last executing test programs: 12m33.750535696s ago: executing program 4 (id=12654): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 12m33.545304965s ago: executing program 4 (id=12659): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) 12m33.453105519s ago: executing program 4 (id=12661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000300)="8334", &(0x7f0000000180)=@udp6, 0x2}, 0x20) 12m33.309235565s ago: executing program 4 (id=12664): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) ppoll(&(0x7f0000000540)=[{r0, 0x3169}], 0x1, 0x0, 0x0, 0x0) 12m33.11198881s ago: executing program 4 (id=12668): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 12m32.893883724s ago: executing program 4 (id=12673): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) 12m16.717791152s ago: executing program 32 (id=12673): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) 7m27.199437638s ago: executing program 1 (id=17226): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) landlock_restrict_self(r0, 0x1) 7m27.128476774s ago: executing program 1 (id=17218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x3}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x9}) 7m26.98709718s ago: executing program 1 (id=17220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 7m25.966221372s ago: executing program 1 (id=17242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 7m25.658757206s ago: executing program 1 (id=17246): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 7m25.178866655s ago: executing program 1 (id=17250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 7m24.788606694s ago: executing program 33 (id=17250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 5m5.126784521s ago: executing program 5 (id=19194): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x18801, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1027, 0x0) 5m4.927183053s ago: executing program 5 (id=19199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) 5m4.701852742s ago: executing program 5 (id=19203): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000d490000003abb5e8d446025f18c57e24fa9a5de3ce97f4a7a21f144428d0d1c9764db90fffffffffd22968f3344afc75529c3006f87c3099e74c7bb3a9fc1ae88df455e1348db6415"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m2.706627429s ago: executing program 5 (id=19234): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 5m2.498983205s ago: executing program 5 (id=19236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00', r0}, 0x18) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x0, 0x0}, 0x30) 5m2.137602768s ago: executing program 5 (id=19242): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x0, 0xfffff038}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000016c0)=ANY=[], 0x0) 5m1.730041202s ago: executing program 34 (id=19242): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x0, 0xfffff038}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000016c0)=ANY=[], 0x0) 2m3.674221195s ago: executing program 7 (id=21495): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in=@rand_addr=0x64010101, 0x100, 0xffff, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x2, 0x1ff, 0x0, 0xf, 0x0, 0x4, 0x1}, {0x1, 0x8, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0x0, @in6=@mcast2, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xd5ac}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x1c, 0x0}}], 0x1, 0x0) close(r0) 2m3.439653586s ago: executing program 7 (id=21498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0xfffffffe, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 2m3.222914543s ago: executing program 7 (id=21502): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdd6d}, {0xd, 0x24, 0xf, 0x1, 0x8e1}, {0x6, 0x24, 0x1a, 0x4, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xf, 0x1}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1m59.99117268s ago: executing program 3 (id=21544): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 1m59.901401594s ago: executing program 7 (id=21546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x3f, 0x80, {0xd000, 0x80a0000}}, "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", "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"}) 1m59.47559722s ago: executing program 7 (id=21549): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m59.274852763s ago: executing program 7 (id=21552): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m59.09069576s ago: executing program 3 (id=21553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000e803"], 0x28}}, 0x40) 1m58.93050664s ago: executing program 3 (id=21555): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x6, 0x0, 0x1, r0}]) 1m58.677169761s ago: executing program 3 (id=21556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m58.488992351s ago: executing program 3 (id=21558): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000440)={0x0, 0xfffd}, 0x8) 1m57.472949251s ago: executing program 3 (id=21559): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x10000}}}, 0x90) 1m56.781349539s ago: executing program 35 (id=21559): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x10000}}}, 0x90) 1m43.115372521s ago: executing program 36 (id=21552): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.871020589s ago: executing program 0 (id=22912): mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000640)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 2.776529489s ago: executing program 0 (id=22914): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 2.696899587s ago: executing program 0 (id=22915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000001204730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.48592181s ago: executing program 0 (id=22917): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x4e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1.683941923s ago: executing program 9 (id=22928): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c) 1.586885925s ago: executing program 9 (id=22930): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.521254794s ago: executing program 2 (id=22932): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x100, 0x10}, &(0x7f00000000c0)=0xc) 1.435935269s ago: executing program 9 (id=22933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f00000001c0)=0x1, 0x4) 1.417287498s ago: executing program 0 (id=22934): socket$inet6(0xa, 0x800000000000002, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 1.379524675s ago: executing program 2 (id=22935): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.338526053s ago: executing program 8 (id=22936): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 1.240637675s ago: executing program 9 (id=22937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) close(r1) 1.190149026s ago: executing program 0 (id=22938): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37, 0x28, "56579902999843f13bba6bffba779cba80b4dd95ee9b32d355b1157e866423888e6b63c42f6b8401"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\aH\x00\x00'], 0x0, 0x0, 0x0, 0x0}) 1.118889413s ago: executing program 2 (id=22939): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x109200) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x2, 0x6800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 1.096269782s ago: executing program 8 (id=22940): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.073856762s ago: executing program 9 (id=22941): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.014490507s ago: executing program 6 (id=22942): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x800) 990.718539ms ago: executing program 2 (id=22943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x6, 0x0, @val=@iter={0x0}}, 0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) write$cgroup_int(r2, &(0x7f00000001c0)=0x700, 0x12) 892.154904ms ago: executing program 6 (id=22944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x1, 0x40000040, 0x0) 863.213534ms ago: executing program 2 (id=22945): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000540)='./file0\x00') 805.787396ms ago: executing program 8 (id=22946): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) 703.542216ms ago: executing program 2 (id=22947): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0xe8a3e000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 679.140276ms ago: executing program 6 (id=22948): symlinkat(&(0x7f0000000000)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1507, 0x400700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) 603.313994ms ago: executing program 8 (id=22949): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 500.643483ms ago: executing program 6 (id=22950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110000fbdb"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400"], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 477.199696ms ago: executing program 8 (id=22951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) sendmsg$inet(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x4004) 411.734802ms ago: executing program 9 (id=22952): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='gDw', 0x3}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 230.743677ms ago: executing program 8 (id=22953): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 168.427922ms ago: executing program 6 (id=22954): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)='d', 0x1}], 0x1, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=22955): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 8472 - 0 [ 1443.383102][T19289] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1443.392831][T19289] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1443.417175][T19289] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.425843][T19289] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1443.434477][T19289] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1443.460157][T19289] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.473861][T19289] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1443.484267][T19289] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1443.519803][T19289] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.546326][T19289] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1443.564871][T19289] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1443.582591][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20822'. [ 1444.776075][ T47] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1444.951297][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1444.960738][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 1444.970484][ T47] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1444.979535][ T47] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.990041][ T47] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1444.999259][ T47] usb 3-1: config 128 has no interface number 0 [ 1445.005785][ T47] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 3876, setting to 64 [ 1445.017486][ T47] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1445.029423][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1445.039206][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.047494][ T47] usb 3-1: Product: syz [ 1445.052247][ T47] usb 3-1: Manufacturer: syz [ 1445.073486][ T47] usb 3-1: SerialNumber: syz [ 1445.086645][T19333] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1445.374588][ T47] usb 3-1: USB disconnect, device number 100 [ 1445.659428][T19351] bond0: entered promiscuous mode [ 1445.698574][T19351] bond0: left promiscuous mode [ 1447.320039][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1447.511184][T19394] netlink: set zone limit has 4 unknown bytes [ 1447.732154][T19402] input: syz0 as /devices/virtual/input/input149 [ 1448.131661][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20873'. [ 1448.173968][T19416] macsec1: entered allmulticast mode [ 1448.180266][ T30] kauditd_printk_skb: 6524 callbacks suppressed [ 1448.180284][ T30] audit: type=1400 audit(2000000426.970:1536046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19420 comm="syz-executor" name="4285" dev="tmpfs" ino=21598 [ 1448.216224][T19416] bridge0: entered allmulticast mode [ 1448.222889][T19416] bridge0: port 1(macsec1) entered blocking state [ 1448.236888][T15042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.239815][T19416] bridge0: port 1(macsec1) entered disabled state [ 1448.244281][T15042] audit: audit_lost=102764 audit_rate_limit=0 audit_backlog_limit=64 [ 1448.264678][T19416] bridge0: left allmulticast mode [ 1448.268927][ T30] audit: type=1400 audit(2000000426.970:1536047): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19420 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1448.282093][T15042] audit: backlog limit exceeded [ 1448.304709][ T30] audit: type=1400 audit(2000000426.970:1536048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19420 comm="syz-executor" name="/" dev="proc" ino=1 [ 1448.308849][T15042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.330636][T15042] audit: audit_lost=102765 audit_rate_limit=0 audit_backlog_limit=64 [ 1448.333470][ T30] audit: type=1400 audit(2000000426.970:1536049): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19420 comm="syz-executor" name="/" dev="proc" ino=1 [ 1448.342672][ T30] audit: type=1400 audit(2000000426.970:1536050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19420 comm="syz-executor" name="8817" dev="proc" ino=169673 [ 1449.570085][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20887'. [ 1449.903379][T11822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1449.919746][T11822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1449.942213][T11822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1449.953416][T11822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1449.963858][T11822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1450.096832][T19455] wg1 speed is unknown, defaulting to 1000 [ 1450.514374][T19455] chnl_net:caif_netlink_parms(): no params data found [ 1450.876874][T19455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.896073][T19455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.907425][T19455] bridge_slave_0: entered allmulticast mode [ 1450.922208][T19455] bridge_slave_0: entered promiscuous mode [ 1450.941217][T19455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.951798][T19455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.960780][T19455] bridge_slave_1: entered allmulticast mode [ 1450.969702][T19455] bridge_slave_1: entered promiscuous mode [ 1451.081135][T19455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.110155][T19455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.160365][T19494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20905'. [ 1451.179030][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20905'. [ 1451.190615][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20905'. [ 1451.306102][T19455] team0: Port device team_slave_0 added [ 1451.327368][T19455] team0: Port device team_slave_1 added [ 1451.466987][T19455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.478639][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.535466][T19455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.561244][T19455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.571274][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.597898][T19455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.772658][T19455] hsr_slave_0: entered promiscuous mode [ 1451.793019][T19455] hsr_slave_1: entered promiscuous mode [ 1451.808332][T19455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1451.832018][T19455] Cannot create hsr debugfs directory [ 1452.206263][T11822] Bluetooth: hci0: command tx timeout [ 1452.234208][T19455] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.401114][T19455] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.597520][T19455] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.820263][T19455] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.407032][T19455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1453.451616][T19455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1453.487291][T19455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1453.535986][T19455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1453.548681][ T30] kauditd_printk_skb: 6031 callbacks suppressed [ 1453.548701][ T30] audit: type=1400 audit(2000000687.999:1541475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19542 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1453.592360][ T30] audit: type=1400 audit(2000000688.027:1541476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19542 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1453.621825][ T30] audit: type=1400 audit(2000000688.027:1541477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19542 comm="syz-executor" name="4299" dev="tmpfs" ino=21668 [ 1453.633945][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.642083][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.655234][ C1] audit: audit_lost=102968 audit_rate_limit=0 audit_backlog_limit=64 [ 1453.663394][ C1] audit: backlog limit exceeded [ 1453.688617][ T30] audit: type=1400 audit(2000000688.027:1541478): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=19542 comm="syz-executor" opid=19542 ocomm="syz-executor" [ 1453.722722][ T30] audit: type=1400 audit(2000000688.027:1541479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19542 comm="syz-executor" name="4299" dev="tmpfs" ino=21668 [ 1453.735296][T10597] audit: audit_lost=102969 audit_rate_limit=0 audit_backlog_limit=64 [ 1453.899965][T19455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.961678][T19455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.983003][T13185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.990206][T13185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.039626][ T864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.046871][ T864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.419451][T11822] Bluetooth: hci0: command tx timeout [ 1454.926283][T19455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.252506][T17833] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1455.445824][T17833] usb 4-1: Using ep0 maxpacket: 8 [ 1455.463256][T17833] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1455.489334][T17833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1455.507141][T17833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1455.541296][T17833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1455.569691][T17833] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1455.590497][T17833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.615342][T17833] usb 4-1: config 0 descriptor?? [ 1455.904398][T19455] veth0_vlan: entered promiscuous mode [ 1455.937488][T19455] veth1_vlan: entered promiscuous mode [ 1456.044832][T19455] veth0_macvtap: entered promiscuous mode [ 1456.059089][T19455] veth1_macvtap: entered promiscuous mode [ 1456.121887][T17833] redragon 0003:0C45:760B.008B: unknown main item tag 0x6 [ 1456.138046][T19455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.161196][T17833] redragon 0003:0C45:760B.008B: item fetching failed at offset 7/133 [ 1456.201739][T19455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.210379][T17833] redragon 0003:0C45:760B.008B: probe with driver redragon failed with error -22 [ 1456.245505][T19455] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.254477][T19455] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.265283][T19455] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.279015][T19455] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.362803][T17833] usb 4-1: USB disconnect, device number 124 [ 1456.654724][T11822] Bluetooth: hci0: command tx timeout [ 1456.672642][T13185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.702188][T13185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.769135][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.799765][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.977776][T19601] netlink: 'syz.0.20949': attribute type 1 has an invalid length. [ 1457.014696][T19601] netlink: 'syz.0.20949': attribute type 2 has an invalid length. [ 1457.045626][T19601] netlink: 'syz.0.20949': attribute type 1 has an invalid length. [ 1457.072611][T19601] netlink: 'syz.0.20949': attribute type 2 has an invalid length. [ 1458.865962][T11822] Bluetooth: hci0: command tx timeout [ 1458.897804][ T30] kauditd_printk_skb: 7406 callbacks suppressed [ 1458.897825][ T30] audit: type=1400 audit(2000000693.013:1548426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19666 comm="syz.0.20979" name="19667-4" dev="debugfs" ino=172153 [ 1458.934230][ T30] audit: type=1400 audit(2000000693.013:1548427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19666 comm="syz.0.20979" name="19667-4" dev="debugfs" ino=172153 [ 1458.977097][ T30] audit: type=1400 audit(2000000693.013:1548428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19666 comm="syz.0.20979" name="19667-4" dev="debugfs" ino=172153 [ 1458.990651][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1458.997983][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1459.011176][ C1] audit: audit_lost=103123 audit_rate_limit=0 audit_backlog_limit=64 [ 1459.019330][ C1] audit: backlog limit exceeded [ 1459.019622][ T5828] audit: audit_lost=103124 audit_rate_limit=0 audit_backlog_limit=64 [ 1459.024865][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1459.033553][T19671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1459.448728][ T5880] kernel write not supported for file /8880/attr/exec (pid: 5880 comm: kworker/0:5) [ 1459.870309][T19700] overlayfs: workdir and upperdir must be separate subtrees [ 1459.904044][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20995'. [ 1460.859392][T19735] netlink: 'syz.2.21011': attribute type 58 has an invalid length. [ 1460.868296][T19735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21011'. [ 1461.310304][T19752] netlink: 'syz.2.21019': attribute type 12 has an invalid length. [ 1461.333214][T19752] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.21019'. [ 1461.657090][T19763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21024'. [ 1462.405158][ T5880] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1462.621330][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.637166][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.668948][ T5880] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1462.693537][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.705590][ T5880] usb 3-1: config 0 descriptor?? [ 1463.186558][ T5880] elo 0003:04E7:0030.008C: item fetching failed at offset 5/7 [ 1463.205529][ T5880] elo 0003:04E7:0030.008C: parse failed [ 1463.226761][ T5880] elo 0003:04E7:0030.008C: probe with driver elo failed with error -22 [ 1463.285726][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21046'. [ 1463.448306][ T5880] usb 3-1: USB disconnect, device number 101 [ 1463.740791][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1464.062006][ T5880] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1464.264872][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1464.265344][ T30] kauditd_printk_skb: 8589 callbacks suppressed [ 1464.265362][ T30] audit: type=1400 audit(2000000698.017:1556413): lsm=SMACK fn=smack_file_fcntl action=granted subject="_" object="_" requested=l pid=19831 comm="syz.6.21058" path="/775/freezer.state" dev="tmpfs" ino=3950 [ 1464.281750][ T5880] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 1464.317227][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.317282][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.325169][ T5828] audit: audit_lost=103330 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.331713][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.331734][ C1] audit: audit_lost=103331 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.331752][ C1] audit: backlog limit exceeded [ 1464.332426][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.343608][ T5880] usb 4-1: config 0 has no interface number 0 [ 1464.346566][ C1] audit: audit_lost=103332 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.365212][ T5880] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1464.366049][ C1] audit: backlog limit exceeded [ 1464.393757][ T5880] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1464.446859][ T5880] usb 4-1: config 0 interface 126 has no altsetting 0 [ 1464.473548][ T5880] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1464.491680][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.525769][ T5880] usb 4-1: Product: syz [ 1464.530010][ T5880] usb 4-1: Manufacturer: syz [ 1464.543090][ T5880] usb 4-1: SerialNumber: syz [ 1464.559195][ T5880] usb 4-1: config 0 descriptor?? [ 1464.578638][T19821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1464.589560][T19821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1465.086661][ T5880] ir_usb 4-1:0.126: IR Dongle converter detected [ 1465.300735][ T5880] usb 4-1: IRDA class descriptor not found, device not bound [ 1465.583440][ T5880] usb 4-1: USB disconnect, device number 125 [ 1465.851150][T19876] netlink: 'syz.6.21076': attribute type 1 has an invalid length. [ 1465.860142][T19876] netlink: 'syz.6.21076': attribute type 4 has an invalid length. [ 1465.868915][T19876] netlink: 188 bytes leftover after parsing attributes in process `syz.6.21076'. [ 1465.878352][T19876] NCSI netlink: No device for ifindex 458760 [ 1466.422898][T19896] erspan0: Device is already in use. [ 1466.501490][ T5880] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1466.672244][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 1466.694476][ T5880] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1466.728156][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.747089][ T5880] usb 4-1: Product: syz [ 1466.768266][ T5880] usb 4-1: Manufacturer: syz [ 1466.772935][ T5880] usb 4-1: SerialNumber: syz [ 1466.805515][ T5880] usb 4-1: config 0 descriptor?? [ 1466.826724][ T5880] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1467.498493][ T5880] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1467.516796][ T5880] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1467.534667][ T5880] usb 4-1: USB disconnect, device number 126 [ 1468.189429][T19927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21097'. [ 1468.467253][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21102'. [ 1469.103123][T19954] netlink: 'syz.2.21109': attribute type 9 has an invalid length. [ 1469.145645][T19954] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.21109'. [ 1469.194067][T19954] netlink: 'syz.2.21109': attribute type 1 has an invalid length. [ 1469.620493][ T30] kauditd_printk_skb: 6733 callbacks suppressed [ 1469.620513][ T30] audit: type=1400 audit(2000000703.031:1562823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5832 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.695100][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.706850][ T30] audit: type=1400 audit(2000000703.031:1562824): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5832 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.713547][T19455] audit: audit_lost=103441 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.735879][T19971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.743475][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.750076][ C1] audit: audit_lost=103442 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.758194][ C1] audit: backlog limit exceeded [ 1469.763904][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.770491][ C1] audit: audit_lost=103443 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.952769][T19976] batadv_slave_0: entered promiscuous mode [ 1470.006557][T19976] batadv_slave_0: left promiscuous mode [ 1470.547637][T19998] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1471.342539][T20031] loop6: detected capacity change from 0 to 524287999 [ 1471.347157][T20032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21146'. [ 1472.362206][T20068] wg1 speed is unknown, defaulting to 1000 [ 1472.603823][ T47] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1472.770835][T20085] netlink: 52 bytes leftover after parsing attributes in process `syz.6.21169'. [ 1472.797321][ T47] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1472.809989][T20088] loop6: detected capacity change from 0 to 524287999 [ 1472.819961][ T47] usb 3-1: config 0 has no interface number 0 [ 1472.837442][ T47] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1472.850419][T20088] buffer_io_error: 5 callbacks suppressed [ 1472.850441][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.873864][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.874437][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.889053][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.900216][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.922027][ T47] usb 3-1: Product: syz [ 1472.939841][ T47] usb 3-1: Manufacturer: syz [ 1472.947491][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.968543][ T47] usb 3-1: SerialNumber: syz [ 1472.979241][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1472.987299][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1473.002241][ T47] usb 3-1: config 0 descriptor?? [ 1473.028099][T20091] binder: Binderfs stats mode cannot be changed during a remount [ 1473.050062][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1473.059846][T20088] ldm_validate_partition_table(): Disk read failed. [ 1473.067961][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1473.108832][T20088] Buffer I/O error on dev loop6, logical block 0, async page read [ 1473.125473][T20088] Dev loop6: unable to read RDB block 0 [ 1473.146415][T20088] loop6: unable to read partition table [ 1473.191790][T20088] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1473.416882][T20068] netlink: 'syz.2.21163': attribute type 13 has an invalid length. [ 1473.457159][T20068] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1473.549476][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21180'. [ 1473.554212][ T47] usb 3-1: probing VID:PID(2201:012C) [ 1473.593434][ T47] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1473.636929][ T47] vub300 3-1:0.239: probe with driver vub300 failed with error -22 [ 1473.696152][ T47] usb 3-1: USB disconnect, device number 102 [ 1473.927474][T20119] netlink: 88 bytes leftover after parsing attributes in process `syz.0.21186'. [ 1474.104966][T20125] netlink: 27 bytes leftover after parsing attributes in process `syz.3.21189'. [ 1474.566958][T20142] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21197'. [ 1474.584100][T20142] netlink: 'syz.7.21197': attribute type 7 has an invalid length. [ 1474.598841][T20142] netlink: 'syz.7.21197': attribute type 8 has an invalid length. [ 1474.613781][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21197'. [ 1475.000613][ T30] kauditd_printk_skb: 9787 callbacks suppressed [ 1475.000632][ T30] audit: type=1400 audit(2000000708.073:1571783): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20147 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1475.050882][ T30] audit: type=1400 audit(2000000708.101:1571784): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20147 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1475.118094][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1475.124676][T10597] audit: audit_lost=103721 audit_rate_limit=0 audit_backlog_limit=64 [ 1475.135286][T20152] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1475.135444][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1475.142633][T20152] audit: audit_lost=103722 audit_rate_limit=0 audit_backlog_limit=64 [ 1475.148430][ C1] audit: audit_lost=103723 audit_rate_limit=0 audit_backlog_limit=64 [ 1475.148452][ C1] audit: backlog limit exceeded [ 1475.149879][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1476.393199][T20193] netlink: 'syz.2.21216': attribute type 1 has an invalid length. [ 1476.805933][T20212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.127729][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21228'. [ 1477.137677][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21228'. [ 1477.902721][T20241] loop6: detected capacity change from 0 to 524287999 [ 1477.918258][T20241] ldm_validate_partition_table(): Disk read failed. [ 1477.938734][T20241] Dev loop6: unable to read RDB block 0 [ 1477.944897][T20241] loop6: unable to read partition table [ 1477.981108][T20241] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1478.056559][T20244] Invalid logical block size (3) [ 1478.104862][T20246] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 1478.128248][T20246] netlink: 'syz.0.21240': attribute type 10 has an invalid length. [ 1478.179468][T20246] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1478.370852][T20257] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 1478.751898][T15053] hid-generic C990:0003:0000.008D: unknown main item tag 0x0 [ 1478.763321][T15053] hid-generic C990:0003:0000.008D: unknown main item tag 0x0 [ 1478.784597][T15053] hid-generic C990:0003:0000.008D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1478.898375][T20278] bpf: Bad value for 'gid' [ 1480.367674][ T30] kauditd_printk_skb: 7832 callbacks suppressed [ 1480.367695][ T30] audit: type=1400 audit(2000000713.087:1578692): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20315 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1480.446273][ T30] audit: type=1400 audit(2000000713.096:1578693): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20316 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1480.491139][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.495765][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.498973][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.510937][ C1] audit: audit_lost=104033 audit_rate_limit=0 