last executing test programs: 11m41.900421376s ago: executing program 32 (id=20015): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x6, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) 10m16.938817245s ago: executing program 1 (id=20824): mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 10m16.643539768s ago: executing program 1 (id=20827): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x10000000000004, 0x0, 0x2}]) 10m16.264486046s ago: executing program 1 (id=20832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m14.912012164s ago: executing program 1 (id=20846): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0000000000000000050021000000000008000d"], 0x30}}, 0x0) 10m14.43557263s ago: executing program 1 (id=20853): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 10m13.984386173s ago: executing program 1 (id=20856): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x95]}}], 0xffc8) 9m59.590009495s ago: executing program 33 (id=20856): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x95]}}], 0xffc8) 6m47.275988043s ago: executing program 4 (id=22999): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 6m47.037296582s ago: executing program 4 (id=23002): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000680)=""/4096, 0x1000}, {0x0}], 0x2}, 0xfffffff6}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x78, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "dadf3f33eca795096ce04b85fb9795e19facc630b128c0641e2ef7255583ea34", "1f5a24a92ab34f6fd109cd1ce17bdf1d", {"47fe387fdb519e704be01891191958f1", "e2b5b9fa5c2f561c278dcd17aa2df6d9"}}}}}}}, 0x0) 6m46.048531329s ago: executing program 4 (id=23010): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @remote}, 0x80ad}, 0x1c) 6m45.921445002s ago: executing program 4 (id=23013): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m45.714359533s ago: executing program 4 (id=23015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x0, 0x50565559, 0x9, 0x4, 0x0, @discrete={0x4, 0x8}}) 6m45.219620654s ago: executing program 4 (id=23021): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000180000a000200aaaaaaaaaa0c00df05000500"], 0x30}}, 0x0) 6m44.736977551s ago: executing program 34 (id=23021): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000180000a000200aaaaaaaaaa0c00df05000500"], 0x30}}, 0x0) 4m59.936166135s ago: executing program 3 (id=24208): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x3, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x8, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x1, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x104, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xb76, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="4d6bde9aecc7955e497ac0d6834d6a35f38c20dd9d1b6fc9", 0x18}], 0x1) 4m59.650356545s ago: executing program 3 (id=24212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100004800c00018008"], 0x34}}, 0x0) 4m59.392626518s ago: executing program 3 (id=24216): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r1, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 4m59.08778689s ago: executing program 3 (id=24219): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x48}}, 0x0) 4m58.455815751s ago: executing program 3 (id=24224): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005"], 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m58.174063715s ago: executing program 3 (id=24230): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m43.797955255s ago: executing program 35 (id=24230): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m1.231590433s ago: executing program 8 (id=26532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x3ff}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 2m1.017261239s ago: executing program 8 (id=26536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000002c0)=0x68) 2m0.776637547s ago: executing program 8 (id=26540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0xed, ""/237}) 2m0.613439325s ago: executing program 8 (id=26543): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2002, 0x0) 2m0.508166433s ago: executing program 8 (id=26545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000008}) 2m0.123501503s ago: executing program 8 (id=26548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) 1m59.582248195s ago: executing program 36 (id=26548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) 1m38.483739902s ago: executing program 9 (id=26782): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 1m38.23525257s ago: executing program 9 (id=26785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m38.050070527s ago: executing program 9 (id=26789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008814}, 0x4) 1m37.877537117s ago: executing program 9 (id=26791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 1m37.722403695s ago: executing program 9 (id=26794): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 1m37.46044733s ago: executing program 9 (id=26799): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) 1m23.102074875s ago: executing program 37 (id=26799): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) 6.255310411s ago: executing program 0 (id=27902): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 5.901352479s ago: executing program 2 (id=27907): unshare(0x60400) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000007900), 0x40000000000003d, 0x0, 0x0) 5.849813448s ago: executing program 0 (id=27909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 5.566550147s ago: executing program 0 (id=27912): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x0, 0xc}, 0x0, 0x0}) 5.517259619s ago: executing program 2 (id=27913): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.114043304s ago: executing program 2 (id=27918): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102379, &(0x7f00000000c0)=0x18feb) 4.923147903s ago: executing program 2 (id=27922): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.50056197s ago: executing program 0 (id=27937): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.390459143s ago: executing program 0 (id=27938): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x1c7) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.378288616s ago: executing program 7 (id=27939): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.227390964s ago: executing program 2 (id=27940): r0 = fsopen(&(0x7f0000000340)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)=')*&\x00', &(0x7f0000000040)='./file1\x00', r1) 2.225219904s ago: executing program 0 (id=27941): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x20, 0x16, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0x1, 'u'}, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.01130925s ago: executing program 2 (id=27945): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0x10, "5f13ba3b11720c3f4b2950ce9f43b745"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.504484272s ago: executing program 5 (id=27952): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1.504164973s ago: executing program 7 (id=27953): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 1.418605372s ago: executing program 7 (id=27954): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.397152095s ago: executing program 5 (id=27955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f0000000280)=@tcp=r2, 0x2}, 0x20) 1.295106433s ago: executing program 5 (id=27956): ioctl(0xffffffffffffffff, 0x8918, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00'}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 1.239627392s ago: executing program 7 (id=27957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 961.682104ms ago: executing program 7 (id=27958): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x9, 0xfff}, 0x10) 736.228397ms ago: executing program 6 (id=27959): r0 = syz_open_procfs(0x0, &(0x7f0000000940)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000440)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 664.439961ms ago: executing program 6 (id=27960): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 571.189646ms ago: executing program 6 (id=27961): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) 479.538101ms ago: executing program 5 (id=27962): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x3f}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 471.503629ms ago: executing program 6 (id=27963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x68, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3, 0x2}, @timestamp={0x5, 0xa}]}}, {"6cce80206dc3fe0c10b881ce12bde0d45d"}}}}}, 0x57) 248.456206ms ago: executing program 5 (id=27964): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) close(r0) 221.152106ms ago: executing program 6 (id=27965): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 59.703702ms ago: executing program 5 (id=27966): creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4a003, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) 27.009144ms ago: executing program 7 (id=27967): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0xfffd, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x26) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017170000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 0s ago: executing program 6 (id=27968): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): audit: audit_backlog=65 > audit_backlog_limit=64 [ 1891.583120][ T30] audit: type=1400 audit(2000000420.691:2447459): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28548 comm="syz-executor" path="/proc/10525/oom_score_adj" dev="proc" ino=202341 [ 1891.588898][ C1] audit: audit_lost=285786 audit_rate_limit=0 audit_backlog_limit=64 [ 1891.588921][ C1] audit: backlog limit exceeded [ 1891.593992][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1891.619007][T15691] audit: audit_lost=285787 audit_rate_limit=0 audit_backlog_limit=64 [ 1891.622921][ C1] audit: audit_lost=285788 audit_rate_limit=0 audit_backlog_limit=64 [ 1891.622940][ C1] audit: backlog limit exceeded [ 1891.780329][T28556] omfs: Invalid superblock (0) [ 1892.220177][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 1892.221465][T28163] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1892.927898][T28594] binder: 28592:28594 ioctl c018620c 200000000040 returned -1 [ 1892.971000][T28599] team0: Device gtp1 is of different type [ 1893.104379][T28602] blkio.reset_stats is deprecated [ 1893.450674][T28615] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1893.532369][T28619] netlink: 40 bytes leftover after parsing attributes in process `syz.8.25563'. [ 1893.563233][T29652] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1893.724562][T29652] usb 6-1: Using ep0 maxpacket: 32 [ 1893.733160][T29652] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1893.758076][T29652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.782260][T29652] usb 6-1: config 0 descriptor?? [ 1893.896039][T13132] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1894.001242][T29652] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1894.021776][T29652] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1894.058327][T13132] usb 3-1: Using ep0 maxpacket: 16 [ 1894.068125][T29652] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1894.075371][T29652] usb 6-1: media controller created [ 1894.091799][T13132] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.116654][T13132] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1894.134374][T13132] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1894.148077][T29652] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1894.156776][T13132] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1894.166397][T13132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.182858][T13132] usb 3-1: config 0 descriptor?? [ 1894.206370][T29652] az6027: usb out operation failed. (-71) [ 1894.218854][T29652] az6027: usb out operation failed. (-71) [ 1894.225356][T29652] stb0899_attach: Driver disabled by Kconfig [ 1894.231898][T29652] az6027: no front-end attached [ 1894.231898][T29652] [ 1894.240101][T29652] az6027: usb out operation failed. (-71) [ 1894.245905][T29652] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1894.257656][T29652] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input165 [ 1894.287311][T29652] dvb-usb: schedule remote query interval to 400 msecs. [ 1894.294908][T29652] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1894.316228][T29652] usb 6-1: USB disconnect, device number 40 [ 1894.400047][T29652] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1894.602135][T13132] hid (null): bogus close delimiter [ 1894.619441][T13132] hid (null): global environment stack underflow [ 1894.835811][ T24] usb 3-1: USB disconnect, device number 19 [ 1895.264226][T28661] gtp0: entered promiscuous mode [ 1895.291031][T28661] gtp0: entered allmulticast mode [ 1895.383723][T28665] netlink: 'syz.6.25585': attribute type 9 has an invalid length. [ 1895.448012][T28665] bond_slave_0: entered promiscuous mode [ 1895.455126][T28665] bond_slave_1: entered promiscuous mode [ 1895.511756][T28665] macvlan2: entered promiscuous mode [ 1895.521366][T28665] bond0: entered promiscuous mode [ 1895.536797][T28665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1895.955334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1896.287356][ T30] kauditd_printk_skb: 7096 callbacks suppressed [ 1896.287377][ T30] audit: type=1400 audit(2000000425.688:2454051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5829 comm="syz-executor" name="5141" dev="tmpfs" ino=25884 [ 1896.321735][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.322600][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.328677][ T5829] audit: audit_lost=285957 audit_rate_limit=0 audit_backlog_limit=64 [ 1896.328698][ T5829] audit: backlog limit exceeded [ 1896.328828][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.328844][ T5829] audit: audit_lost=285958 audit_rate_limit=0 audit_backlog_limit=64 [ 1896.328860][ T5829] audit: backlog limit exceeded [ 1896.328933][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1896.328949][ T5829] audit: audit_lost=285959 audit_rate_limit=0 audit_backlog_limit=64 [ 1896.683340][T28707] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1898.116900][T13132] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1898.289632][T13132] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1898.299578][T13132] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1898.349784][T13132] usb 6-1: can't read configurations, error -71 [ 1898.439834][T28769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25633'. [ 1898.479300][T28769] tipc: Started in network mode [ 1898.484206][T28769] tipc: Node identity memory.en, cluster identity 8 [ 1898.598048][T28775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25636'. [ 1898.749154][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25638'. [ 1898.818984][T28779] bond3 (unregistering): Released all slaves [ 1899.472053][T28801] ref_ctr_offset mismatch. inode: 0x42f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 1899.504413][T28804] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1899.874463][T28818] dummy0: entered promiscuous mode [ 1899.885321][T28818] macsec2: entered promiscuous mode [ 1899.894611][T28818] macsec2: entered allmulticast mode [ 1899.903387][T28818] dummy0: entered allmulticast mode [ 1899.937263][T28818] dummy0: left allmulticast mode [ 1899.950471][T28818] dummy0: left promiscuous mode [ 1901.016330][T28849] macsec1: entered promiscuous mode [ 1901.029727][T28849] macvlan1: entered promiscuous mode [ 1901.038352][T28849] macvlan1: left promiscuous mode [ 1901.064822][ T30] kauditd_printk_skb: 7635 callbacks suppressed [ 1901.064859][ T30] audit: type=1400 audit(2000000430.695:2460880): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=18110 comm="syz-executor" opid=28765 ocomm="syz.6.25632" [ 1901.104490][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1901.111735][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1901.118347][ C1] audit: audit_lost=286229 audit_rate_limit=0 audit_backlog_limit=64 [ 1901.123065][ T30] audit: type=1400 audit(2000000430.695:2460881): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=18110 comm="syz-executor" opid=28765 ocomm="syz.6.25632" [ 1901.126605][ C1] audit: backlog limit exceeded [ 1901.145544][T18110] audit: audit_lost=286230 audit_rate_limit=0 audit_backlog_limit=64 [ 1901.145573][T18110] audit: backlog limit exceeded [ 1901.145606][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1901.145621][T18110] audit: audit_lost=286231 