last executing test programs: 8m21.759012251s ago: executing program 32 (id=17468): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 7m54.31146071s ago: executing program 33 (id=17902): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m40.815591075s ago: executing program 34 (id=18787): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x10001}]}}]}, 0x48}}, 0x4004880) 6m20.146534396s ago: executing program 35 (id=19166): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) iopl(0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000280)) 4m50.583242657s ago: executing program 2 (id=20515): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000540)={{@host, 0x2000000}, {@hyper}, 0x400, "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"}, 0x418}) 4m50.397060569s ago: executing program 2 (id=20517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl(r1, 0x4000457c, 0x0) 4m50.254209734s ago: executing program 2 (id=20521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 4m50.154944756s ago: executing program 2 (id=20522): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r2, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020804) 4m50.041955322s ago: executing program 2 (id=20524): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m49.883797598s ago: executing program 2 (id=20526): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) 4m33.72335416s ago: executing program 36 (id=20526): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) 2m48.941163547s ago: executing program 9 (id=21924): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0xfcc2}}, 0xee) 2m47.535378466s ago: executing program 9 (id=21943): r0 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m47.427765443s ago: executing program 9 (id=21945): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m47.333966841s ago: executing program 9 (id=21947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x900, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xfffffffffffffcfa, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 2m47.159479549s ago: executing program 9 (id=21949): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m47.065789337s ago: executing program 9 (id=21951): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x3}, 0x1) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m38.790043309s ago: executing program 7 (id=22018): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400080000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800c0001007061796c6f6164000800028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 2m38.565784327s ago: executing program 7 (id=22021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x10, 0x0, 0x4}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xab00000000000000, 0x10000, 0xe, 0x0, 0x3}) 2m38.333742521s ago: executing program 7 (id=22022): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) 2m38.201507411s ago: executing program 7 (id=22023): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 2m38.050117355s ago: executing program 7 (id=22024): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x14, {0x14, 0x3f, "dced883c24a8d940f5acf364e4af45930555"}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x7, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000080), 0x0, 0x0}) 2m37.663958962s ago: executing program 7 (id=22029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m37.266211258s ago: executing program 37 (id=22029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m30.814183815s ago: executing program 38 (id=21951): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x3}, 0x1) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m18.489165512s ago: executing program 5 (id=22137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x4, 0x0, &(0x7f0000000540)=0xfffffffffffffe6a) 2m18.34398957s ago: executing program 5 (id=22140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x6, 0xffff}, {0x0, 0x13}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2m18.157114409s ago: executing program 5 (id=22145): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xff, 0x4, 0x3, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m16.865126777s ago: executing program 5 (id=22159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x840, 0x25, 0xa}, 0x18) 2m16.714871508s ago: executing program 5 (id=22163): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000000000), 0x0) 2m16.271195657s ago: executing program 5 (id=22169): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macsec0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x37, "0fe58faa563ced387bc900000000000160ff0160fd56391725e7611971306d00", "784bb2e82fe8fc2abe556c4c48672a19ec4c1621c488b8634de1f645d583ba91", "6acc0f91db70e93c10d8fbd47b53e42eadb323550cd6027777f0f598c5380b97", "6fc50610034dffb5e2a8719618f529fa6fceaedff1f4d99a8b79c38aaded28a3", "b51abe192f26ef029bd40100", "7b54e7a79bc0d3799f634080", 0x2, 0x3, 0x0, 0x0, 0x400}}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1203000069bcba0003533e8689b201020301"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 2m15.83923208s ago: executing program 39 (id=22169): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macsec0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x37, "0fe58faa563ced387bc900000000000160ff0160fd56391725e7611971306d00", "784bb2e82fe8fc2abe556c4c48672a19ec4c1621c488b8634de1f645d583ba91", "6acc0f91db70e93c10d8fbd47b53e42eadb323550cd6027777f0f598c5380b97", "6fc50610034dffb5e2a8719618f529fa6fceaedff1f4d99a8b79c38aaded28a3", "b51abe192f26ef029bd40100", "7b54e7a79bc0d3799f634080", 0x2, 0x3, 0x0, 0x0, 0x400}}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1203000069bcba0003533e8689b201020301"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 1m11.208045744s ago: executing program 3 (id=22880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) read(r0, &(0x7f0000000240)=""/235, 0xeb) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1m11.05592192s ago: executing program 3 (id=22883): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0xffffffff, {0x2a00, 0x80010000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff00000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c75407d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x1ff]}}) 1m10.884739825s ago: executing program 3 (id=22885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) 1m10.727025763s ago: executing program 3 (id=22888): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x104000, 0x0) 1m10.633598804s ago: executing program 3 (id=22889): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1m10.371629568s ago: executing program 3 (id=22891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) 1m10.090956569s ago: executing program 40 (id=22891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) 6.550422009s ago: executing program 0 (id=23669): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.388283072s ago: executing program 0 (id=23671): r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r0, 0x105, 0x4800002c, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000002f00)={0x2020}, 0x2020) 3.559022745s ago: executing program 6 (id=23721): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.373108385s ago: executing program 6 (id=23722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x53}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) 3.30677945s ago: executing program 6 (id=23725): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000140)=""/195, 0xc3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 3.129706857s ago: executing program 6 (id=23729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x2, r2, 0x0) 3.052798992s ago: executing program 0 (id=23730): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) 2.93772223s ago: executing program 6 (id=23732): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) 2.733268502s ago: executing program 6 (id=23734): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2.57509083s ago: executing program 4 (id=23737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.254604702s ago: executing program 4 (id=23740): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 2.094273982s ago: executing program 4 (id=23741): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4000, @fd, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 1.981113594s ago: executing program 0 (id=23742): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 1.92643564s ago: executing program 0 (id=23743): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000010c0)={0x0, &(0x7f0000001000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000002200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={r3}) 1.855139381s ago: executing program 0 (id=23744): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x31, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x6, 0x0, [], 0x11}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x37, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x50, 0x1, {0x7, 0x25, 0x1, 0x82, 0xf5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x6, 0x8, {0x7, 0x25, 0x1, 0x3, 0x2d, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.59665918s ago: executing program 8 (id=23747): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3f, 0x1101}}) 1.53059244s ago: executing program 8 (id=23748): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x622, 0x0, 0x0, 0x0) 1.465019961s ago: executing program 8 (id=23749): open(0x0, 0x14927e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.305984539s ago: executing program 8 (id=23751): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x3, 0x6, 0x0, 0x7fd]}, &(0x7f0000000080)=0x78) 1.201126187s ago: executing program 1 (id=23752): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 1.098411485s ago: executing program 4 (id=23753): socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)={0x0, 0x4519, 0x8, 0x80000001, 0xfffffff7, 0x6}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 973.848318ms ago: executing program 4 (id=23754): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r0 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 800.885992ms ago: executing program 4 (id=23755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) 778.880625ms ago: executing program 1 (id=23756): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000055000000d500ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 621.822875ms ago: executing program 1 (id=23757): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330078000000080034"], 0x44}}, 0x0) 499.346383ms ago: executing program 1 (id=23758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x541e, 0x0) 393.530178ms ago: executing program 1 (id=23759): r0 = fanotify_init(0x4, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000033, r2, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 309.599108ms ago: executing program 1 (id=23760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000005ec0)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 233.653007ms ago: executing program 8 (id=23761): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 8 (id=23762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x801, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10080000}, 0x4004c040) kernel console output (not intermixed with test programs): .40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1370.337537][ T4996] usb 9-1: USB disconnect, device number 25 [ 1370.523203][ T29] kauditd_printk_skb: 40926 callbacks suppressed [ 1370.523221][ T29] audit: type=1400 audit(2000000464.569:1629034): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7030 comm="syz-executor" name="47" dev="tmpfs" ino=260 [ 1370.533654][ T7030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1370.551377][ T9088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1370.556846][ T7030] audit: audit_lost=135558 audit_rate_limit=0 audit_backlog_limit=64 [ 1370.572439][ T7030] audit: backlog limit exceeded [ 1370.576885][ T9088] audit: audit_lost=135559 audit_rate_limit=0 audit_backlog_limit=64 [ 1370.578506][ T7030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1370.592653][ T7030] audit: audit_lost=135560 audit_rate_limit=0 audit_backlog_limit=64 [ 1370.596932][ T9088] audit: backlog limit exceeded [ 1370.601731][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1371.095115][ T9103] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1371.112549][ T9103] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1371.120375][ T9103] syzkaller0: linktype set to 774 [ 1371.781587][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22018'. [ 1371.827482][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22018'. [ 1373.765792][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1373.788758][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1373.800012][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1373.809860][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1373.818555][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1373.829101][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1373.907599][ T9173] wlan0 speed is unknown, defaulting to 1000 [ 1373.926455][ T9183] Process accounting resumed [ 1374.187110][ T9173] vcan0 speed is unknown, defaulting to 1000 [ 1374.465966][T11890] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1374.663432][T11890] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.667991][ T9173] chnl_net:caif_netlink_parms(): no params data found [ 1374.691060][T11890] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.707200][T11890] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1374.732659][T11890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1374.740704][T11890] usb 9-1: SerialNumber: syz [ 1374.889546][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.907758][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.927051][ T9173] bridge_slave_0: entered allmulticast mode [ 1374.944786][ T9173] bridge_slave_0: entered promiscuous mode [ 1374.972204][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.988013][T11890] usb 9-1: 0:2 : does not exist [ 1374.997018][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.015346][T11890] usb 9-1: 0:0: failed to get current value for ch 0 (-22) [ 1375.021420][ T9173] bridge_slave_1: entered allmulticast mode [ 1375.047096][ T9173] bridge_slave_1: entered promiscuous mode [ 1375.055228][T11890] usb 9-1: USB disconnect, device number 26 [ 1375.181903][ T9173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.213267][ T9173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.308170][ T9173] team0: Port device team_slave_0 added [ 1375.327997][ T9173] team0: Port device team_slave_1 added [ 