last executing test programs: 1m47.796521746s ago: executing program 1 (id=18119): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m47.6044101s ago: executing program 1 (id=18122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) 1m47.330611287s ago: executing program 1 (id=18126): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) 1m47.172342212s ago: executing program 1 (id=18129): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m47.030738302s ago: executing program 1 (id=18132): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 1m46.575946534s ago: executing program 1 (id=18135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) listen(r0, 0x7) 1m46.278566392s ago: executing program 32 (id=18135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) listen(r0, 0x7) 59.329223285s ago: executing program 3 (id=18799): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 59.103568155s ago: executing program 3 (id=18802): ioperm(0x2, 0xcd, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 58.942735235s ago: executing program 3 (id=18806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) 58.673820645s ago: executing program 3 (id=18810): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 58.480183385s ago: executing program 3 (id=18814): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 58.083370666s ago: executing program 3 (id=18819): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 57.759071836s ago: executing program 33 (id=18819): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 28.124809193s ago: executing program 6 (id=19220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 27.577830759s ago: executing program 6 (id=19225): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xb, r0, &(0x7f0000000240)='big_key\x00', &(0x7f0000000180)={'syz', 0x3}, r1) 27.364629699s ago: executing program 6 (id=19230): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 27.06917513s ago: executing program 6 (id=19235): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 26.904119207s ago: executing program 6 (id=19238): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 25.659403538s ago: executing program 6 (id=19257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6a, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8f, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xe00}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 25.265826096s ago: executing program 34 (id=19257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6a, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8f, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xe00}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.941051402s ago: executing program 0 (id=19559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000044008100050001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 1.661316576s ago: executing program 0 (id=19563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f2ffff03000040"]) 1.591246453s ago: executing program 5 (id=19564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 1.514519845s ago: executing program 7 (id=19566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x80000001]}, 0x0, &(0x7f0000000380), 0x8) 1.380079844s ago: executing program 0 (id=19568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0xda2, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff, 0xb70c}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x48}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0xfffffff7, 0x0, 0x2}}, @TCA_NETEM_LOSS={0x4}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x4}}]}]}, 0xa0}}, 0x4000000) 1.320410123s ago: executing program 7 (id=19569): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff08, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x5d40}) 1.235531445s ago: executing program 4 (id=19570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5f327aca830a76231715eee91a13369cbcc96c69a668ae1c755bc61d87b8846fe6d697788c07e8e15f13001a2f50a309a289770ad9ebe5fee591eafa34acc4441cead79b62225727a725dc75318af833d406c4d396c6e740305886fe3fcdcc3a492f93648eda251a5f599ca11ff5ef4ebaaa83e1b82d26018a7f86c55020d42b0ae8bedc8a47143e026d76594764352f113fb8161feb621a38248d279f076b4946b1bce49b27899ce312e", 0xae}, {&(0x7f0000000000)="f14aee643a2c5075d0cb701d4fb30b91a13fe6beeb711b78f5597705842227a32a0fabce96a0e3d1f91a38a8f423", 0x2e}, {&(0x7f0000000240)="88a8b6e06dec530bdff56d0cd3e32ff1223f961aa5e3a26a36daf36bf0a1c48143eb3fbbb468fe1d2ee683de8f3d9fbb832fa40aece2f18c855b3baaa97868a80f4de0", 0x43}, {&(0x7f00000002c0)="b958b660a4387dd9e22167e5b326f5997f43c5324b93b890e87471e503474adc50cfc403ef6671aced2e61bd7e5a2f975b42c78f52f289", 0x37}, {&(0x7f0000000300)="74b0ff3ca1d3410cf2d6a711f0c43f27c47ca37a6eadd1159afe4d5fbe9621980bfd528e508a7828db591d7a9b4ec70ce72fe7f09d2256dc79e7141b28d3dd953a7987fb3cdcdcae90b6af971a9bbb8dc89f56fd381598f920e7101d6e720c1c29d63370b363cc55db91ccc284441292e465c123cd2637a947f51ec72ab5719399e38f985f1d3415eb2fbef5457531bd147f773860f39bd5c7c47919808743a2b82979", 0xa3}, {&(0x7f00000003c0)="80e1aeecff9fd02c91c6801f2a1cfee186b4ee7398061e7c00f28c3922ccb7941398eeb6cc99993a199c12da1977c0379d44397db5609a56556a6765531c9d7e59fed1db247c955b86f3a50b0e9ab7f87a0e2eb25c0e1615f7ba73a28c2cd4e5b980b44202b0badddf9d27b1f16c8ada3fb080f6db2f80d3c01bea690e9db1b69b73673ff4e62acf957f8df6a8facc6c0d4a88f40116e6f151d54f98de72dd66c6c820590eeb81bc4920", 0xaa}, {&(0x7f0000001480)="2bbb3ccad4d6482d5c5123a561541c95954cb3b9a9111a1aed298097126fac4b7b5ed366a2d11dd75577da3b80a4756ac427fe897a2ae52e5c9b23ff11f65235abacc728b5fd9028c3f9e2060825d0cfdcae5404f2", 0x55}], 0x7, 0x0, 0x0, 0x40004}], 0x1, 0x0) 1.102556241s ago: executing program 0 (id=19572): r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 1.008745819s ago: executing program 7 (id=19573): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 890.059835ms ago: executing program 0 (id=19574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x13) 889.112391ms ago: executing program 4 (id=19575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) 885.292053ms ago: executing program 2 (id=19576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000480)="a013ff3819ad11dc87f02d2ec8719de0", 0x10}], 0x1, 0x0, 0x0, 0x4844}, 0x24040040) 827.507914ms ago: executing program 5 (id=19577): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @local, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 808.82528ms ago: executing program 7 (id=19578): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2008080, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0xffffffffffffffff, 0x0) 727.505242ms ago: executing program 0 (id=19579): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0xf, 0x9, "029fad71dbb7b820b9"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xa2}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 718.572957ms ago: executing program 2 (id=19580): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) 628.175231ms ago: executing program 4 (id=19581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 599.344812ms ago: executing program 7 (id=19582): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 571.426296ms ago: executing program 5 (id=19583): unshare(0x2c020400) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x7, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4104, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x400, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x9, 0x60, 0x8, 0x7, 0x0, 0x6, 0x8, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x8001, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x68, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x4, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0x2, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x1, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6e, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x0, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x5, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x1ff, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x6, 0x3, 0x7fffffff, 0x7, 0x702, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x3, 0x7, 0x9, 0x9, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 534.111028ms ago: executing program 2 (id=19584): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 504.581297ms ago: executing program 4 (id=19585): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)=""/247, 0xf7}], 0x2) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) 412.806043ms ago: executing program 5 (id=19586): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r0, r1, 0x0) 368.239792ms ago: executing program 2 (id=19587): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x63, 0x9, 0x5, 0x41, 0xffffff01, 0x6, 0xff, 0x0, 0x1, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4000000, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x4005, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x10000, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x9, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x20005, 0xfffffffe, 0x100, 0x3, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x80000001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x2, 0x7e, 0x100, 0x9600, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 299.912396ms ago: executing program 4 (id=19588): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="a243e6e0", 0x4}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 255.976669ms ago: executing program 2 (id=19589): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 181.473028ms ago: executing program 5 (id=19590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@mcast2, 0x0, 0xbb60, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000) 120.544793ms ago: executing program 7 (id=19591): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 72.115664ms ago: executing program 2 (id=19592): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/149, 0x95}], 0x1) 71.838634ms ago: executing program 4 (id=19593): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_rr_get_interval(0x0, &(0x7f0000000040)) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x2]}, 0x8) 0s ago: executing program 5 (id=19594): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000480)=""/214) kernel console output (not intermixed with test programs): ="syz-executor" name="3697" dev="tmpfs" ino=18648 [ 1351.700105][T11710] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1351.705429][T11711] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1351.706831][ T30] audit: type=1400 audit(1749330267.239:2948069): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5958 comm="syz-executor" path="/3697/cgroup.cpu" dev="tmpfs" ino=18650 [ 1351.720818][T11711] audit: audit_lost=367666 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.739898][T11710] audit: audit_lost=367667 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.754015][T11710] audit: backlog limit exceeded [ 1351.759102][T11710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.766157][ T30] audit: type=1400 audit(1749330267.239:2948070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1352.575970][T11738] hsr0: entered promiscuous mode [ 1352.712665][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17647'. [ 1353.043295][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17652'. [ 1353.491870][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17662'. [ 1353.618028][T11783] netlink: 27 bytes leftover after parsing attributes in process `syz.3.17663'. [ 1353.869532][T11789] netlink: 31 bytes leftover after parsing attributes in process `syz.1.17666'. [ 1354.370140][T11814] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1355.585623][T11850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.620047][ T5877] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1355.731224][T11854] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17697'. [ 1355.745868][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17697'. [ 1355.809666][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.842530][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.865807][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1355.896854][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.920206][ T5877] usb 2-1: config 0 descriptor?? [ 1356.238252][T11868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17703'. [ 1356.373571][ T5877] apple 0003:05AC:0262.0066: bogus close delimiter [ 1356.403887][ T5877] apple 0003:05AC:0262.0066: item 0 1 2 10 parsing failed [ 1356.428182][ T5877] apple 0003:05AC:0262.0066: parse failed [ 1356.452202][ T5877] apple 0003:05AC:0262.0066: probe with driver apple failed with error -22 [ 1356.601019][ T5877] usb 2-1: USB disconnect, device number 108 [ 1356.959224][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17709'. [ 1357.001765][ T30] kauditd_printk_skb: 7914 callbacks suppressed [ 1357.001786][ T30] audit: type=1400 audit(1749330272.262:2955700): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11875 comm="syz.3.17706" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1357.029966][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1357.031765][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1357.038707][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1357.044894][ T9214] audit: audit_lost=367763 audit_rate_limit=0 audit_backlog_limit=64 [ 1357.051115][ C1] audit: audit_lost=367764 audit_rate_limit=0 audit_backlog_limit=64 [ 1357.059798][ T30] audit: type=1400 audit(1749330272.262:2955701): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11875 comm="syz.3.17706" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1357.067311][ C1] audit: backlog limit exceeded [ 1357.068592][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1357.090118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.090596][ T9214] audit: backlog limit exceeded [ 1357.172250][T11888] program syz.2.17710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.418492][T11892] Falling back ldisc for ttyS3. [ 1358.752451][ T1214] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1358.792664][T11946] program syz.3.17737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1358.926889][ T1214] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1358.947373][ T1214] usb 3-1: config 0 has no interface number 0 [ 1358.964286][ T1214] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1358.986741][ T1214] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1359.023134][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.041017][ T1214] usb 3-1: Product: syz [ 1359.046131][ T1214] usb 3-1: Manufacturer: syz [ 1359.065429][ T1214] usb 3-1: SerialNumber: syz [ 1359.092834][ T1214] usb 3-1: config 0 descriptor?? [ 1359.992135][ T1214] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1360.015647][ T1214] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1360.028262][ T1214] usb 3-1: USB disconnect, device number 92 [ 1360.034328][T11979] block device autoloading is deprecated and will be removed. [ 1360.806806][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17766'. [ 1360.871297][T12021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.574597][ T5877] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1361.590912][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17785'. [ 1361.740388][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 1361.754449][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.785897][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.820545][ T5877] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1361.847533][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.872502][T12064] netlink: 'syz.0.17790': attribute type 1 has an invalid length. [ 1361.882316][ T5877] usb 3-1: config 0 descriptor?? [ 1361.888329][T12064] netlink: 144 bytes leftover after parsing attributes in process `syz.0.17790'. [ 1361.902775][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17790'. [ 1362.341108][ T5877] macally 0003:060B:0001.0067: unknown main item tag 0x0 [ 1362.351431][ T5877] macally 0003:060B:0001.0067: unknown main item tag 0x0 [ 1362.360055][ T5877] macally 0003:060B:0001.0067: unknown main item tag 0x0 [ 1362.369465][ T30] kauditd_printk_skb: 9538 callbacks suppressed [ 1362.369483][ T30] audit: type=1400 audit(1749330277.276:2964582): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12075 comm="syz-executor" name="3737" dev="tmpfs" ino=18849 [ 1362.401512][ T5877] macally 0003:060B:0001.0067: unknown main item tag 0x0 [ 1362.413570][ T5877] macally 