audit_backlog_limit=64 [ 1480.519078][ C1] audit: backlog limit exceeded [ 1480.524876][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.531478][ C1] audit: audit_lost=104034 audit_rate_limit=0 audit_backlog_limit=64 [ 1480.539907][ C1] audit: backlog limit exceeded [ 1482.940390][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.219809][T15053] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1483.229723][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21305'. [ 1483.393915][T15053] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1483.404285][T15053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.422778][T15053] usb 3-1: Product: syz [ 1483.433416][T15053] usb 3-1: Manufacturer: syz [ 1483.449077][T15053] usb 3-1: SerialNumber: syz [ 1483.468076][T15053] usb 3-1: config 0 descriptor?? [ 1483.944035][T15053] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1483.953345][T15053] usb 3-1: Firmware version (0.0) predates our first public release. [ 1483.962962][T15053] usb 3-1: Please update to version 0.2 or newer [ 1484.173398][T20410] wg1 speed is unknown, defaulting to 1000 [ 1484.243572][T15053] usb 3-1: USB disconnect, device number 103 [ 1484.254069][T20417] overlay: filesystem on ./bus not supported [ 1484.494075][T20421] team0: Device gtp0 is of different type [ 1485.721822][ T30] kauditd_printk_skb: 7743 callbacks suppressed [ 1485.721842][ T30] audit: type=1400 audit(2000000718.091:1585471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1485.787222][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.794156][T19455] audit: audit_lost=104360 audit_rate_limit=0 audit_backlog_limit=64 [ 1485.805950][T20469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.812920][T19455] audit: backlog limit exceeded [ 1485.816874][ T30] audit: type=1400 audit(2000000718.091:1585472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1485.821059][T20469] audit: audit_lost=104361 audit_rate_limit=0 audit_backlog_limit=64 [ 1485.847027][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.854806][ T30] audit: type=1400 audit(2000000718.091:1585473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20465 comm="syz-executor" name="88" dev="tmpfs" ino=466 [ 1485.857240][T19455] audit: audit_lost=104362 audit_rate_limit=0 audit_backlog_limit=64 [ 1487.397616][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21363'. [ 1487.470562][T20527] ucma_write: process 1786 (syz.6.21365) changed security contexts after opening file descriptor, this is not allowed. [ 1487.745890][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21367'. [ 1487.763564][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21367'. [ 1488.125551][T20550] netlink: 44 bytes leftover after parsing attributes in process `syz.6.21375'. [ 1488.885927][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21386'. [ 1490.228080][T20610] netlink: 'syz.2.21402': attribute type 1 has an invalid length. [ 1490.247812][T20610] netlink: 'syz.2.21402': attribute type 4 has an invalid length. [ 1490.268385][T20610] netlink: 192 bytes leftover after parsing attributes in process `syz.2.21402'. [ 1491.007420][T20637] netem: change failed [ 1491.080949][ T30] kauditd_printk_skb: 8564 callbacks suppressed [ 1491.080969][ T30] audit: type=1400 audit(2000000723.114:1593466): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1491.181065][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.182104][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.190032][T20636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.194269][ C1] audit: audit_lost=104553 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.194291][ C1] audit: backlog limit exceeded [ 1491.218112][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.218136][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.224673][ C1] audit: audit_lost=104554 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.224691][ C1] audit: backlog limit exceeded [ 1491.248782][ T1136] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1491.462546][ T1136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.506399][ T1136] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1491.524338][ T1136] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 1491.544732][ T1136] usb 4-1: Manufacturer: syz [ 1491.553573][ T1136] usb 4-1: SerialNumber: syz [ 1491.581204][ T1136] usb 4-1: config 0 descriptor?? [ 1491.715553][T20650] SET target dimension over the limit! [ 1491.809137][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21423'. [ 1491.835358][T20654] nbd: couldn't find device at index 131080 [ 1491.843196][ T5880] usb 4-1: USB disconnect, device number 127 [ 1493.038283][T20696] nbd: nbd2 already in use [ 1493.273228][T13183] Bluetooth: hci5: Frame reassembly failed (-84) [ 1493.299329][T20702] Bluetooth: hci5: Frame reassembly failed (-84) [ 1493.881116][T20728] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1493.889738][T20728] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1494.070432][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1494.256006][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1494.268954][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.288851][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.301817][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1494.316438][ T47] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1494.345972][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.362093][ T47] usb 4-1: config 0 descriptor?? [ 1494.830937][ T47] microsoft 0003:045E:07DA.008E: unknown main item tag 0x0 [ 1494.838666][ T47] microsoft 0003:045E:07DA.008E: unknown main item tag 0x0 [ 1494.866742][ T47] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.008E/input/input152 [ 1494.892049][ T47] microsoft 0003:045E:07DA.008E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1495.116680][ T1136] usb 4-1: USB disconnect, device number 2 [ 1495.470613][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 1495.478674][T11822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1495.898263][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1495.942250][T20778] misc userio: Begin command sent, but we're already running [ 1496.433516][ T30] kauditd_printk_skb: 8121 callbacks suppressed [ 1496.433537][ T30] audit: type=1400 audit(2000000728.119:1601381): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5825 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1496.440837][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1496.466698][T15250] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1496.474346][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1496.474371][T19455] audit: audit_lost=104626 audit_rate_limit=0 audit_backlog_limit=64 [ 1496.474391][T19455] audit: backlog limit exceeded [ 1496.474409][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1496.481599][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1496.481623][ C1] audit: audit_lost=104627 audit_rate_limit=0 audit_backlog_limit=64 [ 1496.481642][ C1] audit: backlog limit exceeded [ 1496.482179][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1496.640328][T20805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21494'. [ 1496.660665][T15250] usb 3-1: config 0 has no interfaces? [ 1496.677083][T15250] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1496.689618][T15250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1496.718204][T15250] usb 3-1: SerialNumber: syz [ 1496.744269][T15250] usb 3-1: config 0 descriptor?? [ 1496.982188][T15250] usb 3-1: USB disconnect, device number 104 [ 1497.511216][T20833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1498.267284][T20861] Bluetooth: MGMT ver 1.23 [ 1498.744738][T20878] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.21531'. [ 1498.837036][T20882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21532'. [ 1498.847037][T20882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21532'. [ 1498.881696][ T5880] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1499.041967][T15250] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1499.059842][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.090019][ T5880] usb 4-1: config 0 has no interfaces? [ 1499.102639][ T5880] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1499.124702][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.159523][ T5880] usb 4-1: config 0 descriptor?? [ 1499.242314][T15250] usb 3-1: Using ep0 maxpacket: 8 [ 1499.258157][T15250] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1499.268984][T15250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.293597][T15250] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1499.305325][T15250] pvrusb2: ********** [ 1499.310670][T15250] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1499.325763][T15250] pvrusb2: Important functionality might not be entirely working. [ 1499.334270][T15250] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1499.367156][T15250] pvrusb2: ********** [ 1499.396519][ T47] usb 4-1: USB disconnect, device number 3 [ 1499.526309][ T2343] pvrusb2: Invalid write control endpoint [ 1499.685324][ T2343] pvrusb2: Invalid write control endpoint [ 1499.691114][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1499.715251][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1499.724826][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1499.755006][ T2343] pvrusb2: Device being rendered inoperable [ 1499.768801][ T2343] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1499.775955][ T2343] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1499.776075][T15250] usb 3-1: USB disconnect, device number 105 [ 1499.805635][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1499.817960][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1499.831552][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1499.965612][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21541'. [ 1499.988287][T20901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.008972][T20901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.026795][T20901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.042427][T20901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.792545][ T30] kauditd_printk_skb: 10311 callbacks suppressed [ 1501.792565][ T30] audit: type=1400 audit(2000000733.132:1610349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1501.825011][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.842342][T19455] audit: audit_lost=105077 audit_rate_limit=0 audit_backlog_limit=64 [ 1501.850780][ T30] audit: type=1400 audit(2000000733.132:1610350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="128" dev="tmpfs" ino=666 [ 1501.870867][T19455] audit: backlog limit exceeded [ 1501.892578][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.914060][T19455] audit: audit_lost=105078 audit_rate_limit=0 audit_backlog_limit=64 [ 1501.935830][ T30] audit: type=1400 audit(2000000733.132:1610351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1501.959859][T19455] audit: backlog limit exceeded [ 1501.964907][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1504.589220][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1504.625876][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1504.644921][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1504.667995][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1504.679296][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1505.210107][T13179] batman_adv: batadv0: Removing interface: gretap2 [ 1505.402795][T13179] tipc: Disabling bearer [ 1506.934902][ T5831] Bluetooth: hci4: command tx timeout [ 1506.977433][T13179]  (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1506.996797][T13179]  (unregistering): Released all slaves [ 1507.046360][T13179] bond0 (unregistering): Released all slaves [ 1507.077310][T13179] bond1 (unregistering): Released all slaves [ 1507.145172][ T30] kauditd_printk_skb: 24472 callbacks suppressed [ 1507.145193][ T30] audit: type=1400 audit(2000000738.109:1623254): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=19455 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1507.184273][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1507.184554][T20949] wg1 speed is unknown, defaulting to 1000 [ 1507.191296][ T5825] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1507.204487][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1507.211088][ C1] audit: audit_lost=108936 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.219213][ C1] audit: backlog limit exceeded [ 1507.219941][ T5828] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1507.226721][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1507.237188][ C1] audit: audit_lost=108937 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.237313][T19455] audit: audit_lost=108938 audit_rate_limit=0 audit_backlog_limit=64 [ 1507.369800][T13179] : left promiscuous mode [ 1507.537083][T13179] tipc: Left network mode [ 1507.748758][T13179] IPVS: stopping backup sync thread 19877 ... [ 1507.790217][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21573'. [ 1507.849006][T20909] Set syz1 is full, maxelem 65536 reached [ 1507.876364][T20949] chnl_net:caif_netlink_parms(): no params data found [ 1508.321785][T20979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21578'. [ 1508.575908][T13179] hsr_slave_0: left promiscuous mode [ 1508.602445][T13179] hsr_slave_1: left promiscuous mode [ 1509.155040][ T5831] Bluetooth: hci4: command tx timeout [ 1509.683003][T20993] misc userio: Can't change port type on an already running userio instance [ 1509.891155][T20995] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1511.378875][ T5831] Bluetooth: hci4: command tx timeout [ 1511.973983][T21015] input: syz1 as /devices/virtual/input/input154 [ 1512.500586][ T30] kauditd_printk_skb: 21025 callbacks suppressed [ 1512.500605][ T30] audit: type=1400 audit(2000000743.141:1639667): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="128" dev="tmpfs" ino=666 [ 1512.508954][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1512.550007][T19455] audit: audit_lost=110482 audit_rate_limit=0 audit_backlog_limit=64 [ 1512.552293][ T30] audit: type=1400 audit(2000000743.141:1639668): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1512.561647][T21020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1512.586569][ T30] audit: type=1400 audit(2000000743.141:1639669): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19455 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1512.588057][T19455] audit: backlog limit exceeded [ 1512.624315][T21020] audit: audit_lost=110483 audit_rate_limit=0 audit_backlog_limit=64 [ 1512.628813][ T30] audit: type=1400 audit(2000000743.141:1639670): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=19455 comm="syz-executor" name="/" dev="binder" ino=1 [ 1512.636236][T19455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.021676][T20949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.036879][T20949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.044229][T20949] bridge_slave_0: entered allmulticast mode [ 1513.106384][T20949] bridge_slave_0: entered promiscuous mode [ 1513.124544][T20949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.133199][T20949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.140636][T20949] bridge_slave_1: entered allmulticast mode [ 1513.171556][T20949] bridge_slave_1: entered promiscuous mode [ 1513.332143][T20949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.518004][T20949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.601690][ T5831] Bluetooth: hci4: command tx timeout [ 1513.821099][T20949] team0: Port device team_slave_0 added [ 1513.870938][T20949] team0: Port device team_slave_1 added [ 1514.172897][T20949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.207407][T20949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.246096][T20949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.304271][T20949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.333889][T20949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.410663][T20949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.457419][T17833] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1514.494491][T21046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21604'. [ 1514.586274][T13179] IPVS: stop unused estimator thread 0... [ 1514.605090][T20949] hsr_slave_0: entered promiscuous mode [ 1514.619096][T17833] usb 3-1: Using ep0 maxpacket: 16 [ 1514.621309][T20949] hsr_slave_1: entered promiscuous mode [ 1514.627456][T17833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.656482][T17833] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1514.679696][T17833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.705150][T17833] usb 3-1: config 0 descriptor?? [ 1515.175944][T17833] mcp2221 