1375.473115][T29697] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.634845][T29697] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.676743][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.683780][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.732030][ T9173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.788804][T29697] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.814022][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.821002][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.877491][ T29] kauditd_printk_skb: 39836 callbacks suppressed [ 1375.877510][ T29] audit: type=1400 audit(2000000469.593:1656587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7030 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1375.882068][ T7030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1375.884174][ T29] audit: type=1400 audit(2000000469.593:1656588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7030 comm="syz-executor" name="47" dev="tmpfs" ino=260 [ 1375.926406][ T7030] audit: audit_lost=139670 audit_rate_limit=0 audit_backlog_limit=64 [ 1375.937425][ T9173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.962965][ T9437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1375.964305][ T29] audit: type=1400 audit(2000000469.593:1656589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7030 comm="syz-executor" name="47" dev="tmpfs" ino=260 [ 1375.970243][ T9435] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1375.989682][ T29] audit: type=1400 audit(2000000469.593:1656590): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7030 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1376.016110][ T9437] audit: audit_lost=139671 audit_rate_limit=0 audit_backlog_limit=64 [ 1376.016137][ T9437] audit: backlog limit exceeded [ 1376.048280][T29697] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.079802][ T5826] Bluetooth: hci4: command tx timeout [ 1376.152264][ T9173] hsr_slave_0: entered promiscuous mode [ 1376.159971][ T9173] hsr_slave_1: entered promiscuous mode [ 1376.167443][ T9173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1376.175052][ T9173] Cannot create hsr debugfs directory [ 1376.390638][ T58] psmouse serio8: Failed to reset mouse on : -5 [ 1376.483471][T29697] bridge_slave_1: left allmulticast mode [ 1376.501409][T29697] bridge_slave_1: left promiscuous mode [ 1376.523645][T29697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.580805][T29697] bridge_slave_0: left allmulticast mode [ 1376.614194][T29697] bridge_slave_0: left promiscuous mode [ 1376.636602][T29697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.950091][T29697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.971998][T29697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.986694][T29697] bond0 (unregistering): Released all slaves [ 1378.021539][ T9173] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.033493][ T9173] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.251839][ T9173] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.263131][ T9173] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.293058][ T5826] Bluetooth: hci4: command tx timeout [ 1378.403987][ T9173] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.414296][ T9173] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.543861][ T9173] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.586721][ T9173] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.867824][T29697] hsr_slave_0: left promiscuous mode [ 1378.886071][T29697] hsr_slave_1: left promiscuous mode [ 1378.913496][T29697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.921059][T29697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.946326][T29697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.966723][T29697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.023867][T29697] veth1_vlan: left promiscuous mode [ 1379.029272][T29697] veth0_vlan: left promiscuous mode [ 1380.152455][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1380.186228][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1380.199396][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1380.243776][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1380.252770][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1380.266458][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1380.456797][ T58] misc userio: Buffer overflowed, userio client isn't keeping up [ 1380.503029][T29697] team0 (unregistering): Port device team_slave_1 removed [ 1380.516738][ T5834] Bluetooth: hci4: command tx timeout [ 1380.646769][T29697] team0 (unregistering): Port device team_slave_0 removed [ 1381.610764][ T29] kauditd_printk_skb: 37950 callbacks suppressed [ 1381.610786][ T29] audit: type=1400 audit(2000000474.952:1674487): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=24 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.24 dest=35104 netif=eth0 [ 1381.661062][ T58] input: PS/2 Generic Mouse as /devices/serio8/input/input160 [ 1381.669420][ T29] audit: type=1400 audit(2000000474.999:1674488): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1381.689952][ T29] audit: type=1400 audit(2000000474.999:1674489): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="input" dev="devtmpfs" ino=915 [ 1381.710693][ T29] audit: type=1400 audit(2000000474.999:1674490): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="input" dev="devtmpfs" ino=915 [ 1381.730910][ T29] audit: type=1400 audit(2000000474.999:1674491): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="mouse1" dev="devtmpfs" ino=5519 [ 1381.750481][ T29] audit: type=1400 audit(2000000474.999:1674492): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9608 comm="kworker/u8:3" name="/" dev="sda1" ino=2 [ 1381.771418][ T29] audit: type=1400 audit(2000000474.999:1674493): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5183 comm="acpid" name="/" dev="sda1" ino=2 [ 1381.790659][ T29] audit: type=1400 audit(2000000474.999:1674494): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5183 comm="acpid" name="/" dev="devtmpfs" ino=1 [ 1381.811131][ T29] audit: type=1400 audit(2000000474.999:1674495): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5183 comm="acpid" name="input" dev="devtmpfs" ino=915 [ 1381.833417][ T29] audit: type=1400 audit(2000000474.999:1674496): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5183 comm="acpid" name="mouse1" dev="devtmpfs" ino=5519 [ 1381.924303][ T9592] wlan0 speed is unknown, defaulting to 1000 [ 1381.938527][ T58] psmouse serio8: Failed to enable mouse on [ 1382.178602][ T9592] vcan0 speed is unknown, defaulting to 1000 [ 1382.202678][ T9630] wlan0 speed is unknown, defaulting to 1000 [ 1382.232025][ T9173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1382.276748][ T9173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1382.309258][ T9173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1382.362190][ T9173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1382.490994][ T5834] Bluetooth: hci1: command tx timeout [ 1382.649547][ T9630] vcan0 speed is unknown, defaulting to 1000 [ 1382.740214][ T5834] Bluetooth: hci4: command tx timeout [ 1382.965467][ T613] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1382.980704][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 1383.066234][ T9173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.151530][ T613] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1383.185290][ T613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.211821][ T9173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.222072][ T613] usb 9-1: config 0 descriptor?? [ 1383.231003][ T613] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1383.315488][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.322697][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.357420][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.378408][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.386965][ T9592] bridge_slave_0: entered allmulticast mode [ 1383.395380][ T9592] bridge_slave_0: entered promiscuous mode [ 1383.417454][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.424656][ T7005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.448310][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.462837][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.474899][ T9592] bridge_slave_1: entered allmulticast mode [ 1383.484583][ T9592] bridge_slave_1: entered promiscuous mode [ 1383.658471][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.717629][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.816074][ T9592] team0: Port device team_slave_0 added [ 1383.845821][ T9592] team0: Port device team_slave_1 added [ 1383.919325][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.926326][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.960507][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.994888][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.011098][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.038090][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.126359][ T613] gspca_stv06xx: I2C: Read error writing address: -71 [ 1384.149305][ T613] usb 9-1: USB disconnect, device number 27 [ 1384.175817][ T9592] hsr_slave_0: entered promiscuous mode [ 1384.188189][ T9592] hsr_slave_1: entered promiscuous mode [ 1384.209067][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.218744][ T9592] Cannot create hsr debugfs directory [ 1384.682536][ T9173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.707556][ T5834] Bluetooth: hci1: command tx timeout [ 1384.952559][ T9173] veth0_vlan: entered promiscuous mode [ 1385.146976][ T9173] veth1_vlan: entered promiscuous mode [ 1385.288472][ T9173] veth0_macvtap: entered promiscuous mode [ 1385.328458][ T9173] veth1_macvtap: entered promiscuous mode [ 1385.364326][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.384761][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.396546][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.415957][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.431012][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.441700][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.451822][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.462590][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.472532][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.483272][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.502220][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1385.516980][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.537023][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.566435][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.589134][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.603760][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.615116][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.625445][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.636435][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.646719][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1385.667536][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1385.678755][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.730817][ T9173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.742431][ T9173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.751873][ T9173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.761251][ T9173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.874106][ T9592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.887168][ T9592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.905516][ T9592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.928908][ T9592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.965209][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.996320][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.107002][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.137635][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.173849][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.271225][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.299412][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.306764][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.347973][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.355271][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.592325][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.8.22077'. [ 1386.931543][ T5834] Bluetooth: hci1: command tx timeout [ 1386.956157][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.963765][ T29] kauditd_printk_skb: 7091 callbacks suppressed [ 1386.963781][ T29] audit: type=1400 audit(2000000479.947:1680646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10107 comm="syz.6.22082" name="10108-4" dev="debugfs" ino=197717 [ 1387.018044][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.024640][T30862] audit: audit_lost=146673 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.034104][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.040715][ C1] audit: audit_lost=146674 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.048875][ C1] audit: backlog limit exceeded [ 1387.055059][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.058924][T30862] audit: backlog limit exceeded [ 1387.061641][ C1] audit: audit_lost=146675 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.066740][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.153042][ T9592] veth0_vlan: entered promiscuous mode [ 1387.190768][ T9592] veth1_vlan: entered promiscuous mode [ 1387.264793][ T9592] veth0_macvtap: entered promiscuous mode [ 1387.329537][ T9592] veth1_macvtap: entered promiscuous mode [ 1387.385955][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.418828][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.444754][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.474600][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.496179][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.518557][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.528453][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.541015][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.554547][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.566810][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.577925][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.589352][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.602025][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.613116][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.659721][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.680927][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.712196][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.733115][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.760356][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.787404][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.806830][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.848654][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.882771][T10126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input161 [ 1387.902316][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.933528][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.974937][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.028374][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.080054][T10140] netlink: 'syz.3.22090': attribute type 5 has an invalid length. [ 1388.131651][ T9592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.141873][ T9592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.153961][ T9592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.163391][ T9592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.525018][T10162] batadv1: entered promiscuous mode [ 1388.574262][T29697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.610334][T29697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.704341][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.720010][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.165650][ T5834] Bluetooth: hci1: command tx timeout [ 1389.864496][T10217] input: syz0 as /devices/virtual/input/input162 [ 1389.871617][T10217] input: failed to attach handler leds to device input162, error: -6 [ 1390.063359][ T975] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1390.252772][ T975] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.282047][ T975] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 1390.332667][ T975] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.362181][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.378642][ T975] usb 9-1: Product: syz [ 1390.387565][ T975] usb 9-1: Manufacturer: syz [ 1390.395758][ T975] usb 9-1: SerialNumber: syz [ 1390.541387][T10249] vivid-003: disconnect [ 1390.566948][T10248] vivid-003: reconnect [ 1391.531023][ T975] cdc_ncm 9-1:1.0: bind() failure [ 1391.549696][ T975] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1391.569157][ T975] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1391.589093][ T975] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1391.604272][ T975] usb 9-1: USB disconnect, device number 28 [ 1392.248842][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22140'. [ 1392.320064][ T29] kauditd_printk_skb: 8609 callbacks suppressed [ 1392.320082][ T29] audit: type=1400 audit(2000000484.971:1688487): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1392.375093][T10321] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1392.381648][T10321] audit: audit_lost=146934 audit_rate_limit=0 audit_backlog_limit=64 [ 1392.393796][T10325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1392.394606][T10323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1392.400460][T10325] audit: audit_lost=146935 audit_rate_limit=0 audit_backlog_limit=64 [ 1392.407910][T10324] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1392.423525][ T29] audit: type=1400 audit(2000000484.971:1688488): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1392.440249][T10324] audit: audit_lost=146936 audit_rate_limit=0 audit_backlog_limit=64 [ 1392.444578][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1392.629768][ T58] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1392.812172][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 1392.819676][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1392.843853][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1392.865645][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.898117][ T58] usb 4-1: config 0 descriptor?? [ 1392.911919][ T58] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input163 [ 1393.175855][ T5183] bcm5974 4-1:0.0: could not read from device [ 1393.200482][ T5183] bcm5974 4-1:0.0: could not read from device [ 1393.213010][ T58] usb 4-1: USB disconnect, device number 43 [ 1393.213348][ T5183] bcm5974 4-1:0.0: could not read from device [ 1393.358207][T10322] team0 (unregistering): Port device team_slave_0 removed [ 1393.386884][T10322] team0 (unregistering): Port device team_slave_1 removed [ 1394.494039][ T1125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.848078][ T1125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.946510][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22174'. [ 1395.138092][ T1125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.431335][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1395.444887][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1395.458355][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1395.471731][ T1125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.496791][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1395.517850][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1395.525518][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1395.643114][T10469] wlan0 speed is unknown, defaulting to 1000 [ 1395.970361][ T1125] bridge_slave_1: left allmulticast mode [ 1395.984306][ T1125] bridge_slave_1: left promiscuous mode [ 1396.001562][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.050478][ T1125] bridge_slave_0: left allmulticast mode [ 1396.076696][ T1125] bridge_slave_0: left promiscuous mode [ 1396.113961][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.234797][T10519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.596558][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.615862][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.635078][ T1125] bond0 (unregistering): Released all slaves [ 1397.647906][T10469] vcan0 speed is unknown, defaulting to 1000 [ 1397.707501][ T29] kauditd_printk_skb: 8289 callbacks suppressed [ 1397.707519][ T29] audit: type=1400 audit(2000000490.003:1695745): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9173 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1397.717412][ T5834] Bluetooth: hci3: command tx timeout [ 1397.735751][ T9173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.747816][T10561] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.774435][T10561] audit: audit_lost=147283 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.785936][ T9173] audit: audit_lost=147284 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.796208][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1397.802837][ C1] audit: audit_lost=147285 audit_rate_limit=0 audit_backlog_limit=64 [ 1397.810998][ C1] audit: backlog limit exceeded [ 1397.819742][T10561] audit: backlog limit exceeded [ 1397.860364][ T9173] audit: backlog limit exceeded [ 1399.161627][ T1125] hsr_slave_0: left promiscuous mode [ 1399.199579][ T1125] hsr_slave_1: left promiscuous mode [ 1399.211184][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.230404][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.273688][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.304953][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.421506][ T1125] veth1_macvtap: left promiscuous mode [ 1399.441538][ T1125] veth0_macvtap: left promiscuous mode [ 1399.471451][ T1125] veth1_vlan: left promiscuous mode [ 1399.476809][ T1125] veth0_vlan: left promiscuous mode [ 1399.930638][ T5834] Bluetooth: hci3: command tx timeout [ 1400.316013][ T975] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1400.529238][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 1400.538926][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.560189][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.570742][ T975] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1400.580292][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.594199][ T975] usb 4-1: config 0 descriptor?? [ 1401.093478][ T975] appleir 0003:05AC:8241.0091: unknown main item tag 0x0 [ 1401.105881][ T975] appleir 0003:05AC:8241.0091: unknown main item tag 0x0 [ 1401.133078][ T975] appleir 0003:05AC:8241.0091: unknown main item tag 0x0 [ 1401.158917][ T975] appleir 0003:05AC:8241.0091: unknown main item tag 0x0 [ 1401.177407][ T975] appleir 0003:05AC:8241.0091: unknown main item tag 0x0 [ 1401.195300][ T975] appleir 0003:05AC:8241.0091: No inputs registered, leaving [ 1401.216986][ T975] appleir 0003:05AC:8241.0091: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1401.431417][ T975] usb 4-1: USB disconnect, device number 44 [ 1402.155069][T10735] netlink: 136 bytes leftover after parsing attributes in process `syz.6.22231'. [ 1402.167570][ T5834] Bluetooth: hci3: command tx timeout [ 1402.176076][T10735] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1402.286637][T10469] chnl_net:caif_netlink_parms(): no params data found [ 1402.641008][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.658301][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.674159][T10469] bridge_slave_0: entered allmulticast mode [ 1402.692914][T10469] bridge_slave_0: entered promiscuous mode [ 1402.711298][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.727204][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.770577][T10469] bridge_slave_1: entered allmulticast mode [ 1402.797724][T10469] bridge_slave_1: entered promiscuous mode [ 1402.806711][ T975] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1402.925221][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.982097][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.013701][ T975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.042572][ T975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.063987][ T29] kauditd_printk_skb: 5818 callbacks suppressed [ 1403.064006][ T29] audit: type=1400 audit(2000000495.026:1700859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10880 comm="kworker/u8:23" name="/" dev="sda1" ino=2 [ 1403.098200][T10882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.106025][T10874] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1403.107194][T10883] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1403.114988][ T975] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1403.130472][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1403.138895][ C1] audit: audit_lost=147522 audit_rate_limit=0 audit_backlog_limit=64 [ 1403.147181][ C1] audit: backlog limit exceeded [ 1403.148901][T10884] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1403.160506][T10874] audit: audit_lost=147523 audit_rate_limit=0 audit_backlog_limit=64 [ 1403.164811][T10887] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1403.192333][ T975] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1403.228101][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.250941][T10469] team0: Port device team_slave_0 added [ 1403.257896][ T975] usb 9-1: config 0 descriptor?? [ 1403.313256][T10469] team0: Port device team_slave_1 added [ 1403.453825][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.511830][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.558439][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.590345][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.618706][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.654849][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.719969][ T975] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 1403.750818][ T975] plantronics 0003:047F:FFFF.0092: No inputs registered, leaving [ 1403.771534][T10469] hsr_slave_0: entered promiscuous mode [ 1403.781334][ T975] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1403.797972][T10469] hsr_slave_1: entered promiscuous mode [ 1403.820382][T10469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.833547][T10469] Cannot create hsr debugfs directory [ 1404.070655][ T5836] usb 9-1: USB disconnect, device number 29 [ 1404.379609][ T5834] Bluetooth: hci3: command tx timeout [ 1404.417622][T11072] overlayfs: invalid origin (0000) [ 1404.884599][T11097] netlink: 'syz.6.22259': attribute type 1 has an invalid length. [ 1404.927781][T10469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1404.951664][T10469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1405.021132][T10469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1405.060383][T10469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1405.248729][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.306573][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.373028][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.380229][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.419496][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.426664][ T7005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.541482][T10469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.575611][T11126] block nbd6: NBD_DISCONNECT [ 1405.581579][T11126] block nbd6: Send disconnect failed -22 [ 1405.602697][T11124] block nbd6: Disconnected due to user request. [ 1405.618930][T11124] block nbd6: shutting down sockets [ 1406.107268][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.153636][T11146] syzkaller1: entered promiscuous mode [ 1406.173925][T11146] syzkaller1: entered allmulticast mode [ 1406.332282][T10469] veth0_vlan: entered promiscuous mode [ 1406.392333][T10469] veth1_vlan: entered promiscuous mode [ 1406.427805][T10469] veth0_macvtap: entered promiscuous mode [ 1406.476581][T10469] veth1_macvtap: entered promiscuous mode [ 1406.500958][T11160] input: syz0 as /devices/virtual/input/input164 [ 1406.513528][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.540316][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.566491][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.578947][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.595480][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.610754][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.622396][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.633504][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.643986][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.662220][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.675077][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.685925][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.696279][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.706836][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.718167][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.763500][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.800904][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.821867][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.843531][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.863168][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.877995][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.891403][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.912488][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.926968][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.939896][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.966243][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.000509][T10469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.019640][T10469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.028410][T10469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.050659][T10469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.124006][T11180] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x4) [ 