0003:060B:0001.0067: hidraw0: USB HID vff.ff Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 1362.426285][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1362.428035][ T30] audit: type=1400 audit(1749330277.276:2964583): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12075 comm="syz-executor" name="3737" dev="tmpfs" ino=18849 [ 1362.434371][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1362.459234][ C1] audit: audit_lost=367985 audit_rate_limit=0 audit_backlog_limit=64 [ 1362.460465][ T30] audit: type=1400 audit(1749330277.276:2964584): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12075 comm="syz-executor" name="3737" dev="tmpfs" ino=18849 [ 1362.467469][ C1] audit: backlog limit exceeded [ 1362.490764][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1362.493157][ T30] audit: type=1400 audit(1749330277.276:2964585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12075 comm="syz-executor" name="3737" dev="tmpfs" ino=18849 [ 1362.500174][ T9214] audit: audit_lost=367986 audit_rate_limit=0 audit_backlog_limit=64 [ 1362.604384][ T5877] usb 3-1: USB disconnect, device number 93 [ 1362.992593][T12090] futex_wake_op: syz.4.17803 tries to shift op by 36; fix this program [ 1363.553961][T12111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.873955][T12121] netlink: 'syz.0.17816': attribute type 10 has an invalid length. [ 1364.022244][T12121] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1365.059956][ T5441] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1365.109260][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17832'. [ 1365.120680][T12157] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17832'. [ 1365.178016][ T5877] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1365.257115][ T5441] usb 4-1: config 0 has no interfaces? [ 1365.264474][ T5441] usb 4-1: New USB device found, idVendor=05ac, idProduct=1290, bcdDevice=dc.1b [ 1365.295271][ T5441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.306479][ T5441] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 1365.349195][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1365.358632][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1365.369377][ T5877] usb 2-1: can't read configurations, error -61 [ 1365.550997][ T5877] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1365.604575][ T1214] apple-mfi-fastcharge 4-1: USB disconnect, device number 68 [ 1365.722627][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1365.734043][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1365.741682][ T5877] usb 2-1: can't read configurations, error -61 [ 1365.770226][ T5877] usb usb2-port1: attempt power cycle [ 1366.151017][ T5877] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1366.194938][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1366.209143][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1366.229444][ T5877] usb 2-1: can't read configurations, error -61 [ 1366.374816][ T5877] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1366.410572][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1366.425547][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1366.437285][ T5877] usb 2-1: can't read configurations, error -61 [ 1366.448797][ T5877] usb usb2-port1: unable to enumerate USB device [ 1367.158396][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17867'. [ 1367.203584][T12231] netlink: 'syz.2.17867': attribute type 9 has an invalid length. [ 1367.222795][T12231] macvlan2: entered allmulticast mode [ 1367.228381][T12231] veth0_macvtap: entered allmulticast mode [ 1367.262554][T12237] bridge0: entered promiscuous mode [ 1367.287142][T12237] macvlan3: entered promiscuous mode [ 1367.732985][ T30] kauditd_printk_skb: 8969 callbacks suppressed [ 1367.733006][ T30] audit: type=1400 audit(1749330282.290:2972862): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12259 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1367.763345][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.765587][T12260] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.770202][ T5958] audit: audit_lost=368218 audit_rate_limit=0 audit_backlog_limit=64 [ 1367.776762][T12249] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.784774][ T5958] audit: backlog limit exceeded [ 1367.796314][ T30] audit: type=1400 audit(1749330282.290:2972863): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12259 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1367.803344][T12260] audit: audit_lost=368219 audit_rate_limit=0 audit_backlog_limit=64 [ 1367.815854][ T5877] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1367.817212][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.824548][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.989128][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 1368.003308][ T5877] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1368.021559][ T5877] usb 4-1: config 0 has no interface number 0 [ 1368.038121][ T5877] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1368.052399][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.075406][ T5877] usb 4-1: Product: syz [ 1368.079656][ T5877] usb 4-1: Manufacturer: syz [ 1368.084443][ T5877] usb 4-1: SerialNumber: syz [ 1368.106660][ T5442] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1368.110041][ T5877] usb 4-1: config 0 descriptor?? [ 1368.131228][ T5877] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1368.280077][ T5442] usb 3-1: Using ep0 maxpacket: 16 [ 1368.294404][ T5442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.325449][ T5442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.336058][ T5442] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1368.349460][ T5442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.361639][ T5442] usb 3-1: config 0 descriptor?? [ 1368.381294][ T5877] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1368.410166][ T5877] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1368.626126][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 32 [ 1368.853959][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1368.863246][ T5877] usb 4-1: USB disconnect, device number 69 [ 1368.888106][ T5442] corsair 0003:1B1C:1B02.0068: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1368.890365][ T5877] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1368.945803][ T5877] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1368.958874][ T5877] quatech2 4-1:0.51: device disconnected [ 1369.086049][ T5442] corsair 0003:1B1C:1B02.0068: Read invalid backlight brightness: cb. [ 1369.320189][ T5877] usb 3-1: USB disconnect, device number 94 [ 1369.604004][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17898'. [ 1369.658005][T12299] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 1369.697744][T12299] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 1370.207175][T12318] netlink: del zone limit has 4 unknown bytes [ 1371.383773][T12362] sch_fq: defrate 0 ignored. [ 1371.705057][T12375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17933'. [ 1372.607469][ T5877] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1372.792190][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.819304][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.862358][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.900847][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.929232][ T5877] usb 4-1: Product: syz [ 1372.933552][ T5877] usb 4-1: Manufacturer: syz [ 1372.938849][ T5877] usb 4-1: SerialNumber: syz [ 1373.110826][ T30] kauditd_printk_skb: 7948 callbacks suppressed [ 1373.110848][ T30] audit: type=1400 audit(1749330287.294:2980538): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5948 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1373.121692][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.144636][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.151298][ C1] audit: audit_lost=368312 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.159464][ C1] audit: backlog limit exceeded [ 1373.165549][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.172128][ C1] audit: audit_lost=368313 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.180717][ C1] audit: backlog limit exceeded [ 1373.181093][T12394] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.198541][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.460299][ T5877] usb 4-1: 0:2 : does not exist [ 1373.472703][T12437] netlink: 'syz.0.17960': attribute type 2 has an invalid length. [ 1373.516551][T12437] netlink: 'syz.0.17960': attribute type 8 has an invalid length. [ 1373.524839][T12437] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.17960'. [ 1373.837489][ T5877] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1373.898745][ T1214] usb 4-1: USB disconnect, device number 70 [ 1374.009693][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 1374.017445][ T5877] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1374.028421][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.038878][ T5877] usb 2-1: config 0 descriptor?? [ 1374.309557][T12463] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1374.486578][ T5877] koneplus 0003:1E7D:2E22.0069: unknown main item tag 0x1 [ 1374.508024][ T5877] koneplus 0003:1E7D:2E22.0069: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1374.605722][T12463] bond5 (unregistering): Released all slaves [ 1374.697084][ T6118] usb 2-1: USB disconnect, device number 113 [ 1375.278318][T12492] mkiss: ax0: crc mode is auto. [ 1376.210425][ T7625] Bluetooth: hci4: command 0x0406 tx timeout [ 1377.044229][T12557] netlink: 'syz.4.18016': attribute type 83 has an invalid length. [ 1377.146759][T12560] input: syz0 as /devices/virtual/input/input138 [ 1377.463261][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18024'. [ 1377.506476][T12577] netem: invalid attributes len -6 [ 1377.511678][T12577] netem: change failed [ 1377.927048][T12595] cifs: Unknown parameter 'mode' [ 1378.348403][ T6118] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1378.468709][ T30] kauditd_printk_skb: 9791 callbacks suppressed [ 1378.468730][ T30] audit: type=1400 audit(1749330292.336:2989274): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12620 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1378.508731][ T30] audit: type=1400 audit(1749330292.364:2989275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12620 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1378.528868][ T6118] usb 3-1: Using ep0 maxpacket: 8 [ 1378.539511][ T30] audit: type=1400 audit(1749330292.364:2989276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12620 comm="syz-executor" name="3412" dev="tmpfs" ino=17168 [ 1378.563222][ T5442] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1378.574359][ T6118] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1378.577591][ T5946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1378.584467][T12604] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1378.599498][ T6118] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1378.602115][ T5946] audit: audit_lost=368667 audit_rate_limit=0 audit_backlog_limit=64 [ 1378.609886][ T30] audit: type=1400 audit(1749330292.364:2989277): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=12620 comm="syz-executor" opid=12620 ocomm="syz-executor" [ 1378.609940][ T30] audit: type=1400 audit(1749330292.364:2989278): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12620 comm="syz-executor" name="3412" dev="tmpfs" ino=17168 [ 1378.609984][ T30] audit: type=1400 audit(1749330292.364:2989279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12620 comm="syz-executor" name="3412" dev="tmpfs" ino=17168 [ 1378.610051][ T30] audit: type=1400 audit(1749330292.364:2989280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12620 comm="syz-executor" name="3412" dev="tmpfs" ino=17168 [ 1378.612007][ T6118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1378.718688][ T6118] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1378.736633][ T6118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.748070][ T6118] usb 3-1: Product: syz [ 1378.752717][ T6118] usb 3-1: Manufacturer: syz [ 1378.759208][ T6118] usb 3-1: SerialNumber: syz [ 1378.872126][ T5442] usb 2-1: Using ep0 maxpacket: 32 [ 1378.882223][ T5442] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1378.903437][ T5442] usb 2-1: config 0 has no interface number 0 [ 1378.974408][ T5442] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1379.000566][ T5442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.013783][ T6118] usb 3-1: 0:2 : does not exist [ 1379.038462][ T5442] usb 2-1: Product: syz [ 1379.048707][ T5442] usb 2-1: Manufacturer: syz [ 1379.053388][ T5442] usb 2-1: SerialNumber: syz [ 1379.060205][ T6118] usb 3-1: USB disconnect, device number 95 [ 1379.088615][ T5442] usb 2-1: config 0 descriptor?? [ 1379.104095][ T5442] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1379.353481][ T5442] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1379.366494][T12639] input: syz1 as /devices/virtual/input/input139 [ 1379.386107][ T5442] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1379.549356][T12647] macvlan2: entered promiscuous mode [ 1379.554738][T12647] bridge0: entered promiscuous mode [ 1379.594317][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 21 [ 1379.819140][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1379.831903][ T5442] usb 2-1: USB disconnect, device number 114 [ 1379.854030][ T5442] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1379.891256][ T5442] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1379.921939][ T5442] quatech2 2-1:0.51: device disconnected [ 1380.085011][T12667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.198093][ T981] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1380.358424][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 1380.366089][ T981] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1380.379330][ T981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.389504][ T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.429581][ T981] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1380.453704][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.462179][ T981] usb 3-1: Product: syz [ 1380.473856][ T981] usb 3-1: Manufacturer: syz [ 1380.478647][ T981] usb 3-1: SerialNumber: syz [ 1380.952314][ T981] usb 3-1: 0:2 : does not exist [ 1381.391308][ T981] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1381.463520][ T981] usb 3-1: USB disconnect, device number 96 [ 1381.550895][T12702] syz_tun: left promiscuous mode [ 1381.611554][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.619075][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.643713][T12702] bridge0: left allmulticast mode [ 1381.991202][T12702] veth0_to_bond: left allmulticast mode [ 1382.393384][T12702] 0·: left allmulticast mode [ 1382.398030][T12702] hsr_slave_0: left allmulticast mode [ 1382.423450][T12702] hsr_slave_1: left allmulticast mode [ 1382.590377][T12702] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.603237][T12702] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.614731][T12702] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.623264][T12702] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.676677][T12702] bond1: left allmulticast mode [ 1382.729870][T12702] veth5: left promiscuous mode [ 1382.735694][T12702] veth5: left allmulticast mode [ 1382.761263][T12702] bridge3: left promiscuous mode [ 1382.774969][T12702] vlan2: left allmulticast mode [ 1382.779890][T12702] batadv_slave_0: left allmulticast mode [ 1382.793982][T12702] vxcan5: left promiscuous mode [ 1382.807398][T12702] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.816424][T12702] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.825163][T12702] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.834030][T12702] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.867112][T12702] gtp1: left promiscuous mode [ 1382.882902][T12702] macvlan3: left promiscuous mode [ 1382.918314][T12707] ipvlan2: entered promiscuous mode [ 1382.926748][T12707] ipvlan2: entered allmulticast mode [ 1382.932225][T12707] macvlan1: entered allmulticast mode [ 1382.940778][T12707] veth1_vlan: entered allmulticast mode [ 1383.323238][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18097'. [ 1383.528830][T12749] netlink: 'syz.1.18101': attribute type 9 has an invalid length. [ 1383.554496][T12749] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.18101'. [ 1383.825926][ T30] kauditd_printk_skb: 6756 callbacks suppressed [ 1383.825947][ T30] audit: type=1400 audit(1749330297.350:2995863): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12761 comm="modprobe" name="lib" dev="sda1" ino=264 [ 1383.886530][T12761] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.895853][T12768] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.906882][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.914316][T12761] audit: audit_lost=368726 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.914554][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1383.928638][ T9214] audit: audit_lost=368727 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.929057][ C1] audit: audit_lost=368728 audit_rate_limit=0 audit_backlog_limit=64 [ 1383.937240][ T30] audit: type=1400 audit(1749330297.350:2995864): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=12761 comm="modprobe" name="libresolv.so.2" dev="sda1" ino=1130 [ 1383.945206][ C1] audit: backlog limit exceeded [ 1383.996854][T12769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18109'. [ 1384.232355][T12776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18112'. [ 1384.327388][T12779] team_slave_0: entered promiscuous mode [ 1384.333878][T12779] team_slave_1: entered promiscuous mode [ 1384.848868][T12797] kvm: kvm [12795]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1386.634444][ T7625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1386.659138][ T7625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1386.669121][ T7625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1386.679851][ T7625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1386.687792][ T7625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1386.969947][T12849] hsr0 speed is unknown, defaulting to 1000 [ 1387.567117][T12849] wg1 speed is unknown, defaulting to 1000 [ 1388.073414][T12876] gtp0: entered promiscuous mode [ 1388.083318][T12876] gtp0: entered allmulticast mode [ 1388.101558][T12849] chnl_net:caif_netlink_parms(): no params data found [ 1388.348086][T12849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.376220][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.387625][T12849] bridge_slave_0: entered allmulticast mode [ 1388.409212][T12849] bridge_slave_0: entered promiscuous mode [ 1388.430255][T12849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.445966][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.475380][T12849] bridge_slave_1: entered allmulticast mode [ 1388.497504][T12849] bridge_slave_1: entered promiscuous mode [ 1388.624174][T12849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.648023][T12849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.753475][T12849] team0: Port device team_slave_0 added [ 1388.779759][T12849] team0: Port device team_slave_1 added [ 1388.864435][T12849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.877424][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.909654][T12849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.926819][T12849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.934679][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.955368][T29586] Bluetooth: hci1: command tx timeout [ 1388.961183][T12849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.120644][T12902] netlink: 'syz.2.18170': attribute type 21 has an invalid length. [ 1389.127239][T12903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.144275][T12849] hsr_slave_0: entered promiscuous mode [ 1389.151714][T12849] hsr_slave_1: entered promiscuous mode [ 1389.177762][ T30] kauditd_printk_skb: 7063 callbacks suppressed [ 1389.177781][ T30] audit: type=1400 audit(1749330302.345:3002237): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9214 comm="syz-executor" path="/285" dev="tmpfs" ino=1457 [ 1389.241953][ T30] audit: type=1400 audit(1749330302.382:3002238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9214 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1389.242339][T12904] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.272552][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.280152][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.286773][ C1] audit: audit_lost=368960 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.295011][ C1] audit: backlog limit exceeded [ 1389.301019][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.307659][ C1] audit: audit_lost=368961 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.319341][ T9195] audit: audit_lost=368963 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.364912][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18172'. [ 1389.395135][T29586] Bluetooth: hci4: link tx timeout [ 1389.401080][T29586] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1389.600527][T12912] netlink: 'syz.3.18174': attribute type 25 has an invalid length. [ 1389.609542][T12912] netlink: 'syz.3.18174': attribute type 8 has an invalid length. [ 1389.748749][T12849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1389.770448][T12849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1389.783882][T12849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1389.801860][T12849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1389.970237][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.017698][T12849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.041800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.048988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.075514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.082779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.284143][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18182'. [ 1390.756742][T12849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.177683][ T7625] Bluetooth: hci1: command tx timeout [ 1391.586911][T12991] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1391.605866][ T7625] Bluetooth: hci4: command 0x0406 tx timeout [ 1391.901942][T12849] veth0_vlan: entered promiscuous mode [ 1391.946359][T12849] veth1_vlan: entered promiscuous mode [ 1392.147621][T12849] veth0_macvtap: entered promiscuous mode [ 1392.179576][T12849] veth1_macvtap: entered promiscuous mode [ 1392.262375][T12849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.303082][T12849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.346870][T12849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.369470][T12849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.395651][ T981] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1392.404943][T12849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.427492][T12849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.603292][ T981] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.626228][ T981] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1392.675980][ T981] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1392.706931][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.733879][ T7716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.770018][ T7716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.770587][T13010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1392.825179][ T981] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1392.897234][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.926171][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.074242][ T6118] usb 4-1: USB disconnect, device number 71 [ 1393.108056][T13036] sctp: [Deprecated]: syz.0.18220 (pid 13036) Use of int in maxseg socket option. [ 1393.108056][T13036] Use struct sctp_assoc_value instead [ 1393.322890][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18137'. [ 1393.401179][T29586] Bluetooth: hci1: command tx timeout [ 1393.558034][T13049] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1394.234677][ T6070] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1394.405491][ T6070] usb 3-1: Using ep0 maxpacket: 32 [ 1394.427283][ T6070] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1394.458078][ T6070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.484812][ T6070] usb 3-1: config 0 descriptor?? [ 1394.534284][ T30] kauditd_printk_skb: 12316 callbacks suppressed [ 1394.534303][ T30] audit: type=1400 audit(1749330307.368:3013126): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13087 comm="syz-executor" name="304" dev="tmpfs" ino=1554 [ 1394.575596][T12849] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1394.575708][T13083] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1394.587983][T12849] audit: audit_lost=369438 audit_rate_limit=0 audit_backlog_limit=64 [ 1394.589724][ T5946] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1394.599851][ T30] audit: type=1400 audit(1749330307.387:3013127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13083 comm="sed" name="/" dev="sda1" ino=2 [ 1394.605279][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.628041][T12849] audit: backlog limit exceeded [ 1394.628075][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.632959][ C1] audit: audit_lost=369439 audit_rate_limit=0 audit_backlog_limit=64 [ 1394.728898][ T6070] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1394.755081][ T6070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1394.789973][ T6070] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1394.818359][ T6070] usb 3-1: media controller created [ 1394.905535][ T6070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1394.991386][ T6070] az6027: usb out operation failed. (-71) [ 1395.019420][ T6070] az6027: usb out operation failed. (-71) [ 1395.031410][ T6070] stb0899_attach: Driver disabled by Kconfig [ 1395.046387][ T6070] az6027: no front-end attached [ 1395.046387][ T6070] [ 1395.069462][T13106] overlay: filesystem on ./file0 not supported as upperdir [ 1395.078286][ T6070] az6027: usb out operation failed. (-71) [ 1395.110631][ T6070] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1395.134693][ T6070] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input140 [ 1395.171404][ T6070] dvb-usb: schedule remote query interval to 400 msecs. [ 1395.210374][ T6070] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1395.241679][ T6070] usb 3-1: USB disconnect, device number 97 [ 1395.333244][ T6070] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1395.625155][T29586] Bluetooth: hci1: command tx timeout [ 1396.002322][T13135] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1396.020434][T13135] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1397.492593][T13183] loop9: detected capacity change from 0 to 7 [ 1397.517284][T13183] buffer_io_error: 23 callbacks suppressed [ 1397.517305][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.565784][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.589728][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.616031][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.637264][T13188] netlink: 'syz.2.18274': attribute type 15 has an invalid length. [ 1397.658242][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.718670][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.768903][T13192] netlink: 'syz.0.18275': attribute type 1 has an invalid length. [ 1397.789261][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.806066][T13192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18275'. [ 1397.824452][T13183] ldm_validate_partition_table(): Disk read failed. [ 1397.845623][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.881334][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.906055][T13183] Buffer I/O error on dev loop9, logical block 0, async page read [ 1397.937274][T13183] Dev loop9: unable to read RDB block 0 [ 1397.944579][T13183] loop9: unable to read partition table [ 1397.961615][T13183] loop9: partition table beyond EOD, truncated [ 1397.980560][T13183] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1397.980560][T13183] ) failed (rc=-5) [ 1399.670104][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18299'. [ 1399.890293][ T30] kauditd_printk_skb: 12553 callbacks suppressed [ 1399.890315][ T30] audit: type=1400 audit(1749330312.372:3023121): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1399.909313][T13262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1399.955197][T13262] audit: audit_lost=370294 audit_rate_limit=0 audit_backlog_limit=64 [ 1399.963351][T13262] audit: backlog limit exceeded [ 1399.964230][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1399.976357][T13265] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1399.982941][T13265] audit: audit_lost=370295 audit_rate_limit=0 audit_backlog_limit=64 [ 1399.988391][T13266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1399.992176][T12849] audit: audit_lost=370296 audit_rate_limit=0 audit_backlog_limit=64 [ 1399.998298][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1400.171677][T13271] netlink: 36 bytes leftover after parsing attributes in process `syz.5.18305'. [ 1401.450538][ T5441] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1401.622041][ T5441] usb 4-1: Using ep0 maxpacket: 32 [ 1401.640599][ T5441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.679194][ T5441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.705432][ T5441] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1401.739143][ T5441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.750282][ T5441] usb 4-1: config 0 descriptor?? [ 1401.785828][ T5441] hub 4-1:0.0: USB hub found [ 1402.014473][ T5441] hub 4-1:0.0: 1 port detected [ 1402.465222][ T5441] usb 4-1: USB disconnect, device number 72 [ 1402.466294][ T7625] Bluetooth: hci2: command 0x0406 tx timeout [ 1403.263616][T13374] netem: change failed [ 1403.321685][ T5441] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1403.508985][ T5441] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1403.528272][ T5441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.550600][ T5441] usb 6-1: config 0 descriptor?? [ 1403.562141][ T5441] cp210x 6-1:0.0: cp210x converter detected [ 1404.033146][ T5441] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1404.077112][ T5441] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1404.143280][T13408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input141 [ 1404.195926][T13414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.209091][T29586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.224762][T13414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.236444][T13414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.247633][T13414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.317748][ T5441] usb 6-1: USB disconnect, device number 2 [ 1404.356209][ T5441] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1404.365829][ T5441] cp210x 6-1:0.0: device disconnected [ 1404.437481][T13439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.621704][T13453] 9pnet_fd: Insufficient options for proto=fd [ 1405.247007][ T30] kauditd_printk_skb: 10919 callbacks suppressed [ 1405.247027][ T30] audit: type=1400 audit(1749330318.391:3032658): lsm=SMACK fn=smack_file_send_sigiotask action=granted subject="_" object="_" requested=w pid=13467 comm="syz.3.18374" opid=13467 ocomm="syz.3.18374" [ 1405.329440][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.337161][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.339992][ T30] audit: type=1400 audit(1749330318.410:3032659): lsm=SMACK fn=smack_file_send_sigiotask action=granted subject="_" object="_" requested=w pid=13467 comm="syz.3.18374" opid=13467 ocomm="syz.3.18374" [ 1405.343750][ C1] audit: audit_lost=370758 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.343768][ C1] audit: backlog limit exceeded [ 1405.344978][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.366211][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.371711][ C1] audit: audit_lost=370759 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.380197][ T5958] audit: audit_lost=370760 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.008775][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18385'. [ 1406.421794][ T5830] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1406.625638][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 1406.633583][ T5830] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1406.642923][ T5830] usb 3-1: config 0 has no interface number 0 [ 1406.655243][ T5830] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1406.672228][ T5830] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1406.685069][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.705766][ T5830] usb 3-1: Product: syz [ 1406.710010][ T5830] usb 3-1: Manufacturer: syz [ 1406.726656][ T5830] usb 3-1: SerialNumber: syz [ 1406.745406][ T5830] usb 3-1: config 0 descriptor?? [ 1407.587472][ T5442] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1407.649355][ T5830] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1407.672501][ T5830] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1407.680167][ T5830] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1407.707920][ T5830] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1407.727567][ T5830] usb 3-1: USB disconnect, device number 98 [ 1407.770443][ T5442] usb 6-1: Using ep0 maxpacket: 8 [ 1407.784307][ T5442] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.796577][ T5442] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1407.815583][ T5442] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1407.834950][ T5442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1407.852294][ T5442] usb 6-1: Product: syz [ 1407.858410][ T5442] usb 6-1: Manufacturer: syz [ 1407.863060][ T5442] usb 6-1: SerialNumber: syz [ 1407.880347][ T5442] usb 6-1: config 0 descriptor?? [ 1408.125387][ T5830] usb 6-1: USB disconnect, device number 3 [ 1408.449406][T13582] netlink: 'syz.2.18426': attribute type 1 has an invalid length. [ 1408.461537][T13582] netlink: 'syz.2.18426': attribute type 2 has an invalid length. [ 1408.477552][T13582] netlink: 'syz.2.18426': attribute type 1 has an invalid length. [ 1408.485948][T13582] netlink: 'syz.2.18426': attribute type 2 has an invalid length. [ 1410.211026][T13640] netlink: 'syz.2.18454': attribute type 9 has an invalid length. [ 1410.226523][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18454'. [ 1410.257170][T13640] macvlan3: entered promiscuous mode [ 1410.267000][T13640] macvlan3: entered allmulticast mode [ 1410.272528][T13640] hsr0: entered allmulticast mode [ 1410.277657][T13640] hsr_slave_0: entered allmulticast mode [ 1410.287039][T13640] hsr_slave_1: entered allmulticast mode [ 1410.602160][ T30] kauditd_printk_skb: 8844 callbacks suppressed [ 1410.602180][ T30] audit: type=1400 audit(1749330323.396:3040963): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13656 comm="syz.2.18460" name="newroot" dev="tmpfs" ino=2 [ 1410.635359][ T5946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.636129][T13657] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1410.652805][ T30] audit: type=1400 audit(1749330323.396:3040964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13656 comm="syz.2.18460" name="/" dev="devtmpfs" ino=1 [ 1410.652878][ T5946] audit: audit_lost=370941 audit_rate_limit=0 audit_backlog_limit=64 [ 1410.672798][T13657] audit: audit_lost=370942 audit_rate_limit=0 audit_backlog_limit=64 [ 1410.684667][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.692912][ T30] audit: type=1400 audit(1749330323.396:3040965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13656 comm="syz.2.18460" name="infiniband" dev="devtmpfs" ino=1271 [ 1410.698357][ T9195] audit: audit_lost=370943 audit_rate_limit=0 audit_backlog_limit=64 [ 1410.716994][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1411.361177][ T7625] Bluetooth: hci5: command 0x1003 tx timeout [ 1411.365000][T29586] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1411.904161][T13696] vlan3: entered promiscuous mode [ 1411.919486][T13696] bond0: entered promiscuous mode [ 1411.924720][T13696] bond_slave_1: entered promiscuous mode [ 1411.934148][T13696] vlan3: entered allmulticast mode [ 1411.941620][T13696] bond0: entered allmulticast mode [ 1411.947053][T13696] bond_slave_1: entered allmulticast mode [ 1412.336715][T13709] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1412.369204][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18483'. [ 1412.578209][T13722] bridge0: port 3(syz_tun) entered blocking state [ 1412.625775][T13722] bridge0: port 3(syz_tun) entered disabled state [ 1412.642719][T13722] syz_tun: entered allmulticast mode [ 1412.659594][T13722] syz_tun: entered promiscuous mode [ 1413.384720][T13754] input: syz0 as /devices/virtual/input/input142 [ 1414.399154][T13788] Falling back ldisc for ptm0. [ 1414.526145][ T6118] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1414.716683][ T6118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.737840][ T6118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.762113][ T6118] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1414.775838][ T6118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.791061][ T6118] usb 6-1: config 0 descriptor?? [ 1415.238682][ T6118] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1415.269105][ T6118] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1415.284547][ T6118] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1415.301152][ T6118] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1415.330484][ T6118] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1415.363940][ T6118] playstation 0003:054C:0DF2.006A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1415.462504][ T6118] playstation 0003:054C:0DF2.006A: Invalid reportID received, expected 9 got 0 [ 1415.496825][ T6118] playstation 0003:054C:0DF2.006A: Failed to retrieve DualSense pairing info: -22 [ 1415.517110][ T6118] playstation 0003:054C:0DF2.006A: Failed to get MAC address from DualSense [ 1415.534309][ T6118] playstation 0003:054C:0DF2.006A: Failed to create dualsense. [ 1415.544245][ T6118] playstation 0003:054C:0DF2.006A: probe with driver playstation failed with error -22 [ 1415.682589][ T6118] usb 6-1: USB disconnect, device number 4 [ 1415.958502][ T30] kauditd_printk_skb: 8887 callbacks suppressed [ 1415.958524][ T30] audit: type=1400 audit(1749330328.400:3049425): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=153 comm="kworker/u8:5" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1415.987581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.001629][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1416.010782][ T9214] audit: audit_lost=371086 audit_rate_limit=0 audit_backlog_limit=64 [ 1416.014381][ T30] audit: type=1400 audit(1749330328.400:3049426): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13839 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1416.020844][ T9214] audit: backlog limit exceeded [ 1416.041838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.052771][ T30] audit: type=1400 audit(1749330328.400:3049427): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13839 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1416.077429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.084211][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1416.096152][ T9214] audit: audit_lost=371087 audit_rate_limit=0 audit_backlog_limit=64 [ 1416.102324][ T30] audit: type=1400 audit(1749330328.400:3049428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1416.110092][ T9214] audit: backlog limit exceeded [ 1416.317529][T13845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18545'. [ 1416.342707][T13845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18545'. [ 1417.871267][ T5954] Bluetooth: hci1: command 0x0405 tx timeout [ 1419.031407][T13924] delete_channel: no stack [ 1420.082259][ T6118] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1420.276421][ T6118] usb 6-1: config 1 has an invalid interface number: 114 but max is 0 [ 1420.302716][ T6118] usb 6-1: config 1 has no interface number 0 [ 1420.322045][ T6118] usb 6-1: config 1 interface 114 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1420.347421][ T6118] usb 6-1: New USB device found, idVendor=12d1, idProduct=aa6e, bcdDevice=b1.16 [ 1420.364707][ T6118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.383836][ T6118] usb 6-1: Product: syz [ 1420.392349][ T6118] usb 6-1: Manufacturer: syz [ 1420.404074][ T6118] usb 6-1: SerialNumber: syz [ 1420.660411][ T6118] option 6-1:1.114: GSM modem (1-port) converter detected [ 1420.700318][ T6118] usb 6-1: USB disconnect, device number 5 [ 1420.717861][ T6118] option 6-1:1.114: device disconnected [ 1421.083815][T14005] blkio.reset_stats is deprecated [ 1421.321328][ T30] kauditd_printk_skb: 8345 callbacks suppressed [ 1421.321349][ T30] audit: type=1400 audit(1749330333.423:3057495): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14008 comm="syz.3.18621" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1421.353895][ T6118] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1421.378338][ T30] audit: type=1400 audit(1749330333.432:3057496): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14015 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1421.400860][ T30] audit: type=1400 audit(1749330333.432:3057497): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14015 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1421.405957][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.432472][ T5958] audit: audit_lost=371181 audit_rate_limit=0 audit_backlog_limit=64 [ 1421.432796][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.440693][ T5958] audit: backlog limit exceeded [ 1421.447142][ C1] audit: audit_lost=371182 audit_rate_limit=0 audit_backlog_limit=64 [ 1421.447163][ C1] audit: backlog limit exceeded [ 1421.448215][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1421.559590][ T6118] usb 3-1: Using ep0 maxpacket: 8 [ 1421.571830][ T6118] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1421.591660][ T6118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.610576][ T6118] usb 3-1: Product: syz [ 1421.635187][ T6118] usb 3-1: Manufacturer: syz [ 1421.639952][ T6118] usb 3-1: SerialNumber: syz [ 1421.668849][ T6118] usb 3-1: config 0 descriptor?? [ 1421.948439][ T6118] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1422.294554][T14046] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1422.411579][ T6118] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1422.430044][ T6118] usb 3-1: USB disconnect, device number 99 [ 1422.754158][T14064] tipc: New replicast peer: 0.0.0.0 [ 1422.763086][T14064] tipc: Enabled bearer , priority 10 [ 1423.156325][T14080] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1423.200293][T14082] netlink: 'syz.4.18657': attribute type 9 has an invalid length. [ 1423.230082][T14082] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.18657'. [ 1424.238548][T14129] netlink: 165 bytes leftover after parsing attributes in process `syz.3.18677'. [ 1424.924999][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18686'. [ 1425.371815][T14164] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1426.024342][T14183] netlink: 'syz.2.18700': attribute type 12 has an invalid length. [ 1426.670023][ T30] kauditd_printk_skb: 9108 callbacks suppressed [ 1426.670045][ T30] audit: type=1400 audit(1749330338.409:3065923): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9195 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1426.707180][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1426.735699][ T9214] audit: audit_lost=371411 audit_rate_limit=0 audit_backlog_limit=64 [ 1426.736966][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1426.743831][ T9214] audit: backlog limit exceeded [ 1426.750971][ T30] audit: type=1400 audit(1749330338.409:3065924): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9195 comm="syz-executor" name="414" dev="tmpfs" ino=2115 [ 1426.758314][T14203] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1426.776063][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1426.788452][ C1] audit: audit_lost=371412 audit_rate_limit=0 audit_backlog_limit=64 [ 1426.796567][ C1] audit: backlog limit exceeded [ 1427.129115][T14216] netlink: 35 bytes leftover after parsing attributes in process `syz.5.18716'. [ 1427.189370][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18718'. [ 1427.572392][T14238] batadv_slave_0: entered promiscuous mode [ 1427.579137][T14238] netlink: 'syz.0.18727': attribute type 2 has an invalid length. [ 1427.780800][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18731'. [ 1427.894515][T14248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.901925][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.909255][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.916670][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.246863][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18739'. [ 1430.566559][T14381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1431.513833][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18782'. [ 1431.854721][ T5830] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1432.029121][ T30] kauditd_printk_skb: 8484 callbacks suppressed [ 1432.029140][ T30] audit: type=1400 audit(1749330343.441:3073082): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14409 comm="syz.2.18780" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1432.031352][ T5830] usb 3-1: config 0 has no interfaces? [ 1432.058195][ T30] audit: type=1400 audit(1749330343.441:3073083): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14409 comm="syz.2.18780" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1432.101544][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.105135][ T30] audit: type=1400 audit(1749330343.441:3073084): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14409 comm="syz.2.18780" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1432.108760][ T9214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.135308][ T5958] audit: audit_lost=371856 audit_rate_limit=0 audit_backlog_limit=64 [ 1432.139860][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.150070][ C1] audit: audit_lost=371857 audit_rate_limit=0 audit_backlog_limit=64 [ 1432.158318][ C1] audit: backlog limit exceeded [ 1432.164117][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.171045][ T5830] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1432.186001][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.243446][ T5830] usb 3-1: config 0 descriptor?? [ 1432.535432][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18780'. [ 1432.546504][ T5830] usb 3-1: USB disconnect, device number 100 [ 1433.078812][T14451] IPVS: persistence engine module ip_vs_pe_ not found [ 1433.384433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 1433.642877][T14473] sctp: [Deprecated]: syz.4.18808 (pid 14473) Use of int in max_burst socket option. [ 1433.642877][T14473] Use struct sctp_assoc_value instead [ 1434.052386][ T9214] syz_tun (unregistering): left allmulticast mode [ 1434.070737][ T9214] syz_tun (unregistering): left promiscuous mode [ 1434.085230][ T9214] bridge0: port 3(syz_tun) entered disabled state [ 1434.311409][T14355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.436677][T14355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.590106][T14355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.703812][T14355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.826355][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18823'. [ 1435.023149][T14355] bridge_slave_1: left allmulticast mode [ 1435.063191][T14355] bridge_slave_1: left promiscuous mode [ 1435.069063][T14355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.095043][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1435.108049][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1435.119818][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1435.136332][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1435.145863][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1435.173532][T14355] bridge_slave_0: left allmulticast mode [ 1435.179741][T14355] bridge_slave_0: left promiscuous mode [ 1435.192018][T14355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.259523][T14355] bridge0 (unregistering): left promiscuous mode [ 1436.278888][T14546] openvswitch: netlink: Multiple metadata blocks provided [ 1436.658438][T14355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.671675][T14355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.690643][T14355] bond0 (unregistering): Released all slaves [ 1436.810344][T14508] hsr0 speed is unknown, defaulting to 1000 [ 1437.342002][T14508] wg1 speed is unknown, defaulting to 1000 [ 1437.360809][T29586] Bluetooth: hci4: command tx timeout [ 1437.381682][ T30] kauditd_printk_skb: 7064 callbacks suppressed [ 1437.381703][ T30] audit: type=1400 audit(1749330348.436:3079376): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5946 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1437.455668][ T30] audit: type=1400 