0003:04D8:00DD.008F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1515.550632][T20949] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1515.576669][T20949] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1515.599438][T20949] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1515.621302][T20949] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1515.652182][T17833] usb 3-1: USB disconnect, device number 106 [ 1515.970091][T20949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.023416][T20949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.065856][T20540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.073111][T20540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.125800][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.133052][T13183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.298235][T20949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.870899][ T30] kauditd_printk_skb: 16868 callbacks suppressed [ 1517.870919][ T30] audit: type=1400 audit(2000000748.174:1652433): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21085 comm="modprobe" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 1517.969456][T21089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1517.972405][T21090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1517.982995][ T30] audit: type=1400 audit(2000000748.174:1652434): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21085 comm="modprobe" name="/" dev="sda1" ino=2 [ 1517.993188][T21089] audit: audit_lost=111854 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.015772][T21090] audit: audit_lost=111855 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.018380][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1518.041017][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1518.047654][ C1] audit: audit_lost=111856 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.055811][ C1] audit: backlog limit exceeded [ 1518.180229][T11822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1518.214524][T11822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1518.248736][T11822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1518.265756][T11822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1518.278338][T11822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1518.529677][T21092] wg1 speed is unknown, defaulting to 1000 [ 1518.689034][T13183] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.858610][T13183] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.091478][T13183] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.187355][T21118] ALSA: mixer_oss: invalid OSS volume '' [ 1519.203617][T21118] ALSA: mixer_oss: invalid OSS volume '' [ 1519.221746][T21118] ALSA: mixer_oss: invalid OSS volume '' [ 1519.234635][T21118] ALSA: mixer_oss: invalid OSS volume '' [ 1519.264641][T13183] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.400952][T21121] vivid-000: disconnect [ 1519.416391][T21120] vivid-000: reconnect [ 1519.475614][T20949] veth0_vlan: entered promiscuous mode [ 1519.549934][T20949] veth1_vlan: entered promiscuous mode [ 1519.634359][T20949] veth0_macvtap: entered promiscuous mode [ 1519.666825][T20949] veth1_macvtap: entered promiscuous mode [ 1519.697603][T20949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.798949][T21092] chnl_net:caif_netlink_parms(): no params data found [ 1519.908112][T20949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.934246][T20949] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.966696][T20949] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.994878][T20949] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.021626][T20949] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.239818][T13183] bridge_slave_1: left allmulticast mode [ 1520.246779][T13183] bridge_slave_1: left promiscuous mode [ 1520.253260][T13183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.267050][T13183] bridge_slave_0: left allmulticast mode [ 1520.281890][T13183] bridge_slave_0: left promiscuous mode [ 1520.288660][T13183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.303013][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21638'. [ 1520.541708][T11822] Bluetooth: hci0: command tx timeout [ 1521.670822][T13183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.706945][T13183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.728977][T13183] bond0 (unregistering): Released all slaves [ 1522.200687][T21092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.220338][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.228420][T21092] bridge_slave_0: entered allmulticast mode [ 1522.248537][T21092] bridge_slave_0: entered promiscuous mode [ 1522.279741][T21092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.299914][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.316498][T21092] bridge_slave_1: entered allmulticast mode [ 1522.332421][T21092] bridge_slave_1: entered promiscuous mode [ 1522.586026][T21092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.603236][T15250] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1522.636716][T21092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.756846][T11822] Bluetooth: hci0: command 0x041b tx timeout [ 1522.777171][T15250] usb 3-1: config 0 has an invalid interface number: 77 but max is 0 [ 1522.787480][T15250] usb 3-1: config 0 has no interface number 0 [ 1522.793674][T15250] usb 3-1: config 0 interface 77 has no altsetting 0 [ 1522.804975][T15250] usb 3-1: New USB device found, idVendor=22b8, idProduct=2c84, bcdDevice=44.0e [ 1522.814226][T15250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.868616][T21092] team0: Port device team_slave_0 added [ 1522.885186][T15250] usb 3-1: config 0 descriptor?? [ 1522.890260][T21092] team0: Port device team_slave_1 added [ 1522.900455][T15250] usb_serial_simple 3-1:0.77: moto_modem converter detected [ 1522.935270][T15250] usb 3-1: moto_modem converter now attached to ttyUSB0 [ 1522.969050][T13189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.991548][T13189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.007122][T13183] hsr_slave_0: left promiscuous mode [ 1523.015342][T13183] hsr_slave_1: left promiscuous mode [ 1523.027765][T13183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.044611][T13183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.064179][T13183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.071709][T13183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.125699][T13183] veth1_macvtap: left promiscuous mode [ 1523.131469][T13183] veth0_macvtap: left promiscuous mode [ 1523.137320][T13183] veth1_vlan: left promiscuous mode [ 1523.143485][T13183] veth0_vlan: left promiscuous mode [ 1523.151841][T15250] usb 3-1: USB disconnect, device number 107 [ 1523.164869][T15250] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 1523.181569][T15250] usb_serial_simple 3-1:0.77: device disconnected [ 1523.268657][ T30] kauditd_printk_skb: 5504 callbacks suppressed [ 1523.268680][ T30] audit: type=1400 audit(2000000753.206:1657638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1523.289490][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.306311][ T30] audit: type=1400 audit(2000000753.206:1657639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1523.319501][T10597] audit: audit_lost=111957 audit_rate_limit=0 audit_backlog_limit=64 [ 1523.342600][ T30] audit: type=1400 audit(2000000753.206:1657640): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1523.353358][T10597] audit: backlog limit exceeded [ 1523.373043][ T30] audit: type=1400 audit(2000000753.206:1657641): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1523.392726][ T30] audit: type=1400 audit(2000000753.206:1657642): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=10597 comm="syz-executor" name="890" dev="tmpfs" ino=4531 [ 1523.397094][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.422051][ T30] audit: type=1400 audit(2000000753.206:1657643): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10597 comm="syz-executor" path="/890" dev="tmpfs" ino=4531 [ 1524.353086][T13183] team0 (unregistering): Port device team_slave_1 removed [ 1524.426237][T13183] team0 (unregistering): Port device team_slave_0 removed [ 1524.977402][T11822] Bluetooth: hci0: command 0x041b tx timeout [ 1525.333225][T21212] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21666'. [ 1525.343265][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21666'. [ 1525.375420][T21092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.389713][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.417223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.431431][T21092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.445285][T21092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.452711][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.520076][T21092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.633800][T13179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.659939][T13179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.775221][T21092] hsr_slave_0: entered promiscuous mode [ 1525.800178][ T5877] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1525.803581][T21092] hsr_slave_1: entered promiscuous mode [ 1525.816275][T21092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.841912][T21092] Cannot create hsr debugfs directory [ 1525.972086][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 1525.982088][ T5877] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.007250][ T5877] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.041420][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1526.063797][ T5877] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1526.092342][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.124611][ T5877] usb 3-1: config 0 descriptor?? [ 1526.535843][T21092] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1526.578315][T21092] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1526.597434][ T5877] hid (null): global environment stack underflow [ 1526.605399][ T5877] hid (null): report_id 0 is invalid [ 1526.621956][ T5877] hid (null): global environment stack underflow [ 1526.632230][ T5877] hid (null): report_id 0 is invalid [ 1526.641803][T21092] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1526.656060][ T5877] hid (null): global environment stack underflow [ 1526.701626][T21092] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1526.850663][T15250] usb 3-1: USB disconnect, device number 108 [ 1526.932682][T21092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.974364][T21092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.023529][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.030820][T13189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.084318][T20540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.091525][T20540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.139476][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21683'. [ 1527.183395][T21251] netlink: 'syz.0.21683': attribute type 9 has an invalid length. [ 1527.202933][T11822] Bluetooth: hci0: command 0x041b tx timeout [ 1527.245393][T21251] macvlan3: entered allmulticast mode [ 1527.251121][T21251] veth0_macvtap: entered allmulticast mode [ 1527.595106][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21689'. [ 1528.244354][T21092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.587201][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21700'. [ 1528.621728][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21700'. [ 1528.642100][ T30] kauditd_printk_skb: 5851 callbacks suppressed [ 1528.642120][ T30] audit: type=1400 audit(2000000758.238:1663314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21297 comm="modprobe" name="libresolv.so.2" dev="sda1" ino=1130 [ 1528.672313][T21297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1528.672407][ T5828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1528.697322][T21297] audit: audit_lost=112020 audit_rate_limit=0 audit_backlog_limit=64 [ 1528.705489][T21297] audit: backlog limit exceeded [ 1528.712333][ T5828] audit: audit_lost=112021 audit_rate_limit=0 audit_backlog_limit=64 [ 1528.729827][T21297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1528.730003][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1528.736532][ T30] audit: type=1400 audit(2000000758.238:1663315): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21297 comm="modprobe" path="/lib/libresolv.so.2" dev="sda1" ino=1130 [ 1528.742956][ C1] audit: audit_lost=112022 audit_rate_limit=0 audit_backlog_limit=64 [ 1529.222377][T21092] veth0_vlan: entered promiscuous mode [ 1529.271752][T21092] veth1_vlan: entered promiscuous mode [ 1529.372893][T21092] veth0_macvtap: entered promiscuous mode [ 1529.394877][T21092] veth1_macvtap: entered promiscuous mode [ 1529.425265][T11822] Bluetooth: hci0: command 0x041b tx timeout [ 1529.450756][T21092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.469446][T21092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.518283][T21092] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.536397][T21092] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.551681][T21092] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.563194][T21092] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.697846][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21713'. [ 1530.037551][T21341] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1530.044137][T21341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1530.064802][T21341] vhci_hcd vhci_hcd.0: Device attached [ 1530.140832][T21315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1530.154483][T21315] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1530.176689][T21315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1530.188762][T21315] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1530.234382][T21342] vhci_hcd: connection closed [ 1530.235047][T13189] vhci_hcd: stop threads [ 1530.268838][T13189] vhci_hcd: release socket [ 1530.278090][T13189] vhci_hcd: disconnect device [ 1530.299472][T13185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.311423][T10076] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1530.341373][T13185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.349231][T10076] usb 49-1: enqueue for inactive port 0 [ 1530.437221][T10076] vhci_hcd: vhci_device speed not set [ 1530.465200][T13185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.474873][T13185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.631430][T21352] kvm: kvm [21351]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 1532.407263][T10076] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1532.594457][T10076] usb 9-1: Using ep0 maxpacket: 16 [ 1532.612989][T10076] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.634742][T10076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1532.653722][T10076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1532.664347][T10076] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1532.675993][T10076] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.704468][T10076] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1532.724034][T21420] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21753'. [ 1532.724248][T10076] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1532.750296][T10076] usb 9-1: Manufacturer: syz [ 1532.759108][T10076] usb 9-1: config 0 descriptor?? [ 1533.253244][T10076] rc_core: IR keymap rc-hauppauge not found [ 1533.271062][T10076] Registered IR keymap rc-empty [ 1533.282068][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.327673][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.360584][T10076] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1533.413643][T10076] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input155 [ 1533.456757][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.497848][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.529254][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.561414][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.582923][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.626067][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.647437][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.671196][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.707863][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.733713][T10076] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1533.766527][T10076] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1533.786285][T10076] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1533.812886][T10076] usb 9-1: USB disconnect, device number 2 [ 1533.994957][ T30] kauditd_printk_skb: 8806 callbacks suppressed [ 1533.994978][ T30] audit: type=1400 audit(2000000763.252:1671110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21456 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1534.053091][ T30] audit: type=1400 audit(2000000763.252:1671111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21456 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1534.079451][ T30] audit: type=1400 audit(2000000763.252:1671112): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21456 