430] security_file_post_open+0xc4/0x210 [ 1768.088275][T28430] path_openat+0x5cd/0x2440 [ 1768.089854][T28430] do_file_open+0x20e/0x430 [ 1768.091520][T28430] do_sys_openat2+0x10f/0x1e0 [ 1768.093282][T28430] __x64_sys_openat+0x12d/0x210 [ 1768.095258][T28430] do_syscall_64+0x121/0x770 [ 1768.097099][T28430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.099135][T28430] [ 1768.099135][T28430] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 1768.101376][T28430] check_prev_add+0xeb/0xe60 [ 1768.102955][T28430] __lock_acquire+0x1492/0x1ec0 [ 1768.104655][T28430] lock_acquire+0x1d1/0x380 [ 1768.106175][T28430] mnt_want_write+0x6f/0x420 [ 1768.107729][T28430] lookup_open+0x150/0x1990 [ 1768.109258][T28430] path_openat+0xa2c/0x2440 [ 1768.110827][T28430] do_file_open+0x20e/0x430 [ 1768.112363][T28430] file_open_name+0x1c3/0x3e0 [ 1768.114019][T28430] filp_open+0x2e/0x50 [ 1768.115549][T28430] fsg_lun_open+0x6b/0x7b0 [ 1768.117201][T28430] fsg_store_file+0x1e7/0x450 [ 1768.118814][T28430] configfs_write_iter+0x302/0x4e0 [ 1768.120480][T28430] vfs_write+0x6af/0x1050 [ 1768.121946][T28430] ksys_write+0x12a/0x250 [ 1768.123443][T28430] __do_fast_syscall_32+0x13a/0x8b0 [ 1768.125218][T28430] do_fast_syscall_32+0x32/0x70 [ 1768.126964][T28430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.129130][T28430] [ 1768.129130][T28430] other info that might help us debug this: [ 1768.129130][T28430] [ 1768.132424][T28430] Chain exists of: [ 1768.132424][T28430] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 1768.132424][T28430] [ 1768.136446][T28430] Possible unsafe locking scenario: [ 1768.136446][T28430] [ 1768.138940][T28430] CPU0 CPU1 [ 1768.140736][T28430] ---- ---- [ 1768.142464][T28430] lock(&common->filesem); [ 1768.143903][T28430] lock(&p->frag_sem); [ 1768.145987][T28430] lock(&common->filesem); [ 1768.148179][T28430] rlock(sb_writers#5); [ 1768.149523][T28430] [ 1768.149523][T28430] *** DEADLOCK *** [ 1768.149523][T28430] [ 1768.152080][T28430] locks held by syz.1.6209/28430: 5, last CPU#1: [ 1768.154052][T28430] #0: ffff8880289862b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1768.156892][T28430] #1: ffff8880229cc460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1768.159786][T28430] #2: ffff888053d85480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1768.162943][T28430] #3: ffff88804cfbe670 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1768.165950][T28430] #4: ffff88801cb1f120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1768.168892][T28430] [ 1768.168892][T28430] stack backtrace: [ 1768.170761][T28430] CPU: 1 UID: 0 PID: 28430 Comm: syz.1.6209 Not tainted syzkaller #0 PREEMPT(full) [ 1768.173683][T28430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1768.176827][T28430] Call Trace: [ 1768.177890][T28430] [ 1768.178841][T28430] dump_stack_lvl+0x100/0x190 [ 1768.180325][T28430] print_circular_bug.cold+0x178/0x1be [ 1768.182054][T28430] check_noncircular+0x146/0x160 [ 1768.183636][T28430] check_prev_add+0xeb/0xe60 [ 1768.185109][T28430] __lock_acquire+0x1492/0x1ec0 [ 1768.186667][T28430] lock_acquire+0x1d1/0x380 [ 1768.188103][T28430] ? lookup_open+0x150/0x1990 [ 1768.189591][T28430] ? __pfx___might_resched+0x10/0x10 [ 1768.191271][T28430] ? find_held_lock+0x2b/0x80 [ 1768.192780][T28430] mnt_want_write+0x6f/0x420 [ 1768.194180][T28430] ? lookup_open+0x150/0x1990 [ 1768.195669][T28430] lookup_open+0x150/0x1990 [ 1768.197028][T28430] path_openat+0xa2c/0x2440 [ 1768.198396][T28430] ? __pfx_path_openat+0x10/0x10 [ 1768.199894][T28430] ? kasan_save_stack+0x3f/0x50 [ 1768.201456][T28430] ? kasan_save_stack+0x30/0x50 [ 1768.202999][T28430] ? kasan_save_track+0x14/0x30 [ 1768.204506][T28430] ? __kasan_slab_alloc+0x89/0x90 [ 1768.206045][T28430] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1768.207809][T28430] ? do_getname_kernel+0x5d/0x250 [ 1768.209349][T28430] ? filp_open+0x1d/0x50 [ 1768.210698][T28430] do_file_open+0x20e/0x430 [ 1768.212104][T28430] ? __pfx_do_file_open+0x10/0x10 [ 1768.213675][T28430] file_open_name+0x1c3/0x3e0 [ 1768.215165][T28430] ? __pfx_file_open_name+0x10/0x10 [ 