last executing test programs: 14m42.445863623s ago: executing program 32 (id=19201): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0xb3}}) 13m11.600688855s ago: executing program 33 (id=20284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tmww'], 0xa) 10m9.371640397s ago: executing program 0 (id=22875): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 10m8.321440071s ago: executing program 0 (id=22897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) 10m8.079359863s ago: executing program 0 (id=22901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x24, r2, 0x3, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x20000054) 10m7.921893006s ago: executing program 0 (id=22904): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m7.747101171s ago: executing program 0 (id=22908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 10m7.308323522s ago: executing program 0 (id=22914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x800000000001, 0x0}) 10m6.933909549s ago: executing program 34 (id=22914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x800000000001, 0x0}) 9m45.849225355s ago: executing program 7 (id=23178): r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 9m45.690981186s ago: executing program 7 (id=23180): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000004000)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 9m45.562484188s ago: executing program 7 (id=23181): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe3d08660d7cd4e04}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 9m45.319247658s ago: executing program 7 (id=23194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m45.238307924s ago: executing program 7 (id=23184): unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 9m44.870549733s ago: executing program 7 (id=23192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000400)=""/4096) 9m44.488835017s ago: executing program 35 (id=23192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000400)=""/4096) 7m59.834790592s ago: executing program 6 (id=24797): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7m59.695181999s ago: executing program 6 (id=24799): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 7m59.543446702s ago: executing program 6 (id=24802): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m59.289023167s ago: executing program 6 (id=24804): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m59.150923324s ago: executing program 6 (id=24806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 7m58.767424805s ago: executing program 6 (id=24810): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file2\x00', 0x20, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 7m58.3083182s ago: executing program 36 (id=24810): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file2\x00', 0x20, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m7.776938949s ago: executing program 8 (id=26838): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m7.349812365s ago: executing program 8 (id=26842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) poll(0x0, 0x0, 0xfff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 5m6.195369459s ago: executing program 8 (id=26852): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2) 5m6.00187561s ago: executing program 8 (id=26853): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 5m5.710778009s ago: executing program 8 (id=26854): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 5m3.480702783s ago: executing program 8 (id=26877): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x47, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7f31, 0x7c5b, 0x0, 0x0, 0x0) 5m2.947913471s ago: executing program 37 (id=26877): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x47, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7f31, 0x7c5b, 0x0, 0x0, 0x0) 3m58.347473838s ago: executing program 1 (id=27565): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, &(0x7f0000005680)) 3m58.263491412s ago: executing program 1 (id=27566): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x9}, 0xc) 3m58.19130079s ago: executing program 1 (id=27567): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x5452, &(0x7f0000000140)) pread64(r0, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) 3m58.125034681s ago: executing program 1 (id=27568): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 3m58.071810267s ago: executing program 1 (id=27569): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX], 0x0) 3m57.952433964s ago: executing program 1 (id=27570): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xec27, 0x8, 0x20001, 0x40000337}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x100000000000004b}) io_uring_enter(r1, 0x847ba, 0xbb69, 0xe, 0x0, 0x0) 3m57.642317056s ago: executing program 38 (id=27570): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xec27, 0x8, 0x20001, 0x40000337}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x100000000000004b}) io_uring_enter(r1, 0x847ba, 0xbb69, 0xe, 0x0, 0x0) 1m5.667397841s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 53.154091115s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 40.013729338s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 26.718529529s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 14.55488812s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 6.48848461s ago: executing program 4 (id=29555): sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001700)="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", 0xa01}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 6.371414057s ago: executing program 4 (id=29557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x10, 0x9, 0x74}, 0x2c) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 3.432173842s ago: executing program 3 (id=29578): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x140201, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) 3.427618799s ago: executing program 5 (id=29579): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, 0x4, 0x800}}, 0xb8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 3.315480645s ago: executing program 9 (id=28276): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 3.272379116s ago: executing program 5 (id=29580): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x24}, &(0x7f0000000080)=0x8) 1.325615229s ago: executing program 2 (id=29581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 1.325230638s ago: executing program 5 (id=29582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.324745236s ago: executing program 3 (id=29583): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xc000000000000}, 0x38) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 1.324545275s ago: executing program 4 (id=29584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.126902747s ago: executing program 2 (id=29585): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.028781373s ago: executing program 3 (id=29586): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 914.382867ms ago: executing program 2 (id=29587): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 772.399307ms ago: executing program 5 (id=29588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x7}, {0x2000, 0xdddd0000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x16, 0x3, 0x0, 0xfe, 0xfc}, {0x2, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x0, 0xdddd1000, 0x0, 0x1, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x6, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x8000000, 0x2b, 0x0, 0x3800, 0xdddd1000, [0x0, 0x0, 0x1]}) 644.765297ms ago: executing program 3 (id=29589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c020000190001000000400003000000e00000010000000000000000000000000000000000000000000000000000000000000002000000000a00000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff0000000000000000efb0000000000000010000000000000008000000000000000000000000000000000000000000000000000002000000000a00100001"], 0x25c}}, 0x4004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001"], 0xb8}}, 0x0) 576.646714ms ago: executing program 2 (id=29590): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0) 520.147602ms ago: executing program 4 (id=29591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 360.464878ms ago: executing program 5 (id=29592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800003a"]) 341.921654ms ago: executing program 3 (id=29593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 321.450125ms ago: executing program 2 (id=29594): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x2}, 'port0\x00', 0x100, 0x60004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) 320.715896ms ago: executing program 4 (id=29595): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="3c75c2", 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 53.823916ms ago: executing program 4 (id=29596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}]]}, 0x2c}}, 0x0) 42.241615ms ago: executing program 2 (id=29597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x28000000, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 4.980954ms ago: executing program 5 (id=29598): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x8, 0x0, 0xfffc}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 3 (id=29599): io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x800, r1, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vice team_slave_0 added [ 2115.120714][T30855] usb 3-1: config 0 descriptor?? [ 2115.128790][ T6177] team0: Port device team_slave_1 added [ 2115.175639][ T5100] Bluetooth: hci3: command tx timeout [ 2115.187253][ T6272] vivid-000: disconnect [ 2115.194301][ T6270] vivid-000: reconnect [ 2115.211557][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.219114][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.245886][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.267407][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.277673][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.309953][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.331537][ T6274] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.28717'. [ 2115.353455][T30855] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2115.372144][T30855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2115.392288][T30855] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2115.405169][ T6177] hsr_slave_0: entered promiscuous mode [ 2115.409077][T30855] usb 3-1: media controller created [ 2115.419241][ T6177] hsr_slave_1: entered promiscuous mode [ 2115.439518][ T6177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2115.459407][ T6177] Cannot create hsr debugfs directory [ 2115.472454][T30855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2116.014357][T30855] az6027: usb out operation failed. (-71) [ 2116.031742][T30855] stb0899_attach: Driver disabled by Kconfig [ 2116.046065][T30855] az6027: no front-end attached [ 2116.046065][T30855] [ 2116.054799][T30855] az6027: usb out operation failed. (-71) [ 2116.060572][T30855] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2116.072515][T30855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input220 [ 2116.100888][T30855] dvb-usb: schedule remote query interval to 400 msecs. [ 2116.108000][T30855] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2116.119038][T30855] usb 3-1: USB disconnect, device number 119 [ 2116.192608][T30855] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2116.227431][T30352] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2116.361317][ T6177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2116.371608][ T6177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2116.384859][ T6177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2116.396304][ T6177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2116.437743][T30352] usb 6-1: Using ep0 maxpacket: 16 [ 2116.461844][T30352] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2116.471134][T30352] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2116.479270][T30352] usb 6-1: Product: syz [ 2116.484676][T30352] usb 6-1: Manufacturer: syz [ 2116.489334][T30352] usb 6-1: SerialNumber: syz [ 2116.498406][T30352] usb 6-1: config 0 descriptor?? [ 2116.564381][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.609286][ T6177] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.630171][T31302] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.637382][T31302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.691612][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.698903][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.745750][T30855] usb 6-1: USB disconnect, device number 69 [ 2117.073203][ T6318] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.28733'. [ 2117.191166][ T6177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.399433][ T5100] Bluetooth: hci3: command tx timeout [ 2118.098604][ T6352] netlink: 104 bytes leftover after parsing attributes in process `syz.3.28746'. [ 2118.228251][ T6177] veth0_vlan: entered promiscuous mode [ 2118.269964][ T6177] veth1_vlan: entered promiscuous mode [ 2118.379400][ T6177] veth0_macvtap: entered promiscuous mode [ 2118.578020][ T6177] veth1_macvtap: entered promiscuous mode [ 2118.714478][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2118.750913][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.824207][ T6177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.848956][ T6177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.884895][ T6177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.906464][ T6177] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.218991][ T30] kauditd_printk_skb: 6867 callbacks suppressed [ 2119.219010][ T30] audit: type=1400 audit(2000004615.419:3014470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6372 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2119.303777][T31340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.311692][T31340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.318482][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2119.331900][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2119.336649][ T30] audit: type=1400 audit(2000004615.447:3014471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6372 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2119.338514][ C1] audit: audit_lost=292989 audit_rate_limit=0 audit_backlog_limit=64 [ 2119.360161][ T5959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2119.365905][ C1] audit: backlog limit exceeded [ 2119.377213][ T3471] audit: audit_lost=292990 audit_rate_limit=0 audit_backlog_limit=64 [ 2119.377235][ T3471] audit: backlog limit exceeded [ 2119.377254][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2119.950885][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2120.304836][ T6375] team0 (unregistering): Port device team_slave_0 removed [ 2120.346850][ T6375] team0 (unregistering): Port device team_slave_1 removed [ 2120.458420][ T6398] netlink: 'syz.3.28767': attribute type 1 has an invalid length. [ 2120.484833][ T6398] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.28767'. [ 2120.532748][T31200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.567868][T31200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2121.178529][ T6412] sctp: [Deprecated]: syz.4.28774 (pid 6412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2121.178529][ T6412] Use struct sctp_sack_info instead [ 2121.404979][T31302] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.532574][T31302] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.608656][T31302] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.689044][T31302] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.890273][T31302] bridge_slave_1: left allmulticast mode [ 2121.896470][T31302] bridge_slave_1: left promiscuous mode [ 2121.902407][T31302] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.913296][T31302] bridge_slave_0: left allmulticast mode [ 2121.918991][T31302] bridge_slave_0: left promiscuous mode [ 2121.925015][T31302] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.782564][T31302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2122.809560][T31302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2122.822297][T31302] bond0 (unregistering): Released all slaves [ 2122.834469][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2122.846927][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2122.860643][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2122.872252][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2122.895303][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2122.954671][ T6425] team0: Device gre1 is of different type [ 2123.105286][ T6437] wg1 speed is unknown, defaulting to 1000 [ 2123.375352][ T6442] netlink: 'syz.3.28785': attribute type 11 has an invalid length. [ 2123.394368][ T5100] Bluetooth: hci0: command 0x0406 tx timeout [ 2123.646522][ T6433] wg1 speed is unknown, defaulting to 1000 [ 2124.415283][ T6462] netlink: 'syz.2.28793': attribute type 10 has an invalid length. [ 2124.440783][ T6462] hsr_slave_0: left promiscuous mode [ 2124.625096][ T30] kauditd_printk_skb: 4707 callbacks suppressed [ 2124.625117][ T30] audit: type=1400 audit(2000004620.470:3018746): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5972 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2124.661121][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2124.667799][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2124.667827][ C1] audit: audit_lost=293136 audit_rate_limit=0 audit_backlog_limit=64 [ 2124.667847][ C1] audit: backlog limit exceeded [ 2124.689007][ T30] audit: type=1400 audit(2000004620.470:3018747): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5972 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2124.742246][ T5972] audit: audit_lost=293137 audit_rate_limit=0 audit_backlog_limit=64 [ 2124.763739][ T5972] audit: backlog limit exceeded [ 2124.770017][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2124.780402][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2125.084630][T31302] hsr_slave_0: left promiscuous mode [ 2125.096761][T26621] Bluetooth: hci3: command tx timeout [ 2125.103343][T31302] hsr_slave_1: left promiscuous mode [ 2125.122855][T31302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2125.130901][T31302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.144545][T31302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.153515][T31302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2125.185089][T31302] veth1_macvtap: left promiscuous mode [ 2125.190736][T31302] veth0_macvtap: left promiscuous mode [ 2125.196712][T31302] veth1_vlan: left promiscuous mode [ 2125.204892][T31302] veth0_vlan: left promiscuous mode [ 2125.289215][T30887] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2125.297132][ T5533] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2125.481331][ T5533] usb 4-1: Using ep0 maxpacket: 16 [ 2125.492101][T30887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2125.504302][T30887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2125.517979][T30887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2125.528516][ T5533] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2125.538198][ T5533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.548676][T30887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2125.566825][ T5533] usb 4-1: config 0 descriptor?? [ 2125.572140][T30887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2125.584755][ T5533] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2125.591936][T30887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.603939][T30887] usb 3-1: config 0 descriptor?? [ 2125.999343][T31302] team0 (unregistering): Port device team_slave_1 removed [ 2126.070010][T31302] team0 (unregistering): Port device team_slave_0 removed [ 2126.081635][T30887] plantronics 0003:047F:FFFF.00B9: ignoring exceeding usage max [ 2126.093866][T30887] plantronics 0003:047F:FFFF.00B9: No inputs registered, leaving [ 2126.131618][T30887] plantronics 0003:047F:FFFF.00B9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2126.321353][T30887] usb 3-1: USB disconnect, device number 120 [ 2126.705556][ T5533] gspca_sonixj: reg_w1 err -71 [ 2126.732227][ T5533] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 2126.746065][ T5533] usb 4-1: USB disconnect, device number 33 [ 2127.167049][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 2127.321481][T26621] Bluetooth: hci3: command tx timeout [ 2127.564398][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.572240][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.587620][ T6433] bridge_slave_0: entered allmulticast mode [ 2127.597066][ T6433] bridge_slave_0: entered promiscuous mode [ 2127.619858][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.633380][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.651977][ T6433] bridge_slave_1: entered allmulticast mode [ 2127.659847][ T6433] bridge_slave_1: entered promiscuous mode [ 2127.771396][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2127.792294][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2127.917852][ T6433] team0: Port device team_slave_0 added [ 2127.967699][ T6433] team0: Port device team_slave_1 added [ 2128.098877][ T6506] sctp: [Deprecated]: syz.4.28810 (pid 6506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2128.098877][ T6506] Use struct sctp_sack_info instead [ 2128.177759][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.184779][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.296453][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2128.323777][ T6510] netlink: 'syz.4.28812': attribute type 9 has an invalid length. [ 2128.335128][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2128.381250][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2128.424290][ T6511] netlink: 'syz.4.28812': attribute type 9 has an invalid length. [ 2128.487182][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2128.726014][ T6433] hsr_slave_0: entered promiscuous mode [ 2128.782312][ T6433] hsr_slave_1: entered promiscuous mode [ 2128.806157][T30860] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2128.807548][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2128.839661][ T6433] Cannot create hsr debugfs directory [ 2129.002285][T30860] usb 3-1: Using ep0 maxpacket: 16 [ 2129.014207][T30860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.038227][T30860] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2129.067426][T30860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.098834][T30860] usb 3-1: config 0 descriptor?? [ 2129.351861][T30860] usbhid 3-1:0.0: can't add hid device: -71 [ 2129.357922][T30860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2129.385600][T30860] usb 3-1: USB disconnect, device number 121 [ 2129.539587][ T6534] xt_CT: No such helper "pptp" [ 2129.555823][T26621] Bluetooth: hci3: command tx timeout [ 2129.680359][ T6433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2129.694658][ T6433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2129.705896][ T6433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2129.718359][ T6433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2129.825519][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.851658][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.874268][T31302] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.881550][T31302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.934874][T31328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.942141][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.979031][ T30] kauditd_printk_skb: 3274 callbacks suppressed [ 2129.979053][ T30] audit: type=1400 audit(2000004625.484:3021967): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31302 comm="kworker/u8:15" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2130.018630][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2130.027883][ T6546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2130.031446][ T3471] audit: audit_lost=293157 audit_rate_limit=0 audit_backlog_limit=64 [ 2130.034444][ T6546] audit: audit_lost=293158 audit_rate_limit=0 audit_backlog_limit=64 [ 2130.034464][ T6546] audit: backlog limit exceeded [ 2130.043812][ T3471] audit: backlog limit exceeded [ 2130.044026][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2130.044044][ T3471] audit: audit_lost=293159 audit_rate_limit=0 audit_backlog_limit=64 [ 2130.044062][ T3471] audit: backlog limit exceeded [ 2130.861144][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2130.934325][T30887] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2131.107944][T30887] usb 6-1: Using ep0 maxpacket: 16 [ 2131.131593][T30887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2131.143758][T30887] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2131.169806][T30887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.187859][T30887] usb 6-1: config 0 descriptor?? [ 2131.276208][T30860] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2131.457704][T30860] usb 3-1: Using ep0 maxpacket: 32 [ 2131.478164][ T6433] veth0_vlan: entered promiscuous mode [ 2131.494302][T30860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2131.523856][T30860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2131.537528][ T6433] veth1_vlan: entered promiscuous mode [ 2131.554046][T30860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2131.578016][T30860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2131.605741][ T6433] veth0_macvtap: entered promiscuous mode [ 2131.612420][T30860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2131.643316][T30860] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2131.658253][T30860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.663092][T30887] hid (null): invalid report_size 27418 [ 2131.668559][ T6433] veth1_macvtap: entered promiscuous mode [ 2131.679897][T30860] usb 3-1: Product: syz [ 2131.690274][T30887] hid (null): report_id 17018 is invalid [ 2131.695988][T30860] usb 3-1: Manufacturer: syz [ 2131.696014][T30860] usb 3-1: SerialNumber: syz [ 2131.712165][T30860] usb 3-1: config 0 descriptor?? [ 2131.734250][T30887] hid (null): report_id 48117 is invalid [ 2131.750524][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2131.767902][T26621] Bluetooth: hci3: command tx timeout [ 2131.793578][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.839066][ T6433] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.864093][ T6433] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.873076][ T6433] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.894911][T30887] usb 6-1: USB disconnect, device number 70 [ 2131.901182][ T6433] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.073815][T31307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.099662][T31307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.150495][T31307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.161194][T31307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.177110][T30860] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2132.192464][T30860] input input221: Device does not respond to id packet M [ 2132.201194][T30860] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2132.217143][T30860] input input221: Device does not respond to id packet P [ 2132.450085][T30860] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2132.457392][T30860] input input221: Device does not respond to id packet N [ 2132.465140][T30860] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2132.471687][T30860] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2132.479056][T30860] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2132.486877][T30860] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2132.514852][T30860] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input221 [ 2132.546755][T30860] usb 3-1: USB disconnect, device number 122 [ 2132.838669][ T6613] lo: entered allmulticast mode [ 2132.845344][ T6612] lo: left allmulticast mode [ 2133.718397][T31307] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.759425][ T6644] lo: entered allmulticast mode [ 2133.773283][ T6639] lo: left allmulticast mode [ 2133.861501][T31307] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2133.895399][T30860] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2134.068022][T30860] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2134.077279][T30860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.088444][T30860] usb 3-1: config 0 descriptor?? [ 2134.096456][T30860] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2134.182318][T31307] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.278212][T31307] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2134.424283][T31307] bridge_slave_1: left allmulticast mode [ 2134.430060][T31307] bridge_slave_1: left promiscuous mode [ 2134.435885][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 2134.446407][T31307] bridge_slave_0: left allmulticast mode [ 2134.452731][T31307] bridge_slave_0: left promiscuous mode [ 2134.458559][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.979465][T30860] gspca_cpia1: usb_control_msg 02, error -71 [ 2134.990288][T30860] gspca_cpia1: usb_control_msg 05, error -71 [ 2135.001376][T30860] gspca_cpia1: usb_control_msg 04, error -71 [ 2135.013649][T30860] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 2135.017631][T30887] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2135.028187][T30860] usb 3-1: USB disconnect, device number 123 [ 2135.332985][ T30] kauditd_printk_skb: 6744 callbacks suppressed [ 2135.333004][ T30] audit: type=1400 audit(2000004630.498:3028079): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2135.402774][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2135.409363][ T5972] audit: audit_lost=293371 audit_rate_limit=0 audit_backlog_limit=64 [ 2135.423719][ T30] audit: type=1400 audit(2000004630.526:3028080): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2135.449300][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2135.449451][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2135.449473][ C1] audit: audit_lost=293372 audit_rate_limit=0 audit_backlog_limit=64 [ 2135.449493][ C1] audit: backlog limit exceeded [ 2135.472069][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2135.472097][ C1] audit: audit_lost=293373 audit_rate_limit=0 audit_backlog_limit=64 [ 2135.958330][T30863] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2136.182460][T30863] usb 6-1: Using ep0 maxpacket: 8 [ 2136.195712][T30863] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2136.223824][T30863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.250108][T30863] usb 6-1: Product: syz [ 2136.262484][T30863] usb 6-1: Manufacturer: syz [ 2136.273671][T30863] usb 6-1: SerialNumber: syz [ 2136.297076][T30863] usb 6-1: config 0 descriptor?? [ 2136.551638][T30863] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2136.645053][T30887] usb 4-1: Using ep0 maxpacket: 32 [ 2136.665437][T30887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2136.677443][T30887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2136.688902][T30887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2136.699238][T30887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2136.710586][T30887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2136.746313][T30887] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2136.755589][T30887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.763947][T30887] usb 4-1: Product: syz [ 2136.768149][T30887] usb 4-1: Manufacturer: syz [ 2136.773828][T30887] usb 4-1: SerialNumber: syz [ 2136.797963][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2136.798324][T30887] usb 4-1: config 0 descriptor?? [ 2136.847839][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2136.870304][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2136.913040][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2136.921855][T31307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2136.930957][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2136.965003][T31307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2136.978078][T31307] bond0 (unregistering): Released all slaves [ 2137.041687][ T6679] wg1 speed is unknown, defaulting to 1000 [ 2137.243428][ T6684] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2137.267371][T30887] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 2137.282787][T30887] input input222: Device does not respond to id packet M [ 2137.292193][ T6684] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 2137.314803][T30887] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 2137.317103][T30863] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2137.324402][T30887] input input222: Device does not respond to id packet P [ 2137.345789][ T6684] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2137.353984][ T6684] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 2137.358585][T30863] usb 6-1: USB disconnect, device number 71 [ 2137.584824][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2137.624278][T30887] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2137.667649][T30887] input input222: Device does not respond to id packet N [ 2137.692335][T30887] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2137.713900][T30887] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2137.726074][T30887] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2137.750344][T30887] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2137.782033][T30887] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input222 [ 2137.828249][T30887] usb 4-1: USB disconnect, device number 34 [ 2138.072116][T31307] hsr_slave_0: left promiscuous mode [ 2138.089384][T31307] hsr_slave_1: left promiscuous mode [ 2138.099940][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2138.107981][T31307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2138.119434][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2138.127135][T31307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2138.176634][T31307] veth1_macvtap: left promiscuous mode [ 2138.189825][T31307] veth0_macvtap: left promiscuous mode [ 2138.202027][T31307] veth1_vlan: left promiscuous mode [ 2138.208653][T31307] veth0_vlan: left promiscuous mode [ 2139.123437][ T5100] Bluetooth: hci3: command tx timeout [ 2139.218593][T30887] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2139.392006][T30887] usb 6-1: Using ep0 maxpacket: 32 [ 2139.401481][T30887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.438244][T30887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.450350][T30887] usb 6-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 2139.486496][T30887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.506751][T30887] usb 6-1: config 0 descriptor?? [ 