audit_rate_limit=0 audit_backlog_limit=64 [ 1901.441171][T28163] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1902.870935][T28891] netlink: 'syz.8.25686': attribute type 3 has an invalid length. [ 1902.892755][T28891] netlink: 'syz.8.25686': attribute type 3 has an invalid length. [ 1904.129390][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25703'. [ 1904.511035][T28942] loop4: detected capacity change from 0 to 7 [ 1904.511095][T28940] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1904.539163][T28942] Dev loop4: unable to read RDB block 7 [ 1904.558972][T28942] loop4: unable to read partition table [ 1904.572626][T28942] loop4: partition table beyond EOD, truncated [ 1904.595505][T28942] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1905.240247][T28962] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25718'. [ 1905.509458][T28969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25721'. [ 1905.853486][ T30] kauditd_printk_skb: 6261 callbacks suppressed [ 1905.853508][ T30] audit: type=1400 audit(2000000435.724:2466833): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=28980 comm="syz.2.25727" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=204188 [ 1905.880975][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1905.883661][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1905.894749][T15691] audit: audit_lost=286335 audit_rate_limit=0 audit_backlog_limit=64 [ 1905.903548][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1905.910148][ C1] audit: audit_lost=286336 audit_rate_limit=0 audit_backlog_limit=64 [ 1905.918314][ C1] audit: backlog limit exceeded [ 1905.923618][T22934] audit: audit_lost=286337 audit_rate_limit=0 audit_backlog_limit=64 [ 1905.932059][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1905.932084][ C1] audit: audit_lost=286338 audit_rate_limit=0 audit_backlog_limit=64 [ 1906.306570][T28994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1906.326272][T28994] bond0: (slave bond5): Enslaving as an active interface with an up link [ 1907.130123][T29021] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25745'. [ 1907.174784][T29026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25745'. [ 1907.469622][T29035] netlink: 'syz.7.25751': attribute type 4 has an invalid length. [ 1910.108744][T29652] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1910.307374][T29652] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 1910.326411][T29652] usb 6-1: config 7 has no interface number 0 [ 1910.348190][T29652] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1910.358234][T29652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.374848][T29652] usb 6-1: Product: syz [ 1910.396863][T29652] usb 6-1: Manufacturer: syz [ 1910.401557][T29652] usb 6-1: SerialNumber: syz [ 1910.623218][ T30] kauditd_printk_skb: 6631 callbacks suppressed [ 1910.623272][ T30] audit: type=1400 audit(2000000441.733:2473249): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29097 comm="syz.5.25779" saddr=10.128.0.169 src=30008 daddr=10.128.10.59 dest=50110 netif=eth0 [ 1910.718141][ T30] audit: type=1400 audit(2000000441.786:2473250): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=29097 comm="syz.5.25779" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1910.775315][ T30] audit: type=1400 audit(2000000441.786:2473251): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29097 comm="syz.5.25779" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1910.813658][ T30] audit: type=1400 audit(2000000441.807:2473252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29113 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1910.835681][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1910.846252][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1910.852414][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1910.859383][ T5829] audit: audit_lost=286410 audit_rate_limit=0 audit_backlog_limit=64 [ 1910.859409][ T5829] audit: backlog limit exceeded [ 1910.867606][ C1] audit: audit_lost=286411 audit_rate_limit=0 audit_backlog_limit=64 [ 1911.009753][T29122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25787'. [ 1911.199987][T29652] as10x_usb: device has been detected [ 1911.210335][T29652] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1911.299543][T29652] usb 6-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1911.345815][T29652] as10x_usb: error during firmware upload part1 [ 1911.378248][T29652] Registered device Elgato EyeTV DTT Deluxe [ 1911.396205][T29652] usb 6-1: USB disconnect, device number 43 [ 1911.461268][T29134] netlink: 48 bytes leftover after parsing attributes in process `syz.6.25793'. [ 1911.495527][T29652] Unregistered device Elgato EyeTV DTT Deluxe [ 1911.521590][T29652] as10x_usb: device has been disconnected [ 1912.496181][T29162] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1913.011958][T29183] netlink: 'syz.7.25816': attribute type 58 has an invalid length. [ 1913.032621][T29183] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25816'. [ 1913.713354][T29209] netlink: 52 bytes leftover after parsing attributes in process `syz.5.25827'. [ 1913.734628][T29209] netlink: 32 bytes leftover after parsing attributes in process `syz.5.25827'. [ 1914.891144][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1915.055793][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.100031][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1915.133041][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1915.147408][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.173309][ T9] usb 3-1: Product: syz [ 1915.182884][ T9] usb 3-1: Manufacturer: syz [ 1915.192790][ T9] usb 3-1: SerialNumber: syz [ 1915.396875][ T30] kauditd_printk_skb: 6496 callbacks suppressed [ 1915.396896][ T30] audit: type=1400 audit(2000000446.730:2479030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29249 comm="syz-executor" name="585" dev="tmpfs" ino=2986 [ 1915.437891][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1915.444640][T15691] audit: audit_lost=286631 audit_rate_limit=0 audit_backlog_limit=64 [ 1915.481319][T15691] audit: backlog limit exceeded [ 1915.486746][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1915.493717][T29228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1915.509843][T29228] audit: audit_lost=286632 audit_rate_limit=0 audit_backlog_limit=64 [ 1915.518234][ T30] audit: type=1400 audit(2000000446.751:2479093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29249 comm="syz-executor" name="585" dev="tmpfs" ino=2986 [ 1915.527969][T29228] audit: backlog limit exceeded [ 1915.537823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.568448][T29252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1915.839589][ T9] usb 3-1: 0:2 : does not exist [ 1915.952321][T29652] kernel write not supported for file /bluetooth/6lowpan_control (pid: 29652 comm: kworker/1:2) [ 1915.965263][T29260] netlink: 'syz.5.25851': attribute type 7 has an invalid length. [ 1915.976724][T29260] netlink: 'syz.5.25851': attribute type 8 has an invalid length. [ 1915.989533][T29260] netlink: 'syz.5.25851': attribute type 4 has an invalid length. [ 1916.011491][T29260] netlink: 212 bytes leftover after parsing attributes in process `syz.5.25851'. [ 1916.025045][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25852'. [ 1916.274827][ T24] usb 3-1: USB disconnect, device number 20 [ 1916.560041][T29275] input: syz0 as /devices/virtual/input/input167 [ 1919.418024][T29350] netlink: 452 bytes leftover after parsing attributes in process `syz.7.25890'. [ 1919.872846][T29364] netlink: 'syz.7.25896': attribute type 12 has an invalid length. [ 1919.881571][T29364] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.25896'. [ 1920.193678][ T30] kauditd_printk_skb: 6171 callbacks suppressed [ 1920.193699][ T30] audit: type=1400 audit(2000000451.790:2484916): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1920.199260][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1920.205301][ T30] audit: type=1400 audit(2000000451.790:2484917): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1920.221565][T29374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1920.233983][ T30] audit: type=1400 audit(2000000451.790:2484918): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1920.272818][T18110] audit: audit_lost=286750 audit_rate_limit=0 audit_backlog_limit=64 [ 1920.283016][ T30] audit: type=1400 audit(2000000451.790:2484919): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1920.283068][ T30] audit: type=1400 audit(2000000451.790:2484920): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=18110 comm="syz-executor" name="952" dev="tmpfs" ino=4837 [ 1920.322288][T13132] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1920.330050][T29374] audit: audit_lost=286751 audit_rate_limit=0 audit_backlog_limit=64 [ 1920.330075][T29374] audit: backlog limit exceeded [ 1920.490163][T13132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.505350][T13132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1920.528240][T13132] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1920.548539][T13132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.566296][T13132] usb 3-1: Product: syz [ 1920.577093][T13132] usb 3-1: Manufacturer: syz [ 1920.586912][T13132] usb 3-1: SerialNumber: syz [ 1920.824232][T13132] usb 3-1: 0:2 : does not exist [ 1920.837980][T13132] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1920.909551][T13132] usb 3-1: USB disconnect, device number 21 [ 1922.530316][T13132] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1922.687530][T13132] usb 6-1: Using ep0 maxpacket: 16 [ 1922.715901][T13132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1922.753566][T13132] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1922.771675][T13132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.799984][T13132] usb 6-1: Product: syz [ 1922.804222][T13132] usb 6-1: Manufacturer: syz [ 1922.822769][T13132] usb 6-1: SerialNumber: syz [ 1922.840517][T13132] usb 6-1: config 0 descriptor?? [ 1922.876932][T13132] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1923.076407][T13132] usb 6-1: USB disconnect, device number 44 [ 1923.082774][T20774] usb 6-1: Failed to submit usb control message: -71 [ 1923.099364][T20774] usb 6-1: unable to send the bmi data to the device: -71 [ 1923.107785][T20774] usb 6-1: unable to get target info from device [ 1923.114618][T20774] usb 6-1: could not get target info (-71) [ 1923.121423][T20774] usb 6-1: could not probe fw (-71) [ 1923.417613][T29425] overlayfs: failed to clone lowerpath [ 1923.425863][T29424] vcan1: entered promiscuous mode [ 1923.444289][T29425] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1923.460176][T29425] overlayfs: missing 'lowerdir' [ 1923.469108][T29427] netlink: 'syz.2.25923': attribute type 1 has an invalid length. [ 1923.492916][T29427] netlink: 'syz.2.25923': attribute type 2 has an invalid length. [ 1924.809954][T29471] input: syz0 as /devices/virtual/input/input168 [ 1924.965985][ T30] kauditd_printk_skb: 7628 callbacks suppressed [ 1924.966007][ T30] audit: type=1400 audit(2000000456.798:2491933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29478 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1925.026184][ T30] audit: type=1400 audit(2000000456.840:2491934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29478 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1925.037303][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1925.050493][ T30] audit: type=1400 audit(2000000456.840:2491935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29478 comm="syz-executor" name="5217" dev="tmpfs" ino=26280 [ 1925.057703][T18110] audit: audit_lost=286957 audit_rate_limit=0 audit_backlog_limit=64 [ 1925.073595][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1925.082082][T18110] audit: backlog limit exceeded [ 1925.089551][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1925.095804][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1925.099783][ C1] audit: audit_lost=286958 audit_rate_limit=0 audit_backlog_limit=64 [ 1925.241858][T29485] devpts: Bad value for 'max' [ 1926.872990][T29537] netlink: 16 bytes leftover after parsing attributes in process `syz.8.25972'. [ 1928.127764][T29585] netlink: 252 bytes leftover after parsing attributes in process `syz.8.25997'. [ 1928.388568][T29594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25999'. [ 1929.072028][T29621] input: syz1 as /devices/virtual/input/input169 [ 1929.732156][ T30] kauditd_printk_skb: 7741 callbacks suppressed [ 1929.732177][ T30] audit: type=1400 audit(2000000461.795:2499093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26040 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1929.811751][ T30] audit: type=1400 audit(2000000461.806:2499094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29638 comm="syz-executor" name="10746" dev="proc" ino=206473 [ 1929.823421][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1929.831357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.835266][T29640] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1929.838995][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1929.844408][T29640] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1929.853198][ C1] audit: audit_lost=287154 audit_rate_limit=0 audit_backlog_limit=64 [ 1929.853229][ C1] audit: backlog limit exceeded [ 1929.853946][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1929.860199][T29640] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1929.868899][ C1] audit: audit_lost=287155 audit_rate_limit=0 audit_backlog_limit=64 [ 1929.868926][ C1] audit: backlog limit exceeded [ 1929.869616][T29642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1929.877645][T29640] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1929.922581][T29640] vxlan0: entered promiscuous mode [ 1929.979585][T29640] vxlan0: entered allmulticast mode [ 1930.219301][T29649] netlink: 96 bytes leftover after parsing attributes in process `syz.5.26026'. [ 1930.603335][T29667] tap0: tun_chr_ioctl cmd 1074025677 [ 1930.619357][T29667] tap0: linktype set to 825 [ 1931.712167][T29705] netlink: 'syz.5.26051': attribute type 14 has an invalid length. [ 1932.970371][ T4686] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1933.122965][ T4686] usb 6-1: Using ep0 maxpacket: 32 [ 1933.142026][ T4686] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1933.152170][ T4686] usb 6-1: config 0 has no interface number 0 [ 1933.182641][ T4686] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1933.192904][ T4686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.208853][ T4686] usb 6-1: Product: syz [ 1933.218404][ T4686] usb 6-1: Manufacturer: syz [ 1933.224524][ T4686] usb 6-1: SerialNumber: syz [ 1933.244018][ T4686] usb 6-1: config 0 descriptor?? [ 1933.257680][ T4686] smsc95xx v2.0.0 [ 1933.875347][ T4686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1933.894442][ T4686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1933.914325][ T4686] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1933.932981][ T4686] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1933.955187][ T4686] usb 6-1: USB disconnect, device number 45 [ 1934.504824][ T30] kauditd_printk_skb: 5888 callbacks suppressed [ 1934.504845][ T30] audit: type=1400 audit(2000000466.813:2504799): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29769 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1934.553675][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1934.553752][T29772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1934.560435][ T30] audit: type=1400 audit(2000000466.813:2504800): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29769 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1934.583693][T29772] audit: audit_lost=287218 audit_rate_limit=0 audit_backlog_limit=64 [ 1934.607325][T22934] audit: audit_lost=287219 audit_rate_limit=0 audit_backlog_limit=64 [ 1934.607915][T26040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1934.622684][T29771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1934.623399][T29772] audit: backlog limit exceeded [ 1934.629749][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1935.254258][T29801] netlink: 52 bytes leftover after parsing attributes in process `syz.5.26094'. [ 1935.526342][T29809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1936.121456][T29831] netlink: 'syz.8.26109': attribute type 83 has an invalid length. [ 1936.856882][T29860] netlink: 'syz.6.26125': attribute type 1 has an invalid length. [ 1936.873409][T29860] netlink: 'syz.6.26125': attribute