last executing test programs: 15m52.264483629s ago: executing program 32 (id=3303): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 15m51.673480423s ago: executing program 33 (id=3309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15m49.813510908s ago: executing program 34 (id=3311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000021000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/226) 10m59.211344512s ago: executing program 35 (id=7930): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0x5, 0xffff}, {0xffe1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40862}, 0x4000800) 9m54.814915404s ago: executing program 36 (id=8988): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r0, 0x48212b8952c3affd, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) 9m29.207596314s ago: executing program 9 (id=9556): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0xffe, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}}, 0x0) 9m28.982247094s ago: executing program 9 (id=9560): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e801400018008000100"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 9m28.744651602s ago: executing program 9 (id=9563): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x900, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) ptrace(0x10, r0) 9m28.549659389s ago: executing program 9 (id=9565): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 9m28.304006892s ago: executing program 9 (id=9569): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) close(r0) 9m27.869015399s ago: executing program 9 (id=9577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) 9m27.406222419s ago: executing program 37 (id=9577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) 8m5.583768788s ago: executing program 7 (id=10802): unshare(0x2a020400) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8m5.263916834s ago: executing program 7 (id=10804): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x6cd4d000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 8m5.056235867s ago: executing program 7 (id=10806): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x3, 0xf2, 0x80000}, 0x20) 8m4.7729354s ago: executing program 7 (id=10809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m4.594381196s ago: executing program 7 (id=10812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffdf2, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m4.309063489s ago: executing program 7 (id=10813): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) close(0x3) 8m3.965759847s ago: executing program 38 (id=10813): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) close(0x3) 4m25.720375866s ago: executing program 2 (id=14318): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2000000}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m25.276158421s ago: executing program 2 (id=14323): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) 4m25.173357209s ago: executing program 2 (id=14325): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0x15, 0x4, "76fae6de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m23.314718356s ago: executing program 2 (id=14352): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 4m23.097976869s ago: executing program 2 (id=14356): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) 4m22.632903042s ago: executing program 2 (id=14361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x34}}, 0x4840) 4m22.276072203s ago: executing program 39 (id=14361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x34}}, 0x4840) 3m23.002716161s ago: executing program 8 (id=15299): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m21.983434133s ago: executing program 8 (id=15312): rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1c4) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) utime(&(0x7f0000000180)='./file0/file0\x00', 0x0) 3m21.804724917s ago: executing program 8 (id=15315): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0xe) 3m20.743233647s ago: executing program 8 (id=15329): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2002, 0x0) 3m20.664466121s ago: executing program 8 (id=15330): epoll_create1(0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m20.209049582s ago: executing program 8 (id=15336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 3m19.813219973s ago: executing program 40 (id=15336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 2m35.201807701s ago: executing program 1 (id=16103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x2c}}, 0x0) 2m35.053530558s ago: executing program 1 (id=16106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x38}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2m34.825603778s ago: executing program 1 (id=16111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0xfffffffffffffca8}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 2m34.649526724s ago: executing program 1 (id=16116): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0xff, @rand_addr=0x8000, 0x0, 0x3, 'wrr\x00'}, {@broadcast, 0x0, 0x2000}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 2m34.415318306s ago: executing program 1 (id=16122): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m34.266106816s ago: executing program 1 (id=16124): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x10004, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x7, 0xc}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2m18.066507985s ago: executing program 41 (id=16124): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x10004, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x7, 0xc}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.952975367s ago: executing program 4 (id=18080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:'], 0xa) 2.679323446s ago: executing program 4 (id=18082): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3, 0x0, r1}) 2.364543627s ago: executing program 4 (id=18087): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20}, {0x4}, {0xc}, {0x61}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800090000000000000000001c140000fe0500010000000014"], 0x44}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.102584005s ago: executing program 4 (id=18090): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) 1.889112902s ago: executing program 4 (id=18093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.888415272s ago: executing program 5 (id=18094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1.675534435s ago: executing program 4 (id=18097): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x18, &(0x7f00000007c0)={0x0, 0x14, 0x4, "aee39745"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0x30, 0x4, "b73b2f6e"}, 0x0, 0x0, 0x0, 0x0}) 1.601491345s ago: executing program 5 (id=18099): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 1.401027143s ago: executing program 3 (id=18102): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00@'], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) 1.202887446s ago: executing program 3 (id=18104): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000000b}) 1.150524767s ago: executing program 6 (id=18105): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 932.904882ms ago: executing program 3 (id=18107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x8, @remote, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000580)="94", 0x1}], 0x1}}], 0x1, 0x88d0) listen(r0, 0x100101) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x3c}, 0x8) accept4(r0, 0x0, 0x0, 0x0) 927.736959ms ago: executing program 0 (id=18108): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a80100004800c0005"], 0x34}}, 0x0) 901.907367ms ago: executing program 5 (id=18109): unshare(0x22020400) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x154) 784.866267ms ago: executing program 6 (id=18110): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000004050005000a000000140007800800114000000000080012400000ffff120003"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 734.425168ms ago: executing program 3 (id=18111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 727.363259ms ago: executing program 0 (id=18112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xac, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb2, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x9, 0xea}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0xa, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x80, 0x6, 0x7}}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "dd6fba"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x0) 640.741794ms ago: executing program 5 (id=18113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xfffffffd, @loopback}}, 0x0, 0x0, 0x5, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 561.968427ms ago: executing program 6 (id=18114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfe00}]}}}]}, 0x40}}, 0x0) 500.990696ms ago: executing program 0 (id=18115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0ffff6902"]) 495.623733ms ago: executing program 3 (id=18116): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 369.682173ms ago: executing program 5 (id=18117): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xc5) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 277.012663ms ago: executing program 3 (id=18118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x7ffffffe, 0x1}) 260.629703ms ago: executing program 6 (id=18119): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 239.503221ms ago: executing program 0 (id=18120): lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x24, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) 179.175342ms ago: executing program 5 (id=18121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 106.094948ms ago: executing program 6 (id=18122): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r1, 0x0) bind$can_raw(r0, &(0x7f00000001c0), 0x10) 82.376658ms ago: executing program 0 (id=18123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 818.812µs ago: executing program 6 (id=18124): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=18125): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x3, 0x8, 0x4cf}, &(0x7f00000001c0)=0x10) kernel console output (not intermixed with test programs): idge_slave_1) entered blocking state [ 1028.573239][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.586518][ T8150] bridge_slave_1: entered allmulticast mode [ 1028.600140][ T8150] bridge_slave_1: entered promiscuous mode [ 1028.666533][ T8216] netlink: 'syz.0.15369': attribute type 34 has an invalid length. [ 1028.716115][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.743126][T26659] IPVS: stop unused estimator thread 0... [ 1028.753593][ T4651] koneplus 0003:1E7D:2E22.0079: unknown main item tag 0x1 [ 1028.756591][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.777796][ T4651] koneplus 0003:1E7D:2E22.0079: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1028.920216][ T8150] team0: Port device team_slave_0 added [ 1028.959523][ T8150] team0: Port device team_slave_1 added [ 1028.967937][ T4651] usb 2-1: USB disconnect, device number 20 [ 1029.096677][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.121343][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.173406][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.198450][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.216805][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.244448][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.390624][ T8150] hsr_slave_0: entered promiscuous mode [ 1029.408902][ T8150] hsr_slave_1: entered promiscuous mode [ 1029.426296][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1029.433941][ T8150] Cannot create hsr debugfs directory [ 1029.626672][ T8240] sctp: [Deprecated]: syz.3.15378 (pid 8240) Use of int in max_burst socket option. [ 1029.626672][ T8240] Use struct sctp_assoc_value instead [ 1029.970220][ T5828] Bluetooth: hci1: command tx timeout [ 1030.047153][ T8259] serio: Serial port ptm0 [ 1030.162522][ T30] kauditd_printk_skb: 5891 callbacks suppressed [ 1030.162538][ T30] audit: type=1400 audit(2000000150.538:1596154): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1030.212991][ T8267] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1030.224379][ T8263] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1030.227746][ T8268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1030.231878][ T8267] audit: audit_lost=93416 audit_rate_limit=0 audit_backlog_limit=64 [ 1030.245507][ T8263] audit: audit_lost=93417 audit_rate_limit=0 audit_backlog_limit=64 [ 1030.252970][ T8268] audit: audit_lost=93418 audit_rate_limit=0 audit_backlog_limit=64 [ 1030.258620][ T8267] audit: backlog limit exceeded [ 1030.266328][ T8267] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1030.273267][ T30] audit: type=1400 audit(2000000150.538:1596155): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1030.524649][ T8150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.559912][ T8150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.597073][ T8150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.647710][ T8150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1030.847668][ T8287] block nbd1: server does not support multiple connections per device. [ 1030.863760][ T8287] block nbd1: shutting down sockets [ 1030.884499][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.941923][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.972768][T26610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.980032][T26610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.033380][T13241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.040596][T13241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.172234][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.392760][ T8312] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1031.729503][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.201203][ T5828] Bluetooth: hci1: command tx timeout [ 1032.325701][ T8347] sctp: [Deprecated]: syz.3.15419 (pid 8347) Use of int in maxseg socket option. [ 1032.325701][ T8347] Use struct sctp_assoc_value instead [ 1032.683026][ T8362] netlink: 'syz.5.15426': attribute type 2 has an invalid length. [ 1032.705972][ T8362] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15426'. [ 1032.882025][ T8150] veth0_vlan: entered promiscuous mode [ 1032.915364][ T8150] veth1_vlan: entered promiscuous mode [ 1032.957205][ T8150] veth0_macvtap: entered promiscuous mode [ 1032.968044][ T8150] veth1_macvtap: entered promiscuous mode [ 1032.988706][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.002728][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.014211][ T8150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.024185][ T8150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.033230][ T8150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.043015][ T8150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.133144][T26623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.147879][T26623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.178904][T13241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.186789][T13241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.534794][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15433'. [ 1034.418278][ T5828] Bluetooth: hci1: command tx timeout [ 1034.430124][ T8390] random: crng reseeded on system resumption [ 1035.519582][ T30] kauditd_printk_skb: 8981 callbacks suppressed [ 1035.519600][ T30] audit: type=1400 audit(2000000155.552:1604593): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1035.547411][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1035.550669][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1035.560452][ C0] audit: audit_lost=93600 audit_rate_limit=0 audit_backlog_limit=64 [ 1035.568483][ C0] audit: backlog limit exceeded [ 1035.568552][ T5833] audit: audit_lost=93601 audit_rate_limit=0 audit_backlog_limit=64 [ 1035.573707][T29206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1035.573723][T29206] audit: audit_lost=93602 audit_rate_limit=0 audit_backlog_limit=64 [ 1035.573738][T29206] audit: backlog limit exceeded [ 1035.573752][T29206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1036.328565][ T8475] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1037.228750][ T4630] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1037.413522][ T4630] usb 2-1: Using ep0 maxpacket: 32 [ 1037.445823][ T4630] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1037.460711][ T4630] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1037.470430][ T4630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.489987][ T4630] usb 2-1: Product: syz [ 1037.503447][ T4630] usb 2-1: Manufacturer: syz [ 1037.514155][ T4630] usb 2-1: SerialNumber: syz [ 1037.543684][ T4630] usb 2-1: config 0 descriptor?? [ 1038.005757][ T4630] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1038.435522][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15508'. [ 1038.449535][ T4630] usb 2-1: USB disconnect, device number 21 [ 1038.543769][ T4651] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1038.708084][ T4651] usb 6-1: Using ep0 maxpacket: 32 [ 1038.719058][ T4651] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.732065][ T4651] usb 6-1: config 0 has no interface number 0 [ 1038.741564][ T4651] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.776106][ T4651] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.816914][ T4651] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1038.848123][ T4651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.862721][ T4651] usb 6-1: config 0 descriptor?? [ 1039.493490][ T8582] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 1039.531331][ T4651] uclogic 0003:28BD:0094.007A: pen parameters not found [ 1039.538727][ T4651] uclogic 0003:28BD:0094.007A: interface is invalid, ignoring [ 1039.761432][ T4651] usb 6-1: USB disconnect, device number 89 [ 1040.877020][ T30] kauditd_printk_skb: 9363 callbacks suppressed [ 1040.877037][ T30] audit: type=1400 audit(2000000160.566:1613301): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1040.912913][ T8637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1040.922519][ T8638] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1040.928289][ T8637] audit: audit_lost=93822 audit_rate_limit=0 audit_backlog_limit=64 [ 1040.936361][ T8638] audit: audit_lost=93823 audit_rate_limit=0 audit_backlog_limit=64 [ 1040.937037][ T8637] audit: backlog limit exceeded [ 1040.945223][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1040.945242][ C0] audit: audit_lost=93824 audit_rate_limit=0 audit_backlog_limit=64 [ 1040.945259][ C0] audit: backlog limit exceeded [ 1040.945960][ T8638] audit: backlog limit exceeded [ 1041.014343][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15553'. [ 1041.041517][ T4651] kernel write not supported for file bpf-map (pid: 4651 comm: kworker/0:17) [ 1041.414704][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15560'. [ 1041.662139][ T8672] dummy0: entered allmulticast mode [ 1041.680033][ T8670] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.15565'. [ 1041.708307][ T8672] dummy0: left allmulticast mode [ 1042.479854][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15582'. [ 1042.563280][ T5959] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1042.708486][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15587'. [ 1042.768860][ T5959] usb 2-1: config 0 has no interfaces? [ 1042.782532][ T5959] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1042.792659][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.810683][ T5959] usb 2-1: Product: syz [ 1042.814895][ T5959] usb 2-1: Manufacturer: syz [ 1042.824547][ T5959] usb 2-1: SerialNumber: syz [ 1042.845155][ T5959] usb 2-1: config 0 descriptor?? [ 1042.904242][ T8720] bond0: (slave bond2): Error -95 calling ndo_bpf [ 1042.913264][ T8721] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1043.089166][ T5959] usb 2-1: USB disconnect, device number 22 [ 1043.155876][ T8729] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1044.075226][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15610'. [ 1044.134321][ T8771] loop8: detected capacity change from 0 to 1 [ 1044.142107][ T8771] Dev loop8: unable to read RDB block 1 [ 1044.163961][ T8771] loop8: unable to read partition table [ 1044.184594][ T8771] loop8: partition table beyond EOD, truncated [ 1044.204308][ T8771] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1044.385630][ T8784] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1045.242052][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15632'. [ 1045.893643][ T8830] macsec1: entered allmulticast mode [ 1045.911123][ T8830] ip6gretap0: entered allmulticast mode [ 1045.950369][ T8830] ip6gretap0: left allmulticast mode [ 1046.236790][ T30] kauditd_printk_skb: 10947 callbacks suppressed [ 1046.236808][ T30] audit: type=1400 audit(2000000165.570:1622262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1046.248017][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1046.263747][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1046.263768][ C0] audit: audit_lost=94487 audit_rate_limit=0 audit_backlog_limit=64 [ 1046.263784][ C0] audit: backlog limit exceeded [ 1046.273962][ T30] audit: type=1400 audit(2000000165.570:1622263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1046.278991][ T8845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1046.286144][ T30] audit: type=1400 audit(2000000165.570:1622264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8845 comm="syz-executor" name="34" dev="tmpfs" ino=187 [ 1046.286188][ T30] audit: type=1400 audit(2000000165.570:1622265): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=8845 comm="syz-executor" opid=8845 ocomm="syz-executor" [ 1046.286227][ T30] audit: type=1400 audit(2000000165.570:1622266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8845 comm="syz-executor" name="34" dev="tmpfs" ino=187 [ 1046.430573][ T8847] netlink: 'syz.3.15651': attribute type 1 has an invalid length. [ 1046.476562][ T8847] netlink: 'syz.3.15651': attribute type 2 has an invalid length. [ 1046.821997][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15660'. [ 1046.844196][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15660'. [ 1046.989539][ T5959] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1047.164713][ T5959] usb 6-1: config 0 has no interfaces? [ 1047.170286][ T5959] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1047.184457][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.214537][ T5959] usb 6-1: config 0 descriptor?? [ 1047.447511][ T4638] usb 6-1: USB disconnect, device number 90 [ 1048.191820][ T8929] netlink: 'syz.5.15688': attribute type 1 has an invalid length. [ 1048.213648][ T8929] netlink: 212 bytes leftover after parsing attributes in process `syz.5.15688'. [ 1048.223869][ T8929] netlink: 'syz.5.15688': attribute type 1 has an invalid length. [ 1049.459708][ T8982] tap0: tun_chr_ioctl cmd 1074025675 [ 1049.468342][ T8982] tap0: persist disabled [ 1049.972113][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15724'. [ 1050.184171][ T9014] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1050.575075][ T9033] netlink: 'syz.5.15736': attribute type 9 has an invalid length. [ 1050.585761][ T9033] netlink: 146708 bytes leftover after parsing attributes in process `syz.5.15736'. [ 1050.795280][ T9039] block nbd1: server does not support multiple connections per device. [ 1050.796040][ T4638] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1050.808019][ T9039] block nbd1: shutting down sockets [ 1050.966527][ T4638] usb 2-1: Using ep0 maxpacket: 32 [ 1050.982763][ T4638] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1050.982812][ T9047] @: renamed from vlan0 [ 1050.992048][ T4638] usb 2-1: config 0 has no interface number 0 [ 1051.002151][ T4638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.003368][ T9047] tipc: Disabling bearer [ 1051.020557][ T4638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.033323][ T4638] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1051.042972][ T4638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.055097][ T4638] usb 2-1: config 0 descriptor?? [ 1051.341536][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15747'. [ 1051.590341][ T30] kauditd_printk_skb: 11051 callbacks suppressed [ 1051.590359][ T30] audit: type=1400 audit(2000000170.565:1632346): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1051.623854][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1051.623871][ T9069] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1051.637370][T29206] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1051.637755][ T9069] audit: audit_lost=94796 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.648876][T29206] audit: audit_lost=94797 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.653162][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1051.653181][ C0] audit: audit_lost=94798 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.653196][ C0] audit: backlog limit exceeded [ 1051.654950][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1051.733483][ T4638] uclogic 0003:28BD:0094.007B: pen parameters not found [ 1051.747420][ T4638] uclogic 0003:28BD:0094.007B: interface is invalid, ignoring [ 1051.992456][ T4630] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1052.000204][ T5959] usb 2-1: USB disconnect, device number 23 [ 1052.163956][ T4630] usb 6-1: Using ep0 maxpacket: 16 [ 1052.176993][ T9094] ipvlan2: entered allmulticast mode [ 1052.178016][ T4630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.182572][ T9094] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1052.210849][ T4630] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1052.220135][ T4630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.234939][ T4630] usb 6-1: config 0 descriptor?? [ 1052.706264][ T4630] logitech-djreceiver 0003:046D:C513.007C: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.5-1/input0 [ 1052.763250][ T9114] sctp: [Deprecated]: syz.1.15773 (pid 9114) Use of int in max_burst socket option. [ 1052.763250][ T9114] Use struct sctp_assoc_value instead [ 1052.971046][ T4630] usb 6-1: USB disconnect, device number 91 [ 1053.414736][ T4638] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1053.607384][ T4638] usb 2-1: config 1 has an invalid interface number: 114 but max is 0 [ 1053.615614][ T4638] usb 2-1: config 1 has no interface number 0 [ 1053.628100][ T4638] usb 2-1: config 1 interface 114 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1053.648912][ T4638] usb 2-1: New USB device found, idVendor=12d1, idProduct=aa6e, bcdDevice=b1.16 [ 1053.666335][ T4638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.675211][ T4638] usb 2-1: Product: syz [ 1053.679434][ T4638] usb 2-1: Manufacturer: syz [ 1053.694515][ T4638] usb 2-1: SerialNumber: syz [ 1053.968483][ T4638] option 2-1:1.114: GSM modem (1-port) converter detected [ 1053.997020][ T4638] usb 2-1: USB disconnect, device number 24 [ 1054.015927][ T4638] option 2-1:1.114: device disconnected [ 1054.219520][ T9167] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1054.853632][ T9185] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1056.379750][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15849'. [ 1056.673259][ T9273] bridge0: port 4(batadv1) entered blocking state [ 1056.688135][ T9273] bridge0: port 4(batadv1) entered disabled state [ 1056.695881][ T9273] batadv1: entered allmulticast mode [ 1056.709537][ T9273] batadv1: entered promiscuous mode [ 1056.944296][ T30] kauditd_printk_skb: 10241 callbacks suppressed [ 1056.944314][ T30] audit: type=1400 audit(2000000175.588:1642413): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9282 comm="syz.3.15863" name="newroot" dev="tmpfs" ino=2 [ 1057.001037][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.002044][ T9287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.018592][ T30] audit: type=1400 audit(2000000175.588:1642414): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9282 comm="syz.3.15863" name="dev" dev="tmpfs" ino=3 [ 1057.018781][T29206] audit: audit_lost=94874 audit_rate_limit=0 audit_backlog_limit=64 [ 1057.055109][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.061946][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.068512][ C0] audit: audit_lost=94875 audit_rate_limit=0 audit_backlog_limit=64 [ 1057.073242][T29206] audit: backlog limit exceeded [ 1057.076505][ C0] audit: backlog limit exceeded [ 1057.211917][T13241] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1057.222025][T13241] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1057.753773][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15870'. [ 1057.955216][ T9332] program syz.5.15877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.980727][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15902'. [ 1059.370494][ T9402] netlink: 'syz.0.15908': attribute type 2 has an invalid length. [ 1061.140869][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15949'. [ 1062.066626][ T5959] kernel write not supported for file /vbi5 (pid: 5959 comm: kworker/0:6) [ 1062.243997][ T9532] netlink: 844 bytes leftover after parsing attributes in process `syz.3.15969'. [ 1062.300305][ T30] kauditd_printk_skb: 11892 callbacks suppressed [ 1062.300324][ T30] audit: type=1400 audit(2000000180.593:1653252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1062.332865][ T30] audit: type=1400 audit(2000000180.602:1653263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="1165" dev="tmpfs" ino=5953 [ 1062.355227][ T9535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.357731][ T30] audit: type=1400 audit(2000000180.602:1653264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1062.361779][ T9535] audit: audit_lost=95225 audit_rate_limit=0 audit_backlog_limit=64 [ 1062.386604][ T30] audit: type=1400 audit(2000000180.602:1653265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1062.391574][ T9535] audit: backlog limit exceeded [ 1062.417925][ T30] audit: type=1400 audit(2000000180.602:1653266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="1165" dev="tmpfs" ino=5953 [ 1062.434630][ T9535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.442692][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1062.520180][ T4638] kernel write not supported for file bpf-prog (pid: 4638 comm: kworker/1:8) [ 1062.856914][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15978'. [ 1063.438832][ T9570] tipc: Started in network mode [ 1063.443943][ T9570] tipc: Node identity ac14140f, cluster identity 4711 [ 1063.451051][ T9570] tipc: New replicast peer: 255.255.255.255 [ 1063.472098][ T9570] tipc: Enabled bearer , priority 10 [ 1063.727745][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15992'. [ 1064.182760][ T9599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.673733][ T5959] tipc: Node number set to 2886997007 [ 1064.803241][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16016'. [ 1064.926134][ T9634] vxcan0: entered allmulticast mode [ 1065.484254][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16028'. [ 1065.590229][ T9659] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.16030'. [ 1066.214126][ T9685] mkiss: ax0: crc mode is auto. [ 1066.278523][ T9685] Falling back ldisc for pty21. [ 1066.463522][T29415] kernel write not supported for file bpf-map (pid: 29415 comm: kworker/1:0) [ 1067.625417][ T4651] kernel write not supported for file /input/event2 (pid: 4651 comm: kworker/0:17) [ 1067.669350][ T30] kauditd_printk_skb: 10189 callbacks suppressed [ 1067.669367][ T30] audit: type=1400 audit(2000000185.625:1663119): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5811 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1067.703281][ T30] audit: type=1400 audit(2000000185.625:1663120): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1067.706493][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1067.725734][ T30] audit: type=1400 audit(2000000185.625:1663121): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1067.725792][ T30] audit: type=1400 audit(2000000185.644:1663122): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8150 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1067.725833][ T30] audit: type=1400 audit(2000000185.644:1663123): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8150 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1067.725873][ T30] audit: type=1400 audit(2000000185.644:1663124): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8150 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1067.725913][ T30] audit: type=1400 audit(2000000185.644:1663125): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8150 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1067.725953][ T30] audit: type=1400 audit(2000000185.644:1663126): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=8150 comm="syz-executor" name="124" dev="tmpfs" ino=642 [ 1067.725990][ T30] audit: type=1400 audit(2000000185.644:1663127): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8150 comm="syz-executor" path="/124" dev="tmpfs" ino=642 [ 1068.227893][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16079'. [ 1068.712780][ T9787] TCP: TCP_TX_DELAY enabled [ 1068.723744][ T9788] pim6reg: entered allmulticast mode [ 1068.752979][ T9785] pim6reg: left allmulticast mode [ 1070.479320][ T9866] misc userio: Can't change port type on an already running userio instance [ 1072.910466][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1073.022290][ T30] kauditd_printk_skb: 19856 callbacks suppressed [ 1073.022308][ T30] audit: type=1400 audit(2000000190.639:1679199): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9937 comm="syz-executor" path="/proc/311/oom_score_adj" dev="proc" ino=154504 [ 1073.049196][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1073.049215][ T6020] audit: audit_lost=96601 audit_rate_limit=0 audit_backlog_limit=64 [ 1073.049230][ T6020] audit: backlog limit exceeded [ 1073.049242][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1073.049255][ T6020] audit: audit_lost=96602 audit_rate_limit=0 audit_backlog_limit=64 [ 1073.049268][ T6020] audit: backlog limit exceeded [ 1073.049284][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1073.049296][ T6020] audit: audit_lost=96603 audit_rate_limit=0 audit_backlog_limit=64 [ 1073.049310][ T6020] audit: backlog limit exceeded [ 1074.130394][T26630] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.348766][T26630] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.542617][T26630] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.787151][T26630] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.204210][T26630] bridge_slave_1: left allmulticast mode [ 1075.209908][T26630] bridge_slave_1: left promiscuous mode [ 