audit(1749330348.455:3079377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14572 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1437.532599][ T30] audit: type=1400 audit(1749330348.455:3079378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14572 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1437.583419][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1437.583418][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1437.583445][ C1] audit: audit_lost=372116 audit_rate_limit=0 audit_backlog_limit=64 [ 1437.604687][ C1] audit: backlog limit exceeded [ 1437.606258][ T30] audit: type=1400 audit(1749330348.455:3079379): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14572 comm="syz-executor" name="435" dev="tmpfs" ino=2220 [ 1437.629302][T12849] audit: audit_lost=372117 audit_rate_limit=0 audit_backlog_limit=64 [ 1437.637420][T12849] audit: backlog limit exceeded [ 1437.912121][T14355] hsr_slave_0: left promiscuous mode [ 1437.947899][T14355] hsr_slave_1: left promiscuous mode [ 1437.957898][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.979164][T14355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.019551][T14355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.056521][T14355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.181105][T14355] veth1_macvtap: left promiscuous mode [ 1438.203226][T14355] veth0_macvtap: left promiscuous mode [ 1438.219761][T14355] veth1_vlan: left allmulticast mode [ 1438.235371][T14355] veth1_vlan: left promiscuous mode [ 1438.245603][T14355] veth0_vlan: left promiscuous mode [ 1438.404630][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18867'. [ 1439.206585][T14355] team0 (unregistering): Port device team_slave_1 removed [ 1439.264533][T14355] team0 (unregistering): Port device team_slave_0 removed [ 1439.595111][T29586] Bluetooth: hci4: command tx timeout [ 1439.879921][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18868'. [ 1440.111945][T14621] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 1440.278200][T14508] chnl_net:caif_netlink_parms(): no params data found [ 1440.570880][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.589362][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.596701][T14508] bridge_slave_0: entered allmulticast mode [ 1440.629201][T14508] bridge_slave_0: entered promiscuous mode [ 1440.650885][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.674500][T14508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.681853][T14508] bridge_slave_1: entered allmulticast mode [ 1440.696772][T14508] bridge_slave_1: entered promiscuous mode [ 1440.772438][T14508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.793714][T14508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.831532][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18886'. [ 1440.937018][T14508] team0: Port device team_slave_0 added [ 1440.960378][T14508] team0: Port device team_slave_1 added [ 1441.054028][T14508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.070239][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.113096][T14508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.135094][T14508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.142104][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.222693][T14508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.407363][T14508] hsr_slave_0: entered promiscuous mode [ 1441.429763][T14508] hsr_slave_1: entered promiscuous mode [ 1441.458714][T14508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.481664][T14508] Cannot create hsr debugfs directory [ 1441.818532][T29586] Bluetooth: hci4: command tx timeout [ 1441.924728][T14508] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1441.942595][T14508] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1441.961001][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18904'. [ 1441.989040][T14508] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1442.024875][T14508] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1442.242425][T14508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.301867][T14508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.334687][T14319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.341944][T14319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.391584][T14315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.398848][T14315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.738448][ T30] kauditd_printk_skb: 6786 callbacks suppressed [ 1442.738469][ T30] audit: type=1400 audit(1749330353.459:3085293): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1442.785008][T14711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.800033][T14711] audit: audit_lost=372409 audit_rate_limit=0 audit_backlog_limit=64 [ 1442.800416][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.809311][T14711] audit: backlog limit exceeded [ 1442.820494][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.820520][ C1] audit: audit_lost=372410 audit_rate_limit=0 audit_backlog_limit=64 [ 1442.820539][ C1] audit: backlog limit exceeded [ 1442.836462][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.836487][ C1] audit: audit_lost=372411 audit_rate_limit=0 audit_backlog_limit=64 [ 1443.343777][T14508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.032560][T29586] Bluetooth: hci4: command tx timeout [ 1444.369105][T14508] veth0_vlan: entered promiscuous mode [ 1444.396611][T14508] veth1_vlan: entered promiscuous mode [ 1444.426983][ T981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1444.493426][T14508] veth0_macvtap: entered promiscuous mode [ 1444.526699][T14508] veth1_macvtap: entered promiscuous mode [ 1444.575645][T14508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.608538][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 1444.635013][T14508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.651901][ T981] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1444.660786][ T981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.678961][ T981] usb 6-1: config 0 has no interface number 0 [ 1444.687065][T14508] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.705417][T14508] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.717906][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1444.747513][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.757037][T14508] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.768024][ T981] usb 6-1: Product: syz [ 1444.774278][ T981] usb 6-1: Manufacturer: syz [ 1444.781512][T14508] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.792352][ T981] usb 6-1: SerialNumber: syz [ 1444.803831][ T981] usb 6-1: config 0 descriptor?? [ 1444.845353][ T981] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1444.851777][ T981] usb 6-1: No valid video chain found. [ 1445.042494][T14355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.070950][T14355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.084845][ T6070] usb 6-1: USB disconnect, device number 6 [ 1445.149826][T14314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.169378][T14314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.634852][ T6070] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1445.854656][ T6070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1445.877794][ T6070] usb 3-1: not running at top speed; connect to a high speed hub [ 1445.892180][ T6070] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 1445.900411][ T6070] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.912008][ T6070] usb 3-1: config 5 has no interface number 0 [ 1445.946791][ T6070] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1445.987986][ T6070] usb 3-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1446.033454][ T6070] usb 3-1: config 5 interface 246 has no altsetting 0 [ 1446.054000][ T6070] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1446.073463][ T6070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.083612][ T6070] usb 3-1: Product: syz [ 1446.093047][ T6070] usb 3-1: Manufacturer: syz [ 1446.103079][ T6070] usb 3-1: SerialNumber: syz [ 1446.359202][ T6070] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1446.368853][T14315] usb 3-1: Failed to submit usb control message: -71 [ 1446.372520][T14315] usb 3-1: unable to send the bmi data to the device: -71 [ 1446.375914][ T5441] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1446.396479][ T6070] usb 3-1: USB disconnect, device number 101 [ 1446.407665][T14315] usb 3-1: unable to get target info from device [ 1446.420586][T14315] usb 3-1: could not get target info (-71) [ 1446.430940][T14315] usb 3-1: could not probe fw (-71) [ 1446.506972][ T5830] kernel write not supported for file /amidi2 (pid: 5830 comm: kworker/0:3) [ 1446.547319][ T5441] usb 7-1: Using ep0 maxpacket: 32 [ 1446.559483][ T5441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.574263][ T5441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.587426][ T5441] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1446.596593][ T5441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.616205][ T5441] usb 7-1: config 0 descriptor?? [ 1446.626232][ T5441] hub 7-1:0.0: USB hub found [ 1446.779310][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18961'. [ 1446.837762][T14824] bond5 (unregistering): Released all slaves [ 1446.852720][ T5441] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1447.070172][T14832] netlink: 'syz.4.18964': attribute type 46 has an invalid length. [ 1447.080866][T14832] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.18964'. [ 1447.302060][ T5441] hid-generic 0003:046D:C31C.006B: unknown main item tag 0x0 [ 1447.317067][ T5441] hid-generic 0003:046D:C31C.006B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 1447.377488][ T6070] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1447.565729][ T6070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.589067][ T6070] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1447.611860][ T6070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.637937][ T6070] usb 3-1: config 0 descriptor?? [ 1447.666497][ T981] usb 7-1: USB disconnect, device number 2 [ 1447.676576][T14844] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.18970'. [ 1448.099584][ T30] kauditd_printk_skb: 7401 callbacks suppressed [ 1448.099606][ T30] audit: type=1400 audit(1749330358.454:3092425): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14833 comm="syz.2.18965" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1448.106043][ T981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1448.167422][ T5946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.168005][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.174277][ T30] audit: type=1400 audit(1749330358.454:3092426): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14833 comm="syz.2.18965" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1448.180612][ C1] audit: audit_lost=372502 audit_rate_limit=0 audit_backlog_limit=64 [ 1448.200977][ T5946] audit: audit_lost=372503 audit_rate_limit=0 audit_backlog_limit=64 [ 1448.208664][ C1] audit: backlog limit exceeded [ 1448.224167][T14508] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.232106][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1448.238748][ C1] audit: audit_lost=372504 audit_rate_limit=0 audit_backlog_limit=64 [ 1448.296791][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 1448.313346][ T6070] razer 0003:1532:010E.006C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 1448.317164][ T981] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.370400][ T981] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.393278][ T981] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1448.425072][ T981] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1448.443614][ T981] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1448.465197][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.484622][ T981] usb 6-1: config 0 descriptor?? [ 1448.495087][T14854] hsr0 speed is unknown, defaulting to 1000 [ 1448.546740][ T6070] usb 3-1: USB disconnect, device number 102 [ 1448.897871][T14854] wg1 speed is unknown, defaulting to 1000 [ 1448.927417][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18979'. [ 1448.943812][ T981] hid-generic 0003:045E:05DA.006D: unknown main item tag 0x0 [ 1448.960180][ T981] hid-generic 0003:045E:05DA.006D: unbalanced collection at end of report description [ 1448.982416][ T981] hid-generic 0003:045E:05DA.006D: probe with driver hid-generic failed with error -22 [ 1449.201255][ T6070] usb 6-1: USB disconnect, device number 7 [ 1449.300024][T14875] loop9: detected capacity change from 0 to 8 [ 1449.341260][T14875] Dev loop9: unable to read RDB block 8 [ 1449.370553][T14875] loop9: unable to read partition table [ 1449.380647][T14875] loop9: partition table beyond EOD, truncated [ 1449.432758][T14875] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1449.872682][T14887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18991'. [ 1450.045477][T14895] netlink: 'syz.5.18992': attribute type 2 has an invalid length. [ 1450.559052][T14916] netem: incorrect gi model size [ 1450.574036][T14916] netem: change failed [ 1451.134854][ T6070] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1451.304057][ T6070] usb 7-1: Using ep0 maxpacket: 16 [ 1451.319529][ T6070] usb 7-1: config 0 has no interfaces? [ 1451.340320][ T6070] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1451.352277][ T6070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.360887][ T6070] usb 7-1: Product: syz [ 1451.365352][ T6070] usb 7-1: Manufacturer: syz [ 1451.370069][ T6070] usb 7-1: SerialNumber: syz [ 1451.385488][ T6070] usb 7-1: config 0 descriptor?? [ 1451.611740][ T6070] usb 7-1: USB disconnect, device number 3 [ 1451.658651][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19025'. [ 1451.668683][T14963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19025'. [ 1451.691769][T14963] vlan3: entered allmulticast mode [ 1451.715421][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19026'. [ 1451.729167][T14965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19026'. [ 1451.738264][T14965] netlink: 244 bytes leftover after parsing attributes in process `syz.2.19026'. [ 1452.102767][ T1214] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1452.284463][ T1214] usb 3-1: Using ep0 maxpacket: 8 [ 1452.294267][ T1214] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1452.313720][ T1214] usb 3-1: config 179 has no interface number 0 [ 1452.335430][ T1214] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1452.379353][ T1214] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1452.423679][ T1214] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1452.466346][ T1214] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1452.478629][ T1214] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1452.493439][ T1214] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1452.502636][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.534801][T14969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1453.398896][ T6118] usb 3-1: USB disconnect, device number 103 [ 1453.398940][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1453.413409][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1453.453679][ T30] kauditd_printk_skb: 7796 callbacks suppressed [ 1453.453699][ T30] audit: type=1400 audit(1749330363.478:3099796): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15008 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1453.489053][T14508] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.489228][T15010] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.502664][T15008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.502688][T15008] audit: audit_lost=372647 audit_rate_limit=0 audit_backlog_limit=64 [ 1453.502704][T15008] audit: backlog limit exceeded [ 1453.502749][T15008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.502764][T15008] audit: audit_lost=372648 audit_rate_limit=0 audit_backlog_limit=64 [ 1453.502781][T15008] audit: backlog limit exceeded [ 1453.502910][T15008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1453.580882][T15013] pimreg: entered allmulticast mode [ 1453.612631][T15009] pimreg: left allmulticast mode [ 1453.920463][T15030] 9pnet_fd: Insufficient options for proto=fd [ 1454.457153][T15048] netlink: 'syz.5.19060': attribute type 1 has an invalid length. [ 1454.478464][T15048] __nla_validate_parse: 1 callbacks suppressed [ 1454.478485][T15048] netlink: 232 