type 3 has an invalid length. [ 1936.908508][T29860] netlink: 216 bytes leftover after parsing attributes in process `syz.6.26125'. [ 1936.943030][T29860] NCSI netlink: No device for ifindex 813332851 [ 1938.794943][T29915] netlink: 'syz.8.26147': attribute type 4 has an invalid length. [ 1939.277192][ T30] kauditd_printk_skb: 7977 callbacks suppressed [ 1939.277213][ T30] audit: type=1400 audit(2000000471.821:2512147): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29937 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1939.342810][ T30] audit: type=1400 audit(2000000471.852:2512148): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29937 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1939.350456][T26040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1939.363149][T29939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1939.387292][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1939.395348][ T30] audit: type=1400 audit(2000000471.852:2512149): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29937 comm="syz-executor" name="1000" dev="tmpfs" ino=5086 [ 1939.397301][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1939.421391][ C1] audit: audit_lost=287431 audit_rate_limit=0 audit_backlog_limit=64 [ 1939.424298][T18110] audit: audit_lost=287432 audit_rate_limit=0 audit_backlog_limit=64 [ 1939.429506][ C1] audit: backlog limit exceeded [ 1939.454418][T29941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1939.856559][T29953] netlink: 'syz.2.26165': attribute type 1 has an invalid length. [ 1939.874721][T29953] netlink: 172 bytes leftover after parsing attributes in process `syz.2.26165'. [ 1940.149364][T29964] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 1940.295968][T29973] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1940.427657][ T10] kernel write not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 1940.464754][T13132] kernel write not supported for file /dsp (pid: 13132 comm: kworker/1:1) [ 1940.751752][T29991] netlink: 260 bytes leftover after parsing attributes in process `syz.5.26182'. [ 1940.783695][T29995] netlink: 'syz.2.26181': attribute type 9 has an invalid length. [ 1940.816420][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26181'. [ 1941.039650][T13132] kernel write not supported for file bpf-prog (pid: 13132 comm: kworker/1:1) [ 1941.256543][T30009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26189'. [ 1943.161509][T30079] QAT: failed to copy from user cfg_data. [ 1944.047764][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26234'. [ 1944.064016][ T30] kauditd_printk_skb: 8026 callbacks suppressed [ 1944.064037][ T30] audit: type=1400 audit(2000000476.849:2519739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1944.073068][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1944.090150][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1944.090177][ C1] audit: audit_lost=287579 audit_rate_limit=0 audit_backlog_limit=64 [ 1944.090194][ C1] audit: backlog limit exceeded [ 1944.090847][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1944.098410][T30106] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1944.104138][ C1] audit: audit_lost=287580 audit_rate_limit=0 audit_backlog_limit=64 [ 1944.104155][ C1] audit: backlog limit exceeded [ 1944.120852][ T30] audit: type=1400 audit(2000000476.849:2519740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1944.529522][T30122] netlink: 136 bytes leftover after parsing attributes in process `syz.7.26242'. [ 1944.581271][T30125] netlink: 64 bytes leftover after parsing attributes in process `syz.6.26243'. [ 1945.037674][T30143] netlink: 20 bytes leftover after parsing attributes in process `syz.6.26251'. [ 1946.078128][T30185] bridge_slave_0: invalid flags given to default FDB implementation [ 1948.834308][ T30] kauditd_printk_skb: 8513 callbacks suppressed [ 1948.834329][ T30] audit: type=1400 audit(2000000481.857:2527836): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=26040 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 [ 1948.888743][T30283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1948.889074][T30286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1948.902395][T30283] audit: audit_lost=287721 audit_rate_limit=0 audit_backlog_limit=64 [ 1948.910550][ T30] audit: type=1400 audit(2000000481.888:2527837): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30282 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1948.910607][ T30] audit: type=1400 audit(2000000481.888:2527838): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30282 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1948.910653][ T30] audit: type=1400 audit(2000000481.888:2527839): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30282 comm="syz-executor" name="5295" dev="tmpfs" ino=26674 [ 1948.910699][ T30] audit: type=1400 audit(2000000481.888:2527840): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=30282 comm="syz-executor" opid=30282 ocomm="syz-executor" [ 1948.910746][ T30] audit: type=1400 audit(2000000481.888:2527841): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30284 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1948.910793][ T30] audit: type=1400 audit(2000000481.888:2527842): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30284 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1949.165691][T30292] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.26323'. [ 1949.226580][T30294] netlink: 88 bytes leftover after parsing attributes in process `syz.2.26322'. [ 1949.278635][T30294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26322'. [ 1949.467220][T30303] netlink: 140 bytes leftover after parsing attributes in process `syz.8.26326'. [ 1950.465462][T30336] netlink: 'syz.6.26341': attribute type 1 has an invalid length. [ 1950.495562][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26341'. [ 1950.755285][ T10] IPVS: starting estimator thread 0... [ 1950.840314][T30344] IPVS: using max 27 ests per chain, 64800 per kthread [ 1951.103697][T30352] loop2: detected capacity change from 0 to 7 [ 1951.142279][T30352] Dev loop2: unable to read RDB block 7 [ 1951.166889][T30352] loop2: unable to read partition table [ 1951.172870][T30352] loop2: partition table beyond EOD, truncated [ 1951.205512][T30352] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1953.249462][T30411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26376'. [ 1953.287329][T30411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.621531][T22934] audit_log_start: 6454 callbacks suppressed [ 1953.621553][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1953.621793][ T30] audit: type=1400 audit(2000000486.875:2534195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1953.621855][ T30] audit: type=1400 audit(2000000486.875:2534196): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1953.621898][ T30] audit: type=1400 audit(2000000486.875:2534197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1953.660444][T22934] audit: audit_lost=287756 audit_rate_limit=0 audit_backlog_limit=64 [ 1953.716458][ T30] audit: type=1400 audit(2000000486.875:2534198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1953.719435][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1953.745480][ T30] audit: type=1400 audit(2000000486.875:2534199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22934 comm="syz-executor" name="705" dev="tmpfs" ino=3594 [ 1953.747116][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1953.771599][ C1] audit: audit_lost=287757 audit_rate_limit=0 audit_backlog_limit=64 [ 1954.093454][T30435] bridge0: entered promiscuous mode [ 1954.117544][T30435] macvlan3: entered promiscuous mode [ 1956.158279][T30464] random: crng reseeded on system resumption [ 1956.979762][T30516] netlink: 88 bytes leftover after parsing attributes in process `syz.6.26424'. [ 1957.097642][T30519] tun0: tun_chr_ioctl cmd 1074025677 [ 1957.103637][T30519] tun0: linktype set to 0 [ 1957.853015][T30544] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.26437'. [ 1958.394646][ T30] kauditd_printk_skb: 7544 callbacks suppressed [ 1958.394668][ T30] audit: type=1400 audit(2000000491.882:2540681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30569 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1958.409822][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.421894][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.434190][ C1] audit: audit_lost=288112 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.442323][ C1] audit: backlog limit exceeded [ 1958.447748][T30570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.450805][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.454822][T30570] audit: audit_lost=288113 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.460965][ C1] audit: audit_lost=288114 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.460991][ C1] audit: backlog limit exceeded [ 1958.618435][T30576] overlayfs: failed to clone upperpath [ 1959.869183][T28163] Bluetooth: Frame is too long (len 16, expected len 4) [ 1960.253125][T30626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26475'. [ 1960.633093][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26483'. [ 1960.752289][T30646] netlink: 'syz.7.26484': attribute type 12 has an invalid length. [ 1960.928045][ T4686] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1961.089820][ T4686] usb 3-1: Using ep0 maxpacket: 8 [ 1961.105922][ T4686] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1961.125867][ T4686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.171128][ T4686] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1961.213710][ T4686] pvrusb2: ********** [ 1961.218607][ T4686] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1961.242305][ T4686] pvrusb2: Important functionality might not be entirely working. [ 1961.263276][ T4686] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1961.301531][ T4686] pvrusb2: ********** [ 1961.394410][ T2347] pvrusb2: Invalid write control endpoint [ 1961.653928][ T10] usb 3-1: USB disconnect, device number 22 [ 1961.685461][T30678] sctp: [Deprecated]: syz.6.26499 (pid 30678) Use of int in maxseg socket option. [ 1961.685461][T30678] Use struct sctp_assoc_value instead [ 1961.737050][ T2347] pvrusb2: Invalid write control endpoint [ 1961.737068][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1961.737084][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1961.792758][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1961.813640][ T2347] pvrusb2: Device being rendered inoperable [ 1961.821487][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1961.832870][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1961.833775][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1961.833791][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1961.833803][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1962.871804][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1963.026981][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1963.040581][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1963.054798][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 1963.071377][ T10] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1963.087094][ T10] usb 6-1: config 220 has no interface number 2 [ 1963.105430][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1963.147882][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1963.162092][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1963.176433][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1963.186774][ T30] kauditd_printk_skb: 7386 callbacks suppressed [ 1963.190068][ T30] audit: type=1400 audit(2000000496.921:2547585): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21308 comm="kworker/u8:53" saddr=10.128.0.169 src=30008 daddr=10.128.10.59 dest=50110 netif=eth0 [ 1963.200928][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1963.240501][T26040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1963.251940][T26040] audit: audit_lost=288276 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.263809][T26040] audit: backlog limit exceeded [ 1963.264043][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.268901][ T30] audit: type=1400 audit(2000000496.932:2547586): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=30703 comm="syz.5.26512" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1963.299226][T26040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1963.299252][T26040] audit: audit_lost=288277 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.299269][T26040] audit: backlog limit exceeded [ 1963.299289][T26040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1963.299305][T26040] audit: audit_lost=288278 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.320466][ T10] usb 6-1: Product: syz [ 1963.344186][ T10] usb 6-1: Manufacturer: syz [ 1963.350143][ T10] usb 6-1: SerialNumber: syz [ 1963.581931][ T10] usb 6-1: selecting invalid altsetting 0 [ 1963.592553][ T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1963.604171][ T10] usb 6-1: No valid video chain found. [ 1963.622592][ T10] usb 6-1: selecting invalid altsetting 0 [ 1963.652437][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1963.680366][ T10] usb 6-1: USB disconnect, device number 46 [ 1964.351111][T30753] netlink: 24 bytes leftover after parsing attributes in process `syz.8.26532'. [ 1965.179647][T28863] bridge0: port 3(syz_tun) entered disabled state [ 1965.229389][T28863] syz_tun (unregistering): left allmulticast mode [ 1965.245028][T28863] syz_tun (unregistering): left promiscuous mode [ 1965.251770][T28863] bridge0: port 3(syz_tun) entered disabled state [ 1965.506939][T20787] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.752118][T20787] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.893304][T20787] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.217195][T20787] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.510154][T30795] program syz.6.26554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1966.734285][T20787] bridge_slave_1: left allmulticast mode [ 1966.749073][T20787] bridge_slave_1: left promiscuous mode [ 1966.754975][T20787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.839736][T30800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26556'. [ 1966.854762][T20787] bridge_slave_0: left allmulticast mode [ 1966.882160][T20787] bridge_slave_0: left promiscuous mode [ 1966.888465][T20787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.070216][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1967.084963][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1967.118932][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1967.134174][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1967.148928][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1967.967088][ T30] kauditd_printk_skb: 4530 callbacks suppressed [ 1967.967120][ T30] audit: type=1400 audit(2000000501.939:2552020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30818 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1967.994330][T30819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1968.051160][ T30] audit: type=1400 audit(2000000501.950:2552021): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30818 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1968.103382][ T30] audit: type=1400 audit(2000000501.950:2552022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30818 comm="syz-executor" name="1293" dev="tmpfs" ino=6572 [ 1968.130641][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.130804][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.145370][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.152120][ C1] audit: audit_lost=288311 audit_rate_limit=0 audit_backlog_limit=64 [ 1968.160264][ C1] audit: backlog limit exceeded [ 1968.165229][ T30] audit: type=1400 audit(2000000501.950:2552023): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=30818 comm="syz-executor" opid=30818 ocomm="syz-executor" [ 1968.166262][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.492334][T20787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.515510][T20787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.544844][T20787] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1968.559995][T20787] bond0 (unregistering): Released all slaves [ 1969.121030][ T5840] Bluetooth: hci4: command tx timeout [ 1969.162172][T20787] bond1 (unregistering): Released all slaves [ 1969.187895][T20787] bond2 (unregistering): Released all slaves [ 1969.223743][T30825] netlink: 'syz.7.26566': attribute type 34 has an invalid length. [ 