1075.262094][T26630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.307638][T26630] bridge_slave_0: left allmulticast mode [ 1075.325985][T26630] bridge_slave_0: left promiscuous mode [ 1075.341349][T26630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.480759][ T4638] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1075.593578][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1075.615634][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1075.638021][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1075.654069][ T4638] usb 6-1: config 1 has an invalid interface number: 114 but max is 0 [ 1075.663040][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1075.671345][ T4638] usb 6-1: config 1 has no interface number 0 [ 1075.678999][ T4638] usb 6-1: config 1 interface 114 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.691371][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1075.707436][ T4638] usb 6-1: New USB device found, idVendor=12d1, idProduct=aa6e, bcdDevice=b1.16 [ 1075.738191][ T4638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.775034][ T4638] usb 6-1: Product: syz [ 1075.795216][ T4638] usb 6-1: Manufacturer: syz [ 1075.799889][ T4638] usb 6-1: SerialNumber: syz [ 1076.077477][ T4638] option 6-1:1.114: GSM modem (1-port) converter detected [ 1076.112995][ T4638] usb 6-1: USB disconnect, device number 92 [ 1076.124664][ T4638] option 6-1:1.114: device disconnected [ 1076.342342][T26630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.383875][T26630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.414220][T26630] bond0 (unregistering): Released all slaves [ 1076.847445][T26630] hsr_slave_0: left promiscuous mode [ 1076.856481][T26630] hsr_slave_1: left promiscuous mode [ 1076.862740][T26630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.870994][T26630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.879666][T26630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.887362][T26630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.916213][T26630] veth1_macvtap: left promiscuous mode [ 1076.921876][T26630] veth0_macvtap: left promiscuous mode [ 1076.928060][T26630] veth1_vlan: left promiscuous mode [ 1076.933587][T26630] veth0_vlan: left promiscuous mode [ 1077.954997][ T5828] Bluetooth: hci1: command tx timeout [ 1078.193479][T10015] 9pnet_fd: Insufficient options for proto=fd [ 1078.260009][T26630] team0 (unregistering): Port device team_slave_1 removed [ 1078.377153][ T6020] audit_log_start: 31306 callbacks suppressed [ 1078.377170][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.384360][ T30] audit: type=1400 audit(2000000196.635:1697678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6020 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1078.391491][ T6020] audit: audit_lost=100880 audit_rate_limit=0 audit_backlog_limit=64 [ 1078.415575][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.425520][T29206] audit: audit_lost=100881 audit_rate_limit=0 audit_backlog_limit=64 [ 1078.429355][ T6020] audit: backlog limit exceeded [ 1078.440125][T26630] team0 (unregistering): Port device team_slave_0 removed [ 1078.442367][T29206] audit: backlog limit exceeded [ 1078.447710][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.462947][ T30] audit: type=1400 audit(2000000196.635:1697679): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1078.474114][ T6020] audit: audit_lost=100882 audit_rate_limit=0 audit_backlog_limit=64 [ 1079.908592][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16203'. [ 1079.992578][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 1080.174594][ T5828] Bluetooth: hci1: command tx timeout [ 1080.459201][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.474796][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.490395][ T9988] bridge_slave_0: entered allmulticast mode [ 1080.538147][ T9988] bridge_slave_0: entered promiscuous mode [ 1080.562816][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.570122][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.584451][ T9988] bridge_slave_1: entered allmulticast mode [ 1080.601240][ T9988] bridge_slave_1: entered promiscuous mode [ 1080.740152][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.771816][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.900859][ T9988] team0: Port device team_slave_0 added [ 1080.911059][ T9988] team0: Port device team_slave_1 added [ 1081.000514][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.018616][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.097910][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.136796][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.157763][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.259572][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.462509][ T9988] hsr_slave_0: entered promiscuous mode [ 1081.469253][ T9988] hsr_slave_1: entered promiscuous mode [ 1081.475659][ T9988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.484819][ T9988] Cannot create hsr debugfs directory [ 1081.701552][ T4630] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1081.879109][ T4630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.915694][ T4630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.947520][ T4630] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1081.988833][ T4630] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.024074][ T4630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.053075][ T4630] usb 6-1: config 0 descriptor?? [ 1082.396843][ T5828] Bluetooth: hci1: command tx timeout [ 1082.529107][ T4630] plantronics 0003:047F:FFFF.007D: No inputs registered, leaving [ 1082.564440][ T4630] plantronics 0003:047F:FFFF.007D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1082.745492][T10089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1082.758102][ T9988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1082.787359][T10089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1082.790733][ T9988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1082.818314][ T4636] usb 6-1: USB disconnect, device number 93 [ 1082.851452][ T9988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1082.884694][ T9988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1083.120415][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.183171][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.222908][T13241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.230126][T13241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.278075][T26610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.285302][T26610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.734522][ T30] kauditd_printk_skb: 31614 callbacks suppressed [ 1083.734541][ T30] audit: type=1400 audit(2000000201.658:1717051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10114 comm="modprobe" name="/" dev="sda1" ino=2 [ 1083.808471][ T6020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.815022][ T6020] audit: audit_lost=104964 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.823959][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.829277][T10114] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.835147][T29206] audit: audit_lost=104965 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.837922][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.851620][ C0] audit: audit_lost=104966 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.859801][ C0] audit: backlog limit exceeded [ 1083.864937][ T6020] audit: backlog limit exceeded [ 1084.403222][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.621393][ T5828] Bluetooth: hci1: command tx timeout [ 1085.334255][ T9988] veth0_vlan: entered promiscuous mode [ 1085.356696][ T9988] veth1_vlan: entered promiscuous mode [ 1085.436523][ T9988] veth0_macvtap: entered promiscuous mode [ 1085.456546][ T9988] veth1_macvtap: entered promiscuous mode [ 1085.505641][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.531327][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.574553][ T9988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.595230][ T9988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.608715][ T9988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.635748][ T9988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.801577][T26610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.842713][T26610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.902377][T26630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.918281][T26630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.279304][ T4638] kernel read not supported for file /swradio3 (pid: 4638 comm: kworker/1:8) [ 1086.694908][T10167] program syz.6.16254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1087.222408][T10178] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.16259'. [ 1087.287365][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1087.300377][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1087.323547][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1087.341642][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1087.383299][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1087.659708][T26610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.874806][T26610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.918394][T10203] kernel read not supported for file /z (pid: 10203 comm: syz.0.16268) [ 1088.059105][T26610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.314441][T26610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.583106][T10180] chnl_net:caif_netlink_parms(): no params data found [ 1088.860368][T26610] bridge_slave_1: left allmulticast mode [ 1088.874896][T26610] bridge_slave_1: left promiscuous mode [ 1088.885925][T26610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.930421][T26610] bridge_slave_0: left allmulticast mode [ 1088.950578][T26610] bridge_slave_0: left promiscuous mode [ 1088.959205][T26610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.160670][ T30] kauditd_printk_skb: 17986 callbacks suppressed [ 1089.160689][ T30] audit: type=1400 audit(2000000206.728:1730753): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1089.175074][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1089.200588][ T30] audit: type=1400 audit(2000000206.728:1730754): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1089.226383][ T30] audit: type=1400 audit(2000000206.728:1730755): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="3005" dev="tmpfs" ino=15200 [ 1089.228923][ T9988] audit: audit_lost=106395 audit_rate_limit=0 audit_backlog_limit=64 [ 1089.255019][ T30] audit: type=1400 audit(2000000206.728:1730756): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=10241 comm="syz-executor" opid=10241 ocomm="syz-executor" [ 1089.255067][ T30] audit: type=1400 audit(2000000206.728:1730757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="3005" dev="tmpfs" ino=15200 [ 1089.255109][ T30] audit: type=1400 audit(2000000206.728:1730758): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="3005" dev="tmpfs" ino=15200 [ 1089.255148][ T30] audit: type=1400 audit(2000000206.728:1730759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10241 comm="syz-executor" name="3005" dev="tmpfs" ino=15200 [ 1089.255187][ T30] audit: type=1400 audit(2000000206.728:1730760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10241 comm="syz-executor" name="3005" dev="tmpfs" ino=15200 [ 1089.587451][ T5828] Bluetooth: hci5: command tx timeout [ 1089.807829][T26610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.820683][T26610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.832874][T26610] bond0 (unregistering): Released all slaves [ 1089.900606][T10246] netlink: 'syz.3.16287': attribute type 34 has an invalid length. [ 1090.128083][T26610] tipc: Disabling bearer [ 1090.134020][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.146716][T26610] tipc: Left network mode [ 1090.168938][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.180340][T10180] bridge_slave_0: entered allmulticast mode [ 1090.214648][T10180] bridge_slave_0: entered promiscuous mode [ 1090.223753][T10259] program syz.5.16293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1090.369196][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.399839][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.418592][T10180] bridge_slave_1: entered allmulticast mode [ 1090.450891][T10180] bridge_slave_1: entered promiscuous mode [ 1090.530137][T10268] loop8: detected capacity change from 0 to 7 [ 1090.538213][T10268] Dev loop8: unable to read RDB block 7 [ 1090.553744][T10268] loop8: AHDI p1 p2 p3 p4 [ 1090.558263][T10268] loop8: partition table partially beyond EOD, truncated [ 1090.574551][T10268] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1090.581402][T10268] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1090.588394][T10268] loop8: p3 size 4160749567 extends beyond EOD, truncated [ 1090.626480][ T5828] Bluetooth: hci4: unexpected cc 0x042f length: 9 > 7 [ 1090.633745][ T5828] Bluetooth: hci4: unexpected event for opcode 0x042f [ 1090.803813][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.846300][T26610] hsr_slave_0: left promiscuous mode [ 1090.865565][T26610] hsr_slave_1: left promiscuous mode [ 1090.887172][T26610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.894632][T26610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.920848][T26610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.941049][T26610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.990706][T26610] veth1_macvtap: left promiscuous mode [ 1090.997852][T26610] veth0_macvtap: left promiscuous mode [ 1091.004256][T26610] veth1_vlan: left promiscuous mode [ 1091.010144][T26610] veth0_vlan: left promiscuous mode [ 1091.732762][T26610] team0 (unregistering): Port device team_slave_1 removed [ 1091.790626][T26610] team0 (unregistering): Port device team_slave_0 removed [ 1091.809786][ T5828] Bluetooth: hci5: command tx timeout [ 1092.304944][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.071185][T10180] team0: Port device team_slave_0 added [ 1093.115576][T10180] team0: Port device team_slave_1 added [ 1093.343242][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.366040][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.429715][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.543521][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.579523][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.643098][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.801909][T10180] hsr_slave_0: entered promiscuous mode [ 1093.809678][T10180] hsr_slave_1: entered promiscuous mode [ 1093.817104][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.825242][T10180] Cannot create hsr debugfs directory [ 1094.028331][ T5828] Bluetooth: hci5: command tx timeout [ 1094.332371][T10180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.345557][T10180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.357032][T10180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1094.371921][T10180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.490551][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.514990][ T30] kauditd_printk_skb: 3973 callbacks suppressed [ 1094.515008][ T30] audit: type=1400 audit(2000000211.742:1734640): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1094.559559][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.573962][ T30] audit: type=1400 audit(2000000211.742:1734641): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1094.606462][T26610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.613669][T26610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.627312][ T30] audit: type=1400 audit(2000000211.742:1734642): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.660840][T26610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.668020][T26610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.689444][ T30] audit: type=1400 audit(2000000211.742:1734643): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=10342 comm="syz-executor" opid=10342 ocomm="syz-executor" [ 1094.720078][ T30] audit: type=1400 audit(2000000211.742:1734644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.741585][ T30] audit: type=1400 audit(2000000211.742:1734645): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.763930][ T30] audit: type=1400 audit(2000000211.742:1734646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.784434][ T30] audit: type=1400 audit(2000000211.742:1734647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.803818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.812397][ T30] audit: type=1400 audit(2000000211.742:1734648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.835151][ T30] audit: type=1400 audit(2000000211.742:1734649): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10342 comm="syz-executor" name="1264" dev="tmpfs" ino=6464 [ 1094.852101][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.320298][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.896391][T10180] veth0_vlan: entered promiscuous mode [ 1095.917939][T10180] veth1_vlan: entered promiscuous mode [ 1095.980737][T10180] veth0_macvtap: entered promiscuous mode [ 1096.004884][T10180] veth1_macvtap: entered promiscuous mode [ 1096.042272][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.074815][T10378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16335'. [ 