bytes leftover after parsing attributes in process `syz.5.19060'. [ 1454.498554][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19060'. [ 1456.044144][T15114] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.19090'. [ 1456.828354][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19107'. [ 1457.301815][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19115'. [ 1457.314508][T15168] netlink: 'syz.5.19115': attribute type 20 has an invalid length. [ 1457.325598][T15168] netlink: 'syz.5.19115': attribute type 21 has an invalid length. [ 1457.550140][T15178] netlink: 140 bytes leftover after parsing attributes in process `syz.0.19122'. [ 1457.790266][ T5442] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1457.939801][ T5441] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1457.957163][ T5442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1457.976506][ T5442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.995406][ T5442] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1458.015696][ T5442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.043593][ T5442] usb 7-1: config 0 descriptor?? [ 1458.133262][ T5441] usb 3-1: Using ep0 maxpacket: 16 [ 1458.153995][ T5441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1458.177765][ T5441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.199193][ T5441] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1458.224685][ T5441] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1458.243217][ T5441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.260500][ T5441] usb 3-1: Product: syz [ 1458.264955][ T5441] usb 3-1: Manufacturer: syz [ 1458.269590][ T5441] usb 3-1: SerialNumber: syz [ 1458.504612][ T5442] isku 0003:1E7D:319C.006E: unknown main item tag 0x0 [ 1458.522621][ T5442] isku 0003:1E7D:319C.006E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 1458.543061][ T5441] usb 3-1: 0:2 : does not exist [ 1458.573964][ T5441] usb 3-1: USB disconnect, device number 104 [ 1458.697145][T15218] hsr0 speed is unknown, defaulting to 1000 [ 1458.734135][ T6070] usb 7-1: USB disconnect, device number 4 [ 1458.834642][ T30] kauditd_printk_skb: 10355 callbacks suppressed [ 1458.834662][ T30] audit: type=1400 audit(1749330368.510:3109372): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1458.844228][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1458.861339][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1458.871759][ T5958] audit: audit_lost=372910 audit_rate_limit=0 audit_backlog_limit=64 [ 1458.874041][ C1] audit: audit_lost=372911 audit_rate_limit=0 audit_backlog_limit=64 [ 1458.888278][ T5958] audit: backlog limit exceeded [ 1458.890151][ C1] audit: backlog limit exceeded [ 1458.890754][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1458.895785][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1458.900011][ C1] audit: audit_lost=372912 audit_rate_limit=0 audit_backlog_limit=64 [ 1458.995635][T15218] wg1 speed is unknown, defaulting to 1000 [ 1459.590874][T15240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19150'. [ 1460.096348][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19157'. [ 1460.107205][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.176770][T15258] loop6: detected capacity change from 0 to 63 [ 1460.183459][T15258] buffer_io_error: 4 callbacks suppressed [ 1460.183473][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.243877][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.291952][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.300166][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.308341][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.316609][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.334617][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.368619][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.403682][T15258] ldm_validate_partition_table(): Disk read failed. [ 1460.431089][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.452235][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1460.465270][T15258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1460.481001][T15258] Dev loop6: unable to read RDB block 0 [ 1460.490461][T15258] loop6: unable to read partition table [ 1460.501633][T15258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1461.104473][ T981] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1461.275471][ T981] usb 7-1: Using ep0 maxpacket: 32 [ 1461.288156][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.303859][ T981] usb 7-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 1461.314116][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.342440][ T981] usb 7-1: config 0 descriptor?? [ 1462.020455][ T981] usb 7-1: string descriptor 0 read error: -71 [ 1462.045387][ T981] uclogic 0003:5543:006E.006F: failed retrieving string descriptor #200: -71 [ 1462.065819][ T981] uclogic 0003:5543:006E.006F: failed retrieving pen parameters: -71 [ 1462.074740][ T981] uclogic 0003:5543:006E.006F: failed probing pen v2 parameters: -71 [ 1462.084119][ T981] uclogic 0003:5543:006E.006F: failed probing parameters: -71 [ 1462.095411][ T981] uclogic 0003:5543:006E.006F: probe with driver uclogic failed with error -71 [ 1462.128270][ T981] usb 7-1: USB disconnect, device number 5 [ 1462.805755][ T6070] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1462.917311][T15344] netlink: 'syz.5.19198': attribute type 14 has an invalid length. [ 1462.975058][ T6070] usb 3-1: Using ep0 maxpacket: 16 [ 1462.983758][ T6070] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.005982][ T6070] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.034184][ T6070] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1463.053806][ T6070] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1463.073490][ T6070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.098750][ T6070] usb 3-1: config 0 descriptor?? [ 1463.559699][ T6070] hid (null): nested delimiters [ 1463.569537][ T6070] hid (null): report_id 24797 is invalid [ 1463.576879][ T6070] hid (null): bogus close delimiter [ 1463.755942][ T1214] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1463.801612][ T6070] usb 3-1: USB disconnect, device number 105 [ 1463.934920][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 1463.951245][ T1214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.966186][ T1214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.991113][ T1214] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1464.000284][ T1214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.027907][ T1214] usb 6-1: config 0 descriptor?? [ 1464.051356][T15383] netlink: 'syz.6.19216': attribute type 6 has an invalid length. [ 1464.236485][ T30] kauditd_printk_skb: 8189 callbacks suppressed [ 1464.236505][ T30] audit: type=1400 audit(1749334468.561:3116683): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15388 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1464.286988][ T30] audit: type=1400 audit(1749334468.561:3116684): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15389 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1464.309637][T15392] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.313011][ T30] audit: type=1400 audit(1749334468.561:3116685): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15389 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1464.317488][ T5946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.343545][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.350129][ C1] audit: audit_lost=373206 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.358398][ C1] audit: backlog limit exceeded [ 1464.364102][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.368989][ T30] audit: type=1400 audit(1749334468.561:3116686): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15388 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1464.612977][ T1214] savu 0003:1E7D:2D5A.0071: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1464.805357][ T5442] usb 6-1: USB disconnect, device number 8 [ 1465.082900][T15416] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.19230'. [ 1465.594322][T15431] block nbd0: server does not support multiple connections per device. [ 1465.626750][T15431] block nbd0: shutting down sockets [ 1465.815954][T15441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input144 [ 1465.987379][T14315] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.180567][T14315] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.383190][T14315] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.449291][T15457] pimreg: entered allmulticast mode [ 1466.475420][T15463] pimreg: left allmulticast mode [ 1466.578903][T14315] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.834918][T14315] bridge_slave_1: left allmulticast mode [ 1466.840684][T14315] bridge_slave_1: left promiscuous mode [ 1466.851512][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.885014][T14315] bridge_slave_0: left allmulticast mode [ 1466.894268][T14315] bridge_slave_0: left promiscuous mode [ 1466.900460][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.814880][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19270'. [ 1467.890286][T29586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1467.917520][T29586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1467.926584][T29586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1467.931693][T15500] input: syz0 as /devices/virtual/input/input145 [ 1467.934843][T29586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1467.948189][T29586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1468.306428][T14315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.326469][T14315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.340954][T14315] bond0 (unregistering): Released all slaves [ 1468.378121][T15495] netlink: 'syz.5.19270': attribute type 1 has an invalid length. [ 1468.408096][T15495] netlink: 'syz.5.19270': attribute type 2 has an invalid length. [ 1468.752358][T15496] hsr0 speed is unknown, defaulting to 1000 [ 1469.083843][T15530] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1469.119148][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.127016][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.160808][T15530] bridge0: entered allmulticast mode [ 1469.344251][T15496] wg1 speed is unknown, defaulting to 1000 [ 1469.385795][T15535] io-wq is not configured for unbound workers [ 1469.597188][ T30] kauditd_printk_skb: 7514 callbacks suppressed [ 1469.597210][ T30] audit: type=1400 audit(1749334473.575:3122878): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.650447][T12849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.683281][ T30] audit: type=1400 audit(1749334473.575:3122879): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.684091][T15496] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.720862][ T30] audit: type=1400 audit(1749334473.575:3122880): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.743672][ T30] audit: type=1400 audit(1749334473.575:3122881): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1469.745658][T12849] audit: audit_lost=373649 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.766146][ T30] audit: type=1400 audit(1749334473.575:3122882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=12849 comm="syz-executor" name="240" dev="tmpfs" ino=1252 [ 1469.791599][ T30] audit: type=1400 audit(1749334473.575:3122883): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12849 comm="syz-executor" path="/240" dev="tmpfs" ino=1252 [ 1469.811072][ T30] audit: type=1400 audit(1749334473.575:3122884): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15496 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.160 dest=39568 netif=eth0 [ 1469.918129][T14315] hsr_slave_0: left promiscuous mode [ 1469.931801][T14315] hsr_slave_1: left promiscuous mode [ 1469.950075][T15545] input: syz1 as /devices/virtual/input/input146 [ 1469.957716][T14315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.965188][T14315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.993778][T14315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.019932][T14315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.111194][T14315] veth1_macvtap: left promiscuous mode [ 1470.116715][T29586] Bluetooth: hci4: command tx timeout [ 1470.130176][T14315] veth0_macvtap: left promiscuous mode [ 1470.135923][T14315] veth1_vlan: left promiscuous mode [ 1470.184361][T14315] veth0_vlan: left promiscuous mode [ 1470.612838][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19301'. [ 1470.627111][T15564] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1470.651147][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1471.449219][T15587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19310'. [ 1471.900259][T14315] team0 (unregistering): Port device team_slave_1 removed [ 1471.974545][T14315] team0 (unregistering): Port device team_slave_0 removed [ 1472.340251][T29586] Bluetooth: hci4: command tx timeout [ 1473.055909][T15496] chnl_net:caif_netlink_parms(): no params data found [ 1473.279142][T15629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1473.571576][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.578810][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.592306][T15496] bridge_slave_0: entered allmulticast mode [ 1473.600393][T15496] bridge_slave_0: entered promiscuous mode [ 1473.621548][T15496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.635930][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.643614][T15496] bridge_slave_1: entered allmulticast mode [ 1473.653057][T15496] bridge_slave_1: entered promiscuous mode [ 1473.792292][T15496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.838027][T15496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.021600][T15496] team0: Port device team_slave_0 added [ 1474.055817][T15496] team0: Port device team_slave_1 added [ 1474.270402][T15496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.285880][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.357508][T15496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.396962][T15496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.408352][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.438887][T15496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.554748][T15496] hsr_slave_0: entered promiscuous mode [ 1474.561573][T15496] hsr_slave_1: entered promiscuous mode [ 1474.564247][T29586] Bluetooth: hci4: command tx timeout [ 1474.586070][T15496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1474.594139][T15496] Cannot create hsr debugfs directory [ 1474.809700][T15675] hsr0 speed is unknown, defaulting to 1000 [ 1474.958622][ T30] kauditd_printk_skb: 6930 callbacks suppressed [ 1474.958642][ T30] audit: type=1400 audit(1749334478.588:3129050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1474.992103][ T1214] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1475.049668][ T5946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1475.066739][ T5946] audit: audit_lost=373905 audit_rate_limit=0 audit_backlog_limit=64 [ 1475.074072][ T30] audit: type=1400 audit(1749334478.607:3129051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9195 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1475.087460][ T5946] audit: backlog limit exceeded [ 1475.096882][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1475.100411][T15678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1475.105960][ C1] audit: audit_lost=373906 audit_rate_limit=0 audit_backlog_limit=64 [ 1475.120698][ C1] audit: backlog limit exceeded [ 1475.125746][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1475.187568][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 1475.231837][ T1214] usb 6-1: config 0 has no interfaces? [ 1475.273046][ T1214] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1475.291971][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1475.312466][ T1214] usb 6-1: Product: syz [ 1475.317123][ T1214] usb 6-1: Manufacturer: syz [ 1475.336852][ T1214] usb 6-1: config 0 descriptor?? [ 1475.464586][T15496] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1475.538983][T15675] wg1 speed is unknown, defaulting to 1000 [ 1475.539453][T15496] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1475.587316][T15496] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1475.647756][T15496] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1475.906354][T15496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.929750][T15496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.952176][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.959459][T14334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.990403][ T6118] usb 6-1: USB disconnect, device number 9 [ 1476.006686][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.013984][T14334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.214697][ T1214] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1476.391973][ T1214] usb 3-1: Using ep0 maxpacket: 16 [ 1476.411391][ T1214] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1476.449115][ T1214] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1476.466096][ T1214] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1476.496560][ T1214] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1476.515855][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1476.528468][ T1214] usb 3-1: SerialNumber: syz [ 1476.559159][T15703] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1476.709369][T15496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.788227][T29586] Bluetooth: hci4: command tx timeout [ 1476.855296][ T1214] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1476.975332][ T1214] usb 3-1: USB disconnect, device number 106 [ 1477.254247][T15740] bridge_slave_0: invalid flags given to default FDB implementation [ 1477.732411][T15496] veth0_vlan: entered promiscuous mode [ 1477.736318][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19377'. [ 1477.779132][T15496] veth1_vlan: entered promiscuous mode [ 1477.907264][T15496] veth0_macvtap: entered promiscuous mode [ 1477.934325][T15496] veth1_macvtap: entered promiscuous mode [ 1478.011970][T15496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1478.043507][T15496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.130960][T15496] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.158363][T15496] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.183325][T15496] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.196224][T15496] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.252432][ T6070] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1478.377840][T14355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.395174][T14355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.413574][ T6070] usb 3-1: Using ep0 maxpacket: 16 [ 1478.439946][ T6070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.458161][ T6070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1478.480605][ T6070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1478.480631][T14315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.480651][T14315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.517846][ T6070] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1478.539369][ T6070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.572028][ T6070] usb 3-1: Product: syz [ 1478.576809][ T6070] usb 3-1: Manufacturer: syz [ 1478.581444][ T6070] usb 3-1: SerialNumber: syz [ 1478.611373][ T6070] usb 3-1: config 0 descriptor?? [ 1478.625178][ T6070] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1478.643506][ T6070] gspca_stv06xx: st6422 sensor detected [ 1478.923289][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19391'. [ 1478.938923][ T6070] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1478.951258][ T6070] usb 3-1: USB disconnect, device number 107 [ 1478.955653][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19391'. [ 1479.018179][T15788] erspan0: entered promiscuous mode [ 1479.039065][T15788] gretap0: entered promiscuous mode [ 1479.471078][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.549215][T15811] netlink: 27 bytes leftover after parsing attributes in process `syz.2.19402'. [ 1479.660272][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.667279][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.674209][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.683281][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.690204][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.697171][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.704058][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.710950][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1479.717897][T15807] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1480.356275][ T30] kauditd_printk_skb: 7556 callbacks suppressed [ 1480.356294][ T30] audit: type=1400 audit(1749334483.639:3135698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1480.417204][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.426437][ T9195] audit: audit_lost=374211 audit_rate_limit=0 audit_backlog_limit=64 [ 1480.434749][ T30] audit: type=1400 audit(1749334483.639:3135699): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1480.456471][ T9195] audit: backlog limit exceeded [ 1480.464111][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.471497][ T30] audit: type=1400 audit(1749334483.639:3135700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1480.492514][ T9195] audit: audit_lost=374212 audit_rate_limit=0 audit_backlog_limit=64 [ 1480.501359][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.501383][ C1] audit: audit_lost=374213 audit_rate_limit=0 audit_backlog_limit=64 [ 1481.731160][T15869] tun0: tun_chr_ioctl cmd 1074025677 [ 1481.737435][T15869] tun0: linktype set to 0 [ 1482.371958][T15895] netdevsim netdevsim5: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 1482.394757][T15895] netdevsim netdevsim5: Falling back to sysfs fallback for: ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1482.757851][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19445'. [ 1482.767628][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19445'. [ 1482.877773][T15911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19447'. [ 1483.101172][T15919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19451'. [ 1483.111604][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19451'. [ 1483.422061][T15926] hsr0 speed is unknown, defaulting to 1000 [ 1483.586205][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19459'. [ 1483.698464][T15926] wg1 speed is unknown, defaulting to 1000 [ 1483.848832][T15942] loop9: detected capacity change from 0 to 8 [ 1483.862550][T15942] Dev loop9: unable to read RDB block 8 [ 1483.889428][T15942] loop9: unable to read partition table [ 1483.908059][T15942] loop9: partition table beyond EOD, truncated [ 1483.931375][T15942] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1484.663067][T15970] netlink: 92 bytes leftover after parsing attributes in process `syz.7.19474'. [ 1484.685830][T15970] netem: unknown loss type 0 [ 1484.704939][T15970] netem: change failed [ 1485.092969][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19482'. [ 1485.533079][ T5442] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1485.707294][ T30] kauditd_printk_skb: 10085 callbacks suppressed [ 1485.707315][ T30] audit: type=1400 audit(1749334488.653:3144200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16010 comm="syz-executor" name="3661" dev="tmpfs" ino=18430 [ 1485.714200][ T5442] usb 3-1: Using ep0 maxpacket: 32 [ 1485.728383][ T5442] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1485.754427][ T5442] usb 3-1: config 0 has no interface number 0 [ 1485.764809][ T5442] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1485.766035][ T30] audit: type=1400 audit(1749334488.653:3144201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16010 comm="syz-executor" name="3661" dev="tmpfs" ino=18430 [ 1485.790422][T15496] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.803843][ T5442] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1485.808810][ T30] audit: type=1400 audit(1749334488.653:3144202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16010 comm="syz-executor" name="3661" dev="tmpfs" ino=18430 [ 1485.816466][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.816488][ C1] audit: audit_lost=374742 audit_rate_limit=0 audit_backlog_limit=64 [ 1485.816507][ C1] audit: backlog limit exceeded [ 1485.817125][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1485.817145][ C1] audit: audit_lost=374743 audit_rate_limit=0 audit_backlog_limit=64 [ 1485.817169][ C1] audit: backlog limit exceeded [ 1485.828841][ T5442] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1485.890605][ T5442] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1485.904602][ T5442] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1485.916420][ T5442] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.945511][ T5442] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1485.958649][ T5442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.970073][ T5442] usb 3-1: Product: syz [ 1485.976770][ T5442] usb 3-1: Manufacturer: syz [ 1485.982565][ T5442] usb 3-1: SerialNumber: syz [ 1485.991219][ T5442] usb 3-1: config 0 descriptor?? [ 1486.000260][T15995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1486.010423][T15995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1486.105111][T16017] veth1_macvtap: left promiscuous mode [ 1486.253860][ T5442] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 1486.468926][ T5442] etas_es58x 3-1:0.219: could not parse product info: '424242424242' [ 1486.619258][T16031] kvm: kvm [16030]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 1486.741978][ T5830] usb 3-1: USB disconnect, device number 108 [ 1486.749844][ T5830] etas_es58x 3-1:0.219: Disconnecting syz syz [ 1487.244830][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19517'. [ 1487.450660][T16067] netlink: 277 bytes leftover after parsing attributes in process `syz.2.19522'. [ 1487.581881][T16065] hsr0 speed is unknown, defaulting to 1000 [ 1487.939543][T16079] block nbd7: NBD_DISCONNECT [ 1487.949344][T16078] block nbd7: Disconnected due to user request. [ 1487.961457][T16078] block nbd7: shutting down sockets [ 1488.059847][T16065] wg1 speed is unknown, defaulting to 1000 [ 1488.316919][T16095] macvlan4: entered promiscuous mode [ 1488.322299][T16095] bridge0: entered promiscuous mode [ 1488.818446][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19541'. [ 1490.485629][T16150] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19559'. [ 1490.524897][T16150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19559'. [ 1491.059274][ T30] kauditd_printk_skb: 7461 callbacks suppressed [ 1491.059295][ T30] audit: type=1400 audit(1749334493.658:3151530): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16169 comm="syz-executor" name="101" dev="proc" ino=162374 [ 1491.097127][ T9195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.103051][ T5958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.104482][T16169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.110617][ T5958] audit: audit_lost=374789 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.127511][T16169] audit: audit_lost=374790 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.137913][ T9195] audit: audit_lost=374791 audit_rate_limit=0 audit_backlog_limit=64 [ 1491.148142][T16169] audit: backlog limit exceeded [ 1491.153654][T16169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1491.159770][ T5958] audit: backlog limit exceeded [ 1491.528958][T16185] netlink: 'syz.4.19575': attribute type 11 has an invalid length. [ 1492.041380][T16211] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.050989][T16211] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.061041][T16211] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.070803][T16211] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1524.559977][ C1] audit_log_start: 2549 callbacks suppressed [ 1524.560005][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1524.572604][ C1] audit: audit_lost=374889 audit_rate_limit=0 audit_backlog_limit=64 [ 1524.580761][ C1] audit: backlog limit exceeded [ 1525.061147][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1525.067767][ C1] audit: audit_lost=374890 audit_rate_limit=0 audit_backlog_limit=64 [ 1525.075864][ C1] audit: backlog limit exceeded [ 1525.561699][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1525.568389][ C1] audit: audit_lost=374891 audit_rate_limit=0 audit_backlog_limit=64 [ 1525.576543][ C1] audit: backlog limit exceeded [ 1526.062931][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1530.075830][ C1] audit_log_start: 23 callbacks suppressed [ 1530.075856][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1530.088450][ C1] audit: audit_lost=374900 audit_rate_limit=0 audit_backlog_limit=64 [ 1530.096618][ C1] audit: backlog limit exceeded [ 1530.576387][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1530.583009][ C1] audit: audit_lost=374901 audit_rate_limit=0 audit_backlog_limit=64 [ 1530.591101][ C1] audit: backlog limit exceeded [ 1531.077475][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1531.084059][ C1] audit: audit_lost=374902 audit_rate_limit=0 audit_backlog_limit=64 [ 1531.092221][ C1] audit: backlog limit exceeded [ 1531.578069][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1535.583974][ C1] audit_log_start: 23 callbacks suppressed [ 1535.584000][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1535.596560][ C1] audit: audit_lost=374911 audit_rate_limit=0 audit_backlog_limit=64 [ 1535.604652][ C1] audit: backlog limit exceeded [ 1536.084551][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1536.091166][ C1] audit: audit_lost=374912 audit_rate_limit=0 audit_backlog_limit=64 [ 1536.099289][ C1] audit: backlog limit exceeded [ 1536.585666][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1536.592384][ C1] audit: audit_lost=374913 audit_rate_limit=0 audit_backlog_limit=64 [ 1536.600485][ C1] audit: backlog limit exceeded [ 1537.086994][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1541.091809][ C1] audit_log_start: 23 callbacks suppressed [ 1541.091835][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1541.104271][ C1] audit: audit_lost=374922 audit_rate_limit=0 audit_backlog_limit=64 [ 1541.112368][ C1] audit: backlog limit exceeded [ 1541.592811][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1541.599448][ C1] audit: audit_lost=374923 audit_rate_limit=0 audit_backlog_limit=64 [ 1541.607633][ C1] audit: backlog limit exceeded [ 1542.093396][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.100023][ C1] audit: audit_lost=374924 audit_rate_limit=0 audit_backlog_limit=64 [ 1542.108176][ C1] audit: backlog limit exceeded [ 1542.594712][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1546.602848][ C1] audit_log_start: 23 callbacks suppressed [ 1546.602873][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1546.615306][ C1] audit: audit_lost=374933 audit_rate_limit=0 audit_backlog_limit=64 [ 1546.623430][ C1] audit: backlog limit exceeded [ 1547.103007][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.109613][ C1] audit: audit_lost=374934 audit_rate_limit=0 audit_backlog_limit=64 [ 1547.117750][ C1] audit: backlog limit exceeded [ 1547.603551][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1547.610145][ C1] audit: audit_lost=374935 audit_rate_limit=0 audit_backlog_limit=64 [ 1547.618333][ C1] audit: backlog limit exceeded [ 1548.107497][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1552.111687][ C1] audit_log_start: 23 callbacks suppressed [ 1552.111713][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1552.124174][ C1] audit: audit_lost=374944 audit_rate_limit=0 audit_backlog_limit=64 [ 1552.132276][ C1] audit: backlog limit exceeded [ 1552.612002][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1552.618650][ C1] audit: audit_lost=374945 audit_rate_limit=0 audit_backlog_limit=64 [ 1552.626831][ C1] audit: backlog limit exceeded [ 1553.113222][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.119850][ C1] audit: audit_lost=374946 audit_rate_limit=0 audit_backlog_limit=64 [ 1553.127949][ C1] audit: backlog limit exceeded [ 1553.613947][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1557.617850][ C1] audit_log_start: 23 callbacks suppressed [ 1557.617876][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1557.630338][ C1] audit: audit_lost=374955 audit_rate_limit=0 audit_backlog_limit=64 [ 1557.638438][ C1] audit: backlog limit exceeded [ 1558.118798][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.125420][ C1] audit: audit_lost=374956 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.133543][ C1] audit: backlog limit exceeded [ 1558.619847][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.626508][ C1] audit: audit_lost=374957 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.634666][ C1] audit: backlog limit exceeded [ 1559.120922][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.125450][ C1] audit_log_start: 23 callbacks suppressed [ 1563.125476][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.138055][ C1] audit: audit_lost=374966 audit_rate_limit=0 audit_backlog_limit=64 [ 1563.146189][ C1] audit: backlog limit exceeded [ 1563.626064][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1563.632699][ C1] audit: audit_lost=374967 audit_rate_limit=0 audit_backlog_limit=64 [ 1563.640829][ C1] audit: backlog limit exceeded [ 1564.126559][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1564.133198][ C1] audit: audit_lost=374968 audit_rate_limit=0 audit_backlog_limit=64 [ 1564.141321][ C1] audit: backlog limit exceeded [ 1564.626843][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1568.632657][ C1] audit_log_start: 38 callbacks suppressed [ 1568.632684][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1568.645311][ C1] audit: audit_lost=374982 audit_rate_limit=0 audit_backlog_limit=64 [ 1568.653429][ C1] audit: backlog limit exceeded [ 1569.133500][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.140086][ C1] audit: audit_lost=374983 audit_rate_limit=0 audit_backlog_limit=64 [ 1569.148229][ C1] audit: backlog limit exceeded [ 1569.633985][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.640632][ C1] audit: audit_lost=374984 audit_rate_limit=0 audit_backlog_limit=64 [ 1569.648753][ C1] audit: backlog limit exceeded [ 1570.135054][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.140143][ C1] audit_log_start: 35 callbacks suppressed [ 1574.140173][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.152685][ C1] audit: audit_lost=374997 audit_rate_limit=0 audit_backlog_limit=64 [ 1574.160903][ C1] audit: backlog limit exceeded [ 1574.640786][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1574.647378][ C1] audit: audit_lost=374998 audit_rate_limit=0 audit_backlog_limit=64 [ 1574.655515][ C1] audit: backlog limit exceeded [ 1575.142721][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1575.149316][ C1] audit: audit_lost=374999 audit_rate_limit=0 audit_backlog_limit=64 [ 1575.157455][ C1] audit: backlog limit exceeded [ 1575.643379][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1579.649094][ C1] audit_log_start: 23 callbacks suppressed [ 1579.649121][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1579.661658][ C1] audit: audit_lost=375008 audit_rate_limit=0 audit_backlog_limit=64 [ 1579.669787][ C1] audit: backlog limit exceeded [ 1580.149803][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1580.156526][ C1] audit: audit_lost=375009 audit_rate_limit=0 audit_backlog_limit=64 [ 1580.164619][ C1] audit: backlog limit exceeded [ 1580.651332][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1580.657984][ C1] audit: audit_lost=375010 audit_rate_limit=0 audit_backlog_limit=64 [ 1580.666092][ C1] audit: backlog limit exceeded [ 1581.151789][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1585.156994][ C1] audit_log_start: 26 callbacks suppressed [ 1585.157020][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1585.169484][ C1] audit: audit_lost=375020 audit_rate_limit=0 audit_backlog_limit=64 [ 1585.177660][ C1] audit: backlog limit exceeded [ 1585.658124][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1585.664790][ C1] audit: audit_lost=375021 audit_rate_limit=0 audit_backlog_limit=64 [ 1585.672922][ C1] audit: backlog limit exceeded [ 1586.158470][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1586.165110][ C1] audit: audit_lost=375022 audit_rate_limit=0 audit_backlog_limit=64 [ 1586.173328][ C1] audit: backlog limit exceeded [ 1586.659317][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1590.673698][ C1] audit_log_start: 26 callbacks suppressed [ 1590.673725][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1590.686301][ C1] audit: audit_lost=375032 audit_rate_limit=0 audit_backlog_limit=64 [ 1590.694425][ C1] audit: backlog limit exceeded [ 1591.164067][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1591.170707][ C1] audit: audit_lost=375033 audit_rate_limit=0 audit_backlog_limit=64 [ 1591.179028][ C1] audit: backlog limit exceeded [ 1591.664423][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1591.671134][ C1] audit: audit_lost=375034 audit_rate_limit=0 audit_backlog_limit=64 [ 1591.679254][ C1] audit: backlog limit exceeded [ 1592.165662][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1596.177587][ C1] audit_log_start: 23 callbacks suppressed [ 1596.177613][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1596.190069][ C1] audit: audit_lost=375043 audit_rate_limit=0 audit_backlog_limit=64 [ 1596.198372][ C1] audit: backlog limit exceeded [ 1596.678169][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1596.684790][ C1] audit: audit_lost=375044 audit_rate_limit=0 audit_backlog_limit=64 [ 1596.692896][ C1] audit: backlog limit exceeded [ 1597.179270][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.185918][ C1] audit: audit_lost=375045 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.194012][ C1] audit: backlog limit exceeded [ 1597.680131][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1601.685326][ C1] audit_log_start: 23 callbacks suppressed [ 1601.685354][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1601.697895][ C1] audit: audit_lost=375054 audit_rate_limit=0 audit_backlog_limit=64 [ 1601.705983][ C1] audit: backlog limit exceeded [ 1602.185529][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.192145][ C1] audit: audit_lost=375055 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.200281][ C1] audit: backlog limit exceeded [ 1602.686040][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.693134][ C1] audit: audit_lost=375056 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.701264][ C1] audit: backlog limit exceeded [ 1603.187154][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1604.550700][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1604.557713][ C1] rcu: 0-...!: (0 ticks this GP) idle=8b94/1/0x4000000000000000 softirq=230871/230871 fqs=0 [ 1604.569806][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16219/1:b..l [ 1604.577863][ C1] rcu: (detected by 1, t=10502 jiffies, g=257381, q=289 ncpus=2) [ 1604.585743][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1604.585789][ C0] NMI backtrace for cpu 0 [ 1604.585806][ C0] CPU: 0 UID: 0 PID: 16218 Comm: syz.2.19592 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 1604.585828][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1604.585840][ C0] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 1604.585869][ C0] Code: 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 1604.585885][ C0] RSP: 0018:ffffc90000007bb0 EFLAGS: 00000002 [ 1604.585901][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 33e2a20d9a189e00 [ 1604.585913][ C0] RDX: 0000000000000000 RSI: ffffffff8b6148ae RDI: 1ffff1100ec92860 [ 1604.585926][ C0] RBP: ffffffff897e7e54 R08: 0000000000000001 R09: 0000000000000000 [ 1604.585937][ C0] R10: dffffc0000000000 R11: ffffffff897e7d90 R12: 0000000000000000 [ 1604.585950][ C0] R13: ffff888076494300 R14: ffff888076494300 R15: 0000000000000001 [ 1604.585962][ C0] FS: 00005555927df500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1604.585984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1604.585997][ C0] CR2: 0000001b3191eff8 CR3: 0000000060f84000 CR4: 00000000003526f0 [ 1604.586012][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1604.586023][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1604.586034][ C0] Call Trace: [ 1604.586044][ C0] [ 1604.586054][ C0] lock_acquire+0x8d/0x360 [ 1604.586087][ C0] _raw_spin_lock+0x2e/0x40 [ 1604.586111][ C0] ? advance_sched+0xc4/0xc90 [ 1604.586134][ C0] advance_sched+0xc4/0xc90 [ 1604.586158][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1604.586182][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1604.586212][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1604.586235][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1604.586274][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1604.586298][ C0] ? read_tsc+0x9/0x20 [ 1604.586324][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1604.586366][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1604.586395][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1604.586421][ C0] [ 1604.586427][ C0] [ 1604.586435][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1604.586454][ C0] RIP: 0010:mas_next_slot+0x9bb/0xcf0 [ 1604.586480][ C0] Code: 2b 32 4f f6 89 c3 31 ff 89 c6 e8 40 9a 69 f6 85 db 0f 84 87 00 00 00 e8 f3 95 69 f6 eb 05 e8 ec 95 69 f6 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 26 e2 ca f6 49 8b 45 00 48 c7 c1 [ 1604.586495][ C0] RSP: 0018:ffffc9000b317a68 EFLAGS: 00000a02 [ 1604.586509][ C0] RAX: 1ffff1100f40e740 RBX: 0000000000000001 RCX: ffff88802e8d9e00 [ 1604.586522][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1604.586533][ C0] RBP: 0000000000000001 R08: ffff88802e8d9e00 R09: 0000000000000004 [ 1604.586544][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 1604.586555][ C0] R13: ffff88807a073a00 R14: ffff88823be60f00 R15: ffffffffffffffff [ 1604.586580][ C0] ? mas_next_slot+0x98e/0xcf0 [ 1604.586616][ C0] mas_find+0x9e7/0xc10 [ 1604.586646][ C0] ? down_read+0x1ad/0x2e0 [ 1604.586665][ C0] acct_collect+0x1e1/0x770 [ 1604.586692][ C0] ? __pfx_acct_collect+0x10/0x10 [ 1604.586712][ C0] ? acct_update_integrals+0x347/0x3a0 [ 1604.586735][ C0] ? __pfx_acct_update_integrals+0x10/0x10 [ 1604.586762][ C0] ? __pfx_exit_itimers+0x10/0x10 [ 1604.586780][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1604.586810][ C0] do_exit+0x5c3/0x22e0 [ 1604.586834][ C0] ? preempt_schedule_common+0x83/0xd0 [ 1604.586860][ C0] ? preempt_schedule+0xae/0xc0 [ 1604.586883][ C0] ? __pfx_do_exit+0x10/0x10 [ 1604.586906][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1604.586933][ C0] do_group_exit+0x21c/0x2d0 [ 1604.586956][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1604.586980][ C0] x64_sys_call+0x21ba/0x21c0 [ 1604.586997][ C0] do_syscall_64+0xfa/0x3b0 [ 1604.587013][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1604.587039][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.587056][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1604.587077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.587094][ C0] RIP: 0033:0x7fc61b78e929 [ 1604.587111][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.587125][ C0] RSP: 002b:00007fff7ee222a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1604.587142][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc61b78e929 [ 1604.587154][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1604.587165][ C0] RBP: 00007fff7ee2230c R08: 000000047ee2239f R09: 00000000000927c0 [ 1604.587178][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000024e [ 1604.587189][ C0] R13: 00000000000927c0 R14: 0000000000168e51 R15: 00007fff7ee22360 [ 1604.587212][ C0] [ 1604.587771][ C1] task:syz.4.19593 state:R running task stack:26984 pid:16219 tgid:16219 ppid:5958 task_flags:0x40004c flags:0x00004000 [ 1605.086120][ C1] Call Trace: [ 1605.089422][ C1] [ 1605.092386][ C1] __schedule+0x16a2/0x4cb0 [ 1605.096953][ C1] ? free_pages_and_swap_cache+0x4be/0x520 [ 1605.102816][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1605.109008][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1605.114509][ C1] ? __pfx___schedule+0x10/0x10 [ 1605.119406][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1605.124556][ C1] ? preempt_schedule+0xae/0xc0 [ 1605.129446][ C1] preempt_schedule_common+0x83/0xd0 [ 1605.134791][ C1] preempt_schedule+0xae/0xc0 [ 1605.139536][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1605.145075][ C1] preempt_schedule_thunk+0x16/0x30 [ 1605.150402][ C1] _raw_spin_unlock+0x3f/0x50 [ 1605.155111][ C1] unmap_page_range+0x3842/0x41c0 [ 1605.160231][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1605.166764][ C1] ? unmap_vmas+0x144/0x580 [ 1605.171329][ C1] unmap_vmas+0x399/0x580 [ 1605.175803][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1605.180809][ C1] exit_mmap+0x248/0xb50 [ 1605.185088][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1605.190584][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1605.195372][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1605.201042][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1605.205757][ C1] ? uprobe_clear_state+0x274/0x290 [ 1605.210990][ C1] ? mm_update_next_owner+0xa7/0x870 [ 1605.216307][ C1] __mmput+0x118/0x420 [ 1605.220409][ C1] exit_mm+0x1da/0x2c0 [ 1605.224508][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1605.229212][ C1] ? rcu_is_watching+0x15/0xb0 [ 1605.234032][ C1] do_exit+0x640/0x22e0 [ 1605.238255][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1605.243792][ C1] ? preempt_schedule+0xae/0xc0 [ 1605.248691][ C1] ? __pfx_do_exit+0x10/0x10 [ 1605.253328][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1605.258745][ C1] do_group_exit+0x21c/0x2d0 [ 1605.263369][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1605.268419][ C1] x64_sys_call+0x21ba/0x21c0 [ 1605.273128][ C1] do_syscall_64+0xfa/0x3b0 [ 1605.277655][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.282889][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.288977][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1605.293681][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.299595][ C1] RIP: 0033:0x7f447d38e929 [ 1605.304047][ C1] RSP: 002b:00007fff5c1b4008 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1605.312532][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f447d38e929 [ 1605.320539][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1605.328569][ C1] RBP: 00007fff5c1b406c R08: 000000045c1b40ff R09: 00000000000927c0 [ 1605.336583][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000001060 [ 1605.344631][ C1] R13: 00000000000927c0 R14: 0000000000168e5e R15: 00007fff5c1b40c0 [ 1605.352648][ C1] [ 1605.355689][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g257381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1605.368124][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=114778 [ 1605.376115][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g257381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1605.387590][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1605.397666][ C1] rcu: RCU grace-period kthread stack dump: [ 1605.403568][ C1] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1605.415531][ C1] Call Trace: [ 1605.418831][ C1] [ 1605.421795][ C1] __schedule+0x16a2/0x4cb0 [ 1605.426347][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1605.431583][ C1] ? schedule+0x165/0x360 [ 1605.435994][ C1] ? __lock_acquire+0xab9/0xd20 [ 1605.440997][ C1] ? __pfx___schedule+0x10/0x10 [ 1605.445907][ C1] ? schedule+0x91/0x360 [ 1605.450188][ C1] schedule+0x165/0x360 [ 1605.454387][ C1] schedule_timeout+0x12b/0x270 [ 1605.459270][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1605.464685][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1605.470008][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1605.475592][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1605.480495][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1605.485480][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.490720][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1605.496048][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1605.501294][ C1] ? finish_swait+0xcd/0x1f0 [ 1605.506013][ C1] rcu_gp_kthread+0x99/0x390 [ 1605.510637][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1605.515889][ C1] ? __kthread_parkme+0x7b/0x200 [ 1605.520993][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1605.526060][ C1] kthread+0x70e/0x8a0 [ 1605.530159][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1605.535388][ C1] ? __pfx_kthread+0x10/0x10 [ 1605.540026][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1605.545268][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.550504][ C1] ? __pfx_kthread+0x10/0x10 [ 1605.555132][ C1] ret_from_fork+0x3f9/0x770 [ 1605.559765][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1605.565348][ C1] ? __switch_to_asm+0x39/0x70 [ 1605.570135][ C1] ? __switch_to_asm+0x33/0x70 [ 1605.575354][ C1] ? __pfx_kthread+0x10/0x10 [ 1605.579971][ C1] ret_from_fork_asm+0x1a/0x30 [ 1605.584776][ C1]