1969.409239][T20787] IPVS: stopping backup sync thread 28471 ... [ 1969.709647][T30843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26573'. [ 1970.033019][T30849] sctp: [Deprecated]: syz.5.26574 (pid 30849) Use of int in max_burst socket option. [ 1970.033019][T30849] Use struct sctp_assoc_value instead [ 1970.435214][ T4686] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1970.596655][ T4686] usb 6-1: Using ep0 maxpacket: 32 [ 1970.617852][ T4686] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1970.632630][ T4686] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1970.673614][ T4686] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1970.687009][ T4686] usb 6-1: config 1 has no interface number 0 [ 1970.697149][ T4686] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1970.708898][ T4686] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1970.722962][ T4686] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1970.732472][ T4686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.777986][T27058] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1970.892873][ T4686] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1970.987896][T27058] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 1971.007569][T27058] usb 3-1: config 150 has no interface number 0 [ 1971.013942][T27058] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1971.044391][T27058] usb 3-1: config 150 interface 1 has no altsetting 0 [ 1971.047378][ T4686] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1971.072415][T27058] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1971.095664][T28163] Bluetooth: hci4: command tx timeout [ 1971.101680][T27058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.109834][T27058] usb 3-1: Product: syz [ 1971.130877][T27058] usb 3-1: Manufacturer: syz [ 1971.135554][T27058] usb 3-1: SerialNumber: syz [ 1971.511605][T27058] xr_serial 3-1:150.204: xr_serial converter detected [ 1971.512790][ T4686] usb 6-1: USB disconnect, device number 47 [ 1971.598097][ T4686] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1971.702666][T20787] hsr_slave_0: left promiscuous mode [ 1971.720488][T20787] hsr_slave_1: left promiscuous mode [ 1971.727036][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.735933][T20787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.744558][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.755767][T20787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.780016][T30884] netlink: 'syz.7.26591': attribute type 9 has an invalid length. [ 1971.832424][T30884] netlink: 146708 bytes leftover after parsing attributes in process `syz.7.26591'. [ 1971.846369][T20787] team_slave_0: left promiscuous mode [ 1971.852936][T20787] team_slave_1: left promiscuous mode [ 1971.868267][T20787] veth1_macvtap: left promiscuous mode [ 1971.877330][T20787] veth0_macvtap: left promiscuous mode [ 1971.892374][T20787] veth1_vlan: left promiscuous mode [ 1971.898082][T20787] veth0_vlan: left promiscuous mode [ 1972.064852][T27058] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1972.071395][T27058] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1972.133652][T27058] usb 3-1: USB disconnect, device number 23 [ 1972.172642][T27058] xr_serial 3-1:150.204: device disconnected [ 1972.732136][ T30] kauditd_printk_skb: 4285 callbacks suppressed [ 1972.732157][ T30] audit: type=1400 audit(2000000506.947:2555826): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1972.783274][T30906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.783295][T30907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.783316][T30907] audit: audit_lost=288474 audit_rate_limit=0 audit_backlog_limit=64 [ 1972.795978][T30906] audit: audit_lost=288475 audit_rate_limit=0 audit_backlog_limit=64 [ 1972.806268][ T30] audit: type=1400 audit(2000000506.947:2555827): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="1092" dev="tmpfs" ino=5553 [ 1972.834322][T30908] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.834951][T30907] audit: backlog limit exceeded [ 1972.853755][T30907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.857724][T30908] audit: audit_lost=288476 audit_rate_limit=0 audit_backlog_limit=64 [ 1973.076282][T28163] Bluetooth: hci4: command tx timeout [ 1973.094185][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1973.282859][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1973.298014][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1973.314693][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.353683][ T24] usb 3-1: config 0 descriptor?? [ 1973.789372][T20787] team0 (unregistering): Port device team_slave_1 removed [ 1973.790261][ T24] koneplus 0003:1E7D:2E22.0063: unknown main item tag 0x1 [ 1973.841360][ T24] koneplus 0003:1E7D:2E22.0063: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1973.918549][T20787] team0 (unregistering): Port device team_slave_0 removed [ 1974.012846][ T24] usb 3-1: USB disconnect, device number 24 [ 1974.173842][T30919] serio: Serial port ptm0 [ 1975.054557][T28163] Bluetooth: hci4: command tx timeout [ 1975.672718][T30804] chnl_net:caif_netlink_parms(): no params data found [ 1975.946661][T30951] netlink: 'syz.5.26618': attribute type 2 has an invalid length. [ 1975.992786][T30951] netlink: 132 bytes leftover after parsing attributes in process `syz.5.26618'. [ 1976.308464][T30804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.335196][T30804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.360478][T30804] bridge_slave_0: entered allmulticast mode [ 1976.365382][T30964] overlayfs: failed to clone lowerpath [ 1976.383790][T30804] bridge_slave_0: entered promiscuous mode [ 1976.419982][T30804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.442601][T30804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.458719][T30804] bridge_slave_1: entered allmulticast mode [ 1976.470658][T30804] bridge_slave_1: entered promiscuous mode [ 1976.582348][T30804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.629823][T30804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.794278][T30804] team0: Port device team_slave_0 added [ 1976.814290][T30804] team0: Port device team_slave_1 added [ 1977.014733][T30804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1977.045710][T30804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1977.119515][T30804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1977.162190][T30804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1977.169212][T30804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1977.228049][T30804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1977.384705][T30991] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26636'. [ 1977.445243][T30804] hsr_slave_0: entered promiscuous mode [ 1977.469864][T30804] hsr_slave_1: entered promiscuous mode [ 1977.486267][T30804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1977.503027][ T30] kauditd_printk_skb: 4313 callbacks suppressed [ 1977.503055][ T30] audit: type=1400 audit(2000000511.954:2559636): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30995 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1977.506728][T30804] Cannot create hsr debugfs directory [ 1977.518668][ T30] audit: type=1400 audit(2000000511.954:2559637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30995 comm="syz-executor" name="/" dev="proc" ino=1 [ 1977.563653][ T30] audit: type=1400 audit(2000000511.954:2559638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30995 comm="syz-executor" name="/" dev="proc" ino=1 [ 1977.613671][ T30] audit: type=1400 audit(2000000511.954:2559639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30995 comm="syz-executor" name="2398" dev="proc" ino=212446 [ 1977.628690][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1977.640639][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1977.647336][ C1] audit: audit_lost=288645 audit_rate_limit=0 audit_backlog_limit=64 [ 1977.655561][ C1] audit: backlog limit exceeded [ 1977.661258][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1977.667898][ C1] audit: audit_lost=288646 audit_rate_limit=0 audit_backlog_limit=64 [ 1978.098280][T30804] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1978.135660][T30804] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1978.161268][T30804] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1978.177258][T31011] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1978.187355][T30804] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1978.614812][T30804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1978.706237][T30804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1978.735399][T20787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.742803][T20787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.830996][T21308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.838286][T21308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.161068][T31048] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1979.820116][T30804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.993070][T31079] netlink: 'syz.7.26671': attribute type 10 has an invalid length. [ 1980.084619][T28163] Bluetooth: hci0: command tx timeout [ 1981.125996][T30804] veth0_vlan: entered promiscuous mode [ 1981.183717][T30804] veth1_vlan: entered promiscuous mode [ 1981.373384][T30804] veth0_macvtap: entered promiscuous mode [ 1981.403025][T30804] veth1_macvtap: entered promiscuous mode [ 1981.445935][T30804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.493033][T30804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.533029][T30804] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.550305][T30804] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.569669][T30804] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.579055][T30804] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.607081][T31118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26686'. [ 1981.891999][T20764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.920442][T20764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.013647][T20799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1982.040156][T20799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.275189][ T30] kauditd_printk_skb: 7317 callbacks suppressed [ 1982.275210][ T30] audit: type=1400 audit(2000000516.951:2566429): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=30804 comm="syz-executor" name="/" dev="cgroup" ino=1 [ 1982.341416][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1982.341433][T31137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1982.341451][T31137] audit: audit_lost=288823 audit_rate_limit=0 audit_backlog_limit=64 [ 1982.350518][ T30] audit: type=1400 audit(2000000516.951:2566430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=30804 comm="syz-executor" name="syz9" dev="cgroup" ino=780 [ 1982.355011][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1982.355032][ C1] audit: audit_lost=288824 audit_rate_limit=0 audit_backlog_limit=64 [ 1982.355050][ C1] audit: backlog limit exceeded [ 1982.355468][T30804] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1982.364359][T15691] audit: audit_lost=288825 audit_rate_limit=0 audit_backlog_limit=64 [ 1983.405880][T31176] loop5: detected capacity change from 0 to 63 [ 1983.512417][T27058] IPVS: starting estimator thread 0... [ 1983.599264][T31183] IPVS: using max 24 ests per chain, 57600 per kthread [ 1983.873428][T31191] netlink: 16 bytes leftover after parsing attributes in process `syz.9.26717'. [ 1984.662001][T31229] fuse: Bad value for 'fd' [ 1985.564147][T31267] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1985.795484][T31279] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1986.960712][T31321] loop8: detected capacity change from 0 to 1 [ 1986.985672][T31321] Dev loop8: unable to read RDB block 1 [ 1986.999999][T31321] loop8: unable to read partition table [ 1987.006424][T31321] loop8: partition table beyond EOD, truncated [ 1987.055066][ T30] kauditd_printk_skb: 8834 callbacks suppressed [ 1987.055087][ T30] audit: type=1400 audit(2000000521.980:2574883): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31322 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1987.061756][T31321] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1987.102118][T31323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1987.114840][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1987.118025][T31323] audit: audit_lost=288953 audit_rate_limit=0 audit_backlog_limit=64 [ 1987.121390][ C1] audit: audit_lost=288954 audit_rate_limit=0 audit_backlog_limit=64 [ 1987.121409][ C1] audit: backlog limit exceeded [ 1987.122196][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1987.149080][ C1] audit: audit_lost=288955 audit_rate_limit=0 audit_backlog_limit=64 [ 1987.153540][T31323] audit: backlog limit exceeded [ 1987.157175][ C1] audit: backlog limit exceeded [ 1988.888347][T31381] netlink: 'syz.2.26810': attribute type 1 has an invalid length. [ 1988.912092][T31381] netlink: 212 bytes leftover after parsing attributes in process `syz.2.26810'. [ 1988.944290][T31381] netlink: 'syz.2.26810': attribute type 1 has an invalid length. [ 1989.520794][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26820'. [ 1989.523671][T31398] netlink: 'syz.6.26817': attribute type 1 has an invalid length. [ 1989.536306][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26820'. [ 1989.558193][T31398] netlink: 'syz.6.26817': attribute type 2 has an invalid length. [ 1990.261330][T31429] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.26832'. [ 1990.988604][T27051] kernel write not supported for file bpf-map (pid: 27051 comm: kworker/0:7) [ 1991.841510][ T30] kauditd_printk_skb: 8372 callbacks suppressed [ 1991.841530][ T30] audit: type=1400 audit(2000000527.009:2582644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1991.865614][T31489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1991.874712][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1991.875406][T31489] audit: audit_lost=289160 audit_rate_limit=0 audit_backlog_limit=64 [ 1991.883392][T18110] audit: audit_lost=289161 audit_rate_limit=0 audit_backlog_limit=64 [ 1991.889973][T31489] audit: backlog limit exceeded [ 1991.909544][T31489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1991.914677][ T30] audit: type=1400 audit(2000000527.009:2582645): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5829 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.10.59 dest=50110 netif=eth0 [ 1991.939409][T31489] audit: audit_lost=289162 audit_rate_limit=0 audit_backlog_limit=64 [ 1991.939438][T31489] audit: backlog limit exceeded [ 1991.961629][T31490] @: renamed from vlan0 [ 1992.562226][T31511] tap0: tun_chr_ioctl cmd 1074025675 [ 1992.575512][T31511] tap0: persist disabled [ 1992.827849][T31521] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1993.428866][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26883'. [ 1994.077807][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1994.261022][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.298138][ T24] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1994.317531][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.345728][ T24] usb 3-1: config 0 descriptor?? [ 1994.759584][ T24] zydacron 0003:13EC:0006.0064: invalid report_size -1021686408 [ 1994.782087][ T24] zydacron 0003:13EC:0006.0064: item 0 4 1 7 parsing failed [ 1994.792936][ T24] zydacron 0003:13EC:0006.0064: parse failed [ 1994.799160][ T24] zydacron 0003:13EC:0006.0064: probe with driver zydacron failed with error -22 [ 1994.862712][T31575] netlink: 32 bytes leftover after parsing attributes in process `syz.6.26897'. [ 1994.981169][T27049] usb 3-1: USB disconnect, device number 25 [ 1995.144325][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1995.287541][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1995.303792][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1995.339946][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1995.374127][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1995.388904][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.401359][ T24] usb 6-1: Product: syz [ 1995.405672][ T24] usb 6-1: Manufacturer: syz [ 1995.410438][ T24] usb 6-1: SerialNumber: syz [ 1995.422429][ T24] usb 6-1: config 0 descriptor?? [ 1995.432612][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1995.443326][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1996.030929][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1996.163573][T27058] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1996.229400][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1996.242424][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1996.260724][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 