1096.075812][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.105844][T10180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.114255][T10378] netlink: 43 bytes leftover after parsing attributes in process `syz.3.16335'. [ 1096.130805][T10180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.145431][T10378] netlink: 'syz.3.16335': attribute type 6 has an invalid length. [ 1096.147378][T10180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.153259][T10378] netlink: 'syz.3.16335': attribute type 5 has an invalid length. [ 1096.153274][T10378] netlink: 43 bytes leftover after parsing attributes in process `syz.3.16335'. [ 1096.180668][T10180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.251805][ T5828] Bluetooth: hci5: command tx timeout [ 1096.336313][T26610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.372365][T26610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.450718][T26675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.463577][T26675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.465118][T10386] 9pnet_fd: Insufficient options for proto=fd [ 1096.880437][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16346'. [ 1096.896303][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16346'. [ 1097.078663][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16349'. [ 1097.131025][T10407] macvlan4: entered promiscuous mode [ 1097.155080][T10407] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1097.335624][T10418] input: syz1 as /devices/virtual/input/input83 [ 1097.676514][T10436] batadv_slave_1: entered promiscuous mode [ 1097.683586][T10435] batadv_slave_1: left promiscuous mode [ 1098.475322][ T4650] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1098.538472][T10461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16372'. [ 1098.660188][ T4650] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.699652][ T4650] usb 5-1: config 0 has no interface number 0 [ 1098.721817][ T4650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.763691][ T4650] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.773509][ T4650] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1098.828199][ T4650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.845604][ T4650] usb 5-1: config 0 descriptor?? [ 1099.369012][ T4650] prodikeys 0003:041E:2801.007E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1099.385832][ T4650] hid_prodikeys: hid-prodikeys: failed to find output report [ 1099.385832][ T4650] [ 1099.612751][ T4651] usb 5-1: USB disconnect, device number 74 [ 1099.884068][ T30] kauditd_printk_skb: 9198 callbacks suppressed [ 1099.884085][ T30] audit: type=1400 audit(2000000216.756:1743524): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29206 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1099.893690][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.914554][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.914577][T13097] audit: audit_lost=106535 audit_rate_limit=0 audit_backlog_limit=64 [ 1099.914591][T13097] audit: backlog limit exceeded [ 1099.914603][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.914615][T13097] audit: audit_lost=106536 audit_rate_limit=0 audit_backlog_limit=64 [ 1099.914628][T13097] audit: backlog limit exceeded [ 1099.914754][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.914771][T13097] audit: audit_lost=106537 audit_rate_limit=0 audit_backlog_limit=64 [ 1101.240981][T10558] syzkaller1: entered promiscuous mode [ 1101.267070][T10558] syzkaller1: entered allmulticast mode [ 1101.741747][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16427'. [ 1101.834549][T10587] netlink: 'syz.4.16428': attribute type 1 has an invalid length. [ 1101.842418][T10587] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.16428'. [ 1101.983166][T10592] netlink: 'syz.4.16431': attribute type 1 has an invalid length. [ 1101.991019][T10592] netlink: 'syz.4.16431': attribute type 2 has an invalid length. [ 1103.372792][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16455'. [ 1104.103859][T10663] binder: 10662:10663 ioctl c0306201 2000000003c0 returned -22 [ 1104.632972][ T5828] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1104.633563][ T5838] Bluetooth: hci2: command 0x1003 tx timeout [ 1105.234711][ T30] kauditd_printk_skb: 9315 callbacks suppressed [ 1105.234728][ T30] audit: type=1400 audit(2000000221.770:1752123): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1105.304761][ T30] audit: type=1400 audit(2000000221.770:1752124): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1105.307940][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.327568][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.337676][ C0] audit: audit_lost=106777 audit_rate_limit=0 audit_backlog_limit=64 [ 1105.340210][ T5833] audit: audit_lost=106778 audit_rate_limit=0 audit_backlog_limit=64 [ 1105.345761][ C0] audit: backlog limit exceeded [ 1105.354752][ T5833] audit: backlog limit exceeded [ 1105.358853][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.364412][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1106.674973][ T4650] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1106.857139][ T4650] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1106.899228][ T4650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.934222][ T4650] usb 6-1: config 0 descriptor?? [ 1106.944680][ T4650] cp210x 6-1:0.0: cp210x converter detected [ 1107.096173][T10761] syzkaller1: entered promiscuous mode [ 1107.123993][T10761] syzkaller1: entered allmulticast mode [ 1107.356073][T10770] bond0: entered promiscuous mode [ 1107.362721][T10770] bond_slave_0: entered promiscuous mode [ 1107.368690][T10770] bond_slave_1: entered promiscuous mode [ 1107.417999][ T4650] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1107.686946][ T4650] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1107.718524][T10779] syzkaller1: entered promiscuous mode [ 1107.724329][T10779] syzkaller1: entered allmulticast mode [ 1107.906423][ T4651] usb 6-1: USB disconnect, device number 94 [ 1107.929365][ T4651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1107.950221][ T4651] cp210x 6-1:0.0: device disconnected [ 1107.960997][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16517'. [ 1108.017755][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.031671][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x1 [ 1108.039462][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.050141][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.060149][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.077725][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.088661][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.096326][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.109269][ T4650] hid-generic 00A0:0008:0003.007F: unknown main item tag 0x0 [ 1108.124406][ T4650] hid-generic 00A0:0008:0003.007F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1108.210869][T10793] geneve2: entered promiscuous mode [ 1108.220102][T10793] geneve2: entered allmulticast mode [ 1109.262940][T10836] loop2: detected capacity change from 0 to 7 [ 1109.284808][T10836] Dev loop2: unable to read RDB block 7 [ 1109.290567][T10836] loop2: unable to read partition table [ 1109.304012][T10836] loop2: partition table beyond EOD, truncated [ 1109.313528][T10836] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1109.960645][ T5871] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1110.158374][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 1110.166741][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.192889][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.214040][ T5871] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1110.234119][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.259477][ T5871] usb 6-1: config 0 descriptor?? [ 1110.553490][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16559'. [ 1110.565496][T10875] netlink: 'syz.0.16559': attribute type 7 has an invalid length. [ 1110.574901][T10875] netlink: 'syz.0.16559': attribute type 8 has an invalid length. [ 1110.589481][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16559'. [ 1110.599748][ T30] kauditd_printk_skb: 8281 callbacks suppressed [ 1110.599764][ T30] audit: type=1400 audit(2000000226.793:1760039): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1110.610571][T10875] erspan0: entered promiscuous mode [ 1110.632679][ T30] audit: type=1400 audit(2000000226.793:1760040): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1110.657772][ T30] audit: type=1400 audit(2000000226.793:1760041): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1110.665672][T10875] gretap0: entered promiscuous mode [ 1110.698761][ T4652] kernel write not supported for file bpf-prog (pid: 4652 comm: kworker/0:18) [ 1110.707928][T10875] erspan0: left promiscuous mode [ 1110.712184][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.713417][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.720501][ T30] audit: type=1400 audit(2000000226.793:1760042): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1110.725942][ C0] audit: audit_lost=106902 audit_rate_limit=0 audit_backlog_limit=64 [ 1110.750246][T29206] audit: audit_lost=106903 audit_rate_limit=0 audit_backlog_limit=64 [ 1110.756411][ C0] audit: backlog limit exceeded [ 1110.757417][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.813240][ T5871] savu 0003:1E7D:2D5A.0080: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1110.831914][T10875] gretap0: left promiscuous mode [ 1111.073866][ T5871] usb 6-1: USB disconnect, device number 95 [ 1113.922741][T10990] netlink: 6 bytes leftover after parsing attributes in process `syz.4.16613'. [ 1114.054694][T10996] netlink: 'syz.0.16616': attribute type 2 has an invalid length. [ 1114.389292][T11014] program syz.0.16625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.533327][ T4636] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1114.710931][ T4636] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1114.730521][ T4636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.755421][ T4636] usb 6-1: config 0 descriptor?? [ 1114.793899][ T4636] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1115.057913][ T4636] gp8psk: usb in 128 operation failed. [ 1115.289848][ T4636] gp8psk: usb in 146 operation failed. [ 1115.299217][ T4636] gp8psk: failed to get FW version [ 1115.321761][ T4636] gp8psk: FPGA Version = 4 [ 1115.536595][ T4636] gp8psk: usb in 138 operation failed. [ 1115.552813][ T4636] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1115.568710][ T4636] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1115.587554][ T4636] usb 6-1: USB disconnect, device number 96 [ 1115.966032][ T30] kauditd_printk_skb: 9816 callbacks suppressed [ 1115.966051][ T30] audit: type=1400 audit(2000000231.797:1768851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1115.996295][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.003376][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.003490][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.003507][ C0] audit: audit_lost=107240 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.003522][ C0] audit: backlog limit exceeded [ 1116.003807][T29206] audit: audit_lost=107241 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.003824][T29206] audit: backlog limit exceeded [ 1116.003838][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.003863][T29206] audit: audit_lost=107242 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.061967][ T5871] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1116.235211][ T5871] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1116.256255][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.268213][ T5871] usb 5-1: config 0 descriptor?? [ 1116.279261][ T5871] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1116.520335][ T5871] gspca_spca508: reg_read err -32 [ 1116.539658][ T5871] gspca_spca508: reg_read err -32 [ 1116.550530][ T5871] gspca_spca508: reg_read err -32 [ 1116.773343][ T5871] gspca_spca508: reg_read err -71 [ 1116.779877][ T5871] gspca_spca508: reg write: error -71 [ 1116.785368][ T5871] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1116.812954][ T5871] usb 5-1: USB disconnect, device number 75 [ 1119.705035][T11190] syzkaller1: entered promiscuous mode [ 1119.734923][T11190] syzkaller1: entered allmulticast mode [ 1119.933948][T11197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.267061][T11211] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1120.279295][T11211] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1120.482887][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16718'. [ 1121.105925][T11244] macvlan1: entered promiscuous mode [ 1121.112413][T11244] ipvlan0: entered promiscuous mode [ 1121.119666][T11244] ipvlan0: left promiscuous mode [ 1121.130118][T11244] macvlan1: left promiscuous mode [ 1121.322032][ T30] kauditd_printk_skb: 8981 callbacks suppressed [ 1121.322048][ T30] audit: type=1400 audit(2000000236.820:1776939): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=13097 comm="syz-executor" path="/2746/cgroup.cpu" dev="tmpfs" ino=13931 [ 1121.373025][ T30] audit: type=1400 audit(2000000236.820:1776940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1121.399520][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.404377][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.411282][T13097] audit: audit_lost=107541 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.412626][ C0] audit: audit_lost=107542 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.422023][T13097] audit: backlog limit exceeded [ 1121.428779][ C0] audit: backlog limit exceeded [ 1121.429824][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.440122][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.878010][ T4636] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1122.066220][ T4636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.078369][ T4636] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1122.094253][ T4636] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1122.106557][ T4636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.121926][ T4636] usb 6-1: config 0 descriptor?? [ 1122.130812][ T4636] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1122.139299][ T4636] dvb-usb: bulk message failed: -22 (3/0) [ 1122.147403][ T4636] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1122.157894][ T4636] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1122.164961][ T4636] usb 6-1: media controller created [ 1122.172534][ T4636] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1122.185779][ T4636] dvb-usb: bulk message failed: -22 (6/0) [ 1122.192080][ T4636] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1122.201607][ T4636] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input84 [ 1122.215644][ T4636] dvb-usb: schedule remote query interval to 150 msecs. [ 1122.223078][ T4636] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1122.393503][ T4636] dvb-usb: bulk message failed: -22 (1/0) [ 1122.399707][ T4636] dvb-usb: error while querying for an remote control event. [ 1122.422845][ T5828] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1122.568248][ T4652] usb 6-1: USB disconnect, device number 97 [ 1122.600215][ T4652] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1123.048253][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16750'. [ 1123.608339][T11308] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 1123.910177][T11324] vivid-000: disconnect [ 1123.924879][T11319] vivid-000: reconnect [ 1124.537243][T11348] input: syz1 as /devices/virtual/input/input85 [ 1126.679171][ T30] kauditd_printk_skb: 8304 callbacks suppressed [ 1126.679189][ T30] audit: type=1400 audit(2000000241.824:1785034): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1126.742496][T10180] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1126.749054][T10180] audit: audit_lost=107614 audit_rate_limit=0 audit_backlog_limit=64 [ 1126.757644][T11419] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1126.758340][T11420] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1126.769568][ T30] audit: type=1400 audit(2000000241.824:1785035): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1126.771846][T11420] audit: audit_lost=107615 audit_rate_limit=0 audit_backlog_limit=64 [ 1126.801082][T11419] audit: audit_lost=107616 audit_rate_limit=0 audit_backlog_limit=64 [ 1126.805673][T10180] audit: backlog limit exceeded [ 1126.811897][T11419] audit: backlog limit exceeded [ 1127.508282][T11441] vivid-001: disconnect [ 1127.533645][T11438] vivid-001: reconnect [ 1127.794771][T11454] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1127.807228][T11454] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1130.240883][T11523] input: syz0 as /devices/virtual/input/input86 [ 1132.053339][ T30] kauditd_printk_skb: 6850 callbacks suppressed [ 1132.053357][ T30] audit: type=1400 audit(2000000246.848:1791585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11578 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1132.092088][ T30] audit: type=1400 audit(2000000246.876:1791586): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11578 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1132.116184][ T30] audit: type=1400 audit(2000000246.876:1791587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11578 comm="syz-executor" name="86" dev="tmpfs" ino=455 [ 1132.140487][ T30] audit: type=1400 audit(2000000246.876:1791588): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=11578 