1407.351394][T29719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.369626][T29719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.577028][ T6997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.601333][ T6997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.952234][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22294'. [ 1408.024126][T11225] Bluetooth: MGMT ver 1.23 [ 1408.289670][T11223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.424534][ T29] kauditd_printk_skb: 9919 callbacks suppressed [ 1408.424552][ T29] audit: type=1400 audit(2000000500.031:1708934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11237 comm="syz.1.22297" name="kvm" dev="debugfs" ino=1099 [ 1408.465392][ T975] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1408.465420][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1408.481854][T11240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1408.482301][T11242] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1408.498749][T11242] audit: audit_lost=148153 audit_rate_limit=0 audit_backlog_limit=64 [ 1408.498987][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1408.515458][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1408.522027][ C1] audit: audit_lost=148154 audit_rate_limit=0 audit_backlog_limit=64 [ 1408.525910][T11240] audit: audit_lost=148155 audit_rate_limit=0 audit_backlog_limit=64 [ 1408.530164][ C1] audit: backlog limit exceeded [ 1408.544096][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1408.555397][T11242] loop6: detected capacity change from 0 to 9 [ 1408.718869][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1408.792283][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1408.860636][T11890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1409.027407][T11223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.114585][T11890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1409.381972][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1409.539421][T11223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.742113][T11223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.995398][T11223] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.071777][T11223] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.128661][T11223] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.211740][T11223] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.558347][T11315] netlink: 'syz.3.22319': attribute type 4 has an invalid length. [ 1410.705850][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1411.819411][T11357] loop9: detected capacity change from 0 to 7 [ 1411.839845][T11357] Dev loop9: unable to read RDB block 7 [ 1411.845472][T11357] loop9: unable to read partition table [ 1411.860473][T11357] loop9: partition table beyond EOD, truncated [ 1411.868606][T11357] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1412.485675][T11383] siw: device registration error -23 [ 1413.593685][ T613] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1413.764036][ T613] usb 9-1: Using ep0 maxpacket: 8 [ 1413.775393][ T29] kauditd_printk_skb: 7013 callbacks suppressed [ 1413.775411][ T29] audit: type=1400 audit(2000000505.035:1715399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11412 comm="kworker/u8:22" name="/" dev="sda1" ino=2 [ 1413.786107][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 1413.806836][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1413.823845][ T29] audit: type=1400 audit(2000000505.082:1715400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11415 comm="kworker/u8:3" name="/" dev="sda1" ino=2 [ 1413.883340][ T613] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1413.884164][ T29] audit: type=1400 audit(2000000505.082:1715401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11416 comm="kworker/u8:25" name="/" dev="sda1" ino=2 [ 1413.903028][ T613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.931589][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1413.940013][ T613] usb 9-1: Product: syz [ 1413.944227][ T613] usb 9-1: Manufacturer: syz [ 1413.948952][ T613] usb 9-1: SerialNumber: syz [ 1413.954485][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1413.963045][T26166] audit: audit_lost=148339 audit_rate_limit=0 audit_backlog_limit=64 [ 1413.963700][ T9173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1413.971730][T26166] audit: backlog limit exceeded [ 1413.984560][ T29] audit: type=1400 audit(2000000505.082:1715402): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11414 comm="kworker/u8:3" name="/" dev="sda1" ino=2 [ 1413.989611][ T9173] audit: audit_lost=148340 audit_rate_limit=0 audit_backlog_limit=64 [ 1414.021732][ T613] usb 9-1: config 0 descriptor?? [ 1414.039383][ T613] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1415.197307][ T613] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 1415.431873][ T613] gspca_sq930x: Sensor ov9630 not yet treated [ 1415.438904][ T613] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 1415.461423][ T613] usb 9-1: USB disconnect, device number 30 [ 1415.604324][T11480] GUP no longer grows the stack in syz.1.22381 (11480): 400000004000-400000008000 (400000002000) [ 1415.616672][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.1.22381 Not tainted 6.14.0-rc2-syzkaller #0 [ 1415.616699][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1415.616711][T11480] Call Trace: [ 1415.616718][T11480] [ 1415.616727][T11480] dump_stack_lvl+0x241/0x360 [ 1415.616763][T11480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.616790][T11480] ? __pfx__printk+0x10/0x10 [ 1415.616812][T11480] ? find_vma+0xf9/0x170 [ 1415.616849][T11480] __get_user_pages+0x3b07/0x4140 [ 1415.616913][T11480] ? __pfx___get_user_pages+0x10/0x10 [ 1415.616965][T11480] get_user_pages_remote+0x31e/0xb60 [ 1415.617001][T11480] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1415.617029][T11480] ? __access_remote_vm+0x320/0x800 [ 1415.617059][T11480] __access_remote_vm+0x229/0x800 [ 1415.617094][T11480] ? __pfx___access_remote_vm+0x10/0x10 [ 1415.617120][T11480] ? rep_movs_alternative+0x4c/0x70 [ 1415.617146][T11480] proc_pid_cmdline_read+0x5b2/0x860 [ 1415.617175][T11480] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1415.617197][T11480] ? rw_verify_area+0x243/0x630 [ 1415.617226][T11480] vfs_readv+0x6bc/0xa80 [ 1415.617258][T11480] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1415.617277][T11480] ? __pfx_vfs_readv+0x10/0x10 [ 1415.617296][T11480] ? do_sys_openat2+0x17a/0x1d0 [ 1415.617333][T11480] ? __fget_files+0x2a/0x410 [ 1415.617357][T11480] ? __fget_files+0x395/0x410 [ 1415.617377][T11480] ? __fget_files+0x2a/0x410 [ 1415.617408][T11480] __x64_sys_preadv+0x1b7/0x2d0 [ 1415.617436][T11480] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1415.617457][T11480] ? do_syscall_64+0x100/0x230 [ 1415.617483][T11480] ? do_syscall_64+0xb6/0x230 [ 1415.617509][T11480] do_syscall_64+0xf3/0x230 [ 1415.617532][T11480] ? clear_bhb_loop+0x35/0x90 [ 1415.617558][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.617580][T11480] RIP: 0033:0x7ff03db8cde9 [ 1415.617596][T11480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.617611][T11480] RSP: 002b:00007ff03e9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1415.617630][T11480] RAX: ffffffffffffffda RBX: 00007ff03dda5fa0 RCX: 00007ff03db8cde9 [ 1415.617644][T11480] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1415.617655][T11480] RBP: 00007ff03dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.617665][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.617676][T11480] R13: 0000000000000000 R14: 00007ff03dda5fa0 R15: 00007fffc3e08908 [ 1415.617708][T11480] [ 1416.404956][T11921] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1416.582462][T11921] usb 9-1: Using ep0 maxpacket: 16 [ 1416.600314][T11921] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.631085][T11921] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.652697][T11921] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1416.659370][T11921] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1416.692141][T11921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.734073][T11921] usb 9-1: config 0 descriptor?? [ 1417.232573][T11921] cougar 0003:060B:500A.0093: unexpected long global item [ 1417.251980][T11921] cougar 0003:060B:500A.0093: parse failed [ 1417.258035][T11921] cougar 0003:060B:500A.0093: probe with driver cougar failed with error -22 [ 1417.449844][ T613] usb 9-1: USB disconnect, device number 31 [ 1418.701967][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22414'. [ 1419.001659][T11598] batadv_slave_1: entered promiscuous mode [ 1419.003574][ T5826] Bluetooth: hci5: command 0xfc11 tx timeout [ 1419.009378][ T5834] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1419.052480][T11597] batadv_slave_1: left promiscuous mode [ 1419.147841][ T29] kauditd_printk_skb: 7160 callbacks suppressed [ 1419.147860][ T29] audit: type=1400 audit(2000000510.058:1721684): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6997 comm="kworker/u8:22" saddr=10.128.0.169 src=30008 daddr=10.128.1.24 dest=35104 netif=eth0 [ 1419.155943][ T9173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.186317][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.186888][ T9173] audit: audit_lost=148636 audit_rate_limit=0 audit_backlog_limit=64 [ 1419.192873][ C1] audit: audit_lost=148637 audit_rate_limit=0 audit_backlog_limit=64 [ 1419.192891][ C1] audit: backlog limit exceeded [ 1419.193508][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.201306][ T9173] audit: backlog limit exceeded [ 1419.209122][ C1] audit: audit_lost=148638 audit_rate_limit=0 audit_backlog_limit=64 [ 1419.209139][ C1] audit: backlog limit exceeded [ 1420.096992][T11632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1422.113922][ T58] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1422.295968][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 1422.317595][ T58] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1422.344314][ T58] usb 4-1: config 0 has no interface number 0 [ 1422.365937][ T58] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1422.388923][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.405610][T11722] siw: device registration error -23 [ 1422.424250][ T58] usb 4-1: Product: syz [ 1422.434637][ T58] usb 4-1: Manufacturer: syz [ 1422.439907][ T58] usb 4-1: SerialNumber: syz [ 1422.469406][ T58] usb 4-1: config 0 descriptor?? [ 1422.479543][ T58] smsc95xx v2.0.0 [ 1422.902360][T11751] sctp: [Deprecated]: syz.8.22462 (pid 11751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1422.902360][T11751] Use struct sctp_sack_info instead [ 1423.573166][ T58] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1423.597019][ T58] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1423.618877][ T58] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1423.646535][ T58] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1423.674960][ T58] usb 4-1: USB disconnect, device number 45 [ 1423.951141][T11784] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1423.959552][T11890] IPVS: starting estimator thread 0... [ 1424.059594][T11786] IPVS: using max 27 ests per chain, 64800 per kthread [ 1424.244988][T11796] netlink: 20 bytes leftover after parsing attributes in process `syz.8.22479'. [ 1424.401579][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22479'. [ 1424.446407][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22479'. [ 1424.519577][ T29] kauditd_printk_skb: 7613 callbacks suppressed [ 1424.519595][ T29] audit: type=1400 audit(2000000515.081:1728974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30862 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1424.522146][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.526005][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.558643][ C1] audit: audit_lost=148747 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.560369][T30862] audit: audit_lost=148748 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.566841][ C1] audit: backlog limit exceeded [ 1424.566990][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.567005][ C1] audit: audit_lost=148749 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.567019][ C1] audit: backlog limit exceeded [ 1424.568114][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.668794][ T4996] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1424.850470][ T4996] usb 4-1: Using ep0 maxpacket: 32 [ 1424.858960][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.895542][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.931083][ T4996] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1424.955048][ T4996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.973914][ T4996] usb 4-1: config 0 descriptor?? [ 1425.439484][ T4996] savu 0003:1E7D:2D5A.0094: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1425.737304][ T4996] usb 4-1: USB disconnect, device number 46 [ 1425.781136][T11862] wlan0 speed is unknown, defaulting to 1000 [ 1425.904965][T11862] vcan0 speed is unknown, defaulting to 1000 [ 1426.342632][T11917] netlink: 76 bytes leftover after parsing attributes in process `syz.6.22507'. [ 1426.352757][T11917] netlink: 60 bytes leftover after parsing attributes in process `syz.6.22507'. [ 1426.634127][ T5826] Bluetooth: hci5: sending frame failed (-49) [ 1426.645019][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1426.690916][T11938] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1429.176106][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22548'. [ 1429.212117][T12037] netlink: 112 bytes leftover after parsing attributes in process `syz.3.22548'. [ 1429.240909][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22548'. [ 1429.876558][ T29] kauditd_printk_skb: 9609 callbacks suppressed [ 1429.876578][ T29] audit: type=1400 audit(2000000520.095:1737289): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9173 