2140.107840][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28900'. [ 2140.241121][T30887] usbhid 6-1:0.0: can't add hid device: -71 [ 2140.245861][T31307] team0 (unregistering): Port device team_slave_1 removed [ 2140.248104][T30887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2140.271585][T30887] usb 6-1: USB disconnect, device number 72 [ 2140.329236][T31307] team0 (unregistering): Port device team_slave_0 removed [ 2140.825399][ T30] kauditd_printk_skb: 3786 callbacks suppressed [ 2140.825421][ T30] audit: type=1400 audit(2000004635.633:3031758): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2140.859045][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2140.865021][ T30] audit: type=1400 audit(2000004635.633:3031759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2140.866366][T14958] audit: audit_lost=293410 audit_rate_limit=0 audit_backlog_limit=64 [ 2140.893410][ T30] audit: type=1400 audit(2000004635.633:3031760): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31307 comm="kworker/u8:20" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2140.894367][T14958] audit: backlog limit exceeded [ 2140.916353][ C1] vkms_vblank_simulate: vblank timer overrun [ 2140.929056][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2140.936823][T14958] audit: audit_lost=293411 audit_rate_limit=0 audit_backlog_limit=64 [ 2140.946256][T14958] audit: backlog limit exceeded [ 2140.951512][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2141.203934][ T6715] geneve2: entered promiscuous mode [ 2141.209823][ T6715] geneve2: entered allmulticast mode [ 2141.238070][ T6747] vlan3: entered promiscuous mode [ 2141.247505][ T6747] hsr0: entered promiscuous mode [ 2141.345915][ T5100] Bluetooth: hci3: command tx timeout [ 2141.413797][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 2141.442595][ T6714] wg1 speed is unknown, defaulting to 1000 [ 2141.498986][ T6754] xt_CT: No such helper "pptp" [ 2141.669204][ T6763] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2141.686503][T24476] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2141.846673][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.865394][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.884342][ T6679] bridge_slave_0: entered allmulticast mode [ 2141.902028][T24476] usb 4-1: Using ep0 maxpacket: 8 [ 2141.908888][ T6679] bridge_slave_0: entered promiscuous mode [ 2141.926284][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.932977][T24476] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2141.942983][T24476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.946753][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.964394][T24476] usb 4-1: Product: syz [ 2141.976433][T24476] usb 4-1: Manufacturer: syz [ 2141.976469][ T6679] bridge_slave_1: entered allmulticast mode [ 2141.992165][T24476] usb 4-1: SerialNumber: syz [ 2142.000747][ T6679] bridge_slave_1: entered promiscuous mode [ 2142.011157][T24476] usb 4-1: config 0 descriptor?? [ 2142.062566][T30844] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2142.089718][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2142.112942][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2142.189749][ T6679] team0: Port device team_slave_0 added [ 2142.200237][ T6679] team0: Port device team_slave_1 added [ 2142.244197][T30844] usb 6-1: Using ep0 maxpacket: 32 [ 2142.258098][T24476] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2142.282305][T30844] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2142.305282][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.313071][T30844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2142.319113][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.341467][T30844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2142.357847][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2142.402036][T30844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2142.413238][T30844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2142.430366][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2142.440357][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.466400][ C1] vkms_vblank_simulate: vblank timer overrun [ 2142.473873][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2142.485204][T30844] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2142.494527][T30844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.504985][T30844] usb 6-1: Product: syz [ 2142.509546][T30844] usb 6-1: Manufacturer: syz [ 2142.514636][T30844] usb 6-1: SerialNumber: syz [ 2142.566252][T30844] usb 6-1: config 0 descriptor?? [ 2142.685698][ T6679] hsr_slave_0: entered promiscuous mode [ 2142.694919][ T6679] hsr_slave_1: entered promiscuous mode [ 2142.701416][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2142.712590][ T6679] Cannot create hsr debugfs directory [ 2142.940422][T24476] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2142.965285][T24476] usb 4-1: USB disconnect, device number 35 [ 2143.031191][T30844] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 2143.039473][T30844] input input223: Device does not respond to id packet M [ 2143.050953][T30844] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 2143.062089][T30844] input input223: Device does not respond to id packet P [ 2143.308458][T30844] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2143.320078][T30844] input input223: Device does not respond to id packet N [ 2143.327791][T30844] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2143.339374][T30844] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2143.346261][T30844] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2143.353443][T30844] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 2143.367756][T30844] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input223 [ 2143.388862][ T6679] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2143.392524][T30844] usb 6-1: USB disconnect, device number 73 [ 2143.409945][ T6679] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2143.432159][ T6679] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2143.453587][ T6679] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2143.566729][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2143.583381][ T5100] Bluetooth: hci3: command tx timeout [ 2143.623082][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 2143.651316][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.660998][T31200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2143.723392][T31335] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.730642][T31335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2143.783880][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28913'. [ 2144.584695][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.783389][ T6836] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2145.796219][ T5100] Bluetooth: hci3: command tx timeout [ 2145.814411][ T6837] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2146.035717][ T6679] veth0_vlan: entered promiscuous mode [ 2146.084623][ T6679] veth1_vlan: entered promiscuous mode [ 2146.179074][ T30] kauditd_printk_skb: 5156 callbacks suppressed [ 2146.179095][ T30] audit: type=1400 audit(2000004640.638:3036807): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5972 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2146.187170][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2146.212877][ T3471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2146.219443][ T3471] audit: audit_lost=293449 audit_rate_limit=0 audit_backlog_limit=64 [ 2146.237263][ T6679] veth0_macvtap: entered promiscuous mode [ 2146.246359][T14958] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2146.253186][ T3471] audit: backlog limit exceeded [ 2146.253217][ T3471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2146.253233][ T3471] audit: audit_lost=293450 audit_rate_limit=0 audit_backlog_limit=64 [ 2146.253247][ T3471] audit: backlog limit exceeded [ 2146.253360][ T3471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2146.312387][ T6679] veth1_macvtap: entered promiscuous mode [ 2146.377440][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2146.437917][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2146.468769][ T6679] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.499037][ T6679] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.507828][ T6679] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.538268][ T6679] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.771203][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.806393][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.910456][T31329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.926519][T31329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2147.651526][T31329] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.798200][T31329] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.987781][T31329] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.126887][T31329] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.320856][T31329] bridge_slave_1: left allmulticast mode [ 2148.326568][T31329] bridge_slave_1: left promiscuous mode [ 2148.332480][T31329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.343592][T31329] bridge_slave_0: left allmulticast mode [ 2148.349817][T31329] bridge_slave_0: left promiscuous mode [ 2148.355528][T31329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.396317][T26621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2149.409267][T31329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2149.412535][T26621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2149.428160][T26621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2149.439893][T26621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2149.447786][T31329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2149.447889][T26621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2149.468097][T31329] bond0 (unregistering): Released all slaves [ 2149.650648][ T6913] wg1 speed is unknown, defaulting to 1000 [ 2149.815938][ T6909] wg1 speed is unknown, defaulting to 1000 [ 2150.238056][ T6910] netlink: 264 bytes leftover after parsing attributes in process `syz.5.28960'. [ 2150.250564][ T6910] netlink: 56 bytes leftover after parsing attributes in process `syz.5.28960'. [ 2150.283538][T31307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2150.291418][T31307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2150.594519][ T6941] syzkaller1: entered promiscuous mode [ 2150.606232][ T6941] syzkaller1: entered allmulticast mode [ 2150.766846][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28974'. [ 2151.227180][T31329] hsr_slave_0: left promiscuous mode [ 2151.247703][T31329] hsr_slave_1: left promiscuous mode [ 2151.267686][T31329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2151.307748][T31329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.327334][T31329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2151.345544][ T6962] netlink: 'syz.2.28979': attribute type 1 has an invalid length. [ 2151.354892][T31329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2151.358790][ T6962] netlink: 'syz.2.28979': attribute type 2 has an invalid length. [ 2151.415241][ T6967] netlink: 'syz.2.28979': attribute type 1 has an invalid length. [ 2151.417739][T31329] veth1_macvtap: left promiscuous mode [ 2151.431439][T31329] veth0_macvtap: left promiscuous mode [ 2151.437170][T31329] veth1_vlan: left promiscuous mode [ 2151.440648][ T6967] netlink: 'syz.2.28979': attribute type 2 has an invalid length. [ 2151.444009][T31329] veth0_vlan: left promiscuous mode [ 2151.589376][ T30] kauditd_printk_skb: 5834 callbacks suppressed [ 2151.589396][ T30] audit: type=1400 audit(2000004645.707:3042189): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31329 comm="kworker/u8:42" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2151.619310][T26621] Bluetooth: hci3: command tx timeout [ 2151.625825][ T30] audit: type=1400 audit(2000004645.735:3042190): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6968 comm="syz.3.28982" path="/dev/ppp" dev="devtmpfs" ino=710 [ 2151.667978][ T30] audit: type=1400 audit(2000004645.773:3042191): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6968 comm="syz.3.28982" path="/dev/ppp" dev="devtmpfs" ino=710 [ 2151.693711][ T30] audit: type=1400 audit(2000004645.801:3042192): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2151.997712][ T30] audit: type=1400 audit(2000004646.082:3042193): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31329 comm="kworker/u8:42" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2152.019451][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2152.032071][ T30] audit: type=1400 audit(2000004646.082:3042194): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2152.050939][ T5972] audit: audit_lost=293603 audit_rate_limit=0 audit_backlog_limit=64 [ 2152.063512][ T30] audit: type=1400 audit(2000004646.082:3042195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5972 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2152.079331][ T5972] audit: backlog limit exceeded [ 2152.363991][T31329] team0 (unregistering): Port device team_slave_1 removed [ 2152.452054][T31329] team0 (unregistering): Port device team_slave_0 removed [ 2153.416343][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 2153.560808][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28994'. [ 2153.833360][T26621] Bluetooth: hci3: command tx timeout [ 2154.160948][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.189355][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.201424][ T6913] bridge_slave_0: entered allmulticast mode [ 2154.210929][ T6913] bridge_slave_0: entered promiscuous mode [ 2154.250996][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 2154.265287][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.283160][ T6913] bridge_slave_1: entered allmulticast mode [ 2154.313234][ T6913] bridge_slave_1: entered promiscuous mode [ 2154.400176][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2154.430253][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2154.577386][ T6913] team0: Port device team_slave_0 added [ 2154.600583][ T6913] team0: Port device team_slave_1 added [ 2154.831410][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2154.848266][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2154.909135][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2154.928951][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2154.936563][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2154.968803][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2155.009745][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29007'. [ 2155.135590][ T6913] hsr_slave_0: entered promiscuous mode [ 2155.143250][ T6913] hsr_slave_1: entered promiscuous mode [ 2155.150043][ T6913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2155.157803][ T6913] Cannot create hsr debugfs directory [ 2155.593978][ T7049] tipc: Enabling of bearer rejected, failed to enable media [ 2156.056829][T26621] Bluetooth: hci3: command tx timeout [ 2156.099277][T30860] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2156.152685][ T6913] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2156.167189][ T6913] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2156.203131][ T6913] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2156.225089][ T6913] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2156.270519][T24476] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2156.306638][T30860] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.319018][T30860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2156.337247][T30860] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2156.355694][T30860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2156.363758][T30860] usb 3-1: SerialNumber: syz [ 2156.477752][T24476] usb 4-1: config 0 has no interfaces? [ 2156.502678][T24476] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2156.517901][T24476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2156.524800][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.525960][T24476] usb 4-1: SerialNumber: syz [ 2156.538738][T24476] usb 4-1: config 0 descriptor?? [ 2156.616905][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.618580][T30860] usb 3-1: 0:2 : does not exist [ 2156.654768][T31329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2156.661974][T31329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2156.686026][T30860] usb 3-1: USB disconnect, device number 124 [ 2156.702475][T31329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2156.709730][T31329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.789199][ T7066] netlink: 277 bytes leftover after parsing attributes in process `syz.3.29024'. [ 2156.806278][T24476] usb 4-1: USB disconnect, device number 36 [ 2156.845769][ T6913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2156.859567][ T6913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2156.935535][ T7090] sctp: [Deprecated]: syz.5.29031 (pid 7090) Use of int in maxseg socket option. [ 2156.935535][ T7090] Use struct sctp_assoc_value instead [ 2156.950111][ T30] kauditd_printk_skb: 5415 callbacks suppressed [ 2156.950132][ T30] audit: type=1400 audit(2000004650.721:3047452): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7089 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.13.0" dev="sda1" ino=1723 [ 