comm="syz-executor" name="921" dev="tmpfs" ino=4688 [ 1534.091698][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1534.099853][ T30] audit: type=1400 audit(2000000763.252:1671113): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=21456 comm="syz-executor" opid=21456 ocomm="syz-executor" [ 1534.125474][ T30] audit: type=1400 audit(2000000763.252:1671114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21456 comm="syz-executor" name="921" dev="tmpfs" ino=4688 [ 1534.148342][ T30] audit: type=1400 audit(2000000763.252:1671115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21456 comm="syz-executor" name="921" dev="tmpfs" ino=4688 [ 1534.168016][T10597] audit: audit_lost=112360 audit_rate_limit=0 audit_backlog_limit=64 [ 1534.177356][T10597] audit: backlog limit exceeded [ 1534.182976][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1534.281923][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21769'. [ 1534.298234][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21769'. [ 1534.914343][T21475] tap0: tun_chr_ioctl cmd 1074025681 [ 1535.306366][T21490] wg1 speed is unknown, defaulting to 1000 [ 1535.336002][T21495] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1535.603121][T10076] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1535.788012][T10076] usb 3-1: Using ep0 maxpacket: 32 [ 1535.814108][T10076] usb 3-1: config 0 has no interfaces? [ 1535.851510][T10076] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1535.878617][T10076] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1535.899806][T10076] usb 3-1: Product: syz [ 1535.909351][T10076] usb 3-1: Manufacturer: syz [ 1535.931610][T10076] usb 3-1: config 0 descriptor?? [ 1535.971146][T21519] random: crng reseeded on system resumption [ 1536.301722][ T5887] usb 3-1: USB disconnect, device number 109 [ 1537.983011][ T967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.031631][T21564] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1538.062508][T21564] syzkaller1: linktype set to 32 [ 1538.225335][ T967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.368476][ T967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.604504][ T967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.857493][ T5887] wg1 speed is unknown, defaulting to 1000 [ 1538.885512][ T5887] syz: Port: 1 Link DOWN [ 1539.059151][ T967] bridge0: port 3(batadv0) entered disabled state [ 1539.092158][ T967] batadv2: left allmulticast mode [ 1539.103322][ T967] batadv2: left promiscuous mode [ 1539.114659][ T967] bridge0: port 2(batadv2) entered disabled state [ 1539.134032][ T967] veth0_to_bridge: left allmulticast mode [ 1539.139838][ T967] veth0_to_bridge: left promiscuous mode [ 1539.159261][ T967] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1539.167905][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1539.184350][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1539.195766][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1539.211780][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1539.222328][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1539.282641][ T967] tipc: Resetting bearer [ 1539.356267][ T30] kauditd_printk_skb: 7035 callbacks suppressed [ 1539.356286][ T30] audit: type=1400 audit(2000000768.266:1677210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21590 comm="syz-executor" name="/" dev="proc" ino=1 [ 1539.396215][ T30] audit: type=1400 audit(2000000768.266:1677211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21590 comm="syz-executor" name="/" dev="proc" ino=1 [ 1539.431066][ T30] audit: type=1400 audit(2000000768.266:1677212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21590 comm="syz-executor" name="63" dev="proc" ino=181583 [ 1539.471897][ T30] audit: type=1400 audit(2000000768.266:1677213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=21590 comm="syz-executor" name="oom_score_adj" dev="proc" ino=181584 [ 1539.513015][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1539.526923][ T30] audit: type=1400 audit(2000000768.266:1677214): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21590 comm="syz-executor" path="/proc/63/oom_score_adj" dev="proc" ino=181584 [ 1539.556028][T21092] audit: audit_lost=112675 audit_rate_limit=0 audit_backlog_limit=64 [ 1539.565862][T21092] audit: backlog limit exceeded [ 1539.576699][ T30] audit: type=1400 audit(2000000768.266:1677215): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21590 comm="syz-executor" name="27" dev="tmpfs" ino=148 [ 1539.579668][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1539.757762][T21593] kvm: kvm [21592]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x0 [ 1539.806802][ T967] tipc: Disabling bearer [ 1540.242744][T15053] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1540.267578][ T967] team0: Port device geneve0 removed [ 1540.423724][T15053] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1540.446016][T15053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.470651][T15053] usb 10-1: config 0 descriptor?? [ 1540.481381][T15053] cp210x 10-1:0.0: cp210x converter detected [ 1540.920497][T15053] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1541.171982][T15053] cp210x 10-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1541.179962][T15053] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1541.189770][T15053] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1541.199215][T15053] usb 10-1: USB disconnect, device number 2 [ 1541.224934][T15053] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1541.238531][T15053] cp210x 10-1:0.0: device disconnected [ 1541.246372][ T967] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1541.260979][ T967] bond0 (unregistering): Released all slaves [ 1541.289860][ T967] bond1 (unregistering): Released all slaves [ 1541.311388][T21603] Bluetooth: MGMT ver 1.23 [ 1541.328825][ T967] bond2 (unregistering): Released all slaves [ 1541.364374][ T967] bond3 (unregistering): Released all slaves [ 1541.395267][ T967] bond4 (unregistering): Released all slaves [ 1541.417003][ T967] bond5 (unregistering): Released all slaves [ 1541.497787][ T5831] Bluetooth: hci3: command tx timeout [ 1541.600149][T21588] wg1 speed is unknown, defaulting to 1000 [ 1542.506784][T21588] chnl_net:caif_netlink_parms(): no params data found [ 1543.021374][T21588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.054388][T21588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.071096][T21588] bridge_slave_0: entered allmulticast mode [ 1543.116547][T21588] bridge_slave_0: entered promiscuous mode [ 1543.159993][T21588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.182944][T21588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.201203][T21588] bridge_slave_1: entered allmulticast mode [ 1543.213789][T21588] bridge_slave_1: entered promiscuous mode [ 1543.229958][ T967] : left promiscuous mode [ 1543.301006][ T967] : left promiscuous mode [ 1543.396606][T21588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.454329][ T967] tipc: Disabling bearer [ 1543.489048][ T967] tipc: Disabling bearer [ 1543.519866][T21588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.533577][ T967] tipc: Left network mode [ 1543.711907][ T5831] Bluetooth: hci3: command tx timeout [ 1543.764387][T21588] team0: Port device team_slave_0 added [ 1543.790747][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21852'. [ 1543.910344][T21588] team0: Port device team_slave_1 added [ 1544.145101][T21588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.152121][T21588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.216667][T21588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.297924][T21588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.304949][T21588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.365352][T21588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.513802][T21669] trusted_key: syz.9.21858 sent an empty control message without MSG_MORE. [ 1544.602088][ T967] hsr_slave_0: left promiscuous mode [ 1544.625058][ T967] hsr_slave_1: left promiscuous mode [ 1544.688689][ T967] veth0_macvtap: left promiscuous mode [ 1544.699679][ T967] veth1_vlan: left promiscuous mode [ 1544.708890][ T967] veth0_vlan: left promiscuous mode [ 1544.743795][ T30] kauditd_printk_skb: 3756 callbacks suppressed [ 1544.743839][ T30] audit: type=1400 audit(2000000773.298:1680815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1544.774161][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1544.795467][T21092] audit: audit_lost=112730 audit_rate_limit=0 audit_backlog_limit=64 [ 1544.801077][ T30] audit: type=1400 audit(2000000773.308:1680816): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1544.824521][T21092] audit: backlog limit exceeded [ 1544.836823][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1544.862348][ T30] audit: type=1400 audit(2000000773.308:1680817): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1544.884876][T21092] audit: audit_lost=112731 audit_rate_limit=0 audit_backlog_limit=64 [ 1544.910232][ T30] audit: type=1400 audit(2000000773.308:1680818): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1544.934021][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1545.401345][T21681] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21865'. [ 1545.466344][T21683] program syz.8.21866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1545.936930][ T5831] Bluetooth: hci3: command tx timeout [ 1547.116309][T21710] loop6: detected capacity change from 0 to 524287999 [ 1547.126486][T21710] buffer_io_error: 22 callbacks suppressed [ 1547.126505][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.148230][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.156676][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.215806][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.275276][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.284478][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.298906][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.319193][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.348857][T21710] ldm_validate_partition_table(): Disk read failed. [ 1547.368881][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.391957][T21710] Buffer I/O error on dev loop6, logical block 0, async page read [ 1547.403306][T21710] Dev loop6: unable to read RDB block 0 [ 1547.403859][T21710] loop6: unable to read partition table [ 1547.404107][T21710] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1547.424885][T21714] ldm_validate_partition_table(): Disk read failed. [ 1547.461855][T21714] Dev loop6: unable to read RDB block 0 [ 1547.477302][T21714] loop6: unable to read partition table [ 1547.483614][T21714] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1547.661439][T21720] program syz.8.21881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.001453][T21725] bridge0: entered allmulticast mode [ 1548.075662][T21588] hsr_slave_0: entered promiscuous mode [ 1548.107294][T21588] hsr_slave_1: entered promiscuous mode [ 1548.123556][T21588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.131252][T21588] Cannot create hsr debugfs directory [ 1548.153800][ T5831] Bluetooth: hci3: command tx timeout [ 1548.323082][T21731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.330784][T21731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.513519][T21731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.547057][T21731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.598004][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.703008][T21731] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.712503][T21731] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.722552][T21731] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.732531][T21731] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.525511][ T967] IPVS: stop unused estimator thread 0... [ 1549.933487][T21768] loop6: detected capacity change from 0 to 524287999 [ 1550.002411][T21768] ldm_validate_partition_table(): Disk read failed. [ 1550.057450][T21768] Dev loop6: unable to read RDB block 0 [ 1550.076046][T21768] loop6: unable to read partition table [ 1550.124704][ T30] kauditd_printk_skb: 4558 callbacks suppressed [ 1550.124727][ T30] audit: type=1400 audit(2000000778.322:1684897): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1550.153211][T21768] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1550.178940][ T30] audit: type=1400 audit(2000000778.322:1684898): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="55" dev="tmpfs" ino=292 [ 1550.205392][ T30] audit: type=1400 audit(2000000778.322:1684899): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=20949 comm="syz-executor" name="55" dev="tmpfs" ino=292 [ 1550.209510][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.229609][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.239150][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.242702][T21770] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.245712][ C1] audit: audit_lost=112892 audit_rate_limit=0 audit_backlog_limit=64 [ 1550.252562][T21092] audit: audit_lost=112893 audit_rate_limit=0 audit_backlog_limit=64 [ 1550.260315][ C1] audit: backlog limit exceeded [ 1550.275876][T21769] ldm_validate_partition_table(): Disk read failed. [ 1550.287838][T21769] Dev loop6: unable to read RDB block 0 [ 1550.310685][T21769] loop6: unable to read partition table [ 1550.319270][T21769] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1550.476654][T21588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1550.529265][T21588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1550.553196][T21588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1550.600906][T21588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1550.861470][T21789] netlink: 165 bytes leftover after parsing attributes in process `syz.6.21911'. [ 1550.898980][T21588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.965011][T21588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.002846][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.010097][T13183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.113397][T13185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.120672][T13185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.995020][ T47] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1552.031230][T21588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.076326][T21826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input156 [ 1552.158408][T21588] veth0_vlan: entered promiscuous mode [ 1552.177696][ T47] usb 9-1: config 54 has an invalid interface number: 154 but max is 0 [ 1552.186941][ T47] usb 9-1: config 54 has no interface number 0 [ 1552.218363][ T47] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1552.230679][T21588] veth1_vlan: entered promiscuous mode [ 1552.238100][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.246157][ T47] usb 9-1: Product: syz [ 1552.251330][ T47] usb 9-1: Manufacturer: syz [ 1552.256011][ T47] usb 9-1: SerialNumber: syz [ 1552.473373][T21588] veth0_macvtap: entered promiscuous mode [ 1552.523050][T21815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.555028][T21815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.567203][T21588] veth1_macvtap: entered promiscuous mode [ 1552.647762][ T47] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1552.657925][T13183] usb 9-1: Failed to submit usb control message: -71 [ 1552.657984][T13183] usb 9-1: unable to send the bmi data to the device: -71 [ 1552.680736][T13183] usb 9-1: unable to get target info from device [ 1552.690286][T13183] usb 9-1: could not get target info (-71) [ 1552.693721][T21588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.699708][T13183] usb 9-1: could not probe fw (-71) [ 1552.733571][ T47] usb 9-1: USB disconnect, device number 3 [ 1552.784266][T21588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.911888][T21588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.921554][T21588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.932402][T21588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.941378][T21588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.276950][T13189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.300237][T13189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.535633][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.557452][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.294207][T21882] mkiss: ax0: crc mode is auto. [ 1555.238905][T21912] loop5: detected capacity change from 0 to 63 [ 1555.485280][ T30] kauditd_printk_skb: 8149 callbacks suppressed [ 1555.485298][ T30] audit: type=1400 audit(2000000783.354:1692707): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1555.520700][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.523454][T21921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.527507][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.537553][T21921] audit: audit_lost=113010 audit_rate_limit=0 