1768.216783][T28430] ? do_getname_kernel+0x5d/0x250 [ 1768.218355][T28430] ? __asan_memcpy+0x3c/0x60 [ 1768.219808][T28430] ? do_getname_kernel+0x1be/0x250 [ 1768.221416][T28430] filp_open+0x2e/0x50 [ 1768.222796][T28430] fsg_lun_open+0x6b/0x7b0 [ 1768.224187][T28430] ? __pfx_down_read+0x10/0x10 [ 1768.225605][T28430] fsg_store_file+0x1e7/0x450 [ 1768.227036][T28430] configfs_write_iter+0x302/0x4e0 [ 1768.228556][T28430] vfs_write+0x6af/0x1050 [ 1768.229872][T28430] ? __pfx_configfs_write_iter+0x10/0x10 [ 1768.231561][T28430] ? __pfx_vfs_write+0x10/0x10 [ 1768.233026][T28430] ? find_held_lock+0x2b/0x80 [ 1768.234457][T28430] ksys_write+0x12a/0x250 [ 1768.235740][T28430] ? __pfx_ksys_write+0x10/0x10 [ 1768.237203][T28430] __do_fast_syscall_32+0x13a/0x8b0 [ 1768.238751][T28430] do_fast_syscall_32+0x32/0x70 [ 1768.240232][T28430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.242165][T28430] RIP: 0023:0xf7f44fec [ 1768.243450][T28430] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 1768.245466][T28430] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1768.248138][T28430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1768.250564][T28430] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.252974][T28430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1768.255364][T28430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1768.257711][T28430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1768.260131][T28430] SYZFAIL: failed to recv rpc [ 1768.263237][T28430] mass_storage.0/lun.0: unable to open backing file: fi fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1768.298255][ T5840] imon:send_packet: packet tx failed (-71) [ 1768.301942][T13348] imon:send_packet: packet tx failed (-71) [ 1768.309720][ T5840] imon 10-1:155.0: panel buttons/knobs setup failed [ 1768.309750][ T5840] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1768.309769][ T5840] (id 0x00) [ 1768.319658][T13348] imon 8-1:155.0: panel buttons/knobs setup failed [ 1768.321875][T13348] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1768.325062][T13348] (id 0x00) [ 1768.359659][ T5840] rc_core: IR keymap rc-imon-pad not found [ 1768.359688][ T5840] Registered IR keymap rc-empty [ 1768.359743][ T5840] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1768.359765][ T5840] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1768.363524][ T5840] imon:send_packet: packet tx failed (-71) [ 1768.381562][ T5840] imon 10-1:155.0: remote input dev register failed [ 1768.381717][ T5840] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 1768.386736][T13348] rc_core: IR keymap rc-imon-pad not found [ 1768.388872][T13348] Registered IR keymap rc-empty [ 1768.391192][T13348] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1768.394709][T13348] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1768.398261][T13348] imon:send_packet: packet tx failed (-71) [ 1768.410840][T23665] syz_tun (unregistering): left allmulticast mode [ 1768.419964][T13348] imon 8-1:155.0: remote input dev register failed [ 1768.420039][T13348] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 1768.421301][T23665] bond0: (slave syz_tun): Releasing backup interface [ 1768.423276][ T5840] imon 10-1:155.0: unable to initialize intf0, err 0 [ 1768.423288][ T5840] imon:imon_probe: failed to initialize context! [ 1768.423388][ T5840] imon 10-1:155.0: unable to register, err -19 [ 1768.425355][ T5840] usb 10-1: USB disconnect, device number 25 [ 1768.458537][T13348] imon 8-1:155.0: unable to initialize intf0, err 0 [ 1768.458585][T13348] imon:imon_probe: failed to initialize context! [ 1768.458610][T13348] imon 8-1:155.0: unable to register, err -19 [ 1768.459281][T13348] usb 8-1: USB disconnect, device number 10 [ 1768.483572][T28422] å1ÿ (unregistering): left allmulticast mode [ 1768.485896][T28422] bond0: (slave cå1ÿ): Releasing backup interface [ 1768.492400][T28430] syz_tun (unregistering): left allmulticast mode [ 1768.497352][T23089] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.632234][T23089] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.721289][T23089] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.741899][T23089] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.820524][T23089] bridge_slave_1: left allmulticast mode [ 1768.820572][T23089] bridge_slave_1: left promiscuous mode [ 1768.820685][T23089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.825050][T23089] bridge_slave_0: left allmulticast mode [ 1768.825065][T23089] bridge_slave_0: left promiscuous mode [ 1768.825135][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.856824][T23089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.865218][T23089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.868573][T23089] bond0 (unregistering): Released all slaves [ 1768.963429][T23089] tipc: Left network mode [ 1768.964805][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1769.073139][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1769.116528][T23089] hsr_slave_0: left promiscuous mode [ 1769.118655][T23089] hsr_slave_1: left promiscuous mode [ 1769.119108][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.119126][T23089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.121858][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.121870][T23089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.161094][T23089] veth1_macvtap: left promiscuous mode [ 1769.161150][T23089] veth0_macvtap: left promiscuous mode [ 1769.161223][T23089] veth1_vlan: left promiscuous mode [ 1769.161255][T23089] veth0_vlan: left promiscuous mode [ 1769.217815][T23089] team0 (unregistering): Port device team_slave_1 removed [ 1769.220493][T23089] team0 (unregistering): Port device team_slave_0 removed [ 1769.242144][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1769.332256][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1769.492601][T23089] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.522800][T23089] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.583014][T23089] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.642290][T23089] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.698976][T23089] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.743507][T23089] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.792646][T23089] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.796613][ T5448] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1769.841943][T23089] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.893122][ T5448] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1769.912728][T23089] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.964730][T23089] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.018229][T23089] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.040539][ T5448] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1770.062209][T23089] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.120562][T23089] bridge_slave_1: left allmulticast mode [ 1770.120611][T23089] bridge_slave_1: left promiscuous mode [ 1770.120707][T23089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.124911][T23089] bridge_slave_0: left allmulticast mode [ 1770.124934][T23089] bridge_slave_0: left promiscuous mode [ 1770.125067][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.134302][T23089] bridge_slave_1: left allmulticast mode [ 1770.136358][T23089] bridge_slave_1: left promiscuous mode [ 1770.136459][T23089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.141515][T23089] bridge_slave_0: left allmulticast mode [ 1770.143342][T23089] bridge_slave_0: left promiscuous mode [ 1770.145346][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.150626][T23089] bridge_slave_1: left allmulticast mode [ 1770.152737][T23089] bridge_slave_1: left promiscuous mode [ 1770.154631][T23089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.157516][T23089] bridge_slave_0: left allmulticast mode [ 1770.158985][T23089] bridge_slave_0: left promiscuous mode [ 1770.159079][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.206878][T23089] bond0 (unregistering): left promiscuous mode [ 1770.206926][T23089] bond_slave_0: left promiscuous mode [ 1770.207019][T23089] bond_slave_1: left promiscuous mode [ 