1996.277578][ T24] usb 6-1: USB disconnect, device number 48 [ 1996.286282][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 1996.297880][ T24] em28xx 6-1:0.0: Freeing device [ 1996.341277][T27058] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1996.356432][T27058] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1996.359886][T31621] macsec1: entered allmulticast mode [ 1996.371707][T31621] ip6gretap0: entered allmulticast mode [ 1996.372097][T27058] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1996.387178][T27058] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1996.388210][T31621] ip6gretap0: left allmulticast mode [ 1996.395482][T27058] usb 3-1: Product: syz [ 1996.395511][T27058] usb 3-1: Manufacturer: syz [ 1996.395527][T27058] usb 3-1: SerialNumber: syz [ 1996.399072][T27058] usb 3-1: config 0 descriptor?? [ 1996.428617][T27058] usb 3-1: selecting invalid altsetting 0 [ 1996.611118][ T30] kauditd_printk_skb: 6230 callbacks suppressed [ 1996.611139][ T30] audit: type=1400 audit(2000000532.006:2588713): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=18110 comm="syz-executor" name="file1" dev="tmpfs" ino=5901 [ 1996.667499][T31624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.675561][ T30] audit: type=1400 audit(2000000532.006:2588714): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=18110 comm="syz-executor" name="1160" dev="tmpfs" ino=5896 [ 1996.695740][T31608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.700275][T31624] audit: audit_lost=289217 audit_rate_limit=0 audit_backlog_limit=64 [ 1996.702643][T31608] audit: audit_lost=289218 audit_rate_limit=0 audit_backlog_limit=64 [ 1996.719536][ T30] audit: type=1400 audit(2000000532.006:2588715): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1996.739247][T31608] audit: backlog limit exceeded [ 1996.744782][T31624] audit: backlog limit exceeded [ 1996.752900][T31624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.833890][ T24] usb 3-1: USB disconnect, device number 26 [ 1997.479180][T31651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26931'. [ 1997.685051][T31656] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26933'. [ 1998.306427][T31675] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1998.446675][T31680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26944'. [ 1998.724432][T31692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26950'. [ 1999.116612][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1999.290865][ T24] usb 3-1: config 1 has an invalid interface number: 114 but max is 0 [ 1999.303803][ T24] usb 3-1: config 1 has no interface number 0 [ 1999.325669][ T24] usb 3-1: config 1 interface 114 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1999.349838][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=aa6e, bcdDevice=b1.16 [ 1999.366433][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.391507][ T24] usb 3-1: Product: syz [ 1999.396632][ T24] usb 3-1: Manufacturer: syz [ 1999.401284][ T24] usb 3-1: SerialNumber: syz [ 1999.467107][T31714] bridge0: port 3(batadv0) entered blocking state [ 1999.484640][T31714] bridge0: port 3(batadv0) entered disabled state [ 1999.496174][T31714] batadv0: entered allmulticast mode [ 1999.512049][T31714] batadv0: entered promiscuous mode [ 1999.630821][T27051] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1999.655383][ T24] option 3-1:1.114: GSM modem (1-port) converter detected [ 1999.676458][ T24] usb 3-1: USB disconnect, device number 27 [ 1999.705912][ T24] option 3-1:1.114: device disconnected [ 1999.795073][T27051] usb 6-1: Using ep0 maxpacket: 32 [ 1999.813508][T27051] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1999.828083][T27051] usb 6-1: config 0 has no interface number 0 [ 1999.843853][T27051] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1999.869752][T27051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.894463][T27051] usb 6-1: Product: syz [ 1999.899591][T27051] usb 6-1: Manufacturer: syz [ 1999.904239][T27051] usb 6-1: SerialNumber: syz [ 1999.916252][T27051] usb 6-1: config 0 descriptor?? [ 1999.926668][T20769] batman_adv: batadv0: IGMP Querier appeared [ 1999.933664][T20769] batman_adv: batadv0: MLD Querier appeared [ 1999.945165][T27051] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2000.179819][T27051] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2000.231444][T27051] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2000.562732][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2000.563270][ T24] usb 6-1: USB disconnect, device number 49 [ 2000.612408][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2000.652238][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2000.685168][ T24] quatech2 6-1:0.51: device disconnected [ 2001.122556][T31764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26985'. [ 2001.394993][ T30] kauditd_printk_skb: 7589 callbacks suppressed [ 2001.395015][ T30] audit: type=1400 audit(2000000537.034:2595976): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31777 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2001.439798][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2001.446562][T18110] audit: audit_lost=289329 audit_rate_limit=0 audit_backlog_limit=64 [ 2001.451510][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2001.457949][ T30] audit: type=1400 audit(2000000537.034:2595977): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31777 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2001.470077][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2001.481781][T18110] audit: backlog limit exceeded [ 2001.487666][ C1] audit: audit_lost=289330 audit_rate_limit=0 audit_backlog_limit=64 [ 2001.492796][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2001.500892][ C1] audit: backlog limit exceeded [ 2001.844286][T31791] program syz.5.26996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2001.863623][T31790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26995'. [ 2002.239368][T31805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27005'. [ 2003.299775][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2003.315582][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2003.328042][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2003.345727][T27049] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2003.356253][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2003.372439][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2003.389950][T31847] netlink: 844 bytes leftover after parsing attributes in process `syz.5.27023'. [ 2003.508629][T27049] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2003.527007][T27049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.545486][T27049] usb 3-1: Product: syz [ 2003.549747][T27049] usb 3-1: Manufacturer: syz [ 2003.554382][T27049] usb 3-1: SerialNumber: syz [ 2003.588313][T27049] usb 3-1: config 0 descriptor?? [ 2003.605937][T27049] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2004.319290][T31863] tipc: New replicast peer: 255.255.255.255 [ 2004.351926][T31863] tipc: Enabled bearer , priority 0 [ 2004.386808][T27049] gspca_sunplus: reg_r err -71 [ 2004.392853][T27049] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2004.425036][T27049] usb 3-1: USB disconnect, device number 28 [ 2005.192793][T31844] chnl_net:caif_netlink_parms(): no params data found [ 2005.387411][ T5840] Bluetooth: hci6: command tx timeout [ 2005.423486][T13132] tipc: Node number set to 1580859392 [ 2005.456580][T31844] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.470314][T31844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.478393][T31844] bridge_slave_0: entered allmulticast mode [ 2005.487590][T31844] bridge_slave_0: entered promiscuous mode [ 2005.497927][T31844] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.505441][T31844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.513516][T31844] bridge_slave_1: entered allmulticast mode [ 2005.522043][T31844] bridge_slave_1: entered promiscuous mode [ 2005.707342][T31844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.744732][T31844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.926476][T31844] team0: Port device team_slave_0 added [ 2005.962113][T31844] team0: Port device team_slave_1 added [ 2006.082646][T31844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.102575][T31844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.156324][T31844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2006.169511][ T30] kauditd_printk_skb: 6392 callbacks suppressed [ 2006.169531][ T30] audit: type=1400 audit(2000000542.052:2602171): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=22934 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=4414 [ 2006.174097][T31844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2006.196631][ T30] audit: type=1400 audit(2000000542.052:2602172): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=22934 comm="syz-executor" name="865" dev="tmpfs" ino=4412 [ 2006.196738][ T30] audit: type=1400 audit(2000000542.052:2602173): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2006.209662][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2006.242886][T31917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2006.258237][ T30] audit: type=1400 audit(2000000542.052:2602174): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2006.277730][T31844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.277843][T31844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.316159][ T5829] audit: audit_lost=289398 audit_rate_limit=0 audit_backlog_limit=64 [ 2006.316190][ T5829] audit: backlog limit exceeded [ 2006.316431][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2006.316449][ T5829] audit: audit_lost=289399 audit_rate_limit=0 audit_backlog_limit=64 [ 2006.578175][T31844] hsr_slave_0: entered promiscuous mode [ 2006.612611][T31844] hsr_slave_1: entered promiscuous mode [ 2006.628770][T31844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2006.649165][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27058'. [ 2006.658970][T31844] Cannot create hsr debugfs directory [ 2007.266981][T31938] netlink: 'syz.2.27061': attribute type 1 has an invalid length. [ 2007.279665][T31938] netlink: 'syz.2.27061': attribute type 2 has an invalid length. [ 2007.365930][ T5840] Bluetooth: hci6: command tx timeout [ 2007.371482][T31942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2008.259414][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27074'. [ 2008.894535][T31844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2008.968353][T31844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2009.031508][T31844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2009.156157][T31844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2009.366424][ T5840] Bluetooth: hci6: command tx timeout [ 2009.625265][T31844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2009.684175][T31844] 8021q: adding VLAN 0 to HW filter on device team0 [ 2009.711012][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.718509][T20774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2009.752227][T20787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.759510][T20787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2010.100784][T27051] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 2010.259562][T27051] usb 6-1: config 0 has no interfaces? [ 2010.280658][T27051] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2010.309344][T27051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.353879][T27051] usb 6-1: config 0 descriptor?? [ 2010.625724][ T24] usb 6-1: USB disconnect, device number 50 [ 2010.838793][T31844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2010.956979][ T30] kauditd_printk_skb: 6296 callbacks suppressed [ 2010.957003][ T30] audit: type=1400 audit(2000000547.070:2607550): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="877" dev="tmpfs" ino=4474 [ 2010.982814][ C1] vkms_vblank_simulate: vblank timer overrun [ 2011.052790][T31844] veth0_vlan: entered promiscuous mode [ 2011.071646][ T30] audit: type=1400 audit(2000000547.070:2607551): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2011.091724][T31844] veth1_vlan: entered promiscuous mode [ 2011.115508][T32034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2011.147480][T32034] audit: audit_lost=289707 audit_rate_limit=0 audit_backlog_limit=64 [ 2011.155699][T32034] audit: backlog limit exceeded [ 2011.168237][ T30] audit: type=1400 audit(2000000547.070:2607552): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2011.168967][T32034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2011.193063][ T30] audit: type=1400 audit(2000000547.070:2607553): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="877" dev="tmpfs" ino=4474 [ 2011.229672][T32034] audit: audit_lost=289708 audit_rate_limit=0 audit_backlog_limit=64 [ 2011.247148][T32034] audit: backlog limit exceeded [ 2011.323579][T31844] veth0_macvtap: entered promiscuous mode [ 2011.329632][ T5840] Bluetooth: hci6: command tx timeout [ 2011.401456][T31844] veth1_macvtap: entered promiscuous mode [ 2011.448961][T32039] mkiss: ax0: crc mode is auto. [ 2011.478823][T31844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.536141][T31844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.606589][T31844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.648307][T31844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.681566][T31844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.706426][T31844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.742057][T32048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27106'. [ 2011.870714][T32052] tap0: tun_chr_ioctl cmd 1074025677 [ 2011.883056][T32052] tap0: linktype set to 6 [ 2012.125822][T20769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.155868][T20769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.300438][T20787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.319514][T20787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.453145][T29652] kernel write not supported for file /input/event2 (pid: 29652 comm: kworker/1:2) [ 2012.815045][T31844] block device autoloading is deprecated and will be removed. [ 2014.180357][T32130] TCP: TCP_TX_DELAY enabled [ 2015.401102][T32171] pim6reg: entered allmulticast mode [ 2015.493684][T32170] pim6reg: left allmulticast mode [ 2015.684240][T32182] random: crng reseeded on system resumption [ 2015.734654][ T30] kauditd_printk_skb: 7212 callbacks suppressed [ 2015.734677][ T30] audit: type=1400 audit(2000000552.088:2614208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32181 comm="syz.5.27162" name="newroot" dev="tmpfs" ino=2 [ 2015.794740][T32182] Restarting kernel threads ... [ 2015.804984][ T30] audit: type=1400 audit(2000000552.088:2614209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32181 comm="syz.5.27162" name="/" dev="devtmpfs" ino=1 [ 2015.832161][T32182] Done restarting kernel threads. [ 2015.835744][ T30] audit: type=1400 audit(2000000552.088:2614210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=32181 comm="syz.5.27162" name="raw-gadget" dev="devtmpfs" ino=821 [ 2015.898362][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2015.906953][T18110] audit: audit_lost=289895 audit_rate_limit=0 audit_backlog_limit=64 [ 2015.916087][ T30] audit: type=1400 audit(2000000552.088:2614211): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=32181 comm="syz.5.27162" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2015.916381][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2015.937134][T18110] audit: backlog limit exceeded [ 2015.943461][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2015.943482][ C1] audit: audit_lost=289896 audit_rate_limit=0 audit_backlog_limit=64 [ 2018.277434][T32257] random: crng reseeded on system resumption [ 2018.305154][T32257] Restarting kernel threads ... [ 2018.314054][T32257] Done restarting kernel threads. [ 2018.955953][T32276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27203'. [ 2019.615760][T32296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27213'. [ 2020.538181][T22934] audit_log_start: 6377 callbacks suppressed [ 2020.538200][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2020.574593][T22934] audit: audit_lost=289950 audit_rate_limit=0 audit_backlog_limit=64 [ 2020.614427][T22934] audit: backlog limit exceeded [ 2020.622007][ T30] audit: type=1400 