audit_backlog_limit=64 [ 1555.540395][ C1] audit: audit_lost=113011 audit_rate_limit=0 audit_backlog_limit=64 [ 1555.540417][ C1] audit: backlog limit exceeded [ 1555.551300][T21921] audit: backlog limit exceeded [ 1555.557500][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.566227][T21921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1555.609929][T21923] netlink: 40 bytes leftover after parsing attributes in process `syz.8.21966'. [ 1555.620183][T21923] sch_fq: defrate 0 ignored. [ 1558.149806][T15250] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1558.334806][T15250] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1558.353611][T15250] usb 3-1: config 0 has no interface number 0 [ 1558.369499][T15250] usb 3-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=83.43 [ 1558.381620][T15250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.390832][T15250] usb 3-1: Product: syz [ 1558.395146][T15250] usb 3-1: Manufacturer: syz [ 1558.400377][T15250] usb 3-1: SerialNumber: syz [ 1558.418975][T15250] usb 3-1: config 0 descriptor?? [ 1558.433710][T15250] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1558.598281][T22015] usb 3-1: USB disconnect, device number 110 [ 1559.122382][T21173] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1559.314839][T21173] usb 9-1: Using ep0 maxpacket: 8 [ 1559.338164][T21173] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1559.359196][T21173] usb 9-1: no configurations [ 1559.363906][T21173] usb 9-1: can't read configurations, error -22 [ 1560.281158][T22068] random: crng reseeded on system resumption [ 1560.293334][T22066] loop6: detected capacity change from 0 to 63 [ 1560.553076][T22076] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1560.857406][ T30] kauditd_printk_skb: 7891 callbacks suppressed [ 1560.857426][ T30] audit: type=1400 audit(2000000788.377:1700338): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1560.868760][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1560.884439][ T30] audit: type=1400 audit(2000000788.377:1700339): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=20949 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.0 dest=49434 netif=eth0 [ 1560.904307][T20949] audit: audit_lost=113100 audit_rate_limit=0 audit_backlog_limit=64 [ 1560.913272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.919859][ T30] audit: type=1400 audit(2000000788.377:1700340): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1560.948426][ T30] audit: type=1400 audit(2000000788.377:1700341): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1560.957638][T20949] audit: backlog limit exceeded [ 1560.989581][ T30] audit: type=1400 audit(2000000788.377:1700342): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=20949 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.0 dest=49434 netif=eth0 [ 1560.999897][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1561.033195][ T30] audit: type=1400 audit(2000000788.377:1700343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1562.122350][T22121] netlink: 'syz.9.22055': attribute type 4 has an invalid length. [ 1562.897331][T22150] xt_cgroup: invalid path, errno=-2 [ 1564.297117][T22197] netlink: 'syz.6.22088': attribute type 14 has an invalid length. [ 1564.639877][T22209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.700278][T22209] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1564.710124][T22209] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1564.719485][T22209] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1564.729487][T22209] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1564.839417][T22209] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1564.853300][T22209] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1564.872478][T22209] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1564.895417][T22209] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1565.002387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1565.004905][T22209] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.020967][T22209] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.029423][T22209] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.038016][T22209] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.192283][T22209] veth0_macvtap: left allmulticast mode [ 1565.219490][T22211] tap0: tun_chr_ioctl cmd 1074025677 [ 1565.225774][T22211] tap0: linktype set to 768 [ 1566.220942][ T30] kauditd_printk_skb: 8212 callbacks suppressed [ 1566.220963][ T30] audit: type=1400 audit(2000000793.391:1707915): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22251 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1566.265538][ T30] audit: type=1400 audit(2000000793.391:1707916): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22251 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1566.288597][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1566.288672][T10597] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1566.295206][ C1] audit: audit_lost=113319 audit_rate_limit=0 audit_backlog_limit=64 [ 1566.310005][ C1] audit: backlog limit exceeded [ 1566.315936][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1566.322542][ C1] audit: audit_lost=113320 audit_rate_limit=0 audit_backlog_limit=64 [ 1566.330730][ C1] audit: backlog limit exceeded [ 1566.335799][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1566.530347][T22254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.538347][T22254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.744147][T22254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.772195][T22254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.880902][T22254] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.890879][T22254] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.900646][T22254] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.913673][T22254] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.219631][T22273] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22122'. [ 1567.305519][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.312898][T22278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.560308][T22290] vivid-000: disconnect [ 1567.584488][T22283] vivid-000: reconnect [ 1567.713700][T22291] mkiss: ax0: crc mode is auto. [ 1567.945047][T22298] kvm: kvm [22297]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1568.009937][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22138'. [ 1568.228940][T22315] netlink: 'syz.9.22142': attribute type 13 has an invalid length. [ 1568.950871][T22345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.094106][T22351] autofs: Bad value for 'fd' [ 1569.391935][T22363] netlink: 'syz.9.22165': attribute type 9 has an invalid length. [ 1569.411557][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22165'. [ 1569.466109][T22363] macvlan2: entered promiscuous mode [ 1569.503031][T22363] hsr0: entered promiscuous mode [ 1569.518136][T22363] macvlan2: entered allmulticast mode [ 1569.523620][T22363] hsr0: entered allmulticast mode [ 1569.576001][T22363] hsr_slave_0: entered allmulticast mode [ 1569.585950][T22363] hsr_slave_1: entered allmulticast mode [ 1569.652504][T22370] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1570.070797][T22386] netlink: 146840 bytes leftover after parsing attributes in process `syz.6.22177'. [ 1570.447048][T22397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1570.495690][T22397] bridge0: port 4(bond1) entered blocking state [ 1570.537375][T22397] bridge0: port 4(bond1) entered disabled state [ 1570.575734][T22397] bond1: entered allmulticast mode [ 1570.599984][T22397] bond1: entered promiscuous mode [ 1570.615898][T22397] bridge0: port 4(bond1) entered blocking state [ 1570.625489][T22397] bridge0: port 4(bond1) entered forwarding state [ 1570.640984][T22404] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1570.650862][T22404] pim6reg0: linktype set to 778 [ 1570.704270][ T967] bridge0: port 4(bond1) entered disabled state [ 1571.055920][T22416] netlink: 164 bytes leftover after parsing attributes in process `syz.9.22188'. [ 1571.085919][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22188'. [ 1571.297518][T22425] misc userio: Invalid payload size [ 1571.580911][ T30] kauditd_printk_skb: 8859 callbacks suppressed [ 1571.580931][ T30] audit: type=1400 audit(2000000798.414:1716261): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=20949 comm="syz-executor" path="/126" dev="tmpfs" ino=653 [ 1571.606560][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1571.606581][T21092] audit: audit_lost=113495 audit_rate_limit=0 audit_backlog_limit=64 [ 1571.606597][T21092] audit: backlog limit exceeded [ 1571.606718][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1571.606734][T21092] audit: audit_lost=113496 audit_rate_limit=0 audit_backlog_limit=64 [ 1571.606750][T21092] audit: backlog limit exceeded [ 1571.606767][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1571.606781][T21092] audit: audit_lost=113497 audit_rate_limit=0 audit_backlog_limit=64 [ 1571.606797][T21092] audit: backlog limit exceeded [ 1572.294919][T22462] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22206'. [ 1572.459243][T22468] sctp: [Deprecated]: syz.8.22210 (pid 22468) Use of int in max_burst socket option deprecated. [ 1572.459243][T22468] Use struct sctp_assoc_value instead [ 1573.020339][ T1136] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1573.191462][ T1136] usb 10-1: Using ep0 maxpacket: 8 [ 1573.207679][ T1136] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1573.231918][ T1136] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.244810][T22496] netlink: 'syz.2.22225': attribute type 13 has an invalid length. [ 1573.255503][ T1136] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1573.262603][ T1136] pvrusb2: ********** [ 1573.271927][ T1136] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1573.282154][ T1136] pvrusb2: Important functionality might not be entirely working. [ 1573.295715][ T1136] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1573.316219][ T1136] pvrusb2: ********** [ 1573.408410][T22496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.416323][T22496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.482296][ T2343] pvrusb2: Invalid write control endpoint [ 1573.609634][ T2343] pvrusb2: Invalid write control endpoint [ 1573.615434][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1573.634308][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1573.642922][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1573.653114][ T2343] pvrusb2: Device being rendered inoperable [ 1573.659608][ T2343] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1573.667860][ T2343] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1573.679059][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1573.684970][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1573.722485][ T1136] usb 10-1: USB disconnect, device number 3 [ 1573.728683][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1573.752942][T22496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.806614][T22496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.995201][T22496] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.009512][T22496] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.019184][T22496] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.028919][T22496] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.282325][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22231'. [ 1574.304255][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22231'. [ 1574.691406][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22240'. [ 1575.109531][T22549] @: renamed from vlan0 [ 1575.256099][T22556] netlink: 'syz.2.22253': attribute type 46 has an invalid length. [ 1575.264267][T22556] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.22253'. [ 1576.193171][T22591] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1576.223490][T22590] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1576.352798][ T1136] IPVS: starting estimator thread 0... [ 1576.462583][T22594] IPVS: using max 32 ests per chain, 76800 per kthread [ 1576.821907][T22610] netlink: 'syz.9.22276': attribute type 1 has an invalid length. [ 1576.837018][T22610] netlink: 224 bytes leftover after parsing attributes in process `syz.9.22276'. [ 1576.941156][T10597] audit_log_start: 10164 callbacks suppressed [ 1576.941174][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1576.943486][ T30] audit: type=1400 audit(2000004898.418:1725387): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1576.953196][T10597] audit: audit_lost=113846 audit_rate_limit=0 audit_backlog_limit=64 [ 1576.953831][ T30] audit: type=1400 audit(2000004898.418:1725388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10597 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1576.981189][T10597] audit: backlog limit exceeded [ 1577.010193][T22613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1577.016756][T22613] audit: audit_lost=113847 audit_rate_limit=0 audit_backlog_limit=64 [ 1577.026352][T22614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1577.033617][T22614] audit: audit_lost=113848 audit_rate_limit=0 audit_backlog_limit=64 [ 1577.035511][T21588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.005565][T22656] sctp: [Deprecated]: syz.8.22300 (pid 22656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1578.005565][T22656] Use struct sctp_sack_info instead [ 1578.974266][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22317'. [ 1579.002029][T22692] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1579.025434][T22692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.037820][T22774] netlink: 'syz.8.22355': attribute type 21 has an invalid length. [ 1581.046098][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22355'. [ 1581.248855][T22783] sctp: [Deprecated]: syz.9.22359 (pid 22783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1581.248855][T22783] Use struct sctp_sack_info instead [ 1581.354406][T22786] netlink: 'syz.9.22360': attribute type 10 has an invalid length. [ 1581.363752][T22786] netlink: 152 bytes leftover after parsing attributes in process `syz.9.22360'. [ 1581.658553][T15250] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1581.835556][T15250] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1581.876651][T15250] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 1581.912056][T15250] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1581.923660][T15250] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.959109][T15250] usb 9-1: config 0 descriptor?? [ 1581.974481][T22788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1582.303111][ T30] kauditd_printk_skb: 10794 callbacks suppressed [ 1582.303131][ T30] audit: type=1400 audit(2000004903.441:1735244): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22805 comm="syz.9.22370" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1582.337528][T10597] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1582.337528][ T5825] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1582.337551][ T5825] audit: audit_lost=114167 audit_rate_limit=0 audit_backlog_limit=64 [ 1582.344969][T10597] audit: audit_lost=114168 audit_rate_limit=0 audit_backlog_limit=64 [ 1582.357035][ T30] audit: type=1400 audit(2000004903.441:1735245): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=22819 comm="syz.6.22377" saddr=10.128.0.169 src=30008 daddr=10.128.10.0 dest=49434 netif=eth0 [ 1582.360464][T10597] audit: backlog limit exceeded [ 1582.396528][T22806] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1582.398442][T10597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1582.403780][T22806] audit: audit_lost=114169 audit_rate_limit=0 audit_backlog_limit=64 [ 1582.460300][ T1136] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1582.470384][T15250] cm6533_jd 0003:0D8C:0022.0091: unknown main item tag 0x0 [ 1582.481223][T15250] cm6533_jd 0003:0D8C:0022.0091: item fetching failed at offset 4/5 [ 1582.490185][T22823] netlink: 'syz.0.22378': attribute type 2 has an invalid length. [ 1582.499423][T15250] cm6533_jd 0003:0D8C:0022.0091: parse failed [ 1582.507439][T15250] cm6533_jd 0003:0D8C:0022.0091: probe with driver cm6533_jd failed with error -22 [ 1582.639447][ T1136] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1582.656978][ T1136] usb 10-1: can't read configurations, error -71 [ 1582.681479][T15250] usb 9-1: USB disconnect, device number 6 [ 1583.575467][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22392'. [ 1583.620144][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22392'. [ 1583.723217][T22861] delete_channel: no stack [ 1584.464427][T22896] Attempt to restore checkpoint with obsolete wellknown handles [ 1584.678681][T22904] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1584.694259][ T47] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1584.853835][T22908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.22418'. [ 