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1429.922773][ T29] audit: type=1400 audit(2000000520.095:1737290): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9173 comm="syz-executor" name="123" dev="tmpfs" ino=643 [ 1429.945390][ T29] audit: type=1400 audit(2000000520.095:1737291): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9173 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1429.969875][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1429.977676][T30862] audit: audit_lost=149190 audit_rate_limit=0 audit_backlog_limit=64 [ 1429.986759][T30862] audit: backlog limit exceeded [ 1429.991745][ T29] audit: type=1400 audit(2000000520.095:1737292): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9173 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.013411][T12058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.020849][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.026321][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.505863][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.22564'. [ 1430.557935][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.22564'. [ 1430.569004][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22566'. [ 1430.891337][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22570'. [ 1430.935128][T12101] bond0: option arp_validate: invalid value (768) [ 1432.034552][ T613] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1432.226981][ T613] usb 9-1: Using ep0 maxpacket: 32 [ 1432.250067][ T613] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1432.273216][ T613] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1432.306215][ T613] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1432.326493][ T613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1432.350150][ T613] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1432.367627][ T613] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1432.385162][ T613] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1432.400098][ T613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.420792][ T613] usb 9-1: config 0 descriptor?? [ 1432.650892][ T613] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1432.901745][ T4996] usb 9-1: USB disconnect, device number 32 [ 1432.917366][ T4996] usblp0: removed [ 1434.029515][ T5826] Bluetooth: hci5: sending frame failed (-49) [ 1434.043637][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1434.291441][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22608'. [ 1435.240784][ T29] kauditd_printk_skb: 8333 callbacks suppressed [ 1435.240804][ T29] audit: type=1400 audit(2000000525.109:1744362): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1435.283119][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.291175][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.297956][ C1] audit: audit_lost=149616 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.306094][ C1] audit: backlog limit exceeded [ 1435.307695][ T29] audit: type=1400 audit(2000000525.146:1744363): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1435.314692][T12249] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.340176][ T29] audit: type=1400 audit(2000000525.146:1744364): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12247 comm="syz-executor" name="1072" dev="tmpfs" ino=5469 [ 1435.341940][T12248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.363676][T12250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.515836][T12253] netlink: 188 bytes leftover after parsing attributes in process `syz.8.22624'. [ 1435.569546][T12253] netlink: 'syz.8.22624': attribute type 1 has an invalid length. [ 1436.180857][T12282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22635'. [ 1436.732727][ T58] kernel read not supported for file /video7 (pid: 58 comm: kworker/1:2) [ 1437.608677][T12340] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1438.550817][ T4996] kernel write not supported for file /267/attr/exec (pid: 4996 comm: kworker/0:4) [ 1438.598433][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1439.429245][T12399] netlink: 64 bytes leftover after parsing attributes in process `syz.8.22681'. [ 1439.705019][T12409] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1439.740493][T12409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1440.234094][ T613] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1440.420108][ T613] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1440.439119][ T613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.473225][ T613] usb 4-1: config 0 descriptor?? [ 1440.492900][ T613] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1440.651795][ T29] kauditd_printk_skb: 8004 callbacks suppressed [ 1440.651812][ T29] audit: type=1400 audit(2000000530.178:1751533): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1440.663229][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.678444][ T29] audit: type=1400 audit(2000000530.178:1751534): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1440.686299][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.711382][ C1] audit: audit_lost=149897 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.720152][ C1] audit: backlog limit exceeded [ 1440.732320][T26166] audit: audit_lost=149898 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.742299][T26166] audit: backlog limit exceeded [ 1440.748328][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.754952][T26166] audit: audit_lost=149899 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.995162][ T613] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1441.024674][ T613] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1441.218513][T11890] usb 4-1: USB disconnect, device number 47 [ 1441.950247][T12486] netlink: 232 bytes leftover after parsing attributes in process `syz.6.22708'. [ 1441.992519][T12486] macvtap1: entered promiscuous mode [ 1442.023806][T12486] syz_tun: entered promiscuous mode [ 1442.152896][T12486] team0: Device macvtap1 failed to register rx_handler [ 1442.203539][T12486] syz_tun: left promiscuous mode [ 1443.622730][T12527] wlan0 speed is unknown, defaulting to 1000 [ 1443.773163][ T58] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1443.884371][T12527] vcan0 speed is unknown, defaulting to 1000 [ 1443.943793][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 1443.966498][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.012617][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.051886][ T58] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1444.107336][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.150264][ T58] usb 4-1: config 0 descriptor?? [ 1444.673089][ T58] savu 0003:1E7D:2D5A.0095: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1444.983655][T11890] usb 4-1: USB disconnect, device number 48 [ 1445.604631][T12604] wlan0 speed is unknown, defaulting to 1000 [ 1445.838974][T12604] vcan0 speed is unknown, defaulting to 1000 [ 1446.007502][ T29] kauditd_printk_skb: 6389 callbacks suppressed [ 1446.007528][ T29] audit: type=1400 audit(2000000535.183:1756797): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1446.042644][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.049698][ T975] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1446.056259][ T29] audit: type=1400 audit(2000000535.183:1756798): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1446.061639][T12622] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.092350][T26166] audit: audit_lost=150284 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.099106][ T29] audit: type=1400 audit(2000000535.183:1756799): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="1104" dev="tmpfs" ino=5632 [ 1446.111750][T26166] audit: backlog limit exceeded [ 1446.121534][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.134168][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.137812][T12622] audit: audit_lost=150285 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.360407][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 1446.413189][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1446.466691][ T975] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1446.474924][ T975] usb 4-1: config 7 has no interface number 0 [ 1446.520634][ T975] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1446.567116][ T975] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1446.597976][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.639843][ T975] usb 4-1: Product: syz [ 1446.665246][ T975] usb 4-1: Manufacturer: syz [ 1446.674538][ T975] usb 4-1: SerialNumber: syz [ 1447.033919][ T58] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1447.053798][ T975] usb 4-1: Limiting number of CPorts to U8_MAX [ 1447.074699][ T975] usb 4-1: Not enough endpoints found in device, aborting! [ 1447.230970][ T58] usb 9-1: Using ep0 maxpacket: 32 [ 1447.237011][T12676] input input165: cannot allocate more than FF_MAX_EFFECTS effects [ 1447.265461][ T58] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1447.289915][ T58] usb 9-1: config 0 has no interface number 0 [ 1447.314092][ T58] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1447.333576][ T613] usb 4-1: USB disconnect, device number 49 [ 1447.333817][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.368974][ T58] usb 9-1: Product: syz [ 1447.373898][ T58] usb 9-1: Manufacturer: syz [ 1447.408442][ T58] usb 9-1: SerialNumber: syz [ 1447.421626][ T58] usb 9-1: config 0 descriptor?? [ 1447.447875][ T58] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 1447.476732][ T58] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1447.664974][T28969] tipc: Subscription rejected, illegal request [ 1447.681315][ T58] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1447.701436][ T58] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 1447.729796][ T58] usb 9-1: USB disconnect, device number 33 [ 1448.422965][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22757'. [ 1448.458638][T12724] ALSA: mixer_oss: invalid OSS volume '' [ 1448.914800][ T4996] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1449.110942][ T4996] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1449.142399][ T4996] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1449.173638][ T4996] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1449.201723][ T4996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.244481][T12732] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1449.271176][ T4996] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1449.346680][T12760] netlink: 112 bytes leftover after parsing attributes in process `syz.8.22768'. [ 1449.380987][T12762] random: crng reseeded on system resumption [ 1450.117487][T11921] usb 4-1: USB disconnect, device number 50 [ 1450.580060][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22772'. [ 1450.658549][T12797] netlink: 'syz.0.22774': attribute type 1 has an invalid length. [ 1450.667088][T12797] netlink: 134708 bytes leftover after parsing attributes in process `syz.0.22774'. [ 1450.783640][T12799] loop2: detected capacity change from 0 to 7 [ 1450.799790][T12799] Dev loop2: unable to read RDB block 7 [ 1450.815957][T12799] loop2: unable to read partition table [ 1450.839708][T12799] loop2: partition table beyond EOD, truncated [ 1450.855583][T12799] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1451.282138][T12830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1451.350911][T12837] Process accounting resumed [ 1451.366363][ T29] kauditd_printk_skb: 6278 callbacks suppressed [ 1451.366383][ T29] audit: type=1400 audit(2000000540.206:1762278): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1451.399312][T12838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.399395][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.418278][T12839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.425688][T12838] audit: audit_lost=150553 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.434512][T10469] audit: audit_lost=150554 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.436315][ T9173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.445278][T10469] audit: backlog limit exceeded [ 1451.451320][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.462409][ C1] audit: audit_lost=150555 audit_rate_limit=0 audit_backlog_limit=64 [ 1452.452927][T12880] syzkaller1: entered promiscuous mode [ 1452.478807][T12880] syzkaller1: entered allmulticast mode [ 1453.512211][T11890] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1453.672657][T11890] usb 9-1: Using ep0 maxpacket: 32 [ 1453.685943][T11890] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1453.704625][T11890] usb 9-1: config 0 has no interface number 0 [ 1453.715533][T11890] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1453.737571][T11890] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1453.748777][T11890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.756995][T11890] usb 9-1: Product: syz [ 1453.762829][T11890] usb 9-1: Manufacturer: syz [ 1453.767498][T11890] usb 9-1: SerialNumber: syz [ 1453.782448][T11890] usb 9-1: config 0 descriptor?? [ 1454.570392][ T4996] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1454.752919][ T4996] usb 4-1: Using ep0 maxpacket: 8 [ 1454.764627][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.775989][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.785881][ T4996] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1454.795354][ T4996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.805657][ T4996] usb 4-1: config 0 descriptor?? [ 1454.878657][T11890] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1454.886963][T11890] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1454.895150][T11890] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1454.903532][T11890] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1454.915607][T11890] usb 9-1: USB disconnect, device number 34 [ 1455.030199][ T4996] usbhid 4-1:0.0: can't add hid device: -71 [ 1455.037151][ T4996] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1455.048258][ T4996] usb 4-1: USB disconnect, device number 51 [ 1456.174367][T11921] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1456.359574][T11921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1456.400376][T11921] usb 4-1: not running at top speed; connect to a high speed hub [ 1456.421819][T11921] usb 4-1: config 106 has an invalid interface number: 8 but max is 0 [ 1456.430059][T11921] usb 4-1: config 106 has no interface number 0 [ 1456.438768][T11921] usb 4-1: config 106 interface 8 has no altsetting 0 [ 1456.449893][T11921] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 1456.461173][T11921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.475174][T11921] usb 