2156.965583][ T30] audit: type=1400 audit(2000004650.730:3047453): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7089 comm="modprobe" name="/" dev="sda1" ino=2 [ 2157.010594][ T30] audit: type=1400 audit(2000004650.768:3047454): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7089 comm="modprobe" name="/" dev="sysfs" ino=1 [ 2157.061729][ T7091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2157.068159][ T30] audit: type=1400 audit(2000004650.768:3047455): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7089 comm="modprobe" name="fs" dev="sysfs" ino=2 [ 2157.069042][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2157.088366][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2157.088396][ C1] audit: audit_lost=293657 audit_rate_limit=0 audit_backlog_limit=64 [ 2157.088414][ C1] audit: backlog limit exceeded [ 2157.089974][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2157.380209][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.517258][ T7102] wg1 speed is unknown, defaulting to 1000 [ 2158.280853][T26621] Bluetooth: hci3: command tx timeout [ 2158.366232][ T6913] veth0_vlan: entered promiscuous mode [ 2158.402892][ T6913] veth1_vlan: entered promiscuous mode [ 2158.542567][ T6913] veth0_macvtap: entered promiscuous mode [ 2158.605366][ T6913] veth1_macvtap: entered promiscuous mode [ 2158.670639][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.702629][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2158.745230][ T6913] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.782632][ T6913] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.799104][ T6913] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.809715][ T6913] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.902652][ T7133] loop6: detected capacity change from 0 to 63 [ 2158.920400][ T7133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2158.989891][ T7133] Buffer I/O error on dev loop6, logical block 1, async page read [ 2159.028187][ T7133] Buffer I/O error on dev loop6, logical block 2, async page read [ 2159.058014][ T7133] Buffer I/O error on dev loop6, logical block 3, async page read [ 2159.060657][T31302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2159.085573][T31302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2159.099319][ T7133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.127024][ T7133] Buffer I/O error on dev loop6, logical block 1, async page read [ 2159.151771][ T7133] Buffer I/O error on dev loop6, logical block 2, async page read [ 2159.194443][T31340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2159.231339][T31340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2159.235173][ T7133] Buffer I/O error on dev loop6, logical block 3, async page read [ 2159.259968][ T7133] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.301068][ T7133] Buffer I/O error on dev loop6, logical block 1, async page read [ 2160.372580][T31329] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.613438][T31329] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.702235][T31329] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.845949][T31329] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.985164][T31329] bridge_slave_1: left allmulticast mode [ 2160.990857][T31329] bridge_slave_1: left promiscuous mode [ 2160.996854][T31329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.007332][T31329] bridge_slave_0: left allmulticast mode [ 2161.013029][T31329] bridge_slave_0: left promiscuous mode [ 2161.019537][T31329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.705436][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29055'. [ 2161.905398][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2161.926809][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2161.950691][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2161.963145][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2162.000734][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2162.303725][ T30] kauditd_printk_skb: 4791 callbacks suppressed [ 2162.303745][ T30] audit: type=1400 audit(2000004655.726:3052022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7178 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2162.333836][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2162.334130][ T7178] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2162.346907][ T7178] audit: audit_lost=293734 audit_rate_limit=0 audit_backlog_limit=64 [ 2162.354976][ T7178] audit: backlog limit exceeded [ 2162.360468][ T30] audit: type=1400 audit(2000004655.744:3052023): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2162.362503][T14958] audit: audit_lost=293735 audit_rate_limit=0 audit_backlog_limit=64 [ 2162.380788][ T7178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2162.400983][T31329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2162.408061][ T7178] audit: audit_lost=293736 audit_rate_limit=0 audit_backlog_limit=64 [ 2162.418659][ T30] audit: type=1400 audit(2000004655.744:3052024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2162.448487][T31329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2162.467355][T31329] bond0 (unregistering): Released all slaves [ 2162.523368][ T7160] 8021q: adding VLAN 0 to HW filter on device team1 [ 2162.744263][ T7187] overlayfs: failed to clone upperpath [ 2162.803542][ T7166] wg1 speed is unknown, defaulting to 1000 [ 2163.396486][ T7205] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2163.599160][ T7208] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.29077'. [ 2163.711303][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29079'. [ 2164.030852][T31329] hsr_slave_0: left promiscuous mode [ 2164.072778][T31329] hsr_slave_1: left promiscuous mode [ 2164.100904][T31329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2164.152316][T31329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.183371][ T5100] Bluetooth: hci3: command tx timeout [ 2164.229602][T31329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2164.240495][T31329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2164.335413][T31329] veth1_macvtap: left promiscuous mode [ 2164.355981][T31329] veth0_macvtap: left promiscuous mode [ 2164.372125][T31329] veth1_vlan: left promiscuous mode [ 2164.383199][T31329] veth0_vlan: left promiscuous mode [ 2164.966863][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2165.228252][T31329] team0 (unregistering): Port device team_slave_1 removed [ 2165.296396][T31329] team0 (unregistering): Port device team_slave_0 removed [ 2166.101826][ T7235] bridge: RTM_NEWNEIGH with unconfigured vlan 29 on bridge0 [ 2166.316496][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 2166.405406][ T5100] Bluetooth: hci3: command tx timeout [ 2166.556928][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.566449][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.573778][ T7166] bridge_slave_0: entered allmulticast mode [ 2166.594254][ T7166] bridge_slave_0: entered promiscuous mode [ 2166.603327][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.649603][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.676485][ T7166] bridge_slave_1: entered allmulticast mode [ 2166.696961][ T7166] bridge_slave_1: entered promiscuous mode [ 2166.883014][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2166.937168][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2167.054123][ T7166] team0: Port device team_slave_0 added [ 2167.169235][ T7166] team0: Port device team_slave_1 added [ 2167.290296][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2167.302398][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2167.342322][ T5533] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x7 [ 2167.343673][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2167.357358][ T5533] hid-generic 0000:0000:0000.00BB: ignoring exceeding usage max [ 2167.370545][ T5533] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 2167.378481][ T5533] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x6 [ 2167.386141][ T5533] hid-generic 0000:0000:0000.00BB: reserved main item tag 0xd [ 2167.390753][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2167.407012][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2167.442720][ T5533] hid-generic 0000:0000:0000.00BB: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2167.442825][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.465395][ T7299] program syz.5.29115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2167.495321][T30887] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2167.567146][ T7166] hsr_slave_0: entered promiscuous mode [ 2167.574794][ T7166] hsr_slave_1: entered promiscuous mode [ 2167.585063][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2167.594615][ T7166] Cannot create hsr debugfs directory [ 2167.657199][T30887] usb 3-1: Using ep0 maxpacket: 16 [ 2167.670587][ T30] kauditd_printk_skb: 6021 callbacks suppressed [ 2167.670606][ T30] audit: type=1400 audit(2000004660.739:3057603): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7292 comm="syz.2.29112" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2167.673009][T30887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2167.687691][ T30] audit: type=1400 audit(2000004660.739:3057604): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7292 comm="syz.2.29112" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2167.751527][T30887] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2167.791411][T30887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.818701][ T30] audit: type=1400 audit(2000004660.739:3057605): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7292 comm="syz.2.29112" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2167.825279][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2167.838786][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2167.838807][ C1] audit: audit_lost=293884 audit_rate_limit=0 audit_backlog_limit=64 [ 2167.838825][ C1] audit: backlog limit exceeded [ 2167.851294][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2167.858774][ T5972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2167.860306][ C1] audit: audit_lost=293885 audit_rate_limit=0 audit_backlog_limit=64 [ 2167.891551][T30887] usb 3-1: config 0 descriptor?? [ 2167.906122][T30887] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input224 [ 2168.577684][T30887] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2168.629045][ T5100] Bluetooth: hci3: command tx timeout [ 2168.698623][ T7166] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2168.719064][ T7166] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2168.741575][ T7166] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2168.758388][ T7166] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2168.781742][T30887] usb 6-1: Using ep0 maxpacket: 16 [ 2168.809802][T30887] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2168.841773][T30887] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2168.970524][T30887] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2168.978828][T30887] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2169.013304][T30887] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2169.022318][T30887] usb 6-1: config 0 has no interface number 0 [ 2169.045438][T30887] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2169.058856][T30887] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2169.068826][T30887] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2169.079271][T30887] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2169.103668][T30887] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2169.120925][T30887] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2169.180426][T30887] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2169.206948][T30887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.253109][T30887] usb 6-1: Product: syz [ 2169.281694][T30887] usb 6-1: Manufacturer: syz [ 2169.295427][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2169.315842][T30887] usb 6-1: SerialNumber: syz [ 2169.367245][T30887] usb 6-1: config 0 descriptor?? [ 2169.404833][T30887] usb 6-1: selecting invalid altsetting 2 [ 2169.460394][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 2169.497946][T31340] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.505189][T31340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2169.549213][T31340] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.556421][T31340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2169.909498][ T7354] overlayfs: failed to clone lowerpath [ 2170.007756][T30860] kernel read not supported for file /dsp1 (pid: 30860 comm: kworker/1:10) [ 2170.184579][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.514435][ T5533] usb 6-1: USB disconnect, device number 74 [ 2170.562836][ T7372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.29133'. [ 2170.851708][ T7166] veth0_vlan: entered promiscuous mode [ 2170.858117][ T5100] Bluetooth: hci3: command tx timeout [ 2170.882605][ T7166] veth1_vlan: entered promiscuous mode [ 2170.925548][ T7166] veth0_macvtap: entered promiscuous mode [ 2170.938722][ T7166] veth1_macvtap: entered promiscuous mode [ 2170.970298][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2170.999452][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.041162][ T7166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.055837][ T7166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.064840][ T7166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.080654][ T7166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.253184][T31302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.291947][T31302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.349210][T31302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.358064][T31302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.478144][ T7390] netlink: 'syz.5.29140': attribute type 10 has an invalid length. [ 2171.504807][ T7390] netlink: 55 bytes leftover after parsing attributes in process `syz.5.29140'. [ 2172.404335][T31307] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.553658][T31307] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.778002][T31307] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.869292][T31307] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.012073][T31307] bridge_slave_1: left allmulticast mode [ 2173.017791][T31307] bridge_slave_1: left promiscuous mode [ 2173.024400][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.035074][T31307] bridge_slave_0: left allmulticast mode [ 2173.040779][T31307] bridge_slave_0: left promiscuous mode [ 2173.046952][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.138236][ T30] kauditd_printk_skb: 6880 callbacks suppressed [ 2173.138255][ T30] audit: type=1400 audit(2000004665.856:3064124): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2173.236208][ T30] audit: type=1400 audit(2000004665.940:3064125): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2173.265081][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2173.272820][T14958] audit: audit_lost=294007 audit_rate_limit=0 audit_backlog_limit=64 [ 2173.281083][ T30] audit: type=1400 audit(2000004665.940:3064126): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2173.300245][T14958] audit: backlog limit exceeded [ 2173.301308][ T30] audit: type=1400 audit(2000004665.940:3064127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2173.312676][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2173.346222][ T30] audit: type=1400 audit(2000004665.940:3064128): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2173.350802][T14958] audit: audit_lost=294008 audit_rate_limit=0 audit_backlog_limit=64 [ 2173.595336][ T7293] bcm5974 3-1:0.0: could not read from device [ 2173.643103][T30860] usb 3-1: USB disconnect, device number 125 [ 2173.891221][T31307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2173.932168][T31307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2173.970930][T31307] bond0 (unregistering): Released all slaves [ 2174.171896][ T7435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2174.181641][ T7434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.29154'. [ 2174.197289][ T7434] netlink: 92 bytes leftover after parsing attributes in process `syz.2.29154'. [ 2174.594732][T26621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2174.608414][T26621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2174.618042][T26621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2174.633115][T26621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2174.672772][T26621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2174.697630][ T7450] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 2174.712674][ T7450] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 2174.821119][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29163'. [ 2174.867152][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29163'. [ 2174.966815][ T7448] wg1 speed is unknown, defaulting to 1000 [ 2175.499865][T31307] hsr_slave_0: left promiscuous mode [ 2175.556622][T31307] hsr_slave_1: left promiscuous mode [ 2175.562920][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2175.598866][T31307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.630776][ T7474] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2175.659833][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2175.678573][T31307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2175.789010][T31307] veth1_macvtap: left promiscuous mode [ 2175.795705][T31307] veth0_macvtap: left promiscuous mode [ 2175.801484][T31307] veth1_vlan: left promiscuous mode [ 2175.811088][T31307] veth0_vlan: left promiscuous mode [ 2176.753210][T18868] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 2176.913858][T24476] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2176.924577][T26621] Bluetooth: hci3: command tx timeout [ 2176.939036][T18868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.962030][T18868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2176.973758][T18868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2176.983631][T18868] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2176.998634][T18868] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2177.009221][T18868] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2177.017491][T18868] usb 6-1: Manufacturer: syz [ 2177.025342][T18868] usb 6-1: config 0 descriptor?? [ 2177.131255][T24476] usb 3-1: Using ep0 maxpacket: 16 [ 2177.189424][T24476] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2177.198052][T24476] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.207550][T24476] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.217263][T24476] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.225579][T24476] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2177.264639][T24476] usb 3-1: config 0 has no interface number 0 [ 2177.273264][T24476] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2177.330475][T24476] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2177.349528][T24476] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2177.360379][T24476] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2177.364082][T18868] rc_core: IR keymap rc-hauppauge not found [ 2177.380207][T24476] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2177.387802][T31307] team0 (unregistering): Port device team_slave_1 removed [ 2177.392547][T24476] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2177.405639][T18868] Registered IR keymap rc-empty [ 2177.426283][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.427585][T24476] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2177.459649][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.466660][T24476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.483823][T18868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2177.488304][T24476] usb 3-1: Product: syz [ 2177.510616][T24476] usb 3-1: Manufacturer: syz [ 2177.518701][T18868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input225 [ 2177.520247][T24476] usb 3-1: SerialNumber: syz [ 2177.552151][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.562812][T31307] team0 (unregistering): Port device team_slave_0 removed [ 2177.576462][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.599639][T24476] usb 3-1: config 0 descriptor?? [ 2177.610579][T24476] usb 3-1: selecting invalid altsetting 2 [ 2177.619301][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.651915][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.673276][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.702757][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.727076][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.754497][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.802556][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.824203][T18868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2177.826741][ T7511] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.29188'. [ 2177.846979][T18868] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2177.874064][T18868] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2177.971508][T30844] usb 6-1: USB disconnect, device number 75 [ 2178.514292][ T30] kauditd_printk_skb: 4690 callbacks suppressed [ 2178.514344][ T30] audit: type=1400 audit(2000004670.879:3068665): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=7502 comm="syz.2.29185" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2178.547090][ T30] audit: type=1400 audit(2000004670.907:3068666): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=7502 comm="syz.2.29185" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2178.615360][ T30] audit: type=1400 audit(2000004670.973:3068667): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14958 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2178.632412][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2178.639133][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2178.646468][T14958] audit: audit_lost=294060 audit_rate_limit=0 audit_backlog_limit=64 [ 2178.651935][ C1] audit: audit_lost=294061 audit_rate_limit=0 audit_backlog_limit=64 [ 2178.661186][T14958] audit: backlog limit exceeded [ 2178.668132][ C1] audit: backlog limit exceeded [ 2178.678487][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2178.830147][T24476] usb 3-1: USB disconnect, device number 126 [ 2179.051692][T30352] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2179.149545][T26621] Bluetooth: hci3: command tx timeout [ 2179.220967][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 2179.245184][T30352] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2179.273906][T30352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2179.300656][T30352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2179.337770][T30352] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2179.377624][T30352] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2179.397833][T30352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.442767][T30352] usb 6-1: config 0 descriptor?? [ 2179.487982][ T7539] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.29198'. [ 2179.555690][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 2179.562990][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.586688][ T7448] bridge_slave_0: entered allmulticast mode [ 2179.625371][ T7448] bridge_slave_0: entered promiscuous mode [ 2179.636639][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2179.650149][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.659657][ T7448] bridge_slave_1: entered allmulticast mode [ 2179.674245][ T7448] bridge_slave_1: entered promiscuous mode [ 2179.818134][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2179.839998][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2179.916110][T30352] plantronics 0003:047F:FFFF.00BC: No inputs registered, leaving [ 2179.968124][ T7448] team0: Port device team_slave_0 added [ 2179.975343][T30352] plantronics 0003:047F:FFFF.00BC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2180.000893][ T7448] team0: Port device team_slave_1 added [ 2180.108860][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2180.116915][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2180.142828][ C1] vkms_vblank_simulate: vblank timer overrun [ 2180.167744][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2180.180235][ T7560] input: syz0 as /devices/virtual/input/input227 [ 2180.188032][T24476] usb 6-1: USB disconnect, device number 76 [ 2180.218636][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2180.226983][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2180.249418][ T7560] input: failed to attach handler leds to device input227, error: -6 [ 2180.259766][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2180.367694][ T7448] hsr_slave_0: entered promiscuous mode [ 2180.374941][ T7448] hsr_slave_1: entered promiscuous mode [ 2180.383253][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2180.394570][ T7448] Cannot create hsr debugfs directory [ 2180.581242][ T7573] 9pnet_fd: Insufficient options for proto=fd [ 2180.908877][ T7583] input: syz0 as /devices/virtual/input/input228 [ 2181.377916][T26621] Bluetooth: hci3: command tx timeout [ 2181.428374][ T7598] wg1 speed is unknown, defaulting to 1000 [ 2181.640868][ T7448] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2181.656424][ T7448] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2181.689898][ T7448] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2181.780433][ T7448] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2181.985973][ T7610] overlayfs: failed to clone lowerpath [ 2182.106464][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2182.165106][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 2182.183262][T31307] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.190432][T31307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2182.219312][T31307] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.226542][T31307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2182.461397][ T7622] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2182.946321][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2183.598429][T26621] Bluetooth: hci3: command tx timeout [ 2183.773584][T30352] Process accounting resumed [ 2183.859246][ T7448] veth0_vlan: entered promiscuous mode [ 2183.879750][ T5972] audit_log_start: 7346 callbacks suppressed [ 2183.879769][ T5972] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2183.880554][ T5959] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2183.887229][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2183.905070][ T5959] audit: audit_lost=294178 audit_rate_limit=0 audit_backlog_limit=64 [ 2183.905847][ C1] audit: audit_lost=294179 audit_rate_limit=0 audit_backlog_limit=64 [ 2183.913881][ T5959] audit: backlog limit exceeded [ 2183.921962][ C1] audit: backlog limit exceeded [ 2183.924083][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2183.930513][ T7448] veth1_vlan: entered promiscuous mode [ 2183.932342][ C1] audit: audit_lost=294180 audit_rate_limit=0 audit_backlog_limit=64 [ 2183.940866][ T30] audit: type=1400 audit(2000004675.893:3075667): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2184.054686][ T7448] veth0_macvtap: entered promiscuous mode [ 2184.068123][ T7448] veth1_macvtap: entered promiscuous mode [ 2184.113486][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2184.152217][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2184.176339][ T7448] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.217159][ T7448] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.230682][ T7448] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.269239][ T7448] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2184.519015][T31200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2184.555036][T31200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2184.668639][T31340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2184.686613][T31340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2185.796107][T31340] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.996979][T31340] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.466236][T31340] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.627547][T31340] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.747457][T31340] bridge_slave_1: left allmulticast mode [ 2186.755304][T31340] bridge_slave_1: left promiscuous mode [ 2186.761630][T31340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.777310][T31340] bridge_slave_0: left allmulticast mode [ 2186.783079][T31340] bridge_slave_0: left promiscuous mode [ 2186.788803][T31340] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.433985][ T7713] IPVS: length: 91 != 24 [ 2187.528985][ T7716] program syz.2.29270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2187.865876][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2187.894356][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2187.913148][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2187.940882][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2187.969787][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2188.021230][T31340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2188.086127][T31340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2188.118064][T31340] bond0 (unregistering): Released all slaves [ 2188.401219][ T7723] wg1 speed is unknown, defaulting to 1000 [ 2189.231022][ T30] kauditd_printk_skb: 5295 callbacks suppressed [ 2189.231044][ T30] audit: type=1400 audit(2000004680.916:3079752): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31340 comm="kworker/u8:51" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2189.275154][ T7761] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2189.289606][ T30] audit: type=1400 audit(2000004680.906:3079751): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=3471 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1821 [ 2189.319924][ T7761] audit: audit_lost=294585 audit_rate_limit=0 audit_backlog_limit=64 [ 2189.326251][ T7762] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2189.334763][ T7762] audit: audit_lost=294586 audit_rate_limit=0 audit_backlog_limit=64 [ 2189.343461][ T7761] audit: backlog limit exceeded [ 2189.362544][ T7761] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2189.370478][ T30] audit: type=1400 audit(2000004680.916:3079753): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=3471 comm="syz-executor" name="351" dev="tmpfs" ino=1817 [ 2189.380925][ T7761] audit: audit_lost=294587 audit_rate_limit=0 audit_backlog_limit=64 [ 2189.741368][T31340] hsr_slave_0: left promiscuous mode [ 2189.776646][T31340] hsr_slave_1: left promiscuous mode [ 2189.782902][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.817525][T31340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.850458][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2189.857953][T31340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.111618][T31340] veth1_macvtap: left promiscuous mode [ 2190.123240][T31340] veth0_macvtap: left promiscuous mode [ 2190.129155][T31340] veth1_vlan: left promiscuous mode [ 2190.134608][T31340] veth0_vlan: left promiscuous mode [ 2190.181052][T26621] Bluetooth: hci3: command tx timeout [ 2190.243932][ T7787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2191.141354][T31340] team0 (unregistering): Port device team_slave_1 removed [ 2191.234179][T31340] team0 (unregistering): Port device team_slave_0 removed [ 2191.888012][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29303'. [ 2191.898053][ T7801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.29306'. [ 2192.152004][ T7813] netlink: 80 bytes leftover after parsing attributes in process `syz.3.29310'. [ 2192.213951][ T7723] chnl_net:caif_netlink_parms(): no params data found [ 2192.405603][T26621] Bluetooth: hci3: command tx timeout [ 2192.684545][T18868] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2192.695712][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.719531][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.742036][ T7723] bridge_slave_0: entered allmulticast mode [ 2192.754746][ T7723] bridge_slave_0: entered promiscuous mode [ 2192.785208][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.796731][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.815803][ T7723] bridge_slave_1: entered allmulticast mode [ 2192.827750][ T7723] bridge_slave_1: entered promiscuous mode [ 2192.853256][T18868] usb 6-1: Using ep0 maxpacket: 8 [ 2192.860867][T18868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.902505][T18868] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2192.928317][T18868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.960787][T18868] usb 6-1: config 0 descriptor?? [ 2192.976185][T18868] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2193.054804][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.156152][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2193.470705][ T7723] team0: Port device team_slave_0 added [ 2193.510321][ T7723] team0: Port device team_slave_1 added [ 2193.657819][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2193.671654][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2193.708079][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2193.735549][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2193.742935][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2193.770063][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2193.859911][ T7723] hsr_slave_0: entered promiscuous mode [ 2193.866654][ T7723] hsr_slave_1: entered promiscuous mode [ 2193.904805][ T7723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2193.913181][ T7723] Cannot create hsr debugfs directory [ 2194.055175][T18868] gspca_vc032x: reg_r err -71 [ 2194.060025][T18868] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 2194.083118][T18868] usb 6-1: USB disconnect, device number 77 [ 2194.278343][ T7876] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.29336'. [ 2194.587185][ T30] kauditd_printk_skb: 6632 callbacks suppressed [ 2194.587206][ T30] audit: type=1400 audit(2134222413.919:3085640): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2194.616169][ T30] audit: type=1400 audit(2134222413.919:3085641): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="367" dev="tmpfs" ino=1898 [ 2194.628384][T26621] Bluetooth: hci3: command tx timeout [ 2194.640423][ T30] audit: type=1400 audit(2134222413.919:3085642): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=3471 comm="syz-executor" path="/367/cgroup" dev="tmpfs" ino=1899 [ 2194.688774][T14958] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2194.688894][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2194.702012][ C1] audit: audit_lost=294836 audit_rate_limit=0 audit_backlog_limit=64 [ 