comm="syz-executor" opid=11578 ocomm="syz-executor" [ 1132.196941][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1132.207948][ T5833] audit: audit_lost=107717 audit_rate_limit=0 audit_backlog_limit=64 [ 1132.218045][ T30] audit: type=1400 audit(2000000246.885:1791589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11578 comm="syz-executor" name="86" dev="tmpfs" ino=455 [ 1132.242528][ T5833] audit: backlog limit exceeded [ 1132.248083][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1132.254828][ T5833] audit: audit_lost=107718 audit_rate_limit=0 audit_backlog_limit=64 [ 1133.572817][ T4636] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1133.747516][ T4636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.762648][ T4636] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.804807][ T4636] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1133.818038][ T4636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.839205][ T4636] usb 6-1: Product: syz [ 1133.862158][ T4636] usb 6-1: Manufacturer: syz [ 1133.866807][ T4636] usb 6-1: SerialNumber: syz [ 1134.020921][T11637] binder: 11636:11637 ioctl c018620b 200000000700 returned -14 [ 1134.166980][ T4636] usb 6-1: 0:2 : does not exist [ 1134.194627][ T4636] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1134.219985][ T4636] usb 6-1: USB disconnect, device number 98 [ 1136.882142][ T4636] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1137.023505][T11718] overlayfs: upper fs does not support tmpfile. [ 1137.060236][ T4636] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1137.090075][ T4636] usb 5-1: config 0 has no interface number 0 [ 1137.096237][ T4636] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1137.119857][ T4636] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1137.145000][ T4636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.153138][ T4636] usb 5-1: Product: syz [ 1137.177056][ T4636] usb 5-1: Manufacturer: syz [ 1137.181706][ T4636] usb 5-1: SerialNumber: syz [ 1137.211326][ T4636] usb 5-1: config 0 descriptor?? [ 1137.237268][T11724] netlink: 176 bytes leftover after parsing attributes in process `syz.0.16938'. [ 1137.417378][ T30] kauditd_printk_skb: 7914 callbacks suppressed [ 1137.417396][ T30] audit: type=1400 audit(2000000251.871:1798801): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1137.440638][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1137.443774][ T5833] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1137.443791][ T5833] audit: audit_lost=107953 audit_rate_limit=0 audit_backlog_limit=64 [ 1137.443806][ T5833] audit: backlog limit exceeded [ 1137.443823][ T5833] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1137.443835][ T5833] audit: audit_lost=107954 audit_rate_limit=0 audit_backlog_limit=64 [ 1137.443849][ T5833] audit: backlog limit exceeded [ 1137.443950][ T5833] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1137.443963][ T5833] audit: audit_lost=107955 audit_rate_limit=0 audit_backlog_limit=64 [ 1138.324410][ T4636] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1138.335941][ T4636] usb 5-1: USB disconnect, device number 76 [ 1138.397845][T11749] netlink: 'syz.3.16949': attribute type 1 has an invalid length. [ 1138.424429][T11749] bond3: entered promiscuous mode [ 1138.443124][T11749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1138.498728][T11751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1138.509730][T11751] bond3: (slave bond4): making interface the new active one [ 1138.517206][T11751] bond4: entered promiscuous mode [ 1138.524742][T11751] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1138.596268][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1139.161888][T11781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.211143][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16964'. [ 1139.591685][ T4636] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1139.764789][ T4636] usb 5-1: Using ep0 maxpacket: 16 [ 1139.781476][ T4636] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.793399][ T4636] usb 5-1: config 0 has no interface number 0 [ 1139.810890][ T4636] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1139.823785][ T4636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.834230][ T4636] usb 5-1: Product: syz [ 1139.842288][ T4636] usb 5-1: Manufacturer: syz [ 1139.847290][ T4636] usb 5-1: SerialNumber: syz [ 1139.863354][ T4636] usb 5-1: config 0 descriptor?? [ 1139.873939][ T4636] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1140.815937][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1140.827304][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:7 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1140.827339][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1140.827353][ T5838] Workqueue: hci1 hci_rx_work [ 1140.827385][ T5838] Call Trace: [ 1140.827394][ T5838] [ 1140.827404][ T5838] dump_stack_lvl+0x189/0x250 [ 1140.827432][ T5838] ? kernfs_path_from_node+0x2c/0x260 [ 1140.827458][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.827483][ T5838] ? __pfx__printk+0x10/0x10 [ 1140.827504][ T5838] ? kernfs_path_from_node+0x2c/0x260 [ 1140.827527][ T5838] ? kernfs_path_from_node+0x2c/0x260 [ 1140.827552][ T5838] ? kernfs_path_from_node+0x22c/0x260 [ 1140.827574][ T5838] ? kernfs_path_from_node+0x2c/0x260 [ 1140.827602][ T5838] sysfs_create_dir_ns+0x259/0x280 [ 1140.827630][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1140.827656][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 1140.827682][ T5838] kobject_add_internal+0x59f/0xb40 [ 1140.827714][ T5838] kobject_add+0x155/0x220 [ 1140.827740][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 1140.827761][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 1140.827789][ T5838] ? get_device_parent+0x366/0x3a0 [ 1140.827814][ T5838] device_add+0x408/0xb50 [ 1140.827839][ T5838] hci_conn_add_sysfs+0xd5/0x1e0 [ 1140.827868][ T5838] le_conn_complete_evt+0xc3a/0x1220 [ 1140.827904][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1140.827927][ T5838] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1140.827956][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 1140.827974][ T5838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1140.827999][ T5838] ? skb_pull_data+0xfb/0x200 [ 1140.828028][ T5838] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1140.828051][ T5838] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1140.828077][ T5838] hci_event_packet+0x78c/0x1200 [ 1140.828108][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1140.828131][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 1140.828158][ T5838] ? kcov_remote_start+0x4d3/0x7f0 [ 1140.828179][ T5838] ? local_clock_noinstr+0xe0/0xe0 [ 1140.828207][ T5838] ? hci_send_to_monitor+0xe2/0x570 [ 1140.828233][ T5838] hci_rx_work+0x46a/0xe80 [ 1140.828268][ T5838] ? process_scheduled_works+0x9ef/0x17b0 [ 1140.828295][ T5838] process_scheduled_works+0xade/0x17b0 [ 1140.828360][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 1140.828405][ T5838] worker_thread+0x8a0/0xda0 [ 1140.828460][ T5838] kthread+0x70e/0x8a0 [ 1140.828484][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 1140.828508][ T5838] ? __pfx_kthread+0x10/0x10 [ 1140.828530][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 1140.828553][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1140.828575][ T5838] ? __pfx_kthread+0x10/0x10 [ 1140.828595][ T5838] ret_from_fork+0x3fc/0x770 [ 1140.828622][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 1140.828654][ T5838] ? __switch_to_asm+0x39/0x70 [ 1140.828671][ T5838] ? __switch_to_asm+0x33/0x70 [ 1140.828687][ T5838] ? __pfx_kthread+0x10/0x10 [ 1140.828708][ T5838] ret_from_fork_asm+0x1a/0x30 [ 1140.828745][ T5838] [ 1140.828777][ T5838] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1140.978313][ T4636] gspca_spca1528: reg_w err -71 [ 1140.978395][ T4636] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1140.980537][ T4636] usb 5-1: USB disconnect, device number 77 [ 1140.996629][ T5838] Bluetooth: hci1: failed to register connection device [ 1141.784056][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17000'. [ 1141.889706][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17000'. [ 1142.766519][ T30] kauditd_printk_skb: 7741 callbacks suppressed [ 1142.766539][ T30] audit: type=1400 audit(2000000256.866:1805988): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=29206 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1142.802033][T10180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.816135][ T5833] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1142.823054][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1142.829704][ C0] audit: audit_lost=108141 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.837831][ C0] audit: backlog limit exceeded [ 1142.845213][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1142.851762][ C0] audit: audit_lost=108142 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.859846][ C0] audit: backlog limit exceeded [ 1142.868500][T11890] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1143.397350][ T4650] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1143.480449][T11910] tipc: Enabling of bearer rejected, failed to enable media [ 1143.582640][ T4650] usb 5-1: Using ep0 maxpacket: 16 [ 1143.778921][T11923] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.17027'. [ 1144.042698][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1144.071573][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1144.106536][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1144.130261][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17031'. [ 1144.254502][ T4650] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1144.284933][ T4650] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1144.292558][ T4650] usb 5-1: can't read configurations, error -71 [ 1144.643569][ T4636] IPVS: starting estimator thread 0... [ 1144.744987][T11955] IPVS: using max 33 ests per chain, 79200 per kthread [ 1145.502761][ T4651] kernel write not supported for file bpf-prog (pid: 4651 comm: kworker/0:17) [ 1145.631861][ T4650] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1145.802563][ T4650] usb 5-1: Using ep0 maxpacket: 8 [ 1145.822528][ T4650] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1145.836590][ T4650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.848517][ T4650] usb 5-1: Product: syz [ 1145.852730][ T4650] usb 5-1: Manufacturer: syz [ 1145.877370][ T4650] usb 5-1: SerialNumber: syz [ 1145.907129][ T4650] usb 5-1: config 0 descriptor?? [ 1145.939589][ T4650] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1147.083603][ T4650] usb 5-1: USB disconnect, device number 80 [ 1148.201124][ T30] kauditd_printk_skb: 7688 callbacks suppressed [ 1148.201142][ T30] audit: type=1400 audit(2000000261.954:1813113): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1148.260254][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1148.267564][ T30] audit: type=1400 audit(2000000262.010:1813114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1148.287998][T13097] audit: audit_lost=108332 audit_rate_limit=0 audit_backlog_limit=64 [ 1148.297220][ T30] audit: type=1400 audit(2000000262.010:1813115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1148.318426][T13097] audit: backlog limit exceeded [ 1148.324890][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1148.341538][ T30] audit: type=1400 audit(2000000262.010:1813116): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1148.361577][T13097] audit: audit_lost=108333 audit_rate_limit=0 audit_backlog_limit=64 [ 1148.373285][T13097] audit: backlog limit exceeded [ 1148.746647][ T5959] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1148.768554][ T5959] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1148.857976][T12059] netlink: 264 bytes leftover after parsing attributes in process `syz.5.17087'. [ 1148.873210][T12059] netlink: 56 bytes leftover after parsing attributes in process `syz.5.17087'. [ 1149.651258][ T5959] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1149.881265][ T5959] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1149.894241][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.903789][ T5959] usb 6-1: Product: syz [ 1149.910251][ T5959] usb 6-1: Manufacturer: syz [ 1149.916267][ T5959] usb 6-1: SerialNumber: syz [ 1149.925862][ T5959] usb 6-1: config 0 descriptor?? [ 1150.161879][ T5959] usb 6-1: ignoring: probably an ADSL modem [ 1150.599024][ T5959] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1150.839557][ T4638] usb 6-1: USB disconnect, device number 99 [ 1151.573247][T12158] program syz.5.17131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.407011][T12189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1152.412412][T12183] xt_CT: No such helper "pptp" [ 1152.839003][T12203] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1153.565408][ T30] kauditd_printk_skb: 8695 callbacks suppressed [ 1153.565427][ T30] audit: type=1400 audit(2000000266.977:1820990): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1153.582017][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.592365][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.592384][ C0] audit: audit_lost=108608 audit_rate_limit=0 audit_backlog_limit=64 [ 1153.592401][ C0] audit: backlog limit exceeded [ 1153.628982][T12231] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.635641][T13097] audit: audit_lost=108609 audit_rate_limit=0 audit_backlog_limit=64 [ 1153.647777][T12231] audit: audit_lost=108610 audit_rate_limit=0 audit_backlog_limit=64 [ 1153.658548][T13097] audit: backlog limit exceeded [ 1153.673176][T12231] audit: backlog limit exceeded [ 1154.768931][T12281] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17186'. [ 1154.808778][T12275] team0 (unregistering): Port device team_slave_0 removed [ 1154.825543][T12275] team0 (unregistering): Port device team_slave_1 removed [ 1156.242152][T12331] veth0_to_bond: entered promiscuous mode [ 1156.268984][T12331] veth0_to_bond: left promiscuous mode [ 1157.646495][T12380] syzkaller1: entered promiscuous mode [ 1157.653452][T12380] syzkaller1: entered allmulticast mode [ 1158.920381][ T30] kauditd_printk_skb: 9430 callbacks suppressed [ 1158.920397][ T30] audit: type=1400 audit(2000000271.991:1830166): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12427 comm="syz.6.17253" path="/dev/kvm" dev="devtmpfs" ino=84 [ 1159.003432][ T30] audit: type=1400 audit(2000000271.991:1830167): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12410 comm="syz.3.17245" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1159.055848][ T30] audit: type=1400 audit(2000000271.991:1830168): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12410 comm="syz.3.17245" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1159.089123][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1159.096664][T13097] audit: audit_lost=108696 audit_rate_limit=0 audit_backlog_limit=64 [ 1159.105819][ T30] audit: type=1400 audit(2000000271.991:1830169): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12410 comm="syz.3.17245" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1159.136325][T13097] audit: backlog limit exceeded [ 1159.141424][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1159.148707][T13097] audit: audit_lost=108697 audit_rate_limit=0 audit_backlog_limit=64 [ 1159.157709][T13097] audit: backlog limit exceeded [ 1159.637700][T12452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.989539][ T4636] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1160.190730][ T4636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.219710][ T4636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.288196][ T4636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.374342][ T4636] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1160.438549][ T4636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.485324][ T4636] usb 5-1: config 0 descriptor?? [ 1160.535563][T12489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17271'. [ 1160.557774][T12489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17271'. [ 1160.843423][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17279'. [ 1160.853762][T12502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17279'. [ 1160.877889][T12502] gtp0: entered promiscuous mode [ 1160.882968][T12502] gtp0: entered allmulticast mode [ 1160.976270][ T4636] hid-udraw 0003:20D6:CB17.0082: item fetching failed at offset 3/7 [ 1160.997633][ T4636] hid-udraw 0003:20D6:CB17.0082: parse failed [ 1161.003815][ T4636] hid-udraw 0003:20D6:CB17.0082: probe with driver hid-udraw failed with error -22 [ 1161.210027][ T4636] usb 5-1: USB disconnect, device number 81 [ 1162.058479][T12535] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1162.067689][T12535] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1162.076555][T12535] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1162.338864][T12543] input: syz0 as /devices/virtual/input/input88 [ 1162.347618][T12543] input: failed to attach handler leds to device input88, error: -6 [ 1162.823572][T12563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.497910][T12587] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17316'. [ 1164.003289][T12602] bond0: (slave vlan0): Opening slave failed [ 1164.036660][T12603] unknown channel width for channel at 909000KHz? [ 1164.275989][ T30] kauditd_printk_skb: 