1584.878534][ T47] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1584.905156][ T47] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1584.926243][ T47] usb 10-1: config 0 has no interface number 0 [ 1584.940907][ T47] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1584.962222][ T47] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1584.982922][ T47] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1585.005523][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.021722][ T47] usb 10-1: config 0 descriptor?? [ 1585.319274][ T1136] kernel write not supported for file /sg0 (pid: 1136 comm: kworker/0:4) [ 1585.690423][ T47] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input160 [ 1585.728774][ T47] input: failed to attach handler kbd to device input160, error: -5 [ 1585.904030][ T47] usb 10-1: USB disconnect, device number 6 [ 1587.016447][T22981] Bluetooth: MGMT ver 1.23 [ 1587.673264][ T30] kauditd_printk_skb: 9982 callbacks suppressed [ 1587.673284][ T30] audit: type=1400 audit(2000004908.464:1744216): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23009 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1587.728453][T21092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1587.728464][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1587.728480][T20949] audit: audit_lost=114507 audit_rate_limit=0 audit_backlog_limit=64 [ 1587.735614][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1587.748098][ T30] audit: type=1400 audit(2000004908.473:1744217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23009 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1587.750061][ C1] audit: audit_lost=114508 audit_rate_limit=0 audit_backlog_limit=64 [ 1587.756963][T20949] audit: backlog limit exceeded [ 1587.776006][ C1] audit: backlog limit exceeded [ 1587.790067][ T30] audit: type=1400 audit(2000004908.473:1744218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23009 comm="syz-executor" name="179" dev="tmpfs" ino=931 [ 1588.981601][ T5877] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1589.113083][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22481'. [ 1589.151781][ T5877] usb 10-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=ab.24 [ 1589.171527][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.190389][ T5877] usb 10-1: config 0 descriptor?? [ 1589.274801][ T5831] block nbd2: Receive control failed (result -32) [ 1589.417281][ T5877] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 1589.439002][ T5877] usb 10-1: USB disconnect, device number 7 [ 1589.864574][T23060] program syz.6.22491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1590.321506][T23077] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1590.910124][T23099] binder: 23098:23099 ioctl 6611 0 returned -22 [ 1591.658645][T23123] loop4: detected capacity change from 0 to 7 [ 1591.694067][T23123] Dev loop4: unable to read RDB block 7 [ 1591.705496][T23123] loop4: unable to read partition table [ 1591.713584][T23123] loop4: partition table beyond EOD, truncated [ 1591.721225][T23123] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1591.932340][ T47] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1592.103107][ T47] usb 10-1: Using ep0 maxpacket: 16 [ 1592.111153][ T47] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1592.120611][ T47] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.131372][ T47] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1592.143400][ T47] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1592.152898][ T47] usb 10-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 1592.161218][ T47] usb 10-1: Product: syz [ 1592.165499][ T47] usb 10-1: Manufacturer: syz [ 1592.170460][ T47] usb 10-1: SerialNumber: syz [ 1592.406123][ T1136] kernel read not supported for file /dsp (pid: 1136 comm: kworker/0:4) [ 1592.417472][ T47] usb 10-1: 0:2 : does not exist [ 1592.444440][ T47] usb 10-1: USB disconnect, device number 8 [ 1592.496435][T23142] netlink: 44 bytes leftover after parsing attributes in process `syz.8.22529'. [ 1593.022645][ T30] kauditd_printk_skb: 7476 callbacks suppressed [ 1593.022665][ T30] audit: type=1400 audit(2000004913.449:1751253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="195" dev="tmpfs" ino=1013 [ 1593.052147][ T30] audit: type=1400 audit(2000004913.468:1751254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21092 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1593.073707][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1593.075185][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1593.080763][T20949] audit: audit_lost=114657 audit_rate_limit=0 audit_backlog_limit=64 [ 1593.086856][ C1] audit: audit_lost=114658 audit_rate_limit=0 audit_backlog_limit=64 [ 1593.086878][ C1] audit: backlog limit exceeded [ 1593.087989][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1593.098157][T20949] audit: backlog limit exceeded [ 1593.103135][ C1] audit: audit_lost=114659 audit_rate_limit=0 audit_backlog_limit=64 [ 1594.663612][T23208] kvm_intel: kvm [23207]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1595.207280][T23234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.694066][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22580'. [ 1596.632052][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22598'. [ 1596.919249][T23302] tap0: tun_chr_ioctl cmd 35108 [ 1597.155838][T23315] binder: 23312:23315 ioctl c00c620f 2000000002c0 returned -22 [ 1597.845342][ T47] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1598.036639][ T47] usb 9-1: config 0 has no interfaces? [ 1598.042730][ T47] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1598.060627][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.082346][ T47] usb 9-1: config 0 descriptor?? [ 1598.315482][ T1136] usb 9-1: USB disconnect, device number 7 [ 1598.380918][ T30] kauditd_printk_skb: 10860 callbacks suppressed [ 1598.380938][ T30] audit: type=1400 audit(2000004918.482:1761031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="task" dev="proc" ino=191059 [ 1598.411332][ T30] audit: type=1400 audit(2000004918.482:1761032): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="498" dev="proc" ino=191060 [ 1598.431262][ T30] audit: type=1400 audit(2000004918.482:1761033): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="newroot" dev="tmpfs" ino=2 [ 1598.451014][ T30] audit: type=1400 audit(2000004918.482:1761034): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="/" dev="proc" ino=1 [ 1598.470282][ T30] audit: type=1400 audit(2000004918.482:1761035): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="/" dev="proc" ino=1 [ 1598.489547][ T30] audit: type=1400 audit(2000004918.482:1761036): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="497" dev="proc" ino=191939 [ 1598.509407][ T30] audit: type=1400 audit(2000004918.482:1761037): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="task" dev="proc" ino=191059 [ 1598.529543][ T30] audit: type=1400 audit(2000004918.482:1761038): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz.9.22629" name="498" dev="proc" ino=191060 [ 1598.550528][ T30] audit: type=1400 audit(2000004918.482:1761039): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23355 comm="syz.9.22629" name="fd" dev="proc" ino=191061 [ 1598.570073][ T30] audit: type=1400 audit(2000004918.482:1761040): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=23355 comm="syz.9.22629" path="/proc/497/task/498/fd" dev="proc" ino=191061 [ 1599.621308][T23381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input161 [ 1600.886597][T23432] loop8: detected capacity change from 0 to 1 [ 1600.894366][T23432] Dev loop8: unable to read RDB block 1 [ 1600.904127][T23432] loop8: unable to read partition table [ 1600.910124][T23432] loop8: partition table beyond EOD, truncated [ 1600.916571][T23432] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1601.108628][T23438] ptrace attach of "./syz-executor exec"[20949] was attempted by "./syz-executor exec"[23438] [ 1601.787876][ T5877] kernel write not supported for file /2383/net/ip_vs_stats_percpu (pid: 5877 comm: kworker/1:4) [ 1602.081375][ T1136] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1602.281135][ T1136] usb 10-1: config 54 has an invalid interface number: 154 but max is 0 [ 1602.312439][ T1136] usb 10-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.323096][ T1136] usb 10-1: config 54 has no interface number 0 [ 1602.329442][ T1136] usb 10-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1602.341633][ T1136] usb 10-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1602.359950][ T1136] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1602.376656][ T1136] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.395944][ T1136] usb 10-1: Product: syz [ 1602.406789][ T1136] usb 10-1: Manufacturer: syz [ 1602.411683][ T1136] usb 10-1: SerialNumber: syz [ 1602.795948][ T1136] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1602.799738][T13185] usb 10-1: Failed to submit usb control message: -71 [ 1602.847189][ T1136] usb 10-1: USB disconnect, device number 9 [ 1602.852857][T13185] usb 10-1: unable to send the bmi data to the device: -71 [ 1602.879851][T13185] usb 10-1: unable to get target info from device [ 1602.898984][T13185] usb 10-1: could not get target info (-71) [ 1602.917859][T13185] usb 10-1: could not probe fw (-71) [ 1603.737922][ T30] kauditd_printk_skb: 8852 callbacks suppressed [ 1603.737943][ T30] audit: type=1400 audit(2000004923.486:1769216): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=23523 comm="syz.8.22706" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 1603.765814][ T30] audit: type=1400 audit(2000004923.514:1769217): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=23523 comm="syz.8.22706" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 1603.788424][ T30] audit: type=1400 audit(2000004923.533:1769218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1603.810613][ T30] audit: type=1400 audit(2000004923.533:1769219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1603.834373][ T30] audit: type=1400 audit(2000004923.533:1769220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="113" dev="tmpfs" ino=585 [ 1603.856587][ T30] audit: type=1400 audit(2000004923.533:1769221): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=23525 comm="syz-executor" opid=23525 ocomm="syz-executor" [ 1603.880053][ T30] audit: type=1400 audit(2000004923.533:1769222): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="113" dev="tmpfs" ino=585 [ 1603.899680][ T30] audit: type=1400 audit(2000004923.533:1769223): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="113" dev="tmpfs" ino=585 [ 1603.919867][ T30] audit: type=1400 audit(2000004923.542:1769224): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23525 comm="syz-executor" name="113" dev="tmpfs" ino=585 [ 1603.939785][ T30] audit: type=1400 audit(2000004923.542:1769225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23525 comm="syz-executor" name="113" dev="tmpfs" ino=585 [ 1606.297509][T23604] program syz.9.22740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1606.400283][T23607] netlink: 'syz.0.22741': attribute type 11 has an invalid length. [ 1606.726875][T23621] netlink: 'syz.0.22745': attribute type 1 has an invalid length. [ 1606.762709][T23621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22745'. [ 1606.789667][T23626] tracefs: Invalid uid '0x00000000ffffffff' [ 1606.957736][T23631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.524750][T23650] netlink: 'syz.6.22758': attribute type 3 has an invalid length. [ 1607.572453][T23650] netlink: 'syz.6.22758': attribute type 1 has an invalid length. [ 1607.580469][T23650] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.22758'. [ 1607.810077][T23660] netlink: 'syz.6.22762': attribute type 1 has an invalid length. [ 1607.818733][T23660] netlink: 224 bytes leftover after parsing attributes in process `syz.6.22762'. [ 1608.636968][T23693] input: syz0 as /devices/virtual/input/input162 [ 1608.654601][T23693] input: failed to attach handler leds to device input162, error: -6 [ 1609.100977][ T30] kauditd_printk_skb: 8941 callbacks suppressed [ 1609.101000][ T30] audit: type=1400 audit(2000004928.500:1777703): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=10597 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5702 [ 1609.135301][T23710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1609.158411][T21588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1609.173552][T23710] audit: audit_lost=115404 audit_rate_limit=0 audit_backlog_limit=64 [ 1609.174468][T23711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1609.181918][T21588] audit: audit_lost=115405 audit_rate_limit=0 audit_backlog_limit=64 [ 1609.181939][T21588] audit: backlog limit exceeded [ 1609.181958][T21588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1609.181973][T21588] audit: audit_lost=115406 audit_rate_limit=0 audit_backlog_limit=64 [ 1609.181989][T21588] audit: backlog limit exceeded [ 1609.664632][T23731] input: syz1 as /devices/virtual/input/input163 [ 1610.102001][T23750] wg1: left promiscuous mode [ 1610.129966][T23750] wg1: left allmulticast mode [ 1610.135114][T23750] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1610.170433][T23750] bond1: left promiscuous mode [ 1610.175647][T23750] bridge1: left promiscuous mode [ 1610.191605][T23750] bridge1: left allmulticast mode [ 1610.196881][T23750] bond2: left promiscuous mode [ 1610.209238][T23750] macvlan3: left allmulticast mode [ 1610.673718][T23740] netlink: 264 bytes leftover after parsing attributes in process `syz.6.22798'. [ 1610.694164][T23740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22798'. [ 1611.406809][T23792] pim6reg: entered allmulticast mode [ 1611.437501][T23792] pim6reg: left allmulticast mode [ 1611.929476][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22828'. [ 1612.175995][T23813] bond0: (slave bond_slave_0): Releasing backup interface [ 1612.950955][T23852] debugfs: Invalid gid '0x00000000ffffffff' [ 1613.446923][T23873] netlink: 'syz.0.22858': attribute type 2 has an invalid length. [ 1613.633281][T23880] program syz.0.22860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.282137][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.476284][ T30] kauditd_printk_skb: 10226 callbacks suppressed [ 1614.476304][ T30] audit: type=1400 audit(2000004933.532:1787477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23912 comm="syz.0.22876" name="9013" dev="proc" ino=194437 [ 1614.508305][ T30] audit: type=1400 audit(2000004933.532:1787478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23912 comm="syz.0.22876" name="9013" dev="proc" ino=194437 [ 1614.553510][ T30] audit: type=1400 audit(2000004933.598:1787479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1614.576970][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1614.583540][T20949] audit: audit_lost=115558 audit_rate_limit=0 audit_backlog_limit=64 [ 1614.595704][ T30] audit: type=1400 audit(2000004933.598:1787480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1614.615972][T20949] audit: backlog limit exceeded [ 1614.621299][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1614.628303][T11822] Bluetooth: hci5: command 0x1003 tx timeout [ 1614.635624][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1614.645713][T20949] audit: audit_lost=115559 audit_rate_limit=0 audit_backlog_limit=64 [ 1614.654394][ T30] audit: type=1400 audit(2000004933.598:1787481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20949 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1616.304351][T23970] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1616.383498][T23972] syzkaller1: entered promiscuous mode [ 1616.393170][T23972] syzkaller1: entered allmulticast mode [ 1618.124636][T24021] overlayfs: invalid origin (0000) [ 1618.410459][T24029] syzkaller1: entered promiscuous mode [ 1618.416854][T24029] syzkaller1: entered allmulticast mode [ 1618.457945][ T5831] Bluetooth: hci0: command tx timeout [ 1618.922620][T24050] batadv_slave_1: entered promiscuous mode [ 1618.949929][T24048] batadv_slave_1: left promiscuous mode [ 1619.795503][T24080] netlink: 'syz.6.22950': attribute type 11 has an invalid length. [ 1619.831855][ T30] kauditd_printk_skb: 8748 callbacks suppressed [ 1619.831876][ T30] audit: type=1400 audit(2000004938.537:1795718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24077 comm="syz.6.22950" name="phy65" dev="debugfs" ino=131502 [ 1619.889642][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1619.902505][ T30] audit: type=1400 audit(2000004938.537:1795719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24077 comm="syz.6.22950" name=6E65746465763ADB dev="debugfs" ino=195235 [ 1619.923626][T20949] audit: audit_lost=115731 audit_rate_limit=0 audit_backlog_limit=64 [ 1619.932416][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1619.939034][ C1] audit: audit_lost=115732 audit_rate_limit=0 audit_backlog_limit=64 [ 1619.943474][T20949] audit: backlog limit exceeded [ 1619.947154][ C1] audit: backlog limit exceeded [ 1619.947457][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1619.952964][T20949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1620.239408][T24090] [ 1620.241793][T24090] ===================================================== [ 1620.248748][T24090] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1620.256240][T24090] 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 Not tainted [ 1620.263382][T24090] ----------------------------------------------------- [ 1620.270370][T24090] syz.6.22955/24090 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1620.278212][T24090] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1620.286888][T24090] [ 1620.286888][T24090] and this task is already holding: [ 1620.294286][T24090] ffff8880679e4120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1620.302980][T24090] which would create a new lock dependency: [ 1620.308982][T24090] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1620.316620][T24090] [ 1620.316620][T24090] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1620.326183][T24090] (&dev->event_lock#2){..