2194.709586][T14958] audit: audit_lost=294837 audit_rate_limit=0 audit_backlog_limit=64 [ 2194.710215][ C1] audit: backlog limit exceeded [ 2194.718436][ T30] audit: type=1400 audit(2134222413.919:3085643): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2194.743446][T14958] audit: backlog limit exceeded [ 2194.880096][T24476] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 2194.940508][ T7898] netlink: 512 bytes leftover after parsing attributes in process `syz.2.29347'. [ 2195.060078][T24476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.076952][T24476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2195.096021][T24476] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2195.113999][T24476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.122269][T24476] usb 4-1: Product: syz [ 2195.130347][T24476] usb 4-1: Manufacturer: syz [ 2195.135006][T24476] usb 4-1: SerialNumber: syz [ 2195.190726][ T7723] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2195.212949][ T7723] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2195.232428][ T7723] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2195.257054][ T7723] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2195.374644][T24476] usb 4-1: 0:2 : does not exist [ 2195.393421][T24476] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2195.431141][T24476] usb 4-1: USB disconnect, device number 37 [ 2195.446710][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2195.505503][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 2195.521933][T31328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.529178][T31328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2195.605315][T31328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.612585][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.279937][ T7947] 9pnet_fd: Insufficient options for proto=fd [ 2196.349892][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2196.852587][ T5100] Bluetooth: hci3: command tx timeout [ 2197.161514][ T7946] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2197.177751][ T7723] veth0_vlan: entered promiscuous mode [ 2197.213345][ T7723] veth1_vlan: entered promiscuous mode [ 2197.316862][ T7723] veth0_macvtap: entered promiscuous mode [ 2197.343793][ T7723] veth1_macvtap: entered promiscuous mode [ 2197.369362][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2197.398221][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2197.415839][ T7723] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.434801][ T7723] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.444637][ T7723] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.459910][ T7723] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.533362][ T7991] binder: 7990:7991 ioctl c0306201 2000000003c0 returned -14 [ 2197.700361][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.728314][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.828121][T31340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.841029][T31340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2198.156651][ T8011] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2198.258927][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29394'. [ 2198.305788][ T8018] netlink: 172 bytes leftover after parsing attributes in process `syz.2.29394'. [ 2198.943322][T31340] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.062302][T30887] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2199.088658][T31340] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.268157][T30887] usb 3-1: Using ep0 maxpacket: 8 [ 2199.278991][T30887] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2199.288050][T30887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.296991][T30887] usb 3-1: Product: syz [ 2199.301559][T30887] usb 3-1: Manufacturer: syz [ 2199.306175][T30887] usb 3-1: SerialNumber: syz [ 2199.314002][T30887] usb 3-1: config 0 descriptor?? [ 2199.323454][T30887] gspca_main: se401-2.14.0 probing 047d:5003 [ 2199.332442][T26621] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2199.362572][T31340] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.504410][T31340] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.752837][T31340] bridge_slave_1: left allmulticast mode [ 2199.758555][T31340] bridge_slave_1: left promiscuous mode [ 2199.760611][T30887] gspca_se401: Frame size: 0x0 1/16th janggu [ 2199.765523][T31340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.787007][T31340] bridge_slave_0: left allmulticast mode [ 2199.793335][T31340] bridge_slave_0: left promiscuous mode [ 2199.799136][T31340] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.978937][T30887] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input230 [ 2199.993011][ T30] kauditd_printk_skb: 9192 callbacks suppressed [ 2199.993031][ T30] audit: type=1400 audit(2134222418.980:3093513): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2199.998359][T30887] usb 3-1: USB disconnect, device number 127 [ 2200.021832][ T30] audit: type=1400 audit(2134222418.980:3093514): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="input" dev="devtmpfs" ino=916 [ 2200.043845][ T30] audit: type=1400 audit(2134222418.980:3093515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2200.065910][ T30] audit: type=1400 audit(2134222419.026:3093516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2200.084935][ T30] audit: type=1400 audit(2134222419.026:3093517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="input" dev="devtmpfs" ino=916 [ 2200.104775][ T30] audit: type=1400 audit(2134222419.064:3093518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2200.128169][ T30] audit: type=1400 audit(2134222419.101:3093519): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2200.147398][ T30] audit: type=1400 audit(2134222419.101:3093520): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=719 [ 2200.167744][ T30] audit: type=1400 audit(2134222419.101:3093521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=720 [ 2200.193071][ T30] audit: type=1400 audit(2134222419.101:3093522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="003" dev="devtmpfs" ino=727 [ 2200.861186][T31340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.914478][T31340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.946361][T31340] bond0 (unregistering): Released all slaves [ 2201.009570][ T8060] netlink: 'syz.2.29413': attribute type 29 has an invalid length. [ 2201.043846][ T8064] netlink: 596 bytes leftover after parsing attributes in process `syz.2.29413'. [ 2201.086698][ T8063] netlink: 'syz.2.29413': attribute type 29 has an invalid length. [ 2201.251181][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2201.286791][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2201.310045][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2201.322944][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2201.338030][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2201.343214][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.29417'. [ 2201.582143][ T8067] wg1 speed is unknown, defaulting to 1000 [ 2201.829692][ T8081] sctp: [Deprecated]: syz.3.29421 (pid 8081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2201.829692][ T8081] Use struct sctp_sack_info instead [ 2201.862236][ T8079] geneve3: entered allmulticast mode [ 2202.084487][ T8089] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2202.321821][ T8097] ALSA: mixer_oss: invalid OSS volume '' [ 2202.532230][T31340] hsr_slave_0: left promiscuous mode [ 2202.538767][T31340] hsr_slave_1: left promiscuous mode [ 2202.545413][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2202.553568][T31340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2202.562399][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2202.570011][T31340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2202.605005][T31340] veth1_macvtap: left promiscuous mode [ 2202.610744][T31340] veth0_macvtap: left promiscuous mode [ 2202.617102][T31340] veth1_vlan: left promiscuous mode [ 2202.622592][T31340] veth0_vlan: left promiscuous mode [ 2203.526113][T26621] Bluetooth: hci3: command tx timeout [ 2203.563009][T31340] team0 (unregistering): Port device team_slave_1 removed [ 2203.655072][T31340] team0 (unregistering): Port device team_slave_0 removed [ 2204.308700][ T8108] batadv_slave_0: entered promiscuous mode [ 2204.320014][ T8112] batadv_slave_0: left promiscuous mode [ 2204.507948][ T8123] wg1 speed is unknown, defaulting to 1000 [ 2204.560520][ T8122] wg1 speed is unknown, defaulting to 1000 [ 2204.634794][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 2204.757019][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29442'. [ 2204.989862][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.997117][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.009649][ T8067] bridge_slave_0: entered allmulticast mode [ 2205.024344][ T8067] bridge_slave_0: entered promiscuous mode [ 2205.047526][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.062716][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.070032][ T8067] bridge_slave_1: entered allmulticast mode [ 2205.095914][ T8067] bridge_slave_1: entered promiscuous mode [ 2205.164480][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.184278][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.242985][ T8148] input input231: cannot allocate more than FF_MAX_EFFECTS effects [ 2205.344487][ T30] kauditd_printk_skb: 4342 callbacks suppressed [ 2205.344509][ T30] audit: type=1400 audit(2134222423.984:3097790): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8149 comm="syz.3.29447" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2205.344980][ T8067] team0: Port device team_slave_0 added [ 2205.362838][ T30] audit: type=1400 audit(2134222423.993:3097791): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=8149 comm="syz.3.29447" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2205.418322][ T8067] team0: Port device team_slave_1 added [ 2205.451477][ T30] audit: type=1400 audit(2134222424.087:3097792): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2205.494267][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2205.504606][ T30] audit: type=1400 audit(2134222424.087:3097793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2205.525022][T14958] audit: audit_lost=295304 audit_rate_limit=0 audit_backlog_limit=64 [ 2205.534262][T14958] audit: backlog limit exceeded [ 2205.540176][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2205.546984][ T30] audit: type=1400 audit(2134222424.087:3097794): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2205.568831][T14958] audit: audit_lost=295305 audit_rate_limit=0 audit_backlog_limit=64 [ 2205.623483][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.639827][T24476] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2205.647588][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.679138][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2205.696406][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2205.703891][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.730140][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2205.746663][T26621] Bluetooth: hci3: command tx timeout [ 2205.847554][T24476] usb 4-1: Using ep0 maxpacket: 8 [ 2205.878795][T24476] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2205.896128][T24476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.915080][T24476] usb 4-1: Product: syz [ 2205.924144][T24476] usb 4-1: Manufacturer: syz [ 2205.938274][T24476] usb 4-1: SerialNumber: syz [ 2205.967332][T24476] usb 4-1: config 0 descriptor?? [ 2205.997630][T24476] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2206.175656][ T8067] hsr_slave_0: entered promiscuous mode [ 2206.182505][ T8067] hsr_slave_1: entered promiscuous mode [ 2206.199361][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2206.209682][ T8067] Cannot create hsr debugfs directory [ 2206.853918][T24476] gspca_sq930x: ucbus_write failed -71 [ 2207.109066][T24476] gspca_sq930x: Sensor ov9630 not yet treated [ 2207.129753][T24476] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 2207.157847][T24476] usb 4-1: USB disconnect, device number 38 [ 2207.229074][ T8067] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2207.242615][ T8067] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2207.254319][ T8067] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2207.279027][ T8067] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2207.411791][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.487096][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.517909][T31335] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.525172][T31335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.570186][T31335] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.577516][T31335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.973388][ T5100] Bluetooth: hci3: command tx timeout [ 2208.416705][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.093494][T30887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2209.204802][ T8067] veth0_vlan: entered promiscuous mode [ 2209.239151][ T8067] veth1_vlan: entered promiscuous mode [ 2209.271678][T30887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2209.292862][T30887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2209.317714][T30887] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 2209.327088][T30887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.338754][ T5100] Bluetooth: hci5: command 0x1003 tx timeout [ 2209.346152][T26621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2209.354465][T30887] usb 3-1: config 0 descriptor?? [ 2209.400051][ T8067] veth0_macvtap: entered promiscuous mode [ 2209.460581][ T8067] veth1_macvtap: entered promiscuous mode [ 2209.478947][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29481'. [ 2209.518353][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2209.567243][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2209.600016][ T8067] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.614272][ T8067] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.637762][ T8067] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.656007][ T8067] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.839608][T30887] wacom 0003:056A:00F4.00BD: ignoring exceeding usage max [ 2209.845303][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.866247][T30887] wacom 0003:056A:00F4.00BD: item fetching failed at offset 8/11 [ 2209.874581][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.895449][T30887] wacom 0003:056A:00F4.00BD: parse failed [ 2209.916160][T30887] wacom 0003:056A:00F4.00BD: probe with driver wacom failed with error -22 [ 2209.936647][T31300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.953119][T31300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.072986][T30887] usb 3-1: USB disconnect, device number 2 [ 2210.724028][ T30] kauditd_printk_skb: 6730 callbacks suppressed [ 2210.724073][ T30] audit: type=1400 audit(2134222429.017:3104155): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2210.768753][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2210.781517][ T3471] audit: audit_lost=295429 audit_rate_limit=0 audit_backlog_limit=64 [ 2210.789932][ T3471] audit: backlog limit exceeded [ 2210.795760][ T30] audit: type=1400 audit(2134222429.045:3104156): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31340 comm="kworker/u8:51" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2210.795846][ T30] audit: type=1400 audit(2134222429.045:3104157): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=31340 comm="kworker/u8:51" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2210.854616][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2210.876403][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2210.877165][ T3471] audit: audit_lost=295430 audit_rate_limit=0 audit_backlog_limit=64 [ 2210.883976][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2211.083957][T31352] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.232631][T31352] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.273448][T24476] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 2211.355156][T31352] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.436710][T24476] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2211.446589][T24476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.457939][T24476] usb 6-1: config 0 descriptor?? [ 2211.466028][T24476] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2211.506590][T31352] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.640402][T31352] bridge_slave_1: left allmulticast mode [ 2211.646095][T31352] bridge_slave_1: left promiscuous mode [ 2211.652337][T31352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.666787][T31352] bridge_slave_0: left allmulticast mode [ 2211.673034][T31352] bridge_slave_0: left promiscuous mode [ 2211.678866][T31352] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.688188][T24476] gp8psk: usb in 128 operation failed. [ 2211.915966][T24476] gp8psk: FW Version = 107.255.166 (0x6bffa6) Build 2064/41/152 [ 2212.157544][T24476] gp8psk: usb in 149 operation failed. [ 2212.164608][T24476] gp8psk: failed to get FPGA version [ 2212.170378][T24476] gp8psk: usb in 138 operation failed. [ 2212.181164][T24476] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2212.192269][T24476] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2212.205086][T24476] usb 