10439 callbacks suppressed [ 1164.276006][ T30] audit: type=1400 audit(2000000276.996:1840012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12619 comm="syz-executor" name="180" dev="tmpfs" ino=943 [ 1164.312329][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1164.319840][T13097] audit: audit_lost=108897 audit_rate_limit=0 audit_backlog_limit=64 [ 1164.327927][T13097] audit: backlog limit exceeded [ 1164.336800][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1164.344287][T13097] audit: audit_lost=108898 audit_rate_limit=0 audit_backlog_limit=64 [ 1164.350838][ T30] audit: type=1400 audit(2000000277.014:1840013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12619 comm="syz-executor" name="180" dev="tmpfs" ino=943 [ 1164.357685][T13097] audit: backlog limit exceeded [ 1164.384642][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1164.391738][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1164.454459][T12622] misc userio: Begin command sent, but we're already running [ 1165.086542][T12650] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.17345'. [ 1165.901785][ T5871] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1166.082802][ T4636] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1166.098148][ T5871] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1166.109694][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.123060][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.153069][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1166.197964][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1166.222586][ T5871] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1166.232891][ T5871] usb 5-1: Manufacturer: syz [ 1166.249347][ T5871] usb 5-1: config 0 descriptor?? [ 1166.270436][ T4636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.292258][ T4636] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.335906][ T4636] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.360047][ T4636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.369070][ T4636] usb 6-1: Product: syz [ 1166.375295][ T4636] usb 6-1: Manufacturer: syz [ 1166.381563][ T4636] usb 6-1: SerialNumber: syz [ 1166.619741][ T4636] usb 6-1: 0:2 : does not exist [ 1166.633856][ T4636] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1166.683513][ T4636] usb 6-1: USB disconnect, device number 100 [ 1166.737499][ T5871] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 1166.750482][ T5871] appleir 0003:05AC:8243.0083: No inputs registered, leaving [ 1166.773135][ T5871] appleir 0003:05AC:8243.0083: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1166.861151][T12722] netlink: 71 bytes leftover after parsing attributes in process `syz.3.17380'. [ 1168.303881][T12750] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.17390'. [ 1168.994213][ T4636] usb 5-1: USB disconnect, device number 82 [ 1169.233945][T12777] 9pnet: p9_errstr2errno: server reported unknown error @ [ 1169.532524][T12788] loop7: detected capacity change from 0 to 6 [ 1169.578403][T12788] Dev loop7: unable to read RDB block 6 [ 1169.584030][T12788] loop7: unable to read partition table [ 1169.631768][ T30] kauditd_printk_skb: 8565 callbacks suppressed [ 1169.631785][ T30] audit: type=1400 audit(2000000282.000:1847951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1169.659307][T12788] loop7: partition table beyond EOD, truncated [ 1169.685182][T12788] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1169.695099][ T30] audit: type=1400 audit(2000000282.000:1847952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1169.715145][ T30] audit: type=1400 audit(2000000282.000:1847953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="197" dev="tmpfs" ino=1032 [ 1169.723754][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1169.734834][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1169.734854][ C0] audit: audit_lost=109109 audit_rate_limit=0 audit_backlog_limit=64 [ 1169.734871][ C0] audit: backlog limit exceeded [ 1169.734998][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1169.735011][ C0] audit: audit_lost=109110 audit_rate_limit=0 audit_backlog_limit=64 [ 1169.735026][ C0] audit: backlog limit exceeded [ 1169.925174][T12797] binfmt_misc: register: failed to install interpreter file ./file0 [ 1169.951273][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17411'. [ 1169.968080][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17411'. [ 1170.411621][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17417'. [ 1170.444721][T12813] sctp: [Deprecated]: syz.6.17418 (pid 12813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1170.444721][T12813] Use struct sctp_sack_info instead [ 1171.156811][T12836] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1171.905855][T26619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.078159][T12887] overlayfs: failed to clone upperpath [ 1173.781529][T12910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.956551][T12951] 9pnet: p9_errstr2errno: server reported unknown error @ [ 1174.993176][ T30] kauditd_printk_skb: 8295 callbacks suppressed [ 1174.993193][ T30] audit: type=1400 audit(2000000287.014:1855425): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=13097 comm="syz-executor" path="/2895/cgroup.net" dev="tmpfs" ino=14692 [ 1175.027911][T12954] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1175.034933][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1175.041509][ C0] audit: audit_lost=109386 audit_rate_limit=0 audit_backlog_limit=64 [ 1175.049590][ C0] audit: backlog limit exceeded [ 1175.054617][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1175.061131][ C0] audit: audit_lost=109387 audit_rate_limit=0 audit_backlog_limit=64 [ 1175.067289][ T30] audit: type=1400 audit(2000000287.014:1855426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1175.069218][ C0] audit: backlog limit exceeded [ 1175.094197][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1176.753860][ T4651] kernel write not supported for file bpf-prog (pid: 4651 comm: kworker/0:17) [ 1179.330435][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17541'. [ 1180.344788][ T30] kauditd_printk_skb: 8951 callbacks suppressed [ 1180.344806][ T30] audit: type=1400 audit(2000000292.018:1863861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13152 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1180.387313][ T30] audit: type=1400 audit(2000000292.018:1863862): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13152 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1180.407626][ T30] audit: type=1400 audit(2000000292.018:1863863): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13152 comm="syz-executor" name="2910" dev="tmpfs" ino=14766 [ 1180.428098][ T30] audit: type=1400 audit(2000000292.018:1863864): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=13152 comm="syz-executor" opid=13152 ocomm="syz-executor" [ 1180.438557][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1180.447805][ T30] audit: type=1400 audit(2000000292.027:1863865): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13152 comm="syz-executor" name="2910" dev="tmpfs" ino=14766 [ 1180.483193][T13097] audit: audit_lost=109561 audit_rate_limit=0 audit_backlog_limit=64 [ 1180.498591][T13097] audit: backlog limit exceeded [ 1180.508106][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1180.516616][T13097] audit: audit_lost=109562 audit_rate_limit=0 audit_backlog_limit=64 [ 1181.177058][T13169] netlink: 'syz.4.17567': attribute type 29 has an invalid length. [ 1181.545746][T13182] syzkaller1: entered promiscuous mode [ 1181.551397][T13182] syzkaller1: entered allmulticast mode [ 1182.672374][T13230] syzkaller1: entered promiscuous mode [ 1182.683518][T13230] syzkaller1: entered allmulticast mode [ 1183.010772][T13243] debugfs: Invalid uid '0x00000000ffffffff' [ 1184.096408][T13279] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1184.118096][T13282] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1184.538062][ T4651] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1184.750608][ T4651] usb 6-1: Using ep0 maxpacket: 32 [ 1184.762392][ T4651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.783647][ T4651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.822521][ T4651] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1184.838281][ T4651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.870513][ T4651] usb 6-1: config 0 descriptor?? [ 1185.245400][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17626'. [ 1185.373304][ T4651] savu 0003:1E7D:2D5A.0084: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1185.650446][ T4636] usb 6-1: USB disconnect, device number 101 [ 1185.702006][ T30] kauditd_printk_skb: 8602 callbacks suppressed [ 1185.702024][ T30] audit: type=1400 audit(2000000297.041:1872221): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=26619 comm="kworker/u8:18" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1185.716613][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.736977][ T30] audit: type=1400 audit(2000000297.041:1872222): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=26619 comm="kworker/u8:18" saddr=10.128.0.169 src=30008 daddr=10.128.1.12 dest=40418 netif=eth0 [ 1185.740227][ T9988] audit: audit_lost=109645 audit_rate_limit=0 audit_backlog_limit=64 [ 1185.778032][ T9988] audit: backlog limit exceeded [ 1185.783259][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.791398][ T9988] audit: audit_lost=109646 audit_rate_limit=0 audit_backlog_limit=64 [ 1185.796914][T10180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.800217][ T9988] audit: backlog limit exceeded [ 1185.806804][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.856823][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17634'. [ 1185.870777][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17634'. [ 1185.887076][T13330] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.895857][T13330] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.904842][T13330] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.913624][T13330] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.975824][T13334] PM: Enabling pm_trace changes system date and time during resume. [ 1185.975824][T13334] PM: Correct system time has to be restored manually after resume. [ 1186.877736][T13357] syzkaller1: entered promiscuous mode [ 1186.883434][T13357] syzkaller1: entered allmulticast mode [ 1187.777455][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17657'. [ 1188.020985][T13387] kvm: apic: phys broadcast and lowest prio [ 1188.046775][T13392] netlink: 'syz.5.17661': attribute type 10 has an invalid length. [ 1188.076519][T13392] netlink: 55 bytes leftover after parsing attributes in process `syz.5.17661'. [ 1188.420423][T13392] team0: Port device virt_wifi0 removed [ 1188.548040][T13406] syzkaller1: entered promiscuous mode [ 1188.548064][T13406] syzkaller1: entered allmulticast mode [ 1190.372281][ T4638] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1190.564131][ T4638] usb 6-1: Using ep0 maxpacket: 32 [ 1190.574256][ T4638] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1190.594574][ T4638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.612979][ T4638] usb 6-1: config 0 descriptor?? [ 1190.843313][ T4638] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1190.863146][ T4638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1190.899824][ T4638] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1190.916241][ T4638] usb 6-1: media controller created [ 1190.943017][ T4638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1190.952131][ T5871] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1191.058738][T13454] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1191.067760][ T30] kauditd_printk_skb: 7640 callbacks suppressed [ 1191.067777][ T30] audit: type=1400 audit(2000000302.046:1879253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13453 comm="syz.5.17686" name="newroot" dev="tmpfs" ino=2 [ 1191.110044][ T30] audit: type=1400 audit(2000000302.046:1879254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13453 comm="syz.5.17686" name="/" dev="devtmpfs" ino=1 [ 1191.110672][ T4638] az6027: usb out operation failed. (-71) [ 1191.161135][ T30] audit: type=1400 audit(2000000302.046:1879255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rwa pid=13453 comm="syz.5.17686" name="i2c-1" dev="devtmpfs" ino=3877 [ 1191.164860][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.195681][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.202250][ C0] audit: audit_lost=109851 audit_rate_limit=0 audit_backlog_limit=64 [ 1191.204743][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.210389][ C0] audit: backlog limit exceeded [ 1191.210997][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.211014][ C0] audit: audit_lost=109852 audit_rate_limit=0 audit_backlog_limit=64 [ 1191.211029][ C0] audit: backlog limit exceeded [ 1191.211269][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.221923][ T4638] az6027: usb out operation failed. (-71) [ 1191.262020][ T5871] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1191.275515][ T4638] stb0899_attach: Driver disabled by Kconfig [ 1191.283152][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.294886][ T4638] az6027: no front-end attached [ 1191.294886][ T4638] [ 1191.304258][ T4638] az6027: usb out operation failed. (-71) [ 1191.316120][ T4638] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1191.325644][ T5871] usb 5-1: config 0 descriptor?? [ 1191.342006][ T4638] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input90 [ 1191.361297][ T4638] dvb-usb: schedule remote query interval to 400 msecs. [ 1191.369008][ T4638] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1191.383671][ T4638] usb 6-1: USB disconnect, device number 102 [ 1191.435633][ T4638] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1191.784169][ T5871] waltop 0003:172F:0032.0085: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 1192.018750][ T4636] usb 5-1: USB disconnect, device number 83 [ 1194.794491][T13589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.028538][T13596] kernel read not supported for file /file1 (pid: 13596 comm: syz.4.17750) [ 1195.089760][T13598] syzkaller1: entered promiscuous mode [ 1195.106483][T13598] syzkaller1: entered allmulticast mode [ 1195.770549][T13629] lo: entered allmulticast mode [ 1195.803027][T13629] dvmrp1: entered allmulticast mode [ 1195.825466][T13629] netlink: 'syz.5.17766': attribute type 39 has an invalid length. [ 1195.965153][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17769'. [ 1196.424319][ T30] kauditd_printk_skb: 8586 callbacks suppressed [ 1196.424337][ T30] audit: type=1400 audit(2000000307.069:1887021): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9988 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1196.431485][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.456195][T13651] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.466112][T13651] audit: audit_lost=110127 audit_rate_limit=0 audit_backlog_limit=64 [ 1196.468735][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.474187][T13651] audit: backlog limit exceeded [ 1196.487368][ T9988] audit: audit_lost=110128 audit_rate_limit=0 audit_backlog_limit=64 [ 1196.495462][ T9988] audit: backlog limit exceeded [ 1196.503371][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.503970][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1197.093329][T13665] binder: 13664:13665 ioctl c0306201 200000001a80 returned -14 [ 1198.945787][ T4651] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1199.128101][ T4651] usb 6-1: Using ep0 maxpacket: 16 [ 1199.151752][ T4651] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 1199.197434][ T4651] usb 6-1: config 64 has no interface number 0 [ 1199.208961][ T4651] usb 6-1: config 64 interface 176 has no altsetting 0 [ 1199.253056][ T4651] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 1199.276463][ T4651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.304361][ T4651] usb 6-1: Product: syz [ 1199.330424][ T4651] usb 6-1: Manufacturer: syz [ 1199.335928][ T4651] usb 6-1: SerialNumber: syz [ 1199.612187][ T4651] peak_usb 6-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 1199.648123][ T4651] peak_usb 6-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 1199.691215][T13746] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.17817'. [ 1199.731740][ T4651] peak_usb 6-1:64.176: probe with driver peak_usb failed with error -71 [ 1199.751443][ T4651] usb 6-1: USB disconnect, device number 103 [ 1200.741599][ T4650] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1200.960733][ T4650] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1201.019492][ T4650] usb 5-1: config 1 has no interface number 0 [ 1201.025655][ T4650] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.036889][ T4651] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1201.091965][ T4650] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1201.136069][ T4650] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1201.208145][ T4650] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1201.228178][ T4650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.265730][ T4651] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1201.274821][ T4651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.292974][ T4650] usb 5-1: Product: syz [ 1201.301003][ T4650] usb 5-1: Manufacturer: syz [ 