4-1: Product: syz [ 1456.479592][T11921] usb 4-1: Manufacturer: syz [ 1456.495330][T11921] usb 4-1: SerialNumber: syz [ 1456.722782][ T29] kauditd_printk_skb: 7028 callbacks suppressed [ 1456.722800][ T29] audit: type=1400 audit(2000000545.210:1768743): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13029 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1456.780498][ T29] audit: type=1400 audit(2000000545.229:1768744): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13029 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1456.829461][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1456.836062][T30862] audit: audit_lost=150744 audit_rate_limit=0 audit_backlog_limit=64 [ 1456.836382][ T29] audit: type=1400 audit(2000000545.229:1768745): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13029 comm="syz-executor" name="1118" dev="tmpfs" ino=5704 [ 1456.870238][T12998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1456.876873][T12998] audit: audit_lost=150745 audit_rate_limit=0 audit_backlog_limit=64 [ 1456.887279][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1456.896670][T13033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1456.901311][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1456.946067][T12998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.977913][T12998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.014299][T11921] kalmia 4-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 1457.036776][T11921] kalmia 4-1:106.8: probe with driver kalmia failed with error -22 [ 1457.083446][T11921] usb 4-1: USB disconnect, device number 52 [ 1457.970006][T13096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-11) [ 1458.066322][T13096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-11) [ 1458.838212][T13125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.093997][T13135] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 1459.501210][T13152] Invalid logical block size (-1) [ 1460.425957][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22894'. [ 1460.943082][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1460.966999][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1460.985935][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1461.007604][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1461.015704][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1461.023992][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1461.107605][T13187] wlan0 speed is unknown, defaulting to 1000 [ 1461.284988][T13187] vcan0 speed is unknown, defaulting to 1000 [ 1461.881834][T13187] chnl_net:caif_netlink_parms(): no params data found [ 1461.970925][T13107] Set syz1 is full, maxelem 65536 reached [ 1462.076746][ T29] kauditd_printk_skb: 7939 callbacks suppressed [ 1462.076762][ T29] audit: type=1400 audit(2000000550.224:1775458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13360 comm="syz-executor" name="/" dev="proc" ino=1 [ 1462.109514][T13187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.124993][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.127771][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.139007][T26166] audit: audit_lost=151157 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.156661][ T29] audit: type=1400 audit(2000000550.243:1775459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13360 comm="syz-executor" name="/" dev="proc" ino=1 [ 1462.157606][T13187] bridge_slave_0: entered allmulticast mode [ 1462.181787][T26166] audit: backlog limit exceeded [ 1462.194525][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.201908][ T9592] audit: audit_lost=151158 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.201997][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.210495][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.216712][ C1] audit: audit_lost=151159 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.233068][T13187] bridge_slave_0: entered promiscuous mode [ 1462.249457][T13187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.269277][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.277191][T13187] bridge_slave_1: entered allmulticast mode [ 1462.302117][T13187] bridge_slave_1: entered promiscuous mode [ 1462.378749][T13187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.401496][T13187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.530285][T13187] team0: Port device team_slave_0 added [ 1462.554775][T13187] team0: Port device team_slave_1 added [ 1462.627233][T13187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.643358][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.691962][T13187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.728341][T13187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.745616][T13187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.789880][T13187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.916864][T13187] hsr_slave_0: entered promiscuous mode [ 1462.931368][T13187] hsr_slave_1: entered promiscuous mode [ 1462.955442][T13187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.976056][T13187] Cannot create hsr debugfs directory [ 1463.005151][T13487] netlink: 428 bytes leftover after parsing attributes in process `syz.8.22911'. [ 1463.051791][T13487] netlink: 32 bytes leftover after parsing attributes in process `syz.8.22911'. [ 1463.220422][ T5834] Bluetooth: hci4: command tx timeout [ 1463.362949][T13187] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.406437][T13187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 1463.426286][T13187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57681 - 0 [ 1463.455082][T13187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 52522 - 0 [ 1463.486568][T13187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1463.589203][T13568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1463.659973][T13187] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.689404][T13187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 1463.721366][T13187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57681 - 0 [ 1463.731279][T13187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 52522 - 0 [ 1463.778653][T13187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1463.885578][T13187] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.905135][T13187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 1463.918603][T13187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57681 - 0 [ 1463.929912][T13187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 52522 - 0 [ 1463.941264][T13187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1464.004534][T13187] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.021092][T13187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 1464.036655][T13593] netlink: 176 bytes leftover after parsing attributes in process `syz.0.22927'. [ 1464.038288][T13592] (syz.8.22926,13592,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1464.047511][T13187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57681 - 0 [ 1464.066467][T13187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 52522 - 0 [ 1464.077881][T13187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1464.520215][T13187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1464.545457][T13187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1464.567403][T13187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1464.590305][T13187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1464.813154][T13187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.864491][T13187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.877680][T13633] loop2: detected capacity change from 0 to 7 [ 1464.895693][T29719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.902890][T29719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.911658][T13633] Dev loop2: unable to read RDB block 7 [ 1464.917501][T13633] loop2: unable to read partition table [ 1464.924404][T13633] loop2: partition table beyond EOD, truncated [ 1464.936107][T13633] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1464.942617][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.952577][ T6997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.253287][T13648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.328173][T13187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.443165][ T5834] Bluetooth: hci4: command tx timeout [ 1465.966995][T13676] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 1466.022747][T13187] veth0_vlan: entered promiscuous mode [ 1466.062736][T13187] veth1_vlan: entered promiscuous mode [ 1466.162153][T13187] veth0_macvtap: entered promiscuous mode [ 1466.197725][T13187] veth1_macvtap: entered promiscuous mode [ 1466.252024][T13688] mkiss: ax0: crc mode is auto. [ 1466.266832][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.290117][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.313578][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.324882][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.336228][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.347990][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.358424][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.369777][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.379968][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.391077][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.401415][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.426515][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.447825][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.459948][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.470697][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.483772][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.495900][T13187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.527389][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.540808][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.551266][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.563809][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.574740][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.585958][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.597538][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.609142][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.619863][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.631134][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.646689][T13187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.657997][T13187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.669906][T13187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.688971][T13187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.711704][T13187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.736753][T13187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.756407][T13187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.896294][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.906472][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.957168][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.966264][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.400350][T13725] block nbd4: shutting down sockets [ 1467.432588][ T29] kauditd_printk_skb: 9866 callbacks suppressed [ 1467.432605][ T29] audit: type=1400 audit(2000000555.228:1784311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13726 comm="syz.0.22960" name="newroot" dev="tmpfs" ino=2 [ 1467.470803][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.483694][T13187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.484338][T13727] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.491630][T13187] audit: audit_lost=151498 audit_rate_limit=0 audit_backlog_limit=64 [ 1467.507449][ T29] audit: type=1400 audit(2000000555.228:1784312): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13726 comm="syz.0.22960" name="/" dev="devtmpfs" ino=1 [ 1467.527782][ T9592] audit: audit_lost=151499 audit_rate_limit=0 audit_backlog_limit=64 [ 1467.527811][ T9592] audit: backlog limit exceeded [ 1467.528900][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.536143][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.665441][T13733] netlink: 'syz.4.22963': attribute type 1 has an invalid length. [ 1467.667912][ T5834] Bluetooth: hci4: command tx timeout [ 1467.735295][T13733] netlink: 134708 bytes leftover after parsing attributes in process `syz.4.22963'. [ 1468.856520][T13784] devpts: called with bogus options [ 1469.528076][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22998'. [ 1469.891265][ T5834] Bluetooth: hci4: command tx timeout [ 1470.715176][T13860] input: syz0 as /devices/virtual/input/input166 [ 1470.971262][T13876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.910530][ T4996] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1471.993834][ T613] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1472.126920][ T4996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1472.154978][ T4996] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1472.192430][ T4996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1472.210931][ T4996] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1472.212432][ T613] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1472.241634][ T4996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.264496][ T613] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1472.276838][ T4996] usb 5-1: config 0 descriptor?? [ 1472.297587][ T613] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1472.322504][ T613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.366016][T13911] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1472.379954][ T613] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.586332][T13948] kvm: apic: phys broadcast and lowest prio [ 1472.748369][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.786480][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.799020][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.807396][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.814939][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.822661][ T29] kauditd_printk_skb: 9873 callbacks suppressed [ 1472.822678][ T29] audit: type=1400 audit(2000000560.261:1793413): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9592 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1472.832244][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1472.860427][ T4996] uclogic 0003:5543:0522.0096: unknown main item tag 0x0 [ 1472.882019][ T4996] uclogic 0003:5543:0522.0096: item fetching failed at offset 6/7 [ 1472.901669][ T4996] uclogic 0003:5543:0522.0096: parse