6-1: USB disconnect, device number 78 [ 2212.260797][T31352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2212.278960][T31352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2212.289900][T31352] bond0 (unregistering): Released all slaves [ 2212.909296][T31352] hsr_slave_0: left promiscuous mode [ 2212.930780][T31352] hsr_slave_1: left promiscuous mode [ 2212.952485][T31352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2212.959982][T31352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.006754][T31352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2213.035924][T31352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.179486][T31352] veth1_macvtap: left promiscuous mode [ 2213.185105][T31352] veth0_macvtap: left promiscuous mode [ 2213.198780][T31352] veth1_vlan: left promiscuous mode [ 2213.207887][T31352] veth0_vlan: left promiscuous mode [ 2213.355926][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2213.368220][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2213.388592][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2213.404746][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2213.415604][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2214.198116][T31352] team0 (unregistering): Port device team_slave_1 removed [ 2214.275848][T31352] team0 (unregistering): Port device team_slave_0 removed [ 2215.032876][ T8296] wg1 speed is unknown, defaulting to 1000 [ 2215.687644][T26621] Bluetooth: hci3: command tx timeout [ 2215.699352][T30887] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2215.870292][T30887] usb 6-1: Using ep0 maxpacket: 32 [ 2215.900082][T30887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2215.958974][T30887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2215.990789][ T8296] chnl_net:caif_netlink_parms(): no params data found [ 2216.000496][T30887] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2216.018573][T30887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.056776][T30887] usb 6-1: config 0 descriptor?? [ 2216.077673][ T30] kauditd_printk_skb: 4035 callbacks suppressed [ 2216.077692][ T30] audit: type=1400 audit(2134222434.012:3108020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2216.112792][ T30] audit: type=1400 audit(2134222434.021:3108021): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5812 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2216.137528][ T30] audit: type=1400 audit(2134222434.021:3108022): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5812 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2216.197297][ T30] audit: type=1400 audit(2134222434.021:3108023): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8296 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2216.200236][ T5959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2216.220656][ T30] audit: type=1400 audit(2134222434.021:3108024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2216.229159][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2216.246965][ T30] audit: type=1400 audit(2134222434.030:3108025): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="407" dev="tmpfs" ino=2101 [ 2216.253239][ C1] audit: audit_lost=295489 audit_rate_limit=0 audit_backlog_limit=64 [ 2216.253259][ C1] audit: backlog limit exceeded [ 2216.417753][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.446092][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.470535][ T8296] bridge_slave_0: entered allmulticast mode [ 2216.489826][ T8296] bridge_slave_0: entered promiscuous mode [ 2216.521251][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.537596][T30887] ft260 0003:0403:6030.00BE: unknown main item tag 0x0 [ 2216.545138][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.552454][ T8296] bridge_slave_1: entered allmulticast mode [ 2216.599060][ T8296] bridge_slave_1: entered promiscuous mode [ 2216.664804][ T8296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2216.686955][ T8296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.746101][T30887] ft260 0003:0403:6030.00BE: chip code: 525b 7403 [ 2216.818175][ T8296] team0: Port device team_slave_0 added [ 2216.834484][ T8296] team0: Port device team_slave_1 added [ 2216.912626][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2216.921508][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2216.966517][ T8296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2216.985352][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2216.997785][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2217.067308][ T8296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2217.189744][ T8375] geneve3: entered promiscuous mode [ 2217.195177][ T8375] geneve3: entered allmulticast mode [ 2217.196231][T28952] usb 6-1: USB disconnect, device number 79 [ 2217.247846][ T8296] hsr_slave_0: entered promiscuous mode [ 2217.258856][ T8296] hsr_slave_1: entered promiscuous mode [ 2217.277848][ T8296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2217.289729][ T8296] Cannot create hsr debugfs directory [ 2217.917916][T26621] Bluetooth: hci3: command tx timeout [ 2218.225040][ T8408] netlink: 'syz.3.29544': attribute type 12 has an invalid length. [ 2218.234081][ T8408] netlink: 'syz.3.29544': attribute type 1 has an invalid length. [ 2218.270344][ T8408] netlink: 140 bytes leftover after parsing attributes in process `syz.3.29544'. [ 2218.472711][ T8296] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2218.502943][ T8296] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2218.506907][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29549'. [ 2218.554487][ T8296] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2218.584536][ T8296] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2218.792540][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2218.804228][ T8431] netlink: 136 bytes leftover after parsing attributes in process `syz.4.29553'. [ 2218.814065][ T8431] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2218.880719][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 2218.943112][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.950337][T31200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.986559][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.993790][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2219.815851][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2220.080697][ T8458] loop6: detected capacity change from 0 to 63 [ 2220.100648][ T8458] buffer_io_error: 6 callbacks suppressed [ 2220.100668][ T8458] Buffer I/O error on dev loop6, logical block 0, async page read [ 2220.124039][ T8458] Buffer I/O error on dev loop6, logical block 1, async page read [ 2220.125235][T26621] Bluetooth: hci3: command tx timeout [ 2220.132628][ T8458] Buffer I/O error on dev loop6, logical block 2, async page read [ 2220.156251][ T8458] Buffer I/O error on dev loop6, logical block 3, async page read [ 2220.174931][ T8458] Buffer I/O error on dev loop6, logical block 0, async page read [ 2220.214129][ T8458] Buffer I/O error on dev loop6, logical block 1, async page read [ 2220.238052][ T8458] Buffer I/O error on dev loop6, logical block 2, async page read [ 2220.266942][ T8458] Buffer I/O error on dev loop6, logical block 3, async page read [ 2220.294028][ T8458] Buffer I/O error on dev loop6, logical block 0, async page read [ 2220.314824][ T8458] Buffer I/O error on dev loop6, logical block 1, async page read [ 2220.614788][T24476] kernel read not supported for file /video37 (pid: 24476 comm: kworker/1:1) [ 2220.658257][ T8296] veth0_vlan: entered promiscuous mode [ 2220.691335][ T8296] veth1_vlan: entered promiscuous mode [ 2220.789774][ T8296] veth0_macvtap: entered promiscuous mode [ 2220.836798][ T8296] veth1_macvtap: entered promiscuous mode [ 2220.892263][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2220.940274][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2220.992031][ T8296] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.022825][ T8296] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.042852][ T8296] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.053667][ T8296] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.306660][T31340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.333194][T31340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.441851][T31340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.449747][T31340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.485590][ T30] kauditd_printk_skb: 6714 callbacks suppressed [ 2221.485610][ T30] audit: type=1400 audit(2134222439.081:3114360): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14958 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2221.500770][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2221.513093][T14958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2221.519294][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2221.531930][ C1] audit: audit_lost=295617 audit_rate_limit=0 audit_backlog_limit=64 [ 2221.539353][ T5959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2221.540037][ C1] audit: backlog limit exceeded [ 2221.546514][ T5959] audit: audit_lost=295618 audit_rate_limit=0 audit_backlog_limit=64 [ 2221.551762][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2221.566126][ C1] audit: audit_lost=295619 audit_rate_limit=0 audit_backlog_limit=64 [ 2222.076785][ T8499] wg1 speed is unknown, defaulting to 1000 [ 2222.422915][T31300] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.611378][T31300] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.787134][T28952] kernel read not supported for file /adsp1 (pid: 28952 comm: kworker/1:3) [ 2222.938789][T31300] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.219347][T31300] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.400887][T31300] bridge_slave_1: left allmulticast mode [ 2223.406718][T31300] bridge_slave_1: left promiscuous mode [ 2223.429169][T31300] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.444209][T31300] bridge_slave_0: left allmulticast mode [ 2223.457628][T31300] bridge_slave_0: left promiscuous mode [ 2223.463991][T31300] bridge0: port 1(bridge_slave_0) entered disabled state [ 2223.970108][T31300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2223.985399][T31300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2223.996230][T31300] bond0 (unregistering): Released all slaves [ 2224.341335][ T8515] vlan0: entered promiscuous mode [ 2224.350716][ T8515] hsr0: entered promiscuous mode [ 2224.685120][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2224.705568][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2224.715579][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2224.740139][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2224.754491][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2224.858072][ T8526] wg1 speed is unknown, defaulting to 1000 [ 2224.911296][ T8531] netlink: 408 bytes leftover after parsing attributes in process `syz.3.29589'. [ 2224.944016][ T8531] netlink: 104 bytes leftover after parsing attributes in process `syz.3.29589'. [ 2225.396655][T31300] hsr_slave_0: left promiscuous mode [ 2225.442793][T31300] hsr_slave_1: left promiscuous mode [ 2225.472076][T31300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2225.479596][T31300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2225.532022][T31300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2225.532756][ T8549] [ 2225.541813][ T8549] ===================================================== [ 2225.547857][T31300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2225.548769][ T8549] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2225.563466][ T8549] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 2225.570577][ T8549] ----------------------------------------------------- [ 2225.577508][ T8549] syz.5.29598/8549 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2225.585227][ T8549] ffff888080aad948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2225.593951][ T8549] [ 2225.593951][ T8549] and this task is already holding: [ 2225.601316][ T8549] ffff88803a174028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2225.611082][ T8549] which would create a new lock dependency: [ 2225.616992][ T8549] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2225.625111][ T8549] [ 2225.625111][ T8549] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2225.634557][ T8549] (&client->buffer_lock){..-.}-{3:3} [ 2225.634582][ T8549] [ 2225.634582][ T8549] ... which became SOFTIRQ-irq-safe at: [ 2225.647649][ T8549] lock_acquire+0x120/0x360 [ 2225.652257][ T8549] _raw_spin_lock+0x2e/0x40 [ 2225.656863][ T8549] evdev_pass_values+0xb9/0xbd0 [ 2225.661821][ T8549] evdev_events+0x1e6/0x340 [ 2225.666431][ T8549] input_pass_values+0x285/0x890 [ 2225.671464][ T8549] input_event_dispose+0x3e5/0x6b0 [ 2225.676674][ T8549] input_inject_event+0x1fe/0x320 [ 2225.681830][ T8549] led_trigger_event+0x138/0x210 [ 2225.686868][ T8549] kbd_bh+0x1c6/0x2e0 [ 2225.690950][ T8549] tasklet_action_common+0x369/0x580 [ 2225.696338][ T8549] handle_softirqs+0x286/0x870 [ 2225.701202][ T8549] run_ksoftirqd+0x9b/0x100 [ 2225.705881][ T8549] smpboot_thread_fn+0x53f/0xa60 [ 2225.710909][ T8549] kthread+0x70e/0x8a0 [ 2225.715068][ T8549] ret_from_fork+0x3fc/0x770 [ 2225.719752][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2225.724607][ T8549] [ 2225.724607][ T8549] to a SOFTIRQ-irq-unsafe lock: [ 2225.731626][ T8549] (tasklist_lock){.+.+}-{3:3} [ 2225.731653][ T8549] [ 2225.731653][ T8549] ... which became SOFTIRQ-irq-unsafe at: [ 2225.744283][ T8549] ... [ 2225.744291][ T8549] lock_acquire+0x120/0x360 [ 2225.751505][ T8549] _raw_read_lock+0x36/0x50 [ 2225.756107][ T8549] __do_wait+0xde/0x740 [ 2225.760358][ T8549] do_wait+0x1f8/0x520 [ 2225.764518][ T8549] kernel_wait+0xab/0x170 [ 2225.768951][ T8549] call_usermodehelper_exec_work+0xbe/0x230 [ 2225.774948][ T8549] process_scheduled_works+0xade/0x17b0 [ 2225.780599][ T8549] worker_thread+0x8a0/0xda0 [ 2225.785283][ T8549] kthread+0x70e/0x8a0 [ 2225.789437][ T8549] ret_from_fork+0x3fc/0x770 [ 2225.794126][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2225.798992][ T8549] [ 2225.798992][ T8549] other info that might help us debug this: [ 2225.798992][ T8549] [ 2225.809238][ T8549] Chain exists of: [ 2225.809238][ T8549] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 2225.809238][ T8549] [ 2225.822387][ T8549] Possible interrupt unsafe locking scenario: [ 2225.822387][ T8549] [ 2225.830711][ T8549] CPU0 CPU1 [ 2225.836088][ T8549] ---- ---- [ 2225.841449][ T8549] lock(tasklist_lock); [ 2225.845697][ T8549] local_irq_disable(); [ 2225.852451][ T8549] lock(&client->buffer_lock); [ 2225.859836][ T8549] lock(&new->fa_lock); [ 2225.866601][ T8549] [ 2225.870063][ T8549] lock(&client->buffer_lock); [ 2225.875100][ T8549] [ 2225.875100][ T8549] *** DEADLOCK *** [ 2225.875100][ T8549] [ 2225.883256][ T8549] 7 locks held by syz.5.29598/8549: [ 2225.888452][ T8549] #0: ffff8880297ea118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2225.897605][ T8549] #1: ffff8880295b5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 2225.907722][ T8549] #2: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 2225.917408][ T8549] #3: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2225.926987][ T8549] #4: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2225.936141][ T8549] #5: ffff88803a174028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2225.946331][ T8549] #6: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2225.955390][ T8549] [ 2225.955390][ T8549] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2225.965800][ T8549] -> (&client->buffer_lock){..-.}-{3:3} { [ 2225.971542][ T8549] IN-SOFTIRQ-W at: [ 2225.975527][ T8549] lock_acquire+0x120/0x360 [ 2225.981694][ T8549] _raw_spin_lock+0x2e/0x40 [ 2225.987856][ T8549] evdev_pass_values+0xb9/0xbd0 [ 2225.994359][ T8549] evdev_events+0x1e6/0x340 [ 2226.000516][ T8549] input_pass_values+0x285/0x890 [ 2226.007110][ T8549] input_event_dispose+0x3e5/0x6b0 [ 2226.013882][ T8549] input_inject_event+0x1fe/0x320 [ 2226.020564][ T8549] led_trigger_event+0x138/0x210 [ 2226.027157][ T8549] kbd_bh+0x1c6/0x2e0 [ 2226.032797][ T8549] tasklet_action_common+0x369/0x580 [ 2226.039755][ T8549] handle_softirqs+0x286/0x870 [ 2226.046183][ T8549] run_ksoftirqd+0x9b/0x100 [ 2226.052339][ T8549] smpboot_thread_fn+0x53f/0xa60 [ 2226.058942][ T8549] kthread+0x70e/0x8a0 [ 2226.064665][ T8549] ret_from_fork+0x3fc/0x770 [ 2226.070910][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2226.077324][ T8549] INITIAL USE at: [ 2226.081216][ T8549] lock_acquire+0x120/0x360 [ 2226.087291][ T8549] _raw_spin_lock_irq+0xa2/0xf0 [ 2226.093719][ T8549] evdev_read+0x370/0xca0 [ 2226.099622][ T8549] vfs_readv+0x5a7/0x850 [ 2226.105442][ T8549] do_readv+0x14d/0x2d0 [ 2226.111174][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.117351][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.124821][ T8549] } [ 2226.127321][ T8549] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2226.135499][ T8549] [ 2226.135499][ T8549] the dependencies between the lock to be acquired [ 2226.135511][ T8549] and SOFTIRQ-irq-unsafe lock: [ 2226.149084][ T8549] -> (tasklist_lock){.+.