1201.305818][ T4650] usb 5-1: SerialNumber: syz [ 1201.313873][ T4651] usb 6-1: config 0 descriptor?? [ 1201.324889][ T4651] cp210x 6-1:0.0: cp210x converter detected [ 1201.403625][T13780] pim6reg: tun_chr_ioctl cmd 21731 [ 1201.421098][T13780] pim6reg: tun_chr_ioctl cmd 1074812118 [ 1201.764595][ T4651] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1201.779868][ T30] kauditd_printk_skb: 6650 callbacks suppressed [ 1201.779886][ T30] audit: type=1400 audit(2000000312.082:1893075): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13771 comm="syz.5.17828" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1201.808203][ T4651] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1201.847517][ T9988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.851804][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.855009][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.861805][T13765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.867433][ C0] audit: audit_lost=110329 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.867452][ C0] audit: backlog limit exceeded [ 1201.868275][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.874361][ T5833] audit: audit_lost=110330 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.882383][ C0] audit: audit_lost=110331 audit_rate_limit=0 audit_backlog_limit=64 [ 1202.010516][ T4651] usb 6-1: USB disconnect, device number 104 [ 1202.041405][ T4651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1202.068157][ T4651] cp210x 6-1:0.0: device disconnected [ 1202.376652][ T4650] cdc_ncm 5-1:1.1: bind() failure [ 1202.608463][ T5871] usb 5-1: USB disconnect, device number 84 [ 1204.275531][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1204.584090][T13869] tipc: Cannot configure node identity twice [ 1204.748967][T13877] sctp: [Deprecated]: syz.0.17874 (pid 13877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.748967][T13877] Use struct sctp_sack_info instead [ 1205.260296][T13893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.493343][T13893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.683975][T13893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.902669][T13893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.306527][T13893] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.351652][T13893] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.375246][T13893] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.402073][T13918] vlan2: entered promiscuous mode [ 1206.407154][T13918] hsr0: entered promiscuous mode [ 1206.414445][T13918] vlan2: entered allmulticast mode [ 1206.423001][T13918] hsr0: entered allmulticast mode [ 1206.428282][T13918] hsr_slave_0: entered allmulticast mode [ 1206.435304][T13918] hsr_slave_1: entered allmulticast mode [ 1206.463980][T13893] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.499960][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1207.137544][ T30] kauditd_printk_skb: 7356 callbacks suppressed [ 1207.137562][ T30] audit: type=1400 audit(2000000317.087:1899571): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1207.159530][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.170962][T13937] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.182949][T10180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.183453][T13937] audit: audit_lost=110619 audit_rate_limit=0 audit_backlog_limit=64 [ 1207.197752][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.197772][ C0] audit: audit_lost=110620 audit_rate_limit=0 audit_backlog_limit=64 [ 1207.197787][ C0] audit: backlog limit exceeded [ 1207.213219][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.213242][ C0] audit: audit_lost=110621 audit_rate_limit=0 audit_backlog_limit=64 [ 1207.227374][T13939] futex_wake_op: syz.3.17899 tries to shift op by 32; fix this program [ 1207.669591][T13959] 9p: Unknown uid 00000000004294967295 [ 1208.887496][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17926'. [ 1208.917939][T13996] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.926278][T13996] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.935469][T13996] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.944446][T13996] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1209.011198][T13996] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.019860][T13996] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.029021][T13996] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.038762][T13996] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.081629][T14003] netlink: 'syz.4.17929': attribute type 9 has an invalid length. [ 1209.136817][T14004] netlink: 'syz.4.17929': attribute type 9 has an invalid length. [ 1209.262447][ T4638] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1209.423032][ T4638] usb 6-1: Using ep0 maxpacket: 8 [ 1209.439295][ T4638] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1209.453027][ T4638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.463821][ T4638] usb 6-1: Product: syz [ 1209.481719][ T4638] usb 6-1: Manufacturer: syz [ 1209.497794][ T4638] usb 6-1: SerialNumber: syz [ 1209.515221][ T4638] usb 6-1: config 0 descriptor?? [ 1209.539682][ T4638] gspca_main: se401-2.14.0 probing 047d:5003 [ 1210.206035][ T4638] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input91 [ 1210.426864][ T4650] usb 6-1: USB disconnect, device number 105 [ 1211.108132][ T5959] hid-generic 0000:0000:0000.0086: unknown main item tag 0x7 [ 1211.139067][ T5959] hid-generic 0000:0000:0000.0086: ignoring exceeding usage max [ 1211.159979][ T5959] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1211.168489][ T5959] hid-generic 0000:0000:0000.0086: unknown main item tag 0x6 [ 1211.180831][ T5959] hid-generic 0000:0000:0000.0086: reserved main item tag 0xd [ 1211.201698][ T5959] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1211.212473][T14066] IPVS: length: 91 != 24 [ 1211.274784][ T5959] kernel write not supported for file bpf-prog (pid: 5959 comm: kworker/0:6) [ 1211.407758][T14075] [U] [ 1212.381454][T14109] tipc: Started in network mode [ 1212.406766][T14109] tipc: Node identity 2000007, cluster identity 4711 [ 1212.413649][T14109] tipc: Node number set to 33554439 [ 1212.424806][T14109] tipc: Cannot configure node identity twice [ 1212.493161][ T30] kauditd_printk_skb: 9054 callbacks suppressed [ 1212.493180][ T30] audit: type=1400 audit(2000000322.091:1907642): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="315" dev="tmpfs" ino=1637 [ 1212.550155][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1212.557541][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1212.564118][ C0] audit: audit_lost=110950 audit_rate_limit=0 audit_backlog_limit=64 [ 1212.572310][ C0] audit: backlog limit exceeded [ 1212.578126][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1212.578699][T14112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1212.584677][ C0] audit: audit_lost=110951 audit_rate_limit=0 audit_backlog_limit=64 [ 1212.592661][ T30] audit: type=1400 audit(2000000322.091:1907643): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10180 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1212.599404][ C0] audit: backlog limit exceeded [ 1213.701000][T14144] netlink: 9 bytes leftover after parsing attributes in process `syz.4.17993'. [ 1213.720550][T14144] gretap0: entered promiscuous mode [ 1213.758367][T14144] netlink: 5 bytes leftover after parsing attributes in process `syz.4.17993'. [ 1213.814154][T14144] 0{X: renamed from gretap0 [ 1213.822798][T14144] 0{X: left promiscuous mode [ 1213.833702][T14144] 0{X: entered allmulticast mode [ 1213.851227][T14144] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1215.815467][ T5828] Bluetooth: hci2: command 0x1003 tx timeout [ 1215.816348][ T5838] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1216.168212][ T5959] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1216.341403][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 1216.350127][ T5959] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1216.358231][ T5959] usb 5-1: config 0 has no interface number 0 [ 1216.375015][ T5959] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.386853][ T5959] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1216.398700][ T5959] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1216.416805][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.435200][ T5959] usb 5-1: Product: syz [ 1216.439488][ T5959] usb 5-1: Manufacturer: syz [ 1216.446031][ T5959] usb 5-1: SerialNumber: syz [ 1216.474189][ T5959] usb 5-1: config 0 descriptor?? [ 1216.726566][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.757608][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.215823][ T5959] appletouch 5-1:0.85: Geyser mode initialized. [ 1217.223487][ T5959] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input92 [ 1217.323991][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18020'. [ 1217.333090][T14205] bond0: option use_carrier: invalid value (159) [ 1217.452245][ T5959] usb 5-1: USB disconnect, device number 85 [ 1217.472535][ T5959] appletouch 5-1:0.85: input: appletouch disconnected [ 1217.847046][ T30] kauditd_printk_skb: 5642 callbacks suppressed [ 1217.847063][ T30] audit: type=1400 audit(2000000327.105:1912895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14226 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1217.929390][T14228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1217.930661][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1217.938919][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1217.951712][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1217.951733][ C0] audit: audit_lost=111083 audit_rate_limit=0 audit_backlog_limit=64 [ 1217.951751][ C0] audit: backlog limit exceeded [ 1217.953014][ T30] audit: type=1400 audit(2000000327.124:1912896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14226 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1217.964081][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1217.973209][T13097] audit: audit_lost=111084 audit_rate_limit=0 audit_backlog_limit=64 [ 1218.172734][ T5838] Bluetooth: hci5: ISO packet too small [ 1218.315013][T14242] input: syz1 as /devices/virtual/input/input93 [ 1218.383963][T14243] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1219.089214][T14274] syzkaller1: entered promiscuous mode [ 1219.094903][T14274] syzkaller1: entered allmulticast mode [ 1220.512144][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18063'. [ 1220.695830][T14312] input: syz1 as /devices/virtual/input/input94 [ 1221.092254][T14324] netlink: 'syz.6.18072': attribute type 1 has an invalid length. [ 1221.113671][T14324] netlink: 56 bytes leftover after parsing attributes in process `syz.6.18072'. [ 1221.721132][T14334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1221.768660][T14334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.050481][T14351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.093470][T14334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.169198][T14334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.343699][T14359] netlink: 'syz.4.18087': attribute type 1 has an invalid length. [ 1222.363459][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18087'. [ 1222.472159][T14334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.541251][T14334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.736644][T14334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.775803][T14334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.852955][T14375] netlink: 156 bytes leftover after parsing attributes in process `syz.5.18094'. [ 1223.004131][T14334] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.053270][T14334] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.116492][T14385] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.18098'. [ 1223.127056][T14334] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.136255][T14334] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.207891][ T30] kauditd_printk_skb: 7806 callbacks suppressed [ 1223.207908][ T30] audit: type=1400 audit(2000000332.119:1919553): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14389 comm="syz-executor" name="3294" dev="tmpfs" ino=16681 [ 1223.211352][T14334] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.225775][ T30] audit: type=1400 audit(2000000332.128:1919554): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14389 comm="syz-executor" name="3294" dev="tmpfs" ino=16681 [ 1223.254351][T14334] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.290730][T14334] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.309976][T14393] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18102'. [ 1223.310369][T14334] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.330966][ T5959] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1223.341417][ T30] audit: type=1400 audit(2000000332.128:1919555): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14389 comm="syz-executor" name="3294" dev="tmpfs" ino=16681 [ 1223.372701][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1223.381732][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1223.381753][ C0] audit: audit_lost=111469 audit_rate_limit=0 audit_backlog_limit=64 [ 1223.381769][ C0] audit: backlog limit exceeded [ 1223.382585][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1223.389877][T29206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1223.396451][ C0] audit: audit_lost=111470 audit_rate_limit=0 audit_backlog_limit=64 [ 1223.496073][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 1223.542898][ T5959] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1223.565526][ T5959] usb 5-1: config 0 has no interface number 0 [ 1223.572688][ T5959] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1223.589466][ T5959] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1223.606534][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.628467][ T5959] usb 5-1: Product: syz [ 1223.636330][ T5959] usb 5-1: Manufacturer: syz [ 1223.647111][ T5959] usb 5-1: SerialNumber: syz [ 1223.661332][ T5959] usb 5-1: config 0 descriptor?? [ 1223.679128][ T5959] smsc75xx v1.0.0 [ 1223.893423][T14409] netlink: 'syz.6.18110': attribute type 3 has an invalid length. [ 1223.915791][T14409] netlink: 64 bytes leftover after parsing attributes in process `syz.6.18110'. [ 1224.380357][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1224.400570][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1224.639535][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1224.655596][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1224.668013][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1224.682823][ T5959] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1224.692816][T14438] [ 1224.695173][T14438] ===================================================== [ 1224.702111][T14438] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1224.709574][T14438] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 1224.716677][T14438] ----------------------------------------------------- [ 1224.723618][T14438] syz.6.18124/14438 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1224.731432][T14438] ffff888079a70b40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1224.740662][T14438] [ 1224.740662][T14438] and this task is already holding: [ 1224.748144][T14438] ffff88807d8e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1224.757894][T14438] which would create a new lock dependency: [ 1224.763875][T14438] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1224.771997][T14438] [ 1224.771997][T14438] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1224.781440][T14438] (&dev->event_lock#2){..-.}-{3:3} [ 1224.781481][T14438] [ 1224.781481][T14438] ... which became SOFTIRQ-irq-safe at: [ 1224.794474][T14438] lock_acquire+0x120/0x360 [ 1224.799068][T14438] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1224.804352][T14438] input_inject_event+0xab/0x320 [ 1224.809385][T14438] led_trigger_event+0x138/0x210 [ 1224.814403][T14438] kbd_bh+0x1c6/0x2e0 [ 1224.818464][T14438] tasklet_action_common+0x369/0x580 [ 1224.823858][T14438] handle_softirqs+0x286/0x870 [ 1224.828710][T14438] run_ksoftirqd+0x9b/0x100 [ 1224.833296][T14438] smpboot_thread_fn+0x53f/0xa60 [ 1224.838321][T14438] kthread+0x70e/0x8a0 [ 1224.842474][T14438] ret_from_fork+0x3fc/0x770 [ 1224.847145][T14438] ret_from_fork_asm+0x1a/0x30 [ 1224.851982][T14438] [ 1224.851982][T14438] to a SOFTIRQ-irq-unsafe lock: [ 1224.858982][T14438] (tasklist_lock){.+.