-.}-{3:3} [ 1620.326232][T24090] [ 1620.326232][T24090] ... which became SOFTIRQ-irq-safe at: [ 1620.339165][T24090] lock_acquire+0x120/0x360 [ 1620.343774][T24090] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1620.349065][T24090] input_event+0x7a/0xc0 [ 1620.353408][T24090] xpad360_process_packet+0xda/0xb30 [ 1620.358787][T24090] xpad_irq_in+0x184/0x25a0 [ 1620.363384][T24090] __usb_hcd_giveback_urb+0x417/0x690 [ 1620.368852][T24090] dummy_timer+0x862/0x4550 [ 1620.373456][T24090] __hrtimer_run_queues+0x52c/0xc60 [ 1620.378748][T24090] hrtimer_run_softirq+0x187/0x2b0 [ 1620.383955][T24090] handle_softirqs+0x283/0x870 [ 1620.388814][T24090] __irq_exit_rcu+0xca/0x1f0 [ 1620.393527][T24090] irq_exit_rcu+0x9/0x30 [ 1620.397870][T24090] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1620.403685][T24090] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1620.409753][T24090] page_ext_lookup+0x86/0x160 [ 1620.414530][T24090] page_table_check_set+0x23b/0x710 [ 1620.419819][T24090] copy_pmd_range+0x427d/0x7000 [ 1620.424761][T24090] copy_page_range+0x95c/0xd40 [ 1620.429630][T24090] copy_mm+0x126a/0x2160 [ 1620.433968][T24090] copy_process+0x16d3/0x3b80 [ 1620.438742][T24090] kernel_clone+0x224/0x7f0 [ 1620.443332][T24090] __x64_sys_clone+0x18b/0x1e0 [ 1620.448188][T24090] do_syscall_64+0xf6/0x210 [ 1620.452789][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.458772][T24090] [ 1620.458772][T24090] to a SOFTIRQ-irq-unsafe lock: [ 1620.465806][T24090] (tasklist_lock){.+.+}-{3:3} [ 1620.465836][T24090] [ 1620.465836][T24090] ... which became SOFTIRQ-irq-unsafe at: [ 1620.478476][T24090] ... [ 1620.478486][T24090] lock_acquire+0x120/0x360 [ 1620.485661][T24090] _raw_read_lock+0x36/0x50 [ 1620.490257][T24090] __do_wait+0xde/0x740 [ 1620.494507][T24090] do_wait+0x1f8/0x520 [ 1620.498671][T24090] kernel_wait+0xab/0x170 [ 1620.503094][T24090] call_usermodehelper_exec_work+0xbe/0x230 [ 1620.509086][T24090] process_scheduled_works+0xade/0x17a0 [ 1620.514729][T24090] worker_thread+0x8a0/0xda0 [ 1620.519450][T24090] kthread+0x711/0x8a0 [ 1620.523607][T24090] ret_from_fork+0x4b/0x80 [ 1620.528113][T24090] ret_from_fork_asm+0x1a/0x30 [ 1620.532975][T24090] [ 1620.532975][T24090] other info that might help us debug this: [ 1620.532975][T24090] [ 1620.543204][T24090] Chain exists of: [ 1620.543204][T24090] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1620.543204][T24090] [ 1620.556269][T24090] Possible interrupt unsafe locking scenario: [ 1620.556269][T24090] [ 1620.564594][T24090] CPU0 CPU1 [ 1620.569956][T24090] ---- ---- [ 1620.575318][T24090] lock(tasklist_lock); [ 1620.579569][T24090] local_irq_disable(); [ 1620.586323][T24090] lock(&dev->event_lock#2); [ 1620.593534][T24090] lock(&f_owner->lock); [ 1620.600386][T24090] [ 1620.603842][T24090] lock(&dev->event_lock#2); [ 1620.608720][T24090] [ 1620.608720][T24090] *** DEADLOCK *** [ 1620.608720][T24090] [ 1620.616863][T24090] 5 locks held by syz.6.22955/24090: [ 1620.622149][T24090] #0: ffff88805727e420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1620.631321][T24090] #1: ffff8880776e6b48 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0x8da/0x3830 [ 1620.641541][T24090] #2: ffffffff99851bf0 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x735/0x1a80 [ 1620.651053][T24090] #3: ffff8880281384e8 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1620.660726][T24090] #4: ffff8880679e4120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1620.669790][T24090] [ 1620.669790][T24090] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1620.680227][T24090] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1620.686025][T24090] IN-SOFTIRQ-W at: [ 1620.690183][T24090] lock_acquire+0x120/0x360 [ 1620.696697][T24090] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1620.703905][T24090] input_event+0x7a/0xc0 [ 1620.710237][T24090] xpad360_process_packet+0xda/0xb30 [ 1620.717530][T24090] xpad_irq_in+0x184/0x25a0 [ 1620.724041][T24090] __usb_hcd_giveback_urb+0x417/0x690 [ 1620.731442][T24090] dummy_timer+0x862/0x4550 [ 1620.737957][T24090] __hrtimer_run_queues+0x52c/0xc60 [ 1620.745199][T24090] hrtimer_run_softirq+0x187/0x2b0 [ 1620.752322][T24090] handle_softirqs+0x283/0x870 [ 1620.759107][T24090] __irq_exit_rcu+0xca/0x1f0 [ 1620.765707][T24090] irq_exit_rcu+0x9/0x30 [ 1620.771958][T24090] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1620.779595][T24090] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1620.787578][T24090] page_ext_lookup+0x86/0x160 [ 1620.794268][T24090] page_table_check_set+0x23b/0x710 [ 1620.801464][T24090] copy_pmd_range+0x427d/0x7000 [ 1620.808411][T24090] copy_page_range+0x95c/0xd40 [ 1620.815183][T24090] copy_mm+0x126a/0x2160 [ 1620.821427][T24090] copy_process+0x16d3/0x3b80 [ 1620.828101][T24090] kernel_clone+0x224/0x7f0 [ 1620.834603][T24090] __x64_sys_clone+0x18b/0x1e0 [ 1620.841370][T24090] do_syscall_64+0xf6/0x210 [ 1620.847917][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.855810][T24090] INITIAL USE at: [ 1620.859885][T24090] lock_acquire+0x120/0x360 [ 1620.866310][T24090] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1620.873427][T24090] input_inject_event+0xab/0x320 [ 1620.880284][T24090] kbd_led_trigger_activate+0xbc/0x100 [ 1620.887668][T24090] led_trigger_set+0x52d/0x950 [ 1620.894354][T24090] led_trigger_set_default+0x215/0x250 [ 1620.901734][T24090] led_classdev_register_ext+0x73d/0x930 [ 1620.909283][T24090] input_leds_connect+0x517/0x790 [ 1620.916228][T24090] input_register_device+0xceb/0x10b0 [ 1620.923521][T24090] atkbd_connect+0x70e/0x9c0 [ 1620.930024][T24090] serio_driver_probe+0x7f/0xa0 [ 1620.936825][T24090] really_probe+0x26d/0x9a0 [ 1620.943293][T24090] __driver_probe_device+0x18c/0x2f0 [ 1620.950526][T24090] driver_probe_device+0x4f/0x430 [ 1620.957487][T24090] __driver_attach+0x452/0x700 [ 1620.964181][T24090] bus_for_each_dev+0x233/0x2b0 [ 1620.971033][T24090] serio_handle_event+0x1a2/0x860 [ 1620.978031][T24090] process_scheduled_works+0xade/0x17a0 [ 1620.985548][T24090] worker_thread+0x8a0/0xda0 [ 1620.992067][T24090] kthread+0x711/0x8a0 [ 1620.998059][T24090] ret_from_fork+0x4b/0x80 [ 1621.004406][T24090] ret_from_fork_asm+0x1a/0x30 [ 1621.011135][T24090] } [ 1621.013833][T24090] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1621.023071][T24090] -> (&new->fa_lock){....}-{3:3} { [ 1621.028345][T24090] INITIAL USE at: [ 1621.032338][T24090] lock_acquire+0x120/0x360 [ 1621.038624][T24090] _raw_write_lock_irq+0xa2/0xf0 [ 1621.045335][T24090] fasync_remove_entry+0xf1/0x1c0 [ 1621.052136][T24090] __fput+0x89f/0xa70 [ 1621.057886][T24090] task_work_run+0x1d4/0x260 [ 1621.064313][T24090] resume_user_mode_work+0x5e/0x80 [ 1621.071206][T24090] syscall_exit_to_user_mode+0x9a/0x120 [ 1621.078536][T24090] do_syscall_64+0x103/0x210 [ 1621.084893][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.092550][T24090] INITIAL READ USE at: [ 1621.096987][T24090] lock_acquire+0x120/0x360 [ 1621.103678][T24090] _raw_read_lock_irqsave+0xaf/0x100 [ 1621.111143][T24090] kill_fasync+0x199/0x4d0 [ 1621.117739][T24090] n_tty_receive_buf_standard+0x3571/0x5150 [ 1621.125815][T24090] n_tty_receive_buf_common+0xab3/0x12f0 [ 1621.133632][T24090] tiocsti+0x239/0x2c0 [ 1621.139915][T24090] tty_ioctl+0x626/0xde0 [ 1621.146365][T24090] __se_sys_ioctl+0xf9/0x170 [ 1621.153132][T24090] do_syscall_64+0xf6/0x210 [ 1621.159813][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.167892][T24090] } [ 1621.170488][T24090] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1621.179266][T24090] ... acquired at: [ 1621.183157][T24090] lock_acquire+0x120/0x360 [ 1621.187844][T24090] _raw_read_lock_irqsave+0xaf/0x100 [ 1621.193309][T24090] kill_fasync+0x199/0x4d0 [ 1621.197904][T24090] mousedev_notify_readers+0x6f1/0xc00 [ 1621.203549][T24090] mousedev_event+0x602/0x1320 [ 1621.208492][T24090] input_handle_events_default+0xd4/0x1a0 [ 1621.214387][T24090] input_pass_values+0x285/0x890 [ 1621.219506][T24090] input_event_dispose+0x330/0x6b0 [ 1621.224796][T24090] input_inject_event+0x1fe/0x320 [ 1621.230000][T24090] evdev_write+0x2fc/0x480 [ 1621.234586][T24090] vfs_write+0x27e/0xa90 [ 1621.239038][T24090] ksys_write+0x145/0x250 [ 1621.243550][T24090] do_syscall_64+0xf6/0x210 [ 1621.248236][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.254309][T24090] [ 1621.256657][T24090] -> (&f_owner->lock){....}-{3:3} { [ 1621.261882][T24090] INITIAL USE at: [ 1621.265779][T24090] lock_acquire+0x120/0x360 [ 1621.271870][T24090] _raw_write_lock_irq+0xa2/0xf0 [ 1621.278382][T24090] __f_setown+0x67/0x370 [ 1621.284193][T24090] generic_setlease+0xd5d/0x1240 [ 1621.290699][T24090] fcntl_setlease+0x3a2/0x4c0 [ 1621.296953][T24090] do_fcntl+0x6a0/0x1910 [ 1621.302765][T24090] __se_sys_fcntl+0xc8/0x150 [ 1621.309007][T24090] do_syscall_64+0xf6/0x210 [ 1621.315084][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.322543][T24090] INITIAL READ USE at: [ 1621.326905][T24090] lock_acquire+0x120/0x360 [ 1621.333447][T24090] _raw_read_lock_irq+0xaa/0xf0 [ 1621.340388][T24090] do_fcntl+0x809/0x1910 [ 1621.346633][T24090] __se_sys_fcntl+0xc8/0x150 [ 1621.353230][T24090] do_syscall_64+0xf6/0x210 [ 1621.359741][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.367810][T24090] } [ 1621.370316][T24090] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1621.379175][T24090] ... acquired at: [ 1621.382977][T24090] lock_acquire+0x120/0x360 [ 1621.387668][T24090] _raw_read_lock_irqsave+0xaf/0x100 [ 1621.393130][T24090] send_sigio+0x38/0x370 [ 1621.397550][T24090] kill_fasync+0x24d/0x4d0 [ 1621.402145][T24090] n_tty_receive_buf_standard+0x3571/0x5150 [ 1621.408226][T24090] n_tty_receive_buf_common+0xab3/0x12f0 [ 1621.414044][T24090] tiocsti+0x239/0x2c0 [ 1621.418294][T24090] tty_ioctl+0x626/0xde0 [ 1621.422737][T24090] __se_sys_ioctl+0xf9/0x170 [ 1621.427510][T24090] do_syscall_64+0xf6/0x210 [ 1621.432198][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.438269][T24090] [ 1621.440612][T24090] [ 1621.440612][T24090] the dependencies between the lock to be acquired [ 1621.440622][T24090] and SOFTIRQ-irq-unsafe lock: [ 1621.454134][T24090] -> (tasklist_lock){.+.+}-{3:3} { [ 1621.459279][T24090] HARDIRQ-ON-R at: [ 1621.463270][T24090] lock_acquire+0x120/0x360 [ 1621.469435][T24090] _raw_read_lock+0x36/0x50 [ 1621.475594][T24090] __do_wait+0xde/0x740 [ 1621.481408][T24090] do_wait+0x1f8/0x520 [ 1621.487140][T24090] kernel_wait+0xab/0x170 [ 1621.493147][T24090] call_usermodehelper_exec_work+0xbe/0x230 [ 1621.500727][T24090] process_scheduled_works+0xade/0x17a0 [ 1621.507947][T24090] worker_thread+0x8a0/0xda0 [ 1621.514209][T24090] kthread+0x711/0x8a0 [ 1621.519950][T24090] ret_from_fork+0x4b/0x80 [ 1621.526032][T24090] ret_from_fork_asm+0x1a/0x30 [ 1621.532472][T24090] SOFTIRQ-ON-R at: [ 1621.536471][T24090] lock_acquire+0x120/0x360 [ 1621.542645][T24090] _raw_read_lock+0x36/0x50 [ 1621.548810][T24090] __do_wait+0xde/0x740 [ 1621.554623][T24090] do_wait+0x1f8/0x520 [ 1621.560353][T24090] kernel_wait+0xab/0x170 [ 1621.566348][T24090] call_usermodehelper_exec_work+0xbe/0x230 [ 1621.573917][T24090] process_scheduled_works+0xade/0x17a0 [ 1621.581132][T24090] worker_thread+0x8a0/0xda0 [ 1621.587379][T24090] kthread+0x711/0x8a0 [ 1621.593144][T24090] ret_from_fork+0x4b/0x80 [ 1621.599245][T24090] ret_from_fork_asm+0x1a/0x30 [ 1621.605702][T24090] INITIAL USE at: [ 1621.609646][T24090] lock_acquire+0x120/0x360 [ 1621.615914][T24090] _raw_write_lock_irq+0xa2/0xf0 [ 1621.622448][T24090] copy_process+0x21d5/0x3b80 [ 1621.628711][T24090] kernel_clone+0x224/0x7f0 [ 1621.634801][T24090] user_mode_thread+0xdd/0x140 [ 1621.641158][T24090] rest_init+0x23/0x300 [ 1621.646910][T24090] start_kernel+0x470/0x4f0 [ 1621.652995][T24090] x86_64_start_reservations+0x2a/0x30 [ 1621.660031][T24090] x86_64_start_kernel+0x66/0x70 [ 1621.666551][T24090] common_startup_64+0x13e/0x147 [ 1621.673094][T24090] INITIAL READ USE at: [ 1621.677432][T24090] lock_acquire+0x120/0x360 [ 1621.683947][T24090] _raw_read_lock+0x36/0x50 [ 1621.690483][T24090] __do_wait+0xde/0x740 [ 1621.696647][T24090] do_wait+0x1f8/0x520 [ 1621.702751][T24090] kernel_wait+0xab/0x170 [ 1621.709110][T24090] call_usermodehelper_exec_work+0xbe/0x230 [ 1621.717036][T24090] process_scheduled_works+0xade/0x17a0 [ 1621.724597][T24090] worker_thread+0x8a0/0xda0 [ 1621.731236][T24090] kthread+0x711/0x8a0 [ 1621.737329][T24090] ret_from_fork+0x4b/0x80 [ 1621.743745][T24090] ret_from_fork_asm+0x1a/0x30 [ 1621.750517][T24090] } [ 1621.753022][T24090] ... key at: [] tasklist_lock+0x18/0x40 [ 1621.760760][T24090] ... acquired at: [ 1621.764562][T24090] lock_acquire+0x120/0x360 [ 1621.769251][T24090] _raw_read_lock+0x36/0x50 [ 1621.773962][T24090] send_sigio+0x101/0x370 [ 1621.778488][T24090] dnotify_handle_event+0x169/0x440 [ 1621.783898][T24090] fsnotify+0x1814/0x1a80 [ 1621.788418][T24090] path_openat+0x171e/0x3830 [ 1621.793197][T24090] do_filp_open+0x1fa/0x410 [ 1621.797887][T24090] do_sys_openat2+0x121/0x1c0 [ 1621.802742][T24090] __x64_sys_openat+0x138/0x170 [ 1621.807777][T24090] do_syscall_64+0xf6/0x210 [ 1621.812471][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.818544][T24090] [ 1621.820877][T24090] [ 1621.820877][T24090] stack backtrace: [ 1621.826789][T24090] CPU: 1 UID: 0 PID: 24090 Comm: syz.6.22955 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 1621.826814][T24090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.826830][T24090] Call Trace: [ 1621.826837][T24090] [ 1621.826847][T24090] dump_stack_lvl+0x189/0x250 [ 1621.826881][T24090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.826903][T24090] ? __pfx__printk+0x10/0x10 [ 1621.826935][T24090] validate_chain+0x1f05/0x2140 [ 1621.826972][T24090] __lock_acquire+0xaac/0xd20 [ 1621.826996][T24090] ? send_sigio+0x101/0x370 [ 1621.827014][T24090] lock_acquire+0x120/0x360 [ 1621.827036][T24090] ? send_sigio+0x101/0x370 [ 1621.827055][T24090] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1621.827075][T24090] ? dnotify_handle_event+0x62/0x440 [ 1621.827095][T24090] _raw_read_lock+0x36/0x50 [ 1621.827112][T24090] ? send_sigio+0x101/0x370 [ 1621.827131][T24090] send_sigio+0x101/0x370 [ 1621.827151][T24090] dnotify_handle_event+0x169/0x440 [ 1621.827173][T24090] fsnotify+0x1814/0x1a80 [ 1621.827196][T24090] ? __lock_acquire+0xaac/0xd20 [ 1621.827224][T24090] ? fsnotify+0x735/0x1a80 [ 1621.827246][T24090] ? __pfx_fsnotify+0x10/0x10 [ 1621.827272][T24090] ? _raw_spin_unlock+0x28/0x50 [ 1621.827291][T24090] path_openat+0x171e/0x3830 [ 1621.827313][T24090] ? arch_stack_walk+0xfc/0x150 [ 1621.827350][T24090] ? __pfx_path_openat+0x10/0x10 [ 1621.827370][T24090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.827395][T24090] do_filp_open+0x1fa/0x410 [ 1621.827417][T24090] ? __pfx_do_filp_open+0x10/0x10 [ 1621.827446][T24090] ? _raw_spin_unlock+0x28/0x50 [ 1621.827462][T24090] ? alloc_fd+0x64c/0x6c0 [ 1621.827493][T24090] do_sys_openat2+0x121/0x1c0 [ 1621.827514][T24090] ? __pfx_do_sys_openat2+0x10/0x10 [ 1621.827535][T24090] ? rcu_is_watching+0x15/0xb0 [ 1621.827564][T24090] __x64_sys_openat+0x138/0x170 [ 1621.827585][T24090] do_syscall_64+0xf6/0x210 [ 1621.827607][T24090] ? clear_bhb_loop+0x60/0xb0 [ 1621.827626][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.827642][T24090] RIP: 0033:0x7f4d6958e969 [ 1621.827666][T24090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.827682][T24090] RSP: 002b:00007f4d6a3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1621.827702][T24090] RAX: ffffffffffffffda RBX: 00007f4d697b5fa0 RCX: 00007f4d6958e969 [ 1621.827716][T24090] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1621.827728][T24090] RBP: 00007f4d69610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1621.827739][T24090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.827750][T24090] R13: 0000000000000000 R14: 00007f4d697b5fa0 R15: 00007ffc2dda4f78 [ 1621.827769][T24090]