1770.215147][T23089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.220805][T23089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.225252][T23089] bond0 (unregistering): Released all slaves [ 1770.250279][T23089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.255196][T23089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.259055][T23089] bond0 (unregistering): Released all slaves [ 1770.288291][T23089] bond0 (unregistering): left promiscuous mode [ 1770.288353][T23089] bond_slave_0: left promiscuous mode [ 1770.288483][T23089] bond_slave_1: left promiscuous mode [ 1770.294518][T23089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.298917][T23089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.303252][T23089] bond0 (unregistering): Released all slaves [ 1770.306443][ T5448] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1770.350571][T23089] tipc: Left network mode [ 1770.429290][ T5448] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1770.548290][ T5448] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1770.670959][ T5448] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1770.777347][ T5448] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1770.846917][T23089] batadv0: left promiscuous mode [ 1770.852554][T23089] hsr_slave_0: left promiscuous mode [ 1770.854807][T23089] hsr_slave_1: left promiscuous mode [ 1770.855501][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.855523][T23089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.859239][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.859251][T23089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.874322][T23089] hsr_slave_0: left promiscuous mode [ 1770.877463][T23089] hsr_slave_1: left promiscuous mode [ 1770.880326][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.883280][T23089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.886666][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.889563][T23089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.893160][T23089] batadv0: left promiscuous mode [ 1770.896944][T23089] hsr_slave_0: left promiscuous mode [ 1770.899704][T23089] hsr_slave_1: left promiscuous mode [ 1770.900098][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.900113][T23089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.902855][T23089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.902869][T23089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.913488][T23089] veth1_macvtap: left promiscuous mode [ 1770.913533][T23089] veth0_macvtap: left promiscuous mode [ 1770.913594][T23089] veth1_vlan: left promiscuous mode [ 1770.913637][T23089] veth0_vlan: left promiscuous mode [ 1770.921192][T23089] veth1_macvtap: left promiscuous mode [ 1770.921247][T23089] veth0_macvtap: left promiscuous mode [ 1770.921317][T23089] veth1_vlan: left promiscuous mode [ 1770.921344][T23089] veth0_vlan: left promiscuous mode [ 1770.930842][T23089] veth1_macvtap: left promiscuous mode [ 1770.930899][T23089] veth0_macvtap: left promiscuous mode [ 1770.931105][T23089] veth1_vlan: left promiscuous mode [ 1770.931140][T23089] veth0_vlan: left promiscuous mode [ 1771.047738][T23089] team0 (unregistering): Port device team_slave_1 removed [ 1771.050477][T23089] team0 (unregistering): Port device team_slave_0 removed [ 1771.099532][T23089] team0 (unregistering): Port device team_slave_1 removed [ 1771.107689][T23089] team0 (unregistering): Port device team_slave_0 removed [ 1771.215878][T23089] team0 (unregistering): Port device team_slave_1 removed [ 1771.219159][T23089] team0 (unregistering): Port device team_slave_0 removed [ 1771.240743][T27572] smc: removing ib device syz0 [ 1771.245597][ T5448] 8021q: adding VLAN 0 to HW filter on device eth35 [ 1771.245882][T19856] lo speed is unknown, defaulting to 1000 [ 1771.245899][T19856] syz0: Port: 1 Link DOWN [ 1771.254552][T27572] smbdirect: ib_dev[syz0] removed [ 1771.412629][ T5448] 8021q: adding VLAN 0 to HW filter on device eth34 [ 1771.522242][ T5448] 8021q: adding VLAN 0 to HW filter on device eth36 [ 1771.627275][ T5448] 8021q: adding VLAN 0 to HW filter on device eth37