audit(2000000558.082:2620430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2020.642403][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2020.656249][T32323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2020.678916][T32323] audit: audit_lost=289951 audit_rate_limit=0 audit_backlog_limit=64 [ 2020.687668][T22934] audit: audit_lost=289952 audit_rate_limit=0 audit_backlog_limit=64 [ 2020.694343][ T30] audit: type=1400 audit(2000000558.082:2620431): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2020.701364][T32323] audit: backlog limit exceeded [ 2022.483133][T32374] batadv_slave_1: entered promiscuous mode [ 2022.495376][T32373] batadv_slave_1: left promiscuous mode [ 2023.059856][T29652] kernel read not supported for file /swradio1 (pid: 29652 comm: kworker/1:2) [ 2023.173538][T32407] program syz.5.27261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2023.282668][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2023.454530][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2023.465748][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.478897][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2023.490442][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.504424][ T10] usb 3-1: config 0 descriptor?? [ 2023.514919][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2023.599795][T29652] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2023.762994][T29652] usb 6-1: Using ep0 maxpacket: 32 [ 2023.781620][T29652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2023.818064][T29652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2023.848152][T29652] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2023.873784][T29652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.905566][T29652] usb 6-1: config 0 descriptor?? [ 2024.287646][ T10] gspca_vc032x: reg_w err -71 [ 2024.300253][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 2024.332230][ T10] usb 3-1: USB disconnect, device number 29 [ 2024.386713][T29652] savu 0003:1E7D:2D5A.0065: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 2024.533819][T29652] usb 6-1: USB disconnect, device number 51 [ 2025.322612][ T30] kauditd_printk_skb: 6182 callbacks suppressed [ 2025.322634][ T30] audit: type=1400 audit(2000000563.153:2625644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2025.330245][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2025.356545][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2025.356571][ C1] audit: audit_lost=290276 audit_rate_limit=0 audit_backlog_limit=64 [ 2025.356588][ C1] audit: backlog limit exceeded [ 2025.372510][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2025.372537][ C1] audit: audit_lost=290277 audit_rate_limit=0 audit_backlog_limit=64 [ 2025.372555][ C1] audit: backlog limit exceeded [ 2025.372747][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2025.372763][ C1] audit: audit_lost=290278 audit_rate_limit=0 audit_backlog_limit=64 [ 2025.425417][ T5840] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 2025.432761][ T5840] Bluetooth: hci1: unexpected event for opcode 0x042f [ 2025.503086][ T4686] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2025.673737][ T4686] usb 3-1: Using ep0 maxpacket: 16 [ 2025.696294][ T4686] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2025.730168][ T4686] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.750301][ T4686] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2025.757020][ T4686] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2025.816984][ T4686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.837823][T32460] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.27283'. [ 2025.848963][ T4686] usb 3-1: config 0 descriptor?? [ 2026.104687][T32468] netlink: 'syz.7.27290': attribute type 34 has an invalid length. [ 2026.438428][ T4686] usb 3-1: USB disconnect, device number 30 [ 2026.650997][T32486] kernel read not supported for file /z (pid: 32486 comm: syz.0.27297) [ 2026.715913][T32485] netlink: 'syz.6.27298': attribute type 12 has an invalid length. [ 2026.724805][T32485] netlink: 'syz.6.27298': attribute type 1 has an invalid length. [ 2026.733402][T32485] netlink: 140 bytes leftover after parsing attributes in process `syz.6.27298'. [ 2027.863857][T32523] program syz.6.27315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2028.655505][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2028.817168][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2028.835122][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2028.874564][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.893022][ T24] usb 6-1: Product: syz [ 2028.898071][ T24] usb 6-1: Manufacturer: syz [ 2028.902720][ T24] usb 6-1: SerialNumber: syz [ 2028.919632][ T24] usb 6-1: config 0 descriptor?? [ 2028.952460][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2029.923729][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 2029.931220][ T24] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 2029.952696][ T24] usb 6-1: USB disconnect, device number 52 [ 2030.094229][ T30] kauditd_printk_skb: 5943 callbacks suppressed [ 2030.094254][ T30] audit: type=1400 audit(2000000568.160:2631117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32569 comm="syz.7.27335" name="dev" dev="tmpfs" ino=3 [ 2030.120252][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2030.120273][T22934] audit: audit_lost=290436 audit_rate_limit=0 audit_backlog_limit=64 [ 2030.120289][T22934] audit: backlog limit exceeded [ 2030.120404][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2030.120421][T22934] audit: audit_lost=290437 audit_rate_limit=0 audit_backlog_limit=64 [ 2030.120438][T22934] audit: backlog limit exceeded [ 2030.120455][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2030.120471][T22934] audit: audit_lost=290438 audit_rate_limit=0 audit_backlog_limit=64 [ 2030.120488][T22934] audit: backlog limit exceeded [ 2031.181907][T32596] loop8: detected capacity change from 0 to 7 [ 2031.192301][T32596] Dev loop8: unable to read RDB block 7 [ 2031.199071][T32596] loop8: AHDI p1 p2 p3 p4 [ 2031.206806][T32596] loop8: partition table partially beyond EOD, truncated [ 2031.242670][T32596] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2031.253327][T32596] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2031.271319][T32596] loop8: p3 size 4160749567 extends beyond EOD, truncated [ 2031.960944][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2032.119414][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2032.129359][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.146095][ T24] usb 3-1: config 0 descriptor?? [ 2032.154983][ T24] cp210x 3-1:0.0: cp210x converter detected [ 2032.542903][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2032.780214][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2032.922056][T32633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27365'. [ 2032.957268][ T24] usb 3-1: USB disconnect, device number 31 [ 2032.981450][T32633] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27365'. [ 2032.999972][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2033.048523][T32633] netlink: 'syz.5.27365': attribute type 6 has an invalid length. [ 2033.087979][T32633] netlink: 'syz.5.27365': attribute type 5 has an invalid length. [ 2033.114366][ T24] cp210x 3-1:0.0: device disconnected [ 2033.150157][T32633] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27365'. [ 2034.901173][ T30] kauditd_printk_skb: 5206 callbacks suppressed [ 2034.901194][ T30] audit: type=1400 audit(2000000573.209:2636141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2034.927569][ C0] vkms_vblank_simulate: vblank timer overrun [ 2034.951498][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2034.960075][T22934] audit: audit_lost=290500 audit_rate_limit=0 audit_backlog_limit=64 [ 2034.963097][T31844] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2034.985980][T31844] audit: audit_lost=290501 audit_rate_limit=0 audit_backlog_limit=64 [ 2035.006779][T31844] audit: backlog limit exceeded [ 2035.015781][T15691] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2035.023763][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2035.030470][ C1] audit: audit_lost=290502 audit_rate_limit=0 audit_backlog_limit=64 [ 2035.038643][ C1] audit: backlog limit exceeded [ 2035.360943][T32695] batadv_slave_1: entered promiscuous mode [ 2035.393211][T32694] batadv_slave_1: left promiscuous mode [ 2035.604298][T32700] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 2035.623882][T32702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27394'. [ 2035.664612][T32700] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 2035.690384][T32702] macvlan5: entered promiscuous mode [ 2035.718606][T32709] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27397'. [ 2035.719864][T32702] bond0: entered promiscuous mode [ 2035.757387][T32702] bond5: entered promiscuous mode [ 2035.770238][T32702] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 2035.811377][T32709] netlink: 92 bytes leftover after parsing attributes in process `syz.6.27397'. [ 2036.044001][T32710] syzkaller1: entered promiscuous mode [ 2036.055475][T32710] syzkaller1: entered allmulticast mode [ 2036.325306][T32726] vivid-000: disconnect [ 2036.335142][T32722] vivid-000: reconnect [ 2037.258797][T32757] netlink: 32 bytes leftover after parsing attributes in process `syz.7.27418'. [ 2037.273455][T32757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27418'. [ 2039.673730][ T30] kauditd_printk_skb: 6217 callbacks suppressed [ 2039.673752][ T30] audit: type=1400 audit(2000000578.217:2641855): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=346 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.735619][ T30] audit: type=1400 audit(2000000578.217:2641856): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=346 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.803435][ T30] audit: type=1400 audit(2000000578.217:2641857): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=346 comm="syz-executor" name="1499" dev="tmpfs" ino=7629 [ 2039.824727][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2039.851286][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2039.859050][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2039.865842][ C1] audit: audit_lost=290671 audit_rate_limit=0 audit_backlog_limit=64 [ 2039.871105][ T30] audit: type=1400 audit(2000000578.217:2641858): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=346 comm="syz-executor" opid=346 ocomm="syz-executor" [ 2039.874091][ C1] audit: backlog limit exceeded [ 2039.893159][T31844] audit: audit_lost=290672 audit_rate_limit=0 audit_backlog_limit=64 [ 2041.546747][ T389] netlink: 32 bytes leftover after parsing attributes in process `syz.6.27459'. [ 2042.367884][ T402] input: syz1 as /devices/virtual/input/input170 [ 2043.668074][ T4686] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2043.846870][ T4686] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2043.855724][ T4686] usb 6-1: config 0 has no interface number 0 [ 2043.872612][ T4686] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.906624][ T4686] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.923643][ T4686] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 2043.964885][ T4686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.992185][ T4686] usb 6-1: config 0 descriptor?? [ 2044.449072][ T30] kauditd_printk_skb: 5833 callbacks suppressed [ 2044.449094][ T30] audit: type=1400 audit(2000000583.225:2646906): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=457 comm="syz-executor" name="5526" dev="tmpfs" ino=27848 [ 2044.488888][ T4686] prodikeys 0003:041E:2801.0067: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 2044.520044][ T4686] hid_prodikeys: hid-prodikeys: failed to find output report [ 2044.520044][ T4686] [ 2044.531024][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2044.548270][ T5829] audit: audit_lost=290935 audit_rate_limit=0 audit_backlog_limit=64 [ 2044.554720][ T30] audit: type=1400 audit(2000000583.225:2646907): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=457 comm="syz-executor" name="5526" dev="tmpfs" ino=27848 [ 2044.566542][ T5829] audit: backlog limit exceeded [ 2044.577051][ T30] audit: type=1400 audit(2000000583.225:2646908): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=457 comm="syz-executor" name="5526" dev="tmpfs" ino=27848 [ 2044.605576][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2044.612858][ T30] audit: type=1400 audit(2000000583.225:2646909): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=457 comm="syz-executor" name="5526" dev="tmpfs" ino=27848 [ 2044.623231][ T5829] audit: audit_lost=290936 audit_rate_limit=0 audit_backlog_limit=64 [ 2044.652197][ T4686] usb 6-1: USB disconnect, device number 53 [ 2044.668352][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2044.857907][ T466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27495'. [ 2045.871820][ T489] netlink: 'syz.0.27505': attribute type 1 has an invalid length. [ 2045.912572][ T489] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.27505'. [ 2046.439254][ T504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27513'. [ 2046.901968][ T522] netlink: 'syz.7.27521': attribute type 1 has an invalid length. [ 2046.910472][ T522] netlink: 'syz.7.27521': attribute type 2 has an invalid length. [ 2048.876894][ T594] binder: 593:594 ioctl c0306201 2000000003c0 returned -22 [ 2049.235129][ T30] kauditd_printk_skb: 6937 callbacks suppressed [ 2049.235150][ T30] audit: type=1400 audit(2000000588.264:2653700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15691 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2049.273527][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2049.283647][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2049.290360][ C1] audit: audit_lost=290986 audit_rate_limit=0 audit_backlog_limit=64 [ 2049.298504][ C1] audit: backlog limit exceeded [ 2049.299478][ T604] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2049.303993][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2049.312785][ T605] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2049.316457][ C1] audit: audit_lost=290987 audit_rate_limit=0 audit_backlog_limit=64 [ 2049.316478][ C1] audit: backlog limit exceeded [ 2050.321333][ T637] bond0: entered promiscuous mode [ 2050.338889][ T637] bond_slave_0: entered promiscuous mode [ 2050.344937][ T637] bond_slave_1: entered promiscuous mode [ 2050.384054][ T637] bond2: entered promiscuous mode [ 2050.536084][T13132] kernel write not supported for file bpf-prog (pid: 13132 comm: kworker/1:1) [ 2050.825039][ T653] syzkaller1: entered promiscuous mode [ 2050.830618][ T653] syzkaller1: entered allmulticast mode [ 2050.949289][ T658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2051.135463][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.145544][T27051] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2051.147805][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x1 [ 2051.174513][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.191125][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.210742][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.227488][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.267474][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.293840][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.297954][T27051] usb 6-1: Using ep0 maxpacket: 16 [ 2051.317222][ T24] hid-generic 00A0:0008:0003.0068: unknown main item tag 0x0 [ 2051.337751][T27051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 2051.355954][ T24] hid-generic 00A0:0008:0003.0068: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2051.365052][T27051] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2051.383427][T27051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.434083][T27051] usb 6-1: config 0 descriptor?? [ 2051.859332][T27051] samsung 0003:0419:0600.0069: item fetching failed at offset 0/5 [ 2051.889053][T27051] samsung 0003:0419:0600.0069: parse failed [ 2051.895313][T27051] samsung 0003:0419:0600.0069: probe with driver samsung failed with error -22 [ 2052.105640][ T4686] usb 6-1: USB disconnect, device number 54 [ 2053.955466][ T4686] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2054.018328][ T30] kauditd_printk_skb: 5347 callbacks suppressed [ 2054.018348][ T30] audit: type=1400 audit(2000000593.282:2658781): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22934 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2054.055251][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2054.062430][ T715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2054.072947][ T715] audit: audit_lost=291078 audit_rate_limit=0 audit_backlog_limit=64 [ 2054.082107][T22934] audit: audit_lost=291079 audit_rate_limit=0 audit_backlog_limit=64 [ 2054.091352][ T30] audit: type=1400 audit(2000000593.282:2658782): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=720 comm="syz.6.27609" saddr=10.128.0.169 src=30008 daddr=10.128.10.59 dest=50110 netif=eth0 [ 2054.111630][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2054.115988][ T715] audit: backlog limit exceeded [ 2054.121079][ C1] audit: audit_lost=291080 audit_rate_limit=0 audit_backlog_limit=64 [ 2054.121102][ C1] audit: backlog limit exceeded [ 2054.169572][ T4686] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2054.184326][ T4686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.204010][ T4686] usb 3-1: config 0 descriptor?? [ 2054.237828][ T4686] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2054.362792][ T728] geneve2: entered promiscuous mode [ 2054.372495][ T728] geneve2: entered allmulticast mode [ 2054.479939][ T4686] gp8psk: usb in 128 operation failed. [ 2054.684384][ T4686] gp8psk: usb in 146 operation failed. [ 2054.701045][ T4686] gp8psk: failed to get FW version [ 2054.724555][ T4686] gp8psk: FPGA Version = 4 [ 2054.779259][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27617'. [ 2054.784765][ T736] loop2: detected capacity change from 0 to 7 [ 2054.807495][ T736] Dev loop2: unable to read RDB block 7 [ 2054.817750][ T736] loop2: unable to read partition table [ 2054.829002][ T736] loop2: partition table beyond EOD, truncated [ 2054.837922][ T736] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2054.917000][ T4686] gp8psk: usb in 138 operation failed. [ 2054.935882][ T4686] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2054.958651][ T4686] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2054.972259][ T4686] usb 3-1: USB disconnect, device number 32 [ 2055.056589][ T745] netlink: 6 bytes leftover after parsing attributes in process `syz.6.27621'. [ 2055.226701][ T750] netlink: 'syz.0.27624': attribute type 2 has an invalid length. [ 2055.680212][ T8150] Bluetooth: hci7: command 0x1003 tx timeout [ 2055.687701][ T5840] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 2055.937747][ T774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27635'. [ 2055.962784][ T774] netlink: 'syz.5.27635': attribute type 7 has an invalid length. [ 2055.975638][ T774] netlink: 'syz.5.27635': attribute type 8 has an invalid length. [ 2055.987064][ T774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27635'. [ 2056.020880][ T774] erspan0: entered promiscuous mode [ 2056.050451][ T774] erspan0: left promiscuous mode [ 2057.127047][ T810] program syz.5.27652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2057.434864][ T5840] Bluetooth: hci8: command 0x1003 tx timeout [ 2057.442790][T28163] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2058.797932][ T30] kauditd_printk_skb: 6643 callbacks suppressed [ 2058.797954][ T30] audit: type=1400 audit(2000000598.300:2665029): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=854 comm="syz-executor" path="/proc/11495/oom_score_adj" dev="proc" ino=223480 [ 2058.861407][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2058.869966][ T30] audit: type=1400 audit(2000000598.300:2665030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=854 comm="syz-executor" name="5568" dev="tmpfs" ino=28068 [ 2058.871095][T15691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2058.896687][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2058.896727][ C1] audit: audit_lost=291213 audit_rate_limit=0 audit_backlog_limit=64 [ 2058.896742][ C1] audit: backlog limit exceeded [ 2058.914005][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2058.914033][ C1] audit: audit_lost=291214 audit_rate_limit=0 audit_backlog_limit=64 [ 2058.914054][ C1] audit: backlog limit exceeded [ 2060.462656][ T905] tun0: tun_chr_ioctl cmd 1074025675 [ 2060.475236][ T905] tun0: persist enabled [ 2060.502609][ T905] tun0: tun_chr_ioctl cmd 1074025675 [ 2060.508388][ T905] tun0: persist disabled [ 2061.692348][T27058] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2061.881169][T27058] usb 6-1: Using ep0 maxpacket: 32 [ 2061.901953][T27058] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2061.914394][T27058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.969855][T27058] usb 6-1: config 0 descriptor?? [ 2062.201353][T27058] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2062.208618][T13132] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2062.237666][T27058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2062.262416][T27058] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2062.276458][T27058] usb 6-1: media controller created [ 2062.331598][T27058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2062.370159][T13132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.404573][T13132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.437097][T13132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2062.457095][T27058] az6027: usb out operation failed. (-71) [ 2062.466862][T13132] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2062.476595][T27058] az6027: usb out operation failed. (-71) [ 2062.482650][T27058] stb0899_attach: Driver disabled by Kconfig [ 2062.489036][T27058] az6027: no front-end attached [ 2062.489036][T27058] [ 2062.496323][T13132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.529800][T13132] usb 3-1: config 0 descriptor?? [ 2062.537285][T27058] az6027: usb out operation failed. (-71) [ 2062.543291][T27058] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2062.569794][T27058] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input171 [ 2062.603734][T27058] dvb-usb: schedule remote query interval to 400 msecs. [ 2062.613167][T27058] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2062.624626][T27058] usb 6-1: USB disconnect, device number 55 [ 2062.760747][T27058] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2062.955170][T13132] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 2062.997798][T13132] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving [ 2063.053147][T13132] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2063.238043][T13132] usb 3-1: USB disconnect, device number 33 [ 2063.358300][ T987] kvm: kvm [984]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 2063.574326][ T30] kauditd_printk_skb: 6920 callbacks suppressed [ 2063.574346][ T30] audit: type=1400 audit(2000000603.307:2671626): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="1348" dev="tmpfs" ino=6859 [ 2063.615032][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2063.617362][ T1002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2063.629205][T31844] audit: audit_lost=291324 audit_rate_limit=0 audit_backlog_limit=64 [ 2063.640158][ T1003] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2063.647095][T31844] audit: backlog limit exceeded [ 2063.647133][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2063.647149][T31844] audit: audit_lost=291325 audit_rate_limit=0 audit_backlog_limit=64 [ 2063.647165][T31844] audit: backlog limit exceeded [ 2063.647303][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2064.393296][ T1034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2064.427866][ T1034] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 2065.486086][ T1073] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.27752'. [ 2066.078248][ T1090] sctp: [Deprecated]: syz.0.27761 (pid 1090) Use of int in maxseg socket option. [ 2066.078248][ T1090] Use struct sctp_assoc_value instead [ 2066.624906][ T1102] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 2066.961320][ T1112] vivid-000: disconnect [ 2066.983977][ T1108] vivid-000: reconnect [ 2067.162189][ T1118] loop6: detected capacity change from 0 to 63 [ 2067.192673][ T1118] buffer_io_error: 22 callbacks suppressed [ 2067.192697][ T1118] Buffer I/O error on dev loop6, logical block 0, async page read [ 2067.232395][ T1118] Buffer I/O error on dev loop6, logical block 1, async page read [ 2067.259968][ T1118] Buffer I/O error on dev loop6, logical block 2, async page read [ 2067.294684][ T1118] Buffer I/O error on dev loop6, logical block 3, async page read [ 2067.325574][ T1118] Buffer I/O error on dev loop6, logical block 0, async page read [ 2067.346630][ T1118] Buffer I/O error on dev loop6, logical block 1, async page read [ 2067.356491][ T1118] Buffer I/O error on dev loop6, logical block 2, async page read [ 2067.384677][ T1118] Buffer I/O error on dev loop6, logical block 3, async page read [ 2067.415794][ T1118] Buffer I/O error on dev loop6, logical block 0, async page read [ 2067.473114][ T1118] Buffer I/O error on dev loop6, logical block 1, async page read [ 2068.379986][ T30] kauditd_printk_skb: 6391 callbacks suppressed [ 2068.380007][ T30] audit: type=1400 audit(2000000608.357:2677631): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18110 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2068.411171][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2068.423524][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2068.430178][ C1] audit: audit_lost=291456 audit_rate_limit=0 audit_backlog_limit=64 [ 2068.438413][ C1] audit: backlog limit exceeded [ 2068.444575][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2068.451151][ C1] audit: audit_lost=291457 audit_rate_limit=0 audit_backlog_limit=64 [ 2068.459345][ C1] audit: backlog limit exceeded [ 2068.464642][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2068.471246][ C1] audit: audit_lost=291458 audit_rate_limit=0 audit_backlog_limit=64 [ 2070.216222][ T1194] loop2: detected capacity change from 0 to 7 [ 2070.280028][ T1194] Dev loop2: unable to read RDB block 7 [ 2070.316273][ T1194] loop2: AHDI p2 p3 [ 2070.377800][ T1194] loop2: partition table partially beyond EOD, truncated [ 2070.433062][ T1194] loop2: p2 size 150995456 extends beyond EOD, truncated [ 2070.787569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 2071.145689][ T1207] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2071.198633][ T1207] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 2072.455215][ T4686] kernel write not supported for file /2962/coredump_filter (pid: 4686 comm: kworker/0:3) [ 2073.014565][ T1246] vivid-003: disconnect [ 2073.033431][ T1244] vivid-003: reconnect [ 2073.159239][ T30] kauditd_printk_skb: 4778 callbacks suppressed [ 2073.159260][ T30] audit: type=1400 audit(2000000613.364:2682059): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=1250 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2073.190979][T18110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2073.191039][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2073.204805][ T1250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2073.205217][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2073.218161][ C1] audit: audit_lost=291576 audit_rate_limit=0 audit_backlog_limit=64 [ 2073.224331][T18110] audit: audit_lost=291577 audit_rate_limit=0 audit_backlog_limit=64 [ 2073.226301][ C1] audit: backlog limit exceeded [ 2073.227516][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2073.245031][ T1250] audit: audit_lost=291578 audit_rate_limit=0 audit_backlog_limit=64 [ 2075.134614][ T1310] netlink: 'syz.2.27852': attribute type 12 has an invalid length. [ 2075.169934][ T1310] netlink: 'syz.2.27852': attribute type 29 has an invalid length. [ 2075.177939][ T1310] netlink: 148 bytes leftover after parsing attributes in process `syz.2.27852'. [ 2075.872735][ T1337] netlink: 176 bytes leftover after parsing attributes in process `syz.0.27863'. [ 2077.941232][T29652] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 2077.950080][ T30] kauditd_printk_skb: 6160 callbacks suppressed [ 2077.950103][ T30] audit: type=1400 audit(2000000618.403:2688190): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2077.979662][ T30] audit: type=1400 audit(2000000618.403:2688191): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.002195][ T30] audit: type=1400 audit(2000000618.403:2688192): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.023817][ T30] audit: type=1400 audit(2000000618.435:2688193): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1393 comm="syz.5.27889" saddr=10.128.0.169 src=30008 daddr=10.128.10.59 dest=50110 netif=eth0 [ 2078.047449][ T30] audit: type=1400 audit(2000000618.487:2688194): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.096630][T29652] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.125152][ T30] audit: type=1400 audit(2000000618.561:2688195): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.129229][T29652] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2078.205697][ T30] audit: type=1400 audit(2000000618.561:2688196): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.209731][T29652] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2078.236608][T29652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.244743][T29652] usb 3-1: Product: syz [ 2078.263799][T29652] usb 3-1: Manufacturer: syz [ 2078.271857][T29652] usb 3-1: SerialNumber: syz [ 2078.313558][ T30] audit: type=1400 audit(2000000618.561:2688197): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.360076][ T30] audit: type=1400 audit(2000000618.561:2688198): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.398349][ T30] audit: type=1400 audit(2000000618.561:2688199): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=1385 comm="syz.2.27887" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 2078.502046][T29652] usb 3-1: 0:2 : does not exist [ 2078.522683][T29652] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2078.563212][T29652] usb 3-1: USB disconnect, device number 34 [ 2080.632410][ T1464] loop8: detected capacity change from 0 to 6 [ 2080.644690][ T1464] Dev loop8: unable to read RDB block 6 [ 2080.662611][ T1464] loop8: unable to read partition table [ 2080.675723][ T1464] loop8: partition table beyond EOD, truncated [ 2080.693895][ T1464] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2080.903721][T27058] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2081.256096][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2081.410079][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 2081.462572][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2081.602920][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2081.665956][T27058] usb 3-1: Using ep0 maxpacket: 8 [ 2081.667099][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2081.683329][T27058] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.693968][T27058] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2081.696248][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.703045][T27058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.725649][T27058] usb 3-1: config 0 descriptor?? [ 2081.748168][T27058] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2081.779545][ T10] usb 6-1: Product: syz [ 2081.791757][ T10] usb 6-1: Manufacturer: syz [ 2081.796613][ T10] usb 6-1: SerialNumber: syz [ 2081.828233][ T10] usb 6-1: config 0 descriptor?? [ 2081.844943][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2081.855949][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2082.140400][ T1487] input: syz1 as /devices/virtual/input/input172 [ 2082.422419][ T1493] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 2082.448832][ T10] em28xx 6-1:0.0: chip ID is em28174 [ 2082.674808][ T10] usb 6-1: USB disconnect, device number 56 [ 2082.683070][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 2082.690138][ T10] em28xx 6-1:0.0: Freeing device [ 2082.699300][T27058] gspca_vc032x: reg_r err -71 [ 2082.706108][T27058] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 2082.723648][T27058] usb 3-1: USB disconnect, device number 35 [ 2082.740660][ T30] kauditd_printk_skb: 5179 callbacks suppressed [ 2082.740681][ T30] audit: type=1400 audit(2000000623.432:2693136): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 2082.769528][ T30] audit: type=1400 audit(2000000623.463:2693137): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=719 [ 2082.790097][ T30] audit: type=1400 audit(2000000623.463:2693138): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=720 [ 2082.810066][ T30] audit: type=1400 audit(2000000623.463:2693139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="003" dev="devtmpfs" ino=727 [ 2082.839269][ T30] audit: type=1400 audit(2000000623.537:2693140): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=31844 comm="syz-executor" opid=1438 ocomm="syz.0.27912" [ 