+}-{3:3} { [ 2226.154418][ T8549] HARDIRQ-ON-R at: [ 2226.158591][ T8549] lock_acquire+0x120/0x360 [ 2226.165117][ T8549] _raw_read_lock+0x36/0x50 [ 2226.171638][ T8549] __do_wait+0xde/0x740 [ 2226.177804][ T8549] do_wait+0x1f8/0x520 [ 2226.183875][ T8549] kernel_wait+0xab/0x170 [ 2226.190207][ T8549] call_usermodehelper_exec_work+0xbe/0x230 [ 2226.198106][ T8549] process_scheduled_works+0xade/0x17b0 [ 2226.205664][ T8549] worker_thread+0x8a0/0xda0 [ 2226.212268][ T8549] kthread+0x70e/0x8a0 [ 2226.218343][ T8549] ret_from_fork+0x3fc/0x770 [ 2226.224949][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2226.231729][ T8549] SOFTIRQ-ON-R at: [ 2226.235908][ T8549] lock_acquire+0x120/0x360 [ 2226.242427][ T8549] _raw_read_lock+0x36/0x50 [ 2226.248941][ T8549] __do_wait+0xde/0x740 [ 2226.255107][ T8549] do_wait+0x1f8/0x520 [ 2226.261184][ T8549] kernel_wait+0xab/0x170 [ 2226.267534][ T8549] call_usermodehelper_exec_work+0xbe/0x230 [ 2226.275438][ T8549] process_scheduled_works+0xade/0x17b0 [ 2226.283009][ T8549] worker_thread+0x8a0/0xda0 [ 2226.289630][ T8549] kthread+0x70e/0x8a0 [ 2226.295705][ T8549] ret_from_fork+0x3fc/0x770 [ 2226.302306][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2226.309085][ T8549] INITIAL USE at: [ 2226.313159][ T8549] lock_acquire+0x120/0x360 [ 2226.319582][ T8549] _raw_write_lock_irq+0xa2/0xf0 [ 2226.326441][ T8549] copy_process+0x224f/0x3c00 [ 2226.333071][ T8549] kernel_clone+0x224/0x7f0 [ 2226.339488][ T8549] user_mode_thread+0xdd/0x140 [ 2226.346165][ T8549] rest_init+0x23/0x300 [ 2226.352266][ T8549] start_kernel+0x47d/0x500 [ 2226.358695][ T8549] x86_64_start_reservations+0x24/0x30 [ 2226.366065][ T8549] x86_64_start_kernel+0x143/0x1c0 [ 2226.373088][ T8549] common_startup_64+0x13e/0x147 [ 2226.379942][ T8549] INITIAL READ USE at: [ 2226.384449][ T8549] lock_acquire+0x120/0x360 [ 2226.391309][ T8549] _raw_read_lock+0x36/0x50 [ 2226.398201][ T8549] __do_wait+0xde/0x740 [ 2226.404708][ T8549] do_wait+0x1f8/0x520 [ 2226.411137][ T8549] kernel_wait+0xab/0x170 [ 2226.417827][ T8549] call_usermodehelper_exec_work+0xbe/0x230 [ 2226.426075][ T8549] process_scheduled_works+0xade/0x17b0 [ 2226.433979][ T8549] worker_thread+0x8a0/0xda0 [ 2226.440942][ T8549] kthread+0x70e/0x8a0 [ 2226.447416][ T8549] ret_from_fork+0x3fc/0x770 [ 2226.454370][ T8549] ret_from_fork_asm+0x1a/0x30 [ 2226.461485][ T8549] } [ 2226.464161][ T8549] ... key at: [] tasklist_lock+0x18/0x40 [ 2226.472069][ T8549] ... acquired at: [ 2226.476048][ T8549] lock_acquire+0x120/0x360 [ 2226.480732][ T8549] _raw_read_lock+0x36/0x50 [ 2226.485440][ T8549] send_sigio+0x101/0x370 [ 2226.489978][ T8549] dnotify_handle_event+0x169/0x440 [ 2226.495379][ T8549] fsnotify+0x1814/0x1a80 [ 2226.499897][ T8549] vfs_mkdir+0x477/0x510 [ 2226.504320][ T8549] do_mkdirat+0x247/0x590 [ 2226.508827][ T8549] __x64_sys_mkdirat+0x87/0xa0 [ 2226.513792][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.518484][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.524594][ T8549] [ 2226.526920][ T8549] -> (&f_owner->lock){....}-{3:3} { [ 2226.532239][ T8549] INITIAL USE at: [ 2226.536226][ T8549] lock_acquire+0x120/0x360 [ 2226.542473][ T8549] _raw_write_lock_irq+0xa2/0xf0 [ 2226.549170][ T8549] __f_setown+0x67/0x370 [ 2226.555179][ T8549] f_setown+0x23a/0x300 [ 2226.561086][ T8549] sock_ioctl+0x5c5/0x790 [ 2226.567160][ T8549] __se_sys_ioctl+0xf9/0x170 [ 2226.573506][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.579757][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.587391][ T8549] INITIAL READ USE at: [ 2226.591829][ T8549] lock_acquire+0x120/0x360 [ 2226.598520][ T8549] _raw_read_lock_irqsave+0xaf/0x100 [ 2226.605989][ T8549] send_sigio+0x38/0x370 [ 2226.612422][ T8549] dnotify_handle_event+0x169/0x440 [ 2226.619811][ T8549] fsnotify+0x1814/0x1a80 [ 2226.626322][ T8549] vfs_readv+0x703/0x850 [ 2226.632756][ T8549] __se_sys_preadv2+0x179/0x290 [ 2226.639791][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.646477][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.654546][ T8549] } [ 2226.657132][ T8549] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2226.666084][ T8549] ... acquired at: [ 2226.669972][ T8549] lock_acquire+0x120/0x360 [ 2226.674668][ T8549] _raw_read_lock_irqsave+0xaf/0x100 [ 2226.680160][ T8549] send_sigio+0x38/0x370 [ 2226.684608][ T8549] kill_fasync+0x24d/0x4d0 [ 2226.689210][ T8549] lease_break_callback+0x26/0x30 [ 2226.694437][ T8549] __break_lease+0x6a5/0x1620 [ 2226.699309][ T8549] do_dentry_open+0xd62/0x1970 [ 2226.704261][ T8549] vfs_open+0x3b/0x340 [ 2226.708522][ T8549] path_openat+0x2ee5/0x3830 [ 2226.713292][ T8549] do_filp_open+0x1fa/0x410 [ 2226.717970][ T8549] do_sys_openat2+0x121/0x1c0 [ 2226.722836][ T8549] __x64_sys_openat+0x138/0x170 [ 2226.727878][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.732576][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.738658][ T8549] [ 2226.740985][ T8549] -> (&new->fa_lock){....}-{3:3} { [ 2226.746126][ T8549] INITIAL USE at: [ 2226.750020][ T8549] lock_acquire+0x120/0x360 [ 2226.756098][ T8549] _raw_write_lock_irq+0xa2/0xf0 [ 2226.762612][ T8549] fasync_remove_entry+0xf1/0x1c0 [ 2226.769206][ T8549] __fput+0x8a2/0xa70 [ 2226.774778][ T8549] task_work_run+0x1d1/0x260 [ 2226.780941][ T8549] exit_to_user_mode_loop+0xec/0x110 [ 2226.787795][ T8549] do_syscall_64+0x2bd/0x3b0 [ 2226.793958][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.801421][ T8549] INITIAL READ USE at: [ 2226.805754][ T8549] lock_acquire+0x120/0x360 [ 2226.812275][ T8549] _raw_read_lock_irqsave+0xaf/0x100 [ 2226.819578][ T8549] kill_fasync+0x199/0x4d0 [ 2226.826018][ T8549] pipe_release+0x19c/0x330 [ 2226.832531][ T8549] __fput+0x44c/0xa70 [ 2226.838528][ T8549] task_work_run+0x1d1/0x260 [ 2226.845126][ T8549] exit_to_user_mode_loop+0xec/0x110 [ 2226.852424][ T8549] do_syscall_64+0x2bd/0x3b0 [ 2226.859029][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.866930][ T8549] } [ 2226.869448][ T8549] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2226.878142][ T8549] ... acquired at: [ 2226.881959][ T8549] lock_acquire+0x120/0x360 [ 2226.886653][ T8549] _raw_read_lock_irqsave+0xaf/0x100 [ 2226.892126][ T8549] kill_fasync+0x199/0x4d0 [ 2226.896723][ T8549] evdev_pass_values+0x627/0xbd0 [ 2226.901842][ T8549] evdev_events+0x1e6/0x340 [ 2226.906526][ T8549] input_pass_values+0x285/0x890 [ 2226.911638][ T8549] input_event_dispose+0x330/0x6b0 [ 2226.916935][ T8549] input_inject_event+0x1fe/0x320 [ 2226.922145][ T8549] evdev_write+0x2fc/0x480 [ 2226.926765][ T8549] vfs_write+0x27e/0xa90 [ 2226.931188][ T8549] ksys_write+0x145/0x250 [ 2226.935702][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.940399][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.946472][ T8549] [ 2226.948802][ T8549] [ 2226.948802][ T8549] stack backtrace: [ 2226.954693][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.5.29598 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2226.954714][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2226.954724][ T8549] Call Trace: [ 2226.954732][ T8549] [ 2226.954740][ T8549] dump_stack_lvl+0x189/0x250 [ 2226.954771][ T8549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2226.954794][ T8549] ? __pfx__printk+0x10/0x10 [ 2226.954814][ T8549] validate_chain+0x1f05/0x2140 [ 2226.954848][ T8549] __lock_acquire+0xab9/0xd20 [ 2226.954872][ T8549] ? kill_fasync+0x199/0x4d0 [ 2226.954885][ T8549] lock_acquire+0x120/0x360 [ 2226.954904][ T8549] ? kill_fasync+0x199/0x4d0 [ 2226.954924][ T8549] _raw_read_lock_irqsave+0xaf/0x100 [ 2226.954945][ T8549] ? kill_fasync+0x199/0x4d0 [ 2226.954959][ T8549] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2226.954979][ T8549] ? do_raw_spin_lock+0x121/0x290 [ 2226.954999][ T8549] kill_fasync+0x199/0x4d0 [ 2226.955012][ T8549] ? kill_fasync+0x53/0x4d0 [ 2226.955027][ T8549] evdev_pass_values+0x627/0xbd0 [ 2226.955046][ T8549] ? evdev_pass_values+0x5a1/0xbd0 [ 2226.955065][ T8549] evdev_events+0x1e6/0x340 [ 2226.955080][ T8549] ? evdev_events+0x79/0x340 [ 2226.955096][ T8549] ? input_pass_values+0x8d/0x890 [ 2226.955111][ T8549] input_pass_values+0x285/0x890 [ 2226.955130][ T8549] ? input_handle_event+0x70c/0xf30 [ 2226.955153][ T8549] input_event_dispose+0x330/0x6b0 [ 2226.955177][ T8549] input_inject_event+0x1fe/0x320 [ 2226.955200][ T8549] ? input_inject_event+0xbc/0x320 [ 2226.955224][ T8549] evdev_write+0x2fc/0x480 [ 2226.955243][ T8549] ? __pfx_evdev_write+0x10/0x10 [ 2226.955260][ T8549] ? bpf_lsm_file_permission+0x9/0x20 [ 2226.955299][ T8549] ? security_file_permission+0x75/0x290 [ 2226.955323][ T8549] ? rw_verify_area+0x258/0x650 [ 2226.955340][ T8549] ? __pfx_evdev_write+0x10/0x10 [ 2226.955358][ T8549] vfs_write+0x27e/0xa90 [ 2226.955379][ T8549] ? __pfx_vfs_write+0x10/0x10 [ 2226.955398][ T8549] ? __fget_files+0x2a/0x420 [ 2226.955421][ T8549] ? __fget_files+0x2a/0x420 [ 2226.955442][ T8549] ? __fget_files+0x3a0/0x420 [ 2226.955463][ T8549] ? __fget_files+0x2a/0x420 [ 2226.955490][ T8549] ksys_write+0x145/0x250 [ 2226.955509][ T8549] ? __pfx_ksys_write+0x10/0x10 [ 2226.955527][ T8549] ? rcu_is_watching+0x15/0xb0 [ 2226.955553][ T8549] ? do_syscall_64+0xbe/0x3b0 [ 2226.955579][ T8549] do_syscall_64+0xfa/0x3b0 [ 2226.955604][ T8549] ? lockdep_hardirqs_on+0x9c/0x150 [ 2226.955627][ T8549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.955643][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 2226.955662][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2226.955678][ T8549] RIP: 0033:0x7f271e58e929 [ 2226.955693][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2226.955708][ T8549] RSP: 002b:00007f271c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2226.955725][ T8549] RAX: ffffffffffffffda RBX: 00007f271e7b5fa0 RCX: 00007f271e58e929 [ 2226.955738][ T8549] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 2226.955755][ T8549] RBP: 00007f271e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2226.955765][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2226.955775][ T8549] R13: 0000000000000000 R14: 00007f271e7b5fa0 R15: 00007ffcace426e8 [ 2226.955795][ T8549] [ 2226.972569][ T30] kauditd_printk_skb: 3735 callbacks suppressed [ 2226.972594][ T30] audit: type=1400 audit(2134222442.860:3117286): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8544 comm="syz.2.29597" saddr=10.128.0.169 src=30008 daddr=10.128.1.90 dest=39088 netif=eth0 [ 2226.981793][T26621] Bluetooth: hci3: command tx timeout [ 2227.021895][ T30] audit: type=1400 audit(2134222444.254:3117287): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=rw pid=8544 comm="syz.2.29597" opid=8544 ocomm="syz.2.29597" [ 2227.124116][ T3471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2227.129083][ T30] audit: type=1400 audit(2134222444.348:3117288): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2227.139013][T31300] veth1_macvtap: left promiscuous mode [ 2227.143803][ T30] audit: type=1400 audit(2134222444.348:3117289): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2227.148873][T31300] veth0_macvtap: left promiscuous mode [ 2227.152671][ T30] audit: type=1400 audit(2134222444.348:3117290): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2227.157609][T31300] veth1_vlan: left promiscuous mode [ 2227.162370][ T30] audit: type=1400 audit(2134222444.348:3117291): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3471 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2227.172256][ T3471] audit: audit_lost=295890 audit_rate_limit=0 audit_backlog_limit=64 [ 2227.176438][ T30] audit: type=1400 audit(2134222444.348:3117292): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=3471 comm="syz-executor" name="432" dev="tmpfs" ino=2226 [ 2227.198805][ T3471] audit: backlog limit exceeded [ 2227.201746][T31300] veth0_vlan: left promiscuous mode [ 2227.637880][T31300] team0 (unregistering): Port device team_slave_1 removed [ 2227.671730][T31300] team0 (unregistering): Port device team_slave_0 removed [ 2227.922319][ T8551] wg1 speed is unknown, defaulting to 1000 [ 2228.178404][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 2228.225789][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2228.233227][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.241153][ T8526] bridge_slave_0: entered allmulticast mode [ 2228.247935][ T8526] bridge_slave_0: entered promiscuous mode [ 2228.256041][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2228.263447][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.270712][ T8526] bridge_slave_1: entered allmulticast mode [ 2228.283237][ T8526] bridge_slave_1: entered promiscuous mode [ 2228.354839][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2228.375958][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2228.401830][ T8526] team0: Port device team_slave_0 added [ 2228.409163][ T8526] team0: Port device team_slave_1 added [ 2228.432178][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.439172][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2228.465779][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2228.478073][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.485689][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2228.512042][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2228.558180][ T8526] hsr_slave_0: entered promiscuous mode [ 2228.565770][ T8526] hsr_slave_1: entered promiscuous mode [ 2228.572561][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2228.580152][ T8526] Cannot create hsr debugfs directory [ 2228.947197][ T8526] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2228.956316][ T8526] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2228.965279][ T8526] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2228.988337][ T8526] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2229.011027][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2229.018138][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.025537][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.032652][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.043155][T31200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.050792][T31200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.087470][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2229.103675][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 2229.113616][T31340] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.120744][T31340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.133754][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2229.140886][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.180889][T26621] Bluetooth: hci3: command tx timeout [ 2229.311061][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2229.525605][ T8526] veth0_vlan: entered promiscuous mode [ 2229.535314][ T8526] veth1_vlan: entered promiscuous mode [ 2229.557562][ T8526] veth0_macvtap: entered promiscuous mode [ 2229.566223][ T8526] veth1_macvtap: entered promiscuous mode [ 2229.580380][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2229.592320][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.604109][ T8526] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.613204][ T8526] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.622719][ T8526] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.631768][ T8526] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.658313][ T8526] ieee80211 phy104: Selected rate control algorithm 'minstrel_ht' [ 2229.680774][T31340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.683741][ T8526] ieee80211 phy105: Selected rate control algorithm 'minstrel_ht' [ 2229.690600][T31340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.717854][T31340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.726290][T31340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.638008][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2231.582499][T31340] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.108927][T31340] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.184300][T31340] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.250683][T31340] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2233.341445][T31340] bridge_slave_1: left allmulticast mode [ 2233.347150][T31340] bridge_slave_1: left promiscuous mode [ 2233.353336][T31340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.362146][T31340] bridge_slave_0: left allmulticast mode [ 2233.367832][T31340] bridge_slave_0: left promiscuous mode [ 2233.374242][T31340] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.504234][T31340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2233.517267][T31340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2233.527630][T31340] bond0 (unregistering): Released all slaves [ 2233.862619][T31340] hsr_slave_0: left promiscuous mode [ 2233.880280][T31340] hsr_slave_1: left promiscuous mode [ 2233.887477][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2233.895111][T31340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2233.903201][T31340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2233.910846][T31340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2233.923107][T31340] veth1_macvtap: left promiscuous mode [ 2233.928885][T31340] veth0_macvtap: left promiscuous mode [ 2233.934478][T31340] veth1_vlan: left promiscuous mode [ 2233.944532][T31340] veth0_vlan: left promiscuous mode [ 2234.029730][ T30] kauditd_printk_skb: 1903 callbacks suppressed [ 2234.029751][ T30] audit: type=1400 audit(2134222450.811:3119187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2234.125775][T31340] team0 (unregistering): Port device team_slave_1 removed [ 2234.154902][T31340] team0 (unregistering): Port device team_slave_0 removed