+}-{3:3} [ 1224.859008][T14438] [ 1224.859008][T14438] ... which became SOFTIRQ-irq-unsafe at: [ 1224.871884][T14438] ... [ 1224.871894][T14438] lock_acquire+0x120/0x360 [ 1224.879043][T14438] _raw_read_lock+0x36/0x50 [ 1224.883625][T14438] __do_wait+0xde/0x740 [ 1224.887861][T14438] do_wait+0x1f8/0x520 [ 1224.892011][T14438] kernel_wait+0xab/0x170 [ 1224.896414][T14438] call_usermodehelper_exec_work+0xbe/0x230 [ 1224.902386][T14438] process_scheduled_works+0xade/0x17b0 [ 1224.908009][T14438] worker_thread+0x8a0/0xda0 [ 1224.912687][T14438] kthread+0x70e/0x8a0 [ 1224.916838][T14438] ret_from_fork+0x3fc/0x770 [ 1224.921514][T14438] ret_from_fork_asm+0x1a/0x30 [ 1224.926358][T14438] [ 1224.926358][T14438] other info that might help us debug this: [ 1224.926358][T14438] [ 1224.936576][T14438] Chain exists of: [ 1224.936576][T14438] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1224.936576][T14438] [ 1224.950136][T14438] Possible interrupt unsafe locking scenario: [ 1224.950136][T14438] [ 1224.958455][T14438] CPU0 CPU1 [ 1224.963825][T14438] ---- ---- [ 1224.969187][T14438] lock(tasklist_lock); [ 1224.973434][T14438] local_irq_disable(); [ 1224.980172][T14438] lock(&dev->event_lock#2); [ 1224.987368][T14438] lock(&client->buffer_lock); [ 1224.994729][T14438] [ 1224.998165][T14438] lock(&dev->event_lock#2); [ 1225.003014][T14438] [ 1225.003014][T14438] *** DEADLOCK *** [ 1225.003014][T14438] [ 1225.011241][T14438] 7 locks held by syz.6.18124/14438: [ 1225.016510][T14438] #0: ffff888145b37118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1225.025657][T14438] #1: ffff88801ffe1230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1225.035853][T14438] #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1225.045597][T14438] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1225.055161][T14438] #4: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1225.064290][T14438] #5: ffff88807d8e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1225.074553][T14438] #6: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1225.083600][T14438] [ 1225.083600][T14438] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1225.094078][T14438] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1225.099721][T14438] IN-SOFTIRQ-W at: [ 1225.103773][T14438] lock_acquire+0x120/0x360 [ 1225.110097][T14438] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1225.117110][T14438] input_inject_event+0xab/0x320 [ 1225.123952][T14438] led_trigger_event+0x138/0x210 [ 1225.130704][T14438] kbd_bh+0x1c6/0x2e0 [ 1225.136587][T14438] tasklet_action_common+0x369/0x580 [ 1225.143777][T14438] handle_softirqs+0x286/0x870 [ 1225.150362][T14438] run_ksoftirqd+0x9b/0x100 [ 1225.156672][T14438] smpboot_thread_fn+0x53f/0xa60 [ 1225.163425][T14438] kthread+0x70e/0x8a0 [ 1225.169301][T14438] ret_from_fork+0x3fc/0x770 [ 1225.175705][T14438] ret_from_fork_asm+0x1a/0x30 [ 1225.182280][T14438] INITIAL USE at: [ 1225.186248][T14438] lock_acquire+0x120/0x360 [ 1225.192566][T14438] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1225.199492][T14438] input_inject_event+0xab/0x320 [ 1225.206162][T14438] kbd_led_trigger_activate+0xbc/0x100 [ 1225.213348][T14438] led_trigger_set+0x52a/0x950 [ 1225.219848][T14438] led_trigger_set_default+0x260/0x2a0 [ 1225.227031][T14438] led_classdev_register_ext+0x73d/0x930 [ 1225.234388][T14438] input_leds_connect+0x517/0x790 [ 1225.241224][T14438] input_register_device+0xcee/0x10b0 [ 1225.248320][T14438] atkbd_connect+0x70e/0x9c0 [ 1225.254636][T14438] serio_driver_probe+0x7f/0xa0 [ 1225.261217][T14438] really_probe+0x26a/0x9a0 [ 1225.267534][T14438] __driver_probe_device+0x18c/0x2f0 [ 1225.274542][T14438] driver_probe_device+0x4f/0x430 [ 1225.281292][T14438] __driver_attach+0x452/0x700 [ 1225.287870][T14438] bus_for_each_dev+0x230/0x2b0 [ 1225.294452][T14438] serio_handle_event+0x1a2/0x860 [ 1225.301201][T14438] process_scheduled_works+0xade/0x17b0 [ 1225.308474][T14438] worker_thread+0x8a0/0xda0 [ 1225.314795][T14438] kthread+0x70e/0x8a0 [ 1225.320585][T14438] ret_from_fork+0x3fc/0x770 [ 1225.326904][T14438] ret_from_fork_asm+0x1a/0x30 [ 1225.333389][T14438] } [ 1225.335959][T14438] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1225.345064][T14438] -> (&client->buffer_lock){....}-{3:3} { [ 1225.350792][T14438] INITIAL USE at: [ 1225.354674][T14438] lock_acquire+0x120/0x360 [ 1225.360740][T14438] _raw_spin_lock+0x2e/0x40 [ 1225.366824][T14438] evdev_pass_values+0xb9/0xbd0 [ 1225.373249][T14438] evdev_events+0x1e6/0x340 [ 1225.379318][T14438] input_pass_values+0x288/0x890 [ 1225.385814][T14438] input_event_dispose+0x330/0x6b0 [ 1225.392489][T14438] input_inject_event+0x1fe/0x320 [ 1225.399080][T14438] evdev_write+0x2fc/0x480 [ 1225.405053][T14438] vfs_write+0x27e/0xa90 [ 1225.410851][T14438] ksys_write+0x145/0x250 [ 1225.416744][T14438] do_syscall_64+0xfa/0x3b0 [ 1225.422808][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.430352][T14438] } [ 1225.432846][T14438] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1225.440997][T14438] ... acquired at: [ 1225.444784][T14438] lock_acquire+0x120/0x360 [ 1225.449462][T14438] _raw_spin_lock+0x2e/0x40 [ 1225.454130][T14438] evdev_pass_values+0xb9/0xbd0 [ 1225.459149][T14438] evdev_events+0x1e6/0x340 [ 1225.463812][T14438] input_pass_values+0x288/0x890 [ 1225.468914][T14438] input_event_dispose+0x330/0x6b0 [ 1225.474197][T14438] input_inject_event+0x1fe/0x320 [ 1225.479386][T14438] evdev_write+0x2fc/0x480 [ 1225.483969][T14438] vfs_write+0x27e/0xa90 [ 1225.488371][T14438] ksys_write+0x145/0x250 [ 1225.492869][T14438] do_syscall_64+0xfa/0x3b0 [ 1225.497530][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.503587][T14438] [ 1225.505896][T14438] [ 1225.505896][T14438] the dependencies between the lock to be acquired [ 1225.505906][T14438] and SOFTIRQ-irq-unsafe lock: [ 1225.519388][T14438] -> (tasklist_lock){.+.+}-{3:3} { [ 1225.524679][T14438] HARDIRQ-ON-R at: [ 1225.528825][T14438] lock_acquire+0x120/0x360 [ 1225.535319][T14438] _raw_read_lock+0x36/0x50 [ 1225.541810][T14438] __do_wait+0xde/0x740 [ 1225.547959][T14438] do_wait+0x1f8/0x520 [ 1225.554030][T14438] kernel_wait+0xab/0x170 [ 1225.560906][T14438] call_usermodehelper_exec_work+0xbe/0x230 [ 1225.568804][T14438] process_scheduled_works+0xade/0x17b0 [ 1225.576347][T14438] worker_thread+0x8a0/0xda0 [ 1225.582925][T14438] kthread+0x70e/0x8a0 [ 1225.588974][T14438] ret_from_fork+0x3fc/0x770 [ 1225.595549][T14438] ret_from_fork_asm+0x1a/0x30 [ 1225.602472][T14438] SOFTIRQ-ON-R at: [ 1225.606615][T14438] lock_acquire+0x120/0x360 [ 1225.613128][T14438] _raw_read_lock+0x36/0x50 [ 1225.619710][T14438] __do_wait+0xde/0x740 [ 1225.625864][T14438] do_wait+0x1f8/0x520 [ 1225.632007][T14438] kernel_wait+0xab/0x170 [ 1225.638320][T14438] call_usermodehelper_exec_work+0xbe/0x230 [ 1225.646201][T14438] process_scheduled_works+0xade/0x17b0 [ 1225.653732][T14438] worker_thread+0x8a0/0xda0 [ 1225.660309][T14438] kthread+0x70e/0x8a0 [ 1225.666363][T14438] ret_from_fork+0x3fc/0x770 [ 1225.673029][T14438] ret_from_fork_asm+0x1a/0x30 [ 1225.679864][T14438] INITIAL USE at: [ 1225.683923][T14438] lock_acquire+0x120/0x360 [ 1225.690328][T14438] _raw_write_lock_irq+0xa2/0xf0 [ 1225.697172][T14438] copy_process+0x224f/0x3c00 [ 1225.703753][T14438] kernel_clone+0x224/0x7f0 [ 1225.710255][T14438] user_mode_thread+0xdd/0x140 [ 1225.717006][T14438] rest_init+0x23/0x300 [ 1225.723062][T14438] start_kernel+0x47d/0x500 [ 1225.729467][T14438] x86_64_start_reservations+0x24/0x30 [ 1225.736823][T14438] x86_64_start_kernel+0x143/0x1c0 [ 1225.743831][T14438] common_startup_64+0x13e/0x147 [ 1225.750667][T14438] INITIAL READ USE at: [ 1225.755165][T14438] lock_acquire+0x120/0x360 [ 1225.762001][T14438] _raw_read_lock+0x36/0x50 [ 1225.768847][T14438] __do_wait+0xde/0x740 [ 1225.775337][T14438] do_wait+0x1f8/0x520 [ 1225.781741][T14438] kernel_wait+0xab/0x170 [ 1225.788416][T14438] call_usermodehelper_exec_work+0xbe/0x230 [ 1225.796665][T14438] process_scheduled_works+0xade/0x17b0 [ 1225.804644][T14438] worker_thread+0x8a0/0xda0 [ 1225.811663][T14438] kthread+0x70e/0x8a0 [ 1225.818065][T14438] ret_from_fork+0x3fc/0x770 [ 1225.824997][T14438] ret_from_fork_asm+0x1a/0x30 [ 1225.832098][T14438] } [ 1225.834754][T14438] ... key at: [] tasklist_lock+0x18/0x40 [ 1225.842639][T14438] ... acquired at: [ 1225.846601][T14438] lock_acquire+0x120/0x360 [ 1225.851267][T14438] _raw_read_lock+0x36/0x50 [ 1225.855937][T14438] send_sigurg+0x12b/0x420 [ 1225.860513][T14438] sk_send_sigurg+0x6c/0x2e0 [ 1225.865266][T14438] queue_oob+0x490/0x5a0 [ 1225.869669][T14438] unix_stream_sendmsg+0xaf9/0xc90 [ 1225.874941][T14438] __sock_sendmsg+0x219/0x270 [ 1225.879801][T14438] ____sys_sendmsg+0x52d/0x830 [ 1225.884815][T14438] ___sys_sendmsg+0x21f/0x2a0 [ 1225.889656][T14438] __sys_sendmmsg+0x227/0x430 [ 1225.894526][T14438] __x64_sys_sendmmsg+0xa0/0xc0 [ 1225.899538][T14438] do_syscall_64+0xfa/0x3b0 [ 1225.904198][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.910253][T14438] [ 1225.912563][T14438] -> (&f_owner->lock){....}-{3:3} { [ 1225.917854][T14438] INITIAL USE at: [ 1225.921822][T14438] lock_acquire+0x120/0x360 [ 1225.928142][T14438] _raw_write_lock_irq+0xa2/0xf0 [ 1225.934812][T14438] __f_setown+0x67/0x370 [ 1225.940784][T14438] generic_setlease+0xd5d/0x1240 [ 1225.947442][T14438] fcntl_setlease+0x3a2/0x4c0 [ 1225.953838][T14438] do_fcntl+0x6a9/0x1910 [ 1225.959803][T14438] __se_sys_fcntl+0xc8/0x150 [ 1225.966125][T14438] do_syscall_64+0xfa/0x3b0 [ 1225.972351][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.979983][T14438] INITIAL READ USE at: [ 1225.984400][T14438] lock_acquire+0x120/0x360 [ 1225.991068][T14438] _raw_read_lock_irqsave+0xaf/0x100 [ 1225.998520][T14438] send_sigio+0x38/0x370 [ 1226.004935][T14438] dnotify_handle_event+0x169/0x440 [ 1226.012301][T14438] fsnotify+0x1814/0x1a80 [ 1226.018795][T14438] vfs_readv+0x703/0x850 [ 1226.025202][T14438] __se_sys_preadv2+0x179/0x290 [ 1226.032210][T14438] do_syscall_64+0xfa/0x3b0 [ 1226.038872][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.046925][T14438] } [ 1226.049496][T14438] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1226.058423][T14438] ... acquired at: [ 1226.062296][T14438] lock_acquire+0x120/0x360 [ 1226.066962][T14438] _raw_read_lock_irqsave+0xaf/0x100 [ 1226.072409][T14438] send_sigio+0x38/0x370 [ 1226.076816][T14438] kill_fasync+0x24d/0x4d0 [ 1226.081390][T14438] sock_wake_async+0x137/0x160 [ 1226.086314][T14438] sk_wake_async+0x184/0x280 [ 1226.091067][T14438] unix_release_sock+0x6d4/0xc60 [ 1226.096165][T14438] unix_release+0x92/0xd0 [ 1226.100655][T14438] sock_close+0xc0/0x240 [ 1226.105069][T14438] __fput+0x449/0xa70 [ 1226.109215][T14438] task_work_run+0x1d1/0x260 [ 1226.113963][T14438] exit_to_user_mode_loop+0xec/0x110 [ 1226.119409][T14438] do_syscall_64+0x2bd/0x3b0 [ 1226.124161][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.130213][T14438] [ 1226.132523][T14438] -> (&new->fa_lock){....}-{3:3} { [ 1226.137645][T14438] INITIAL USE at: [ 1226.141531][T14438] lock_acquire+0x120/0x360 [ 1226.147591][T14438] _raw_write_lock_irq+0xa2/0xf0 [ 1226.154086][T14438] fasync_remove_entry+0xf1/0x1c0 [ 1226.160660][T14438] lease_modify+0x1ca/0x3c0 [ 1226.166725][T14438] locks_remove_file+0x4bf/0xea0 [ 1226.173212][T14438] __fput+0x3ab/0xa70 [ 1226.178747][T14438] task_work_run+0x1d1/0x260 [ 1226.184886][T14438] exit_to_user_mode_loop+0xec/0x110 [ 1226.191814][T14438] do_syscall_64+0x2bd/0x3b0 [ 1226.197965][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.205426][T14438] INITIAL READ USE at: [ 1226.209747][T14438] lock_acquire+0x120/0x360 [ 1226.216243][T14438] _raw_read_lock_irqsave+0xaf/0x100 [ 1226.223517][T14438] kill_fasync+0x199/0x4d0 [ 1226.229920][T14438] anon_pipe_read+0xf06/0x1040 [ 1226.236676][T14438] vfs_read+0x4d0/0x980 [ 1226.242818][T14438] ksys_read+0x145/0x250 [ 1226.249045][T14438] do_syscall_64+0xfa/0x3b0 [ 1226.255533][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.263413][T14438] } [ 1226.265896][T14438] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1226.274563][T14438] ... acquired at: [ 1226.278351][T14438] lock_acquire+0x120/0x360 [ 1226.283019][T14438] _raw_read_lock_irqsave+0xaf/0x100 [ 1226.288468][T14438] kill_fasync+0x199/0x4d0 [ 1226.293041][T14438] evdev_pass_values+0x627/0xbd0 [ 1226.298143][T14438] evdev_events+0x1e6/0x340 [ 1226.302813][T14438] input_pass_values+0x288/0x890 [ 1226.307921][T14438] input_event_dispose+0x330/0x6b0 [ 1226.313287][T14438] input_inject_event+0x1fe/0x320 [ 1226.318477][T14438] evdev_write+0x2fc/0x480 [ 1226.323104][T14438] vfs_write+0x27e/0xa90 [ 1226.327509][T14438] ksys_write+0x145/0x250 [ 1226.332000][T14438] do_syscall_64+0xfa/0x3b0 [ 1226.336665][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.343154][T14438] [ 1226.345465][T14438] [ 1226.345465][T14438] stack backtrace: [ 1226.351339][T14438] CPU: 0 UID: 0 PID: 14438 Comm: syz.6.18124 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1226.351358][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1226.351368][T14438] Call Trace: [ 1226.351375][T14438] [ 1226.351382][T14438] dump_stack_lvl+0x189/0x250 [ 1226.351405][T14438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1226.351425][T14438] ? __pfx__printk+0x10/0x10 [ 1226.351443][T14438] validate_chain+0x1f05/0x2140 [ 1226.351472][T14438] __lock_acquire+0xab9/0xd20 [ 1226.351491][T14438] ? kill_fasync+0x199/0x4d0 [ 1226.351504][T14438] lock_acquire+0x120/0x360 [ 1226.351521][T14438] ? kill_fasync+0x199/0x4d0 [ 1226.351538][T14438] _raw_read_lock_irqsave+0xaf/0x100 [ 1226.351556][T14438] ? kill_fasync+0x199/0x4d0 [ 1226.351569][T14438] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1226.351587][T14438] ? do_raw_spin_lock+0x121/0x290 [ 1226.351604][T14438] kill_fasync+0x199/0x4d0 [ 1226.351616][T14438] ? kill_fasync+0x53/0x4d0 [ 1226.351629][T14438] evdev_pass_values+0x627/0xbd0 [ 1226.351652][T14438] ? evdev_pass_values+0x651/0xbd0 [ 1226.351669][T14438] evdev_events+0x1e6/0x340 [ 1226.351683][T14438] ? evdev_events+0x79/0x340 [ 1226.351697][T14438] ? input_pass_values+0x8d/0x890 [ 1226.351711][T14438] input_pass_values+0x288/0x890 [ 1226.351728][T14438] ? input_handle_event+0x70c/0xf30 [ 1226.351748][T14438] input_event_dispose+0x330/0x6b0 [ 1226.351769][T14438] input_inject_event+0x1fe/0x320 [ 1226.351788][T14438] ? input_inject_event+0xbc/0x320 [ 1226.351809][T14438] evdev_write+0x2fc/0x480 [ 1226.351826][T14438] ? __pfx_evdev_write+0x10/0x10 [ 1226.351841][T14438] ? bpf_lsm_file_permission+0x9/0x20 [ 1226.351859][T14438] ? security_file_permission+0x75/0x290 [ 1226.351878][T14438] ? rw_verify_area+0x258/0x650 [ 1226.351892][T14438] ? __pfx_evdev_write+0x10/0x10 [ 1226.351909][T14438] vfs_write+0x27e/0xa90 [ 1226.351926][T14438] ? __pfx_vfs_write+0x10/0x10 [ 1226.351942][T14438] ? __fget_files+0x2a/0x420 [ 1226.351960][T14438] ? __fget_files+0x2a/0x420 [ 1226.351977][T14438] ? __fget_files+0x3a0/0x420 [ 1226.351994][T14438] ? __fget_files+0x2a/0x420 [ 1226.352013][T14438] ksys_write+0x145/0x250 [ 1226.352029][T14438] ? __pfx_ksys_write+0x10/0x10 [ 1226.352043][T14438] ? rcu_is_watching+0x15/0xb0 [ 1226.352065][T14438] ? do_syscall_64+0xbe/0x3b0 [ 1226.352079][T14438] do_syscall_64+0xfa/0x3b0 [ 1226.352091][T14438] ? lockdep_hardirqs_on+0x9c/0x150 [ 1226.352110][T14438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.352123][T14438] ? clear_bhb_loop+0x60/0xb0 [ 1226.352139][T14438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.352152][T14438] RIP: 0033:0x7f97f198e929 [ 1226.352166][T14438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.352179][T14438] RSP: 002b:00007f97f2811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1226.352195][T14438] RAX: ffffffffffffffda RBX: 00007f97f1bb5fa0 RCX: 00007f97f198e929 [ 1226.352206][T14438] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1226.352216][T14438] RBP: 00007f97f1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1226.352225][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.352234][T14438] R13: 0000000000000000 R14: 00007f97f1bb5fa0 R15: 00007fffd583da08 [ 1226.352249][T14438] [ 1226.355518][ T5871] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1226.424419][ T5959] usb 5-1: USB disconnect, device number 86 [ 1226.638067][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.712372][T29415] psmouse serio11: Failed to reset mouse on : -5 [ 1226.712467][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.712503][ T5871] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1226.712524][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.724686][ T5871] usb 6-1: config 0 descriptor?? [ 1227.159295][ T5871] hid-steam 0003:28DE:1142.0087: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1227.233128][ T5871] hid-steam 0003:28DE:1142.0087: Steam wireless receiver connected [ 1227.243294][ T5871] hid-steam 0003:28DE:1142.0088: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1228.899720][ T30] kauditd_printk_skb: 2861 callbacks suppressed [ 1228.899738][ T30] audit: type=1400 audit(2000000337.441:1922127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1228.904297][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1228.906661][ T30] audit: type=1400 audit(2000000337.441:1922128): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1228.933959][T13097] audit: audit_lost=111568 audit_rate_limit=0 audit_backlog_limit=64 [ 1228.953400][ T30] audit: type=1400 audit(2000000337.441:1922129): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1228.963593][T13097] audit: backlog limit exceeded [ 1228.983308][ T30] audit: type=1400 audit(2000000337.441:1922130): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13097 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1228.989125][T13097] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1229.007545][ T30] audit: type=1400 audit(2000000337.441:1922131): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=13097 comm="syz-executor" name="3026" dev="tmpfs" ino=15363 [ 1229.015352][T13097] audit: audit_lost=111569 audit_rate_limit=0 audit_backlog_limit=64 [ 1229.200878][ T4650] usb 6-1: USB disconnect, device number 106 [ 1229.208556][ T4650] hid-steam 0003:28DE:1142.0087: Steam wireless receiver disconnected [ 1230.739644][T29415] misc userio: Buffer overflowed, userio client isn't keeping up [ 1231.863108][T29415] input: PS/2 Generic Mouse as /devices/serio11/input/input95 [ 1232.096977][T29415] psmouse serio11: Failed to enable mouse on