2082.887038][ T30] audit: type=1400 audit(2000000623.537:2693141): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=31844 comm="syz-executor" opid=1438 ocomm="syz.0.27912" [ 2082.923178][ T30] audit: type=1400 audit(2000000623.537:2693142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=1496 comm="syz.6.27935" name="1395" dev="tmpfs" ino=7100 [ 2082.931698][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2082.944291][ T30] audit: type=1400 audit(2000000623.537:2693143): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=1496 comm="syz.6.27935" name="1395" dev="tmpfs" ino=7100 [ 2082.964061][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2083.167312][ T1504] overlayfs: upper fs does not support tmpfile. [ 2083.393934][ T1508] tipc: Enabled bearer , priority 0 [ 2083.818159][T27058] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2083.988215][T27058] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2084.017660][T27058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.051070][T27058] usb 3-1: config 0 descriptor?? [ 2084.071640][T27058] cp210x 3-1:0.0: cp210x converter detected [ 2084.244270][T28163] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 2084.257478][T28163] CPU: 1 UID: 0 PID: 28163 Comm: kworker/u9:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2084.257512][T28163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2084.257527][T28163] Workqueue: hci5 hci_rx_work [ 2084.257572][T28163] Call Trace: [ 2084.257582][T28163] [ 2084.257593][T28163] dump_stack_lvl+0x189/0x250 [ 2084.257628][T28163] ? kernfs_path_from_node+0x2c/0x260 [ 2084.257662][T28163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2084.257692][T28163] ? __pfx__printk+0x10/0x10 [ 2084.257716][T28163] ? kernfs_path_from_node+0x2c/0x260 [ 2084.257743][T28163] ? kernfs_path_from_node+0x2c/0x260 [ 2084.257772][T28163] ? kernfs_path_from_node+0x22c/0x260 [ 2084.257798][T28163] ? kernfs_path_from_node+0x2c/0x260 [ 2084.257832][T28163] sysfs_create_dir_ns+0x259/0x280 [ 2084.257865][T28163] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2084.257896][T28163] ? do_raw_spin_unlock+0x122/0x240 [ 2084.257925][T28163] kobject_add_internal+0x59f/0xb40 [ 2084.257960][T28163] kobject_add+0x155/0x220 [ 2084.257988][T28163] ? __pfx_kobject_add+0x10/0x10 [ 2084.258010][T28163] ? _raw_spin_unlock+0x28/0x50 [ 2084.258044][T28163] ? get_device_parent+0x366/0x3a0 [ 2084.258074][T28163] device_add+0x408/0xb50 [ 2084.258103][T28163] hci_conn_add_sysfs+0xd5/0x1e0 [ 2084.258137][T28163] le_conn_complete_evt+0xc3a/0x1220 [ 2084.258179][T28163] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2084.258206][T28163] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2084.258243][T28163] ? __pfx___mutex_lock+0x10/0x10 [ 2084.258271][T28163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2084.258302][T28163] ? skb_pull_data+0xfb/0x200 [ 2084.258338][T28163] hci_le_enh_conn_complete_evt+0x189/0x470 [ 2084.258363][T28163] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2084.258393][T28163] hci_event_packet+0x78c/0x1200 [ 2084.258430][T28163] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2084.258457][T28163] ? __pfx_hci_event_packet+0x10/0x10 [ 2084.258491][T28163] ? kcov_remote_start+0x4d3/0x7f0 [ 2084.258516][T28163] ? local_clock_noinstr+0xe0/0xe0 [ 2084.258550][T28163] ? hci_send_to_monitor+0xe2/0x570 [ 2084.258580][T28163] hci_rx_work+0x46a/0xe80 [ 2084.258622][T28163] ? process_scheduled_works+0x9ef/0x17b0 [ 2084.258655][T28163] process_scheduled_works+0xade/0x17b0 [ 2084.258721][T28163] ? __pfx_process_scheduled_works+0x10/0x10 [ 2084.258775][T28163] worker_thread+0x8a0/0xda0 [ 2084.258810][T28163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2084.258850][T28163] ? __kthread_parkme+0x7b/0x200 [ 2084.258894][T28163] kthread+0x70e/0x8a0 [ 2084.258922][T28163] ? __pfx_worker_thread+0x10/0x10 [ 2084.258951][T28163] ? __pfx_kthread+0x10/0x10 [ 2084.258977][T28163] ? _raw_spin_unlock_irq+0x23/0x50 [ 2084.259006][T28163] ? lockdep_hardirqs_on+0x9c/0x150 [ 2084.259033][T28163] ? __pfx_kthread+0x10/0x10 [ 2084.259057][T28163] ret_from_fork+0x3fc/0x770 [ 2084.259087][T28163] ? __pfx_ret_from_fork+0x10/0x10 [ 2084.259121][T28163] ? __switch_to_asm+0x39/0x70 [ 2084.259141][T28163] ? __switch_to_asm+0x33/0x70 [ 2084.259160][T28163] ? __pfx_kthread+0x10/0x10 [ 2084.259184][T28163] ret_from_fork_asm+0x1a/0x30 [ 2084.259226][T28163] [ 2084.261496][T28163] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2084.403531][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27957'. [ 2084.410483][T28163] Bluetooth: hci5: failed to register connection device [ 2084.603931][T27058] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2084.754695][T29652] kernel write not supported for file /3029/oom_score_adj (pid: 29652 comm: kworker/1:2) [ 2084.812446][T27058] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2084.862408][ T1553] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.27960'. [ 2084.941230][ T1555] input: syz0 as /devices/virtual/input/input173 [ 2085.023851][T27058] usb 3-1: USB disconnect, device number 36 [ 2085.042463][T27058] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2085.057196][T27058] cp210x 3-1:0.0: device disconnected [ 2085.094099][ T1557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27962'. [ 2085.106758][ T1557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27962'. [ 2085.122065][ T1557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27962'. [ 2085.131869][ T1557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.27962'. [ 2185.570928][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2185.577954][ C0] rcu: 1-...!: (0 ticks this GP) idle=af0c/1/0x4000000000000000 softirq=314844/314844 fqs=0 [ 2185.590172][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1519/1:b..l [ 2185.598149][ C0] rcu: (detected by 0, t=10502 jiffies, g=356509, q=143 ncpus=2) [ 2185.605980][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2185.606014][ C1] NMI backtrace for cpu 1 [ 2185.606029][ C1] CPU: 1 UID: 0 PID: 1568 Comm: syz.6.27968 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 2185.606049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2185.606059][ C1] RIP: 0010:rcu_is_watching+0x2e/0xb0 [ 2185.606088][ C1] Code: 41 57 41 56 53 65 ff 05 d0 8a f2 10 e8 7b 0c b8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 60 1c b9 8d <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 0c 85 7a 00 [ 2185.606103][ C1] RSP: 0018:ffffc90000a08c50 EFLAGS: 00000097 [ 2185.606118][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: bb79efe13dc44600 [ 2185.606130][ C1] RDX: ffff88802b4d8000 RSI: ffffffff8be1af60 RDI: ffffffff8be1af20 [ 2185.606142][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff897eb058 [ 2185.606153][ C1] R10: dffffc0000000000 R11: ffffed100dcd525e R12: ffff88806e6a9360 [ 2185.606165][ C1] R13: ffff88806e6a9000 R14: ffffffff8db91c68 R15: dffffc0000000000 [ 2185.606177][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 2185.606190][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2185.606202][ C1] CR2: 0000001b2d71eff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2185.606220][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2185.606230][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2185.606241][ C1] Call Trace: [ 2185.606250][ C1] [ 2185.606257][ C1] ? advance_sched+0x9f8/0xc90 [ 2185.606290][ C1] advance_sched+0xa31/0xc90 [ 2185.606317][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2185.606336][ C1] __hrtimer_run_queues+0x529/0xc60 [ 2185.606369][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2185.606389][ C1] ? read_tsc+0x9/0x20 [ 2185.606408][ C1] ? rcu_is_watching+0x15/0xb0 [ 2185.606432][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 2185.606466][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 2185.606491][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2185.606516][ C1] [ 2185.606521][ C1] [ 2185.606528][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2185.606545][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 2185.606565][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 2185.606579][ C1] RSP: 0018:ffffc9000b95f558 EFLAGS: 00000246 [ 2185.606593][ C1] RAX: 1ffffffff3358001 RBX: ffffffffffffffff RCX: ffffffff822cb6a4 [ 2185.606605][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801de4017c [ 2185.606615][ C1] RBP: ffff88801de40130 R08: ffff88801de4017f R09: 1ffff11003bc802f [ 2185.606627][ C1] R10: dffffc0000000000 R11: ffffed1003bc802f R12: 0000000000000001 [ 2185.606639][ C1] R13: 0000000000000001 R14: ffffed1003bc8030 R15: 1ffff11003bc802f [ 2185.606655][ C1] ? page_table_check_clear+0x334/0x700 [ 2185.606679][ C1] ? page_ext_lookup+0x127/0x180 [ 2185.606698][ C1] page_table_check_clear+0x334/0x700 [ 2185.606717][ C1] ? page_table_check_clear+0x187/0x700 [ 2185.606738][ C1] unmap_page_range+0x326e/0x41c0 [ 2185.606795][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2185.606821][ C1] ? unmap_vmas+0x144/0x580 [ 2185.606845][ C1] unmap_vmas+0x399/0x580 [ 2185.606870][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2185.606904][ C1] exit_mmap+0x248/0xb50 [ 2185.606924][ C1] ? uprobe_clear_state+0x20f/0x290 [ 2185.606946][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2185.606964][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2185.607002][ C1] ? __pfx_exit_aio+0x10/0x10 [ 2185.607025][ C1] ? uprobe_clear_state+0x274/0x290 [ 2185.607043][ C1] ? mm_update_next_owner+0xa7/0x870 [ 2185.607062][ C1] __mmput+0x118/0x420 [ 2185.607085][ C1] exit_mm+0x1da/0x2c0 [ 2185.607103][ C1] ? __pfx_exit_mm+0x10/0x10 [ 2185.607120][ C1] ? rcu_is_watching+0x15/0xb0 [ 2185.607144][ C1] do_exit+0x640/0x22e0 [ 2185.607164][ C1] ? preempt_schedule_common+0x83/0xd0 [ 2185.607186][ C1] ? preempt_schedule+0xae/0xc0 [ 2185.607206][ C1] ? __pfx_do_exit+0x10/0x10 [ 2185.607226][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2185.607248][ C1] do_group_exit+0x21c/0x2d0 [ 2185.607268][ C1] __x64_sys_exit_group+0x3f/0x40 [ 2185.607285][ C1] x64_sys_call+0x21ba/0x21c0 [ 2185.607301][ C1] do_syscall_64+0xfa/0x3b0 [ 2185.607315][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2185.607337][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.607352][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2185.607370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.607384][ C1] RIP: 0033:0x7fbe2478e929 [ 2185.607398][ C1] Code: Unable to access opcode bytes at 0x7fbe2478e8ff. [ 2185.607406][ C1] RSP: 002b:00007ffdc53f1568 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2185.607422][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbe2478e929 [ 2185.607433][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2185.607444][ C1] RBP: 00007ffdc53f15cc R08: 00000005c53f165f R09: 00000000000927c0 [ 2185.607456][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000057d [ 2185.607465][ C1] R13: 00000000000927c0 R14: 0000000000211d0d R15: 00007ffdc53f1620 [ 2185.607485][ C1] [ 2185.608006][ C0] task:syz.2.27945 state:R running task stack:26888 pid:1519 tgid:1518 ppid:5829 task_flags:0x40044c flags:0x00004000 [ 2186.140750][ C0] Call Trace: [ 2186.144079][ C0] [ 2186.147089][ C0] __schedule+0x16a2/0x4cb0 [ 2186.151761][ C0] ? free_pages_and_swap_cache+0x4be/0x520 [ 2186.157660][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2186.164069][ C0] ? preempt_schedule_common+0x83/0xd0 [ 2186.169759][ C0] ? __pfx___schedule+0x10/0x10 [ 2186.174739][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2186.179807][ C0] ? irqentry_exit+0x74/0x90 [ 2186.184432][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.189676][ C0] ? preempt_schedule+0xae/0xc0 [ 2186.194561][ C0] preempt_schedule_common+0x83/0xd0 [ 2186.199891][ C0] preempt_schedule+0xae/0xc0 [ 2186.204691][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2186.210197][ C0] preempt_schedule_thunk+0x16/0x30 [ 2186.215433][ C0] _raw_spin_unlock+0x3f/0x50 [ 2186.220142][ C0] unmap_page_range+0x3842/0x41c0 [ 2186.225262][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2186.230697][ C0] ? unmap_vmas+0x144/0x580 [ 2186.235252][ C0] unmap_vmas+0x399/0x580 [ 2186.239628][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2186.244547][ C0] exit_mmap+0x248/0xb50 [ 2186.248852][ C0] ? uprobe_clear_state+0x20f/0x290 [ 2186.254114][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2186.258929][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2186.264706][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2186.269515][ C0] ? uprobe_clear_state+0x274/0x290 [ 2186.274796][ C0] ? mm_update_next_owner+0xa7/0x870 [ 2186.280121][ C0] __mmput+0x118/0x420 [ 2186.284230][ C0] exit_mm+0x1da/0x2c0 [ 2186.288331][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2186.293041][ C0] ? rcu_is_watching+0x15/0xb0 [ 2186.297849][ C0] do_exit+0x640/0x22e0 [ 2186.302047][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2186.307101][ C0] ? __pfx_do_exit+0x10/0x10 [ 2186.311736][ C0] do_group_exit+0x21c/0x2d0 [ 2186.316358][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.321597][ C0] get_signal+0x125e/0x1310 [ 2186.326170][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 2186.331755][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2186.337971][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 2186.343465][ C0] exit_to_user_mode_loop+0x75/0x110 [ 2186.348957][ C0] do_syscall_64+0x2bd/0x3b0 [ 2186.353759][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.360020][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2186.366231][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2186.370948][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.376871][ C0] RIP: 0033:0x7f4ca518e929 [ 2186.381314][ C0] RSP: 002b:00007f4ca60810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2186.389858][ C0] RAX: fffffffffffffe00 RBX: 00007f4ca53b5fa8 RCX: 00007f4ca518e929 [ 2186.398167][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ca53b5fa8 [ 2186.406434][ C0] RBP: 00007f4ca53b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2186.414564][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ca53b5fac [ 2186.422580][ C0] R13: 0000000000000000 R14: 00007ffdf6c5e100 R15: 00007ffdf6c5e1e8 [ 2186.430632][ C0] [ 2186.433686][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g356509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2186.446158][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=162044 [ 2186.454260][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g356509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 2186.465826][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2186.475823][ C0] rcu: RCU grace-period kthread stack dump: [ 2186.481730][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2186.493809][ C0] Call Trace: [ 2186.497134][ C0] [ 2186.500365][ C0] __schedule+0x16a2/0x4cb0 [ 2186.505197][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2186.510768][ C0] ? schedule+0x165/0x360 [ 2186.515250][ C0] ? __lock_acquire+0xab9/0xd20 [ 2186.520251][ C0] ? __pfx___schedule+0x10/0x10 [ 2186.525174][ C0] ? schedule+0x91/0x360 [ 2186.529455][ C0] schedule+0x165/0x360 [ 2186.533652][ C0] schedule_timeout+0x12b/0x270 [ 2186.538543][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2186.543981][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2186.549436][ C0] ? prepare_to_swait_event+0x341/0x380 [ 2186.555136][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 2186.560213][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2186.565187][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.570420][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2186.575738][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2186.581064][ C0] ? finish_swait+0xcd/0x1f0 [ 2186.585694][ C0] rcu_gp_kthread+0x99/0x390 [ 2186.590407][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2186.595657][ C0] ? __kthread_parkme+0x7b/0x200 [ 2186.600640][ C0] ? __kthread_parkme+0x1a1/0x200 [ 2186.605715][ C0] kthread+0x70e/0x8a0 [ 2186.609851][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2186.615099][ C0] ? __pfx_kthread+0x10/0x10 [ 2186.620079][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2186.625312][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2186.630636][ C0] ? __pfx_kthread+0x10/0x10 [ 2186.635343][ C0] ret_from_fork+0x3fc/0x770 [ 2186.639987][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2186.645225][ C0] ? __switch_to_asm+0x39/0x70 [ 2186.650298][ C0] ? __switch_to_asm+0x33/0x70 [ 2186.655443][ C0] ? __pfx_kthread+0x10/0x10 [ 2186.660170][ C0] ret_from_fork_asm+0x1a/0x30 [ 2186.665545][ C0]