failed [ 1472.909689][ T29] audit: type=1400 audit(2000000560.261:1793414): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9592 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1472.939207][ T4996] uclogic 0003:5543:0522.0096: probe with driver uclogic failed with error -22 [ 1472.958494][ T9592] audit: audit_lost=151760 audit_rate_limit=0 audit_backlog_limit=64 [ 1472.966753][ T9592] audit: backlog limit exceeded [ 1472.968907][ T4996] usb 5-1: USB disconnect, device number 37 [ 1472.978834][T13962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1472.986642][T13963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1472.990665][T13961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1472.995582][T13963] audit: audit_lost=151761 audit_rate_limit=0 audit_backlog_limit=64 [ 1473.001967][T13964] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.254555][T11890] usb 9-1: USB disconnect, device number 35 [ 1473.423965][T13990] netlink: 'syz.1.23047': attribute type 13 has an invalid length. [ 1473.456388][T13990] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1473.476335][T13990] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1473.494329][T13990] gretap1: entered promiscuous mode [ 1473.499935][T13990] gretap1: entered allmulticast mode [ 1473.692992][T13997] Set syz1 is full, maxelem 65536 reached [ 1473.941772][ T4996] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1474.028593][T14008] 9pnet: p9_errstr2errno: server reported unknown error [ 1474.174834][ T4996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.222124][ T4996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.253083][ T4996] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.291601][ T4996] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1474.312585][ T4996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.332708][ T4996] usb 5-1: config 0 descriptor?? [ 1474.510405][T14030] netlink: 'syz.6.23060': attribute type 1 has an invalid length. [ 1474.795060][ T4996] acrux 0003:1A34:0802.0097: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 1474.835087][ T4996] acrux 0003:1A34:0802.0097: no inputs found [ 1474.861197][ T4996] acrux 0003:1A34:0802.0097: Failed to enable force feedback support, error: -19 [ 1475.016325][ T4996] usb 5-1: USB disconnect, device number 38 [ 1475.965695][T14115] team_slave_0: entered promiscuous mode [ 1475.972481][T14115] team_slave_1: entered promiscuous mode [ 1476.004504][T14115] vlan2: entered promiscuous mode [ 1476.010506][T14115] team0: entered promiscuous mode [ 1476.021673][T14115] team0: left promiscuous mode [ 1476.027698][T14115] team_slave_0: left promiscuous mode [ 1476.033199][T14115] team_slave_1: left promiscuous mode [ 1476.060484][T29100] Bluetooth: hci4: command 0x0405 tx timeout [ 1477.311069][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23101'. [ 1477.322791][T14156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.23101'. [ 1477.632000][T14161] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1478.167549][T14182] netlink: 'syz.6.23111': attribute type 11 has an invalid length. [ 1478.176570][ T29] kauditd_printk_skb: 8103 callbacks suppressed [ 1478.176587][ T29] audit: type=1400 audit(2000000565.265:1800503): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10469 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1478.240785][T14187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.241250][T13187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.257951][T14187] audit: audit_lost=152102 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.258489][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.266493][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.279417][ C1] audit: audit_lost=152103 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.287568][ C1] audit: backlog limit exceeded [ 1478.294022][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.300658][ C1] audit: audit_lost=152104 audit_rate_limit=0 audit_backlog_limit=64 [ 1480.676552][ T4996] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1480.796625][T14283] input: syz0 as /devices/virtual/input/input168 [ 1480.878691][ T4996] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1480.901087][ T4996] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1480.954968][ T4996] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1480.964151][ T4996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.005904][T14267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1481.048613][ T4996] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1481.625493][T11890] usb 5-1: USB disconnect, device number 39 [ 1481.933160][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.23164'. [ 1483.538773][ T29] kauditd_printk_skb: 8654 callbacks suppressed [ 1483.538792][ T29] audit: type=1400 audit(2000000570.288:1808018): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9592 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1483.544735][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.557059][ T29] audit: type=1400 audit(2000000570.288:1808019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9592 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1483.580870][ T9592] audit: audit_lost=152488 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.602855][ T9592] audit: backlog limit exceeded [ 1483.610456][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.618139][ T9592] audit: audit_lost=152489 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.626445][ T9592] audit: backlog limit exceeded [ 1483.656178][ T29] audit: type=1400 audit(2000000570.288:1808020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9592 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1483.678044][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.061423][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23192'. [ 1484.217010][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23194'. [ 1484.506713][T14449] netlink: 100 bytes leftover after parsing attributes in process `syz.0.23199'. [ 1485.453160][T14496] netlink: 'syz.4.23218': attribute type 12 has an invalid length. [ 1485.487897][T14496] netlink: 'syz.4.23218': attribute type 29 has an invalid length. [ 1485.495998][T14496] netlink: 148 bytes leftover after parsing attributes in process `syz.4.23218'. [ 1485.520438][T14496] netlink: 'syz.4.23218': attribute type 1 has an invalid length. [ 1486.910129][T14556] syzkaller1: entered promiscuous mode [ 1486.915945][T14556] syzkaller1: entered allmulticast mode [ 1486.963132][ T5874] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1487.138048][ T5874] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1487.152302][ T5874] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1487.162530][ T5874] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1487.173501][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.202591][T14546] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1487.272985][ T5874] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1487.646300][ T5874] usb 9-1: USB disconnect, device number 36 [ 1487.972745][T14628] netlink: 'syz.1.23259': attribute type 2 has an invalid length. [ 1488.027414][T14631] wlan0 speed is unknown, defaulting to 1000 [ 1488.170080][T14631] vcan0 speed is unknown, defaulting to 1000 [ 1488.444944][T14662] netlink: 'syz.1.23263': attribute type 7 has an invalid length. [ 1488.453913][T14662] netlink: 208100 bytes leftover after parsing attributes in process `syz.1.23263'. [ 1488.914903][T10469] audit_log_start: 9888 callbacks suppressed [ 1488.914922][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1488.918706][ T29] audit: type=1400 audit(2000000575.311:1816265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10469 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1489.004435][T10469] audit: audit_lost=153047 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.012571][T10469] audit: backlog limit exceeded [ 1489.020505][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.029045][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.035620][ C1] audit: audit_lost=153048 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.037165][T14673] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.043896][ C1] audit: backlog limit exceeded [ 1489.051191][T30862] audit: audit_lost=153049 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.529350][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.8.23272'. [ 1489.695758][ T613] kernel write not supported for file /snd/seq (pid: 613 comm: kworker/0:0) [ 1489.797049][T14705] input: syz0 as /devices/virtual/input/input169 [ 1490.322237][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23285'. [ 1490.341992][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23285'. [ 1490.465704][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23287'. [ 1490.527839][T14736] netlink: 80 bytes leftover after parsing attributes in process `syz.8.23288'. [ 1490.560405][T14736] netlink: 80 bytes leftover after parsing attributes in process `syz.8.23288'. [ 1493.401060][T14845] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23328'. [ 1494.264524][ T29] kauditd_printk_skb: 8799 callbacks suppressed [ 1494.264543][ T29] audit: type=1400 audit(2000000580.325:1824717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14882 comm="syz-executor" name="267" dev="tmpfs" ino=1398 [ 1494.313378][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23340'. [ 1494.327346][T14878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.329472][T14887] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.344274][T13187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.362333][T13187] audit: audit_lost=153166 audit_rate_limit=0 audit_backlog_limit=64 [ 1494.367196][T14885] ipvlan2: entered promiscuous mode [ 1494.371765][T14888] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.383348][T14889] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.383727][T14887] audit: audit_lost=153167 audit_rate_limit=0 audit_backlog_limit=64 [ 1494.389924][T14889] audit: audit_lost=153168 audit_rate_limit=0 audit_backlog_limit=64 [ 1494.389946][T14889] audit: backlog limit exceeded [ 1495.660076][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23353'. [ 1495.684093][T14929] netlink: 'syz.4.23353': attribute type 7 has an invalid length. [ 1495.697640][T14929] netlink: 'syz.4.23353': attribute type 8 has an invalid length. [ 1495.710438][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23353'. [ 1495.740806][T14929] erspan0: entered promiscuous mode [ 1495.753082][T14929] erspan0: left promiscuous mode [ 1496.297795][T14954] loop7: detected capacity change from 0 to 4 [ 1496.365036][T14954] loop7: detected capacity change from 4 to 3 [ 1496.395456][T14954] Dev loop7: unable to read RDB block 3 [ 1496.421339][T14954] loop7: unable to read partition table [ 1496.438307][T14954] loop7: partition table beyond EOD, truncated [ 1496.447093][T14954] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 1498.252765][T15023] syzkaller1: entered promiscuous mode [ 1498.258457][T15023] syzkaller1: entered allmulticast mode [ 1498.594611][T15039] 9pnet: p9_errstr2errno: server reported unknown error [ 1498.806225][T15046] netlink: 'syz.1.23392': attribute type 16 has an invalid length. [ 1498.854833][T15046] netlink: 'syz.1.23392': attribute type 17 has an invalid length. [ 1498.936652][T15046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1499.345199][ T4996] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1499.538542][T15082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23399'. [ 1499.548170][ T4996] usb 5-1: Using ep0 maxpacket: 8 [ 1499.579992][ T4996] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1499.588803][ T4996] usb 5-1: config 179 has no interface number 0 [ 1499.596188][ T4996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1499.641795][ T4996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1499.656406][ T29] kauditd_printk_skb: 7819 callbacks suppressed [ 1499.656424][ T29] audit: type=1400 audit(2000000585.367:1831935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15087 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1499.687073][ T4996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1499.712041][ T9592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.720098][ T4996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1499.720237][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.738186][ C1] audit: audit_lost=153370 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.746283][ C1] audit: backlog limit exceeded [ 1499.752241][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.753926][ T4996] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1499.758909][ C1] audit: audit_lost=153371 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.780273][ C1] audit: backlog limit exceeded [ 1499.785342][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.791893][ C1] audit: audit_lost=153372 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.844840][ T4996] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1499.854018][ T4996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.854223][T15090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1499.875104][T15090] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1499.924050][T15063] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1500.291050][ T613] usb 5-1: USB disconnect, device number 40 [ 1500.297437][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1500.297486][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1500.438738][T15122] sg_write: data in/out 2012/70 bytes for SCSI command 0x0-- guessing data in; [ 1500.438738][T15122] program syz.1.23410 not setting count and/or reply_len properly [ 1501.859104][T15156] syzkaller1: entered promiscuous mode [ 1501.888813][T15156] syzkaller1: entered allmulticast mode [ 1503.211672][T15216] syzkaller1: entered promiscuous mode [ 1503.240424][T15216] syzkaller1: entered allmulticast mode [ 1504.279632][T15272] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1504.415739][T15277] wlan0 speed is unknown, defaulting to 1000 [ 1504.724513][T15277] vcan0 speed is unknown, defaulting to 1000 [ 1505.008573][ T29] kauditd_printk_skb: 9502 callbacks suppressed [ 1505.008589][ T29] audit: type=1400 audit(2000000590.371:1839880): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1505.012616][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.014997][ T29] audit: type=1400 audit(2000000590.371:1839881): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1505.015036][ T29] audit: type=1400 audit(2000000590.371:1839882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1505.035669][T26166] audit: audit_lost=153896 audit_rate_limit=0 audit_backlog_limit=64 [ 1505.085668][T15308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.092376][T15302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.098767][T15309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.106217][T15303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.112502][T15311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.968613][T15352] input: syz0 as /devices/virtual/input/input170 [ 1506.494901][ T613] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1506.668121][ T613] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1506.680192][ T613] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1506.690254][ T613] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1506.700085][ T613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.714511][T15369] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1506.726210][ T613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1506.805026][T11921] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1506.969282][T11921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.981473][T11921] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1506.995841][T11921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.008693][T11921] usb 9-1: config 0 descriptor?? [ 1507.035964][T11890] usb 5-1: USB disconnect, device number 41 [ 1507.452431][T11921] keytouch 0003:0926:3333.0098: fixing up Keytouch IEC report descriptor [ 1507.465157][T11921] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0098/input/input171 [ 1507.556201][T11921] keytouch 0003:0926:3333.0098: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1507.667474][T15444] vxcan1: tx address claim with different name [ 1507.924235][T15451] block device autoloading is deprecated and will be removed. [ 1508.027705][ T613] usb 9-1: USB disconnect, device number 37 [ 1509.421621][T15516] wlan0 speed is unknown, defaulting to 1000 [ 1509.643399][T15516] vcan0 speed is unknown, defaulting to 1000 [ 1510.060845][T15552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23526'. [ 1510.108370][T15552] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23526'. [ 1510.364807][ T29] kauditd_printk_skb: 7271 callbacks suppressed [ 1510.364826][ T29] audit: type=1400 audit(2000000595.385:1846567): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1510.398233][T26166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.402001][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.405834][T26166] audit: audit_lost=154094 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.411448][ C1] audit: audit_lost=154095 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.411470][ C1] audit: backlog limit exceeded [ 1510.412409][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.420289][ T29] audit: type=1400 audit(2000000595.385:1846568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26166 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1510.427918][ C1] audit: audit_lost=154096 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.427940][ C1] audit: backlog limit exceeded [ 1511.962518][T15612] netlink: 'syz.0.23549': attribute type 11 has an invalid length. [ 1511.980005][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23549'. [ 1512.374758][T15622] tracefs: Invalid uid '0x00000000ffffffff' [ 1512.533145][T15628] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1513.137917][T15661] netlink: 'syz.4.23569': attribute type 2 has an invalid length. [ 1513.155626][T15663] devtmpfs: Unknown parameter 'posixacl' [ 1513.336893][ T975] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1513.528859][ T975] usb 9-1: Using ep0 maxpacket: 16 [ 1513.545665][ T975] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1513.565923][ T975] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1513.597506][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.647286][ T975] usb 9-1: config 0 descriptor?? [ 1514.080581][T15683] sctp: [Deprecated]: syz.6.23578 (pid 15683) Use of int in maxseg socket option. [ 1514.080581][T15683] Use struct sctp_assoc_value instead [ 1514.235336][ T975] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.0099/input/input172 [ 1514.345690][ T975] input: HID 0458:5013 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5013.0099/input/input173 [ 1514.456844][ T975] kye 0003:0458:5013.0099: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 1514.612260][T11890] usb 9-1: USB disconnect, device number 38 [ 1515.516977][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.526373][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.535483][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.544623][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.553776][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.563033][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.572199][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.581346][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.590499][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.599984][T15765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1515.753013][ T29] kauditd_printk_skb: 7421 callbacks suppressed [ 1515.753032][ T29] audit: type=1400 audit(2000000600.418:1853369): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.24 dest=35104 netif=eth0 [ 1515.792570][ T29] audit: type=1400 audit(2000000600.464:1853370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30862 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1515.815519][T30862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1515.822868][T30862] audit: audit_lost=154316 audit_rate_limit=0 audit_backlog_limit=64 [ 1515.830652][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1515.832159][ T29] audit: type=1400 audit(2000000600.464:1853371): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30862 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1515.837715][T10469] audit: audit_lost=154317 audit_rate_limit=0 audit_backlog_limit=64 [ 1515.837732][T10469] audit: backlog limit exceeded [ 1515.838891][T10469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1515.858374][T30862] audit: backlog limit exceeded [ 1516.191145][T11890] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1516.354229][T11890] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.365740][T11890] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1516.379330][T11890] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1516.389363][T11890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1516.398043][T11890] usb 9-1: SerialNumber: syz [ 1516.630428][T11890] usb 9-1: 0:2 : does not exist [ 1516.646565][T11890] usb 9-1: USB disconnect, device number 39 [ 1517.296176][T15801] netlink: 'syz.8.23602': attribute type 1 has an invalid length. [ 1517.305379][T15801] netlink: 134708 bytes leftover after parsing attributes in process `syz.8.23602'. [ 1517.376028][T15803] netlink: 104 bytes leftover after parsing attributes in process `syz.8.23603'. [ 1517.447385][T15805] can0: slcan on ttyS3. [ 1517.507737][T15805] can0 (unregistered): slcan off ttyS3. [ 1517.975221][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23611'. [ 1518.382900][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 1518.382952][T15777] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1519.293020][T15777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1519.301123][T15777] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1519.310454][T15777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1519.318263][T15777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1519.331867][T15777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1519.350873][T15777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1519.358699][T15777] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1519.366685][T15777] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1519.374087][T15777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1519.388584][T15777] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1519.402373][T15777] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1520.206949][T15884] tap0: tun_chr_ioctl cmd 1074025675 [ 1520.215962][T15884] tap0: persist enabled [ 1520.230300][T15884] tap0: tun_chr_ioctl cmd 1074025675 [ 1520.236496][T15884] tap0: persist disabled [ 1520.314583][T15893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1520.340660][T11890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1520.606877][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 1521.108391][ T29] kauditd_printk_skb: 5193 callbacks suppressed [ 1521.108408][ T29] audit: type=1400 audit(2000000605.431:1857837): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9592 comm="syz-executor" name="312" dev="tmpfs" ino=1636 [ 1521.129128][T15917] wlan0 speed is unknown, defaulting to 1000 [ 1521.149304][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.156013][ C1] audit: audit_lost=154563 audit_rate_limit=0 audit_backlog_limit=64 [ 1521.164287][ C1] audit: backlog limit exceeded [ 1521.169901][T15922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.170290][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.183242][ C1] audit: audit_lost=154564 audit_rate_limit=0 audit_backlog_limit=64 [ 1521.190998][T15922] audit: audit_lost=154565 audit_rate_limit=0 audit_backlog_limit=64 [ 1521.191310][ C1] audit: backlog limit exceeded [ 1521.216007][T15919] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.291025][T11890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1521.461936][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 1521.547421][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 1521.556018][T29100] Bluetooth: hci3: command 0x0c1a tx timeout [ 1521.601781][T15917] vcan0 speed is unknown, defaulting to 1000 [ 1521.750285][ T975] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1521.931634][ T975] usb 9-1: Using ep0 maxpacket: 16 [ 1521.957667][ T975] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1521.989337][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.017250][ T975] usb 9-1: Product: syz [ 1522.021494][ T975] usb 9-1: Manufacturer: syz [ 1522.047985][ T975] usb 9-1: SerialNumber: syz [ 1522.071436][ T975] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1522.103820][ T975] r8152-cfgselector 9-1: config 0 descriptor?? [ 1522.590441][T11890] r8152-cfgselector 9-1: USB disconnect, device number 40 [ 1522.830284][T29100] Bluetooth: hci2: command 0x0405 tx timeout [ 1522.950545][T15997] ip6gretap0: entered promiscuous mode [ 1522.969959][T15997] batadv_slave_0: entered promiscuous mode [ 1523.685431][T29100] Bluetooth: hci1: command 0x0c1a tx timeout [ 1523.773286][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 1523.779493][T29100] Bluetooth: hci3: command 0x0c1a tx timeout [ 1523.966340][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23670'. [ 1523.983251][T16042] netlink: 'syz.4.23670': attribute type 2 has an invalid length. [ 1524.000835][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23670'. [ 1524.709550][T16068] kvm: user requested TSC rate below hardware speed [ 1525.114790][T16092] sctp: [Deprecated]: syz.6.23685 (pid 16092) Use of int in max_burst socket option. [ 1525.114790][T16092] Use struct sctp_assoc_value instead [ 1525.205713][T16095] syzkaller1: entered promiscuous mode [ 1525.212942][T16095] syzkaller1: entered allmulticast mode [ 1525.908927][T29100] Bluetooth: hci1: command 0x0c1a tx timeout [ 1525.994747][T29100] Bluetooth: hci3: command 0x0c1a tx timeout [ 1525.995448][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 1526.465817][ T29] kauditd_printk_skb: 9483 callbacks suppressed [ 1526.465835][ T29] audit: type=1400 audit(2000000610.454:1865893): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16158 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.530073][T16163] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.537344][ T29] audit: type=1400 audit(2000000610.473:1865894): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16158 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.547847][T16163] audit: audit_lost=155058 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.560452][T13187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.573433][ T29] audit: type=1400 audit(2000000610.473:1865895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16158 comm="syz-executor" name="1262" dev="tmpfs" ino=6453 [ 1526.580327][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.599713][ C1] audit: audit_lost=155059 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.607889][ C1] audit: backlog limit exceeded [ 1526.614533][T13187] audit: audit_lost=155060 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.999313][ T975] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1527.180140][ T975] usb 9-1: Using ep0 maxpacket: 8 [ 1527.198261][ T975] usb 9-1: config 253 has an invalid interface number: 252 but max is 0 [ 1527.234565][ T975] usb 9-1: config 253 has no interface number 0 [ 1527.252500][ T975] usb 9-1: config 253 interface 252 has no altsetting 0 [ 1527.282152][ T975] usb 9-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0 [ 1527.314751][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.336469][ T975] usb 9-1: Product: syz [ 1527.341320][ T975] usb 9-1: Manufacturer: syz [ 1527.341642][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23727'. [ 1527.346040][ T975] usb 9-1: SerialNumber: syz [ 1527.844979][T16230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23736'. [ 1528.086974][ T975] keyspan 9-1:253.252: Keyspan 1 port adapter converter detected [ 1528.100392][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 87 [ 1528.108933][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 7 [ 1528.121246][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 81 [ 1528.148332][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 1 [ 1528.167147][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 2 [ 1528.193154][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 85 [ 1528.203945][ T975] keyspan 9-1:253.252: found no endpoint descriptor for endpoint 5 [ 1528.214585][ T975] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1528.228389][ T975] usb 9-1: USB disconnect, device number 41 [ 1528.238067][ T975] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1528.253082][ T975] keyspan 9-1:253.252: device disconnected [ 1529.214354][T16285] wlan0 speed is unknown, defaulting to 1000 [ 1529.527048][T16285] vcan0 speed is unknown, defaulting to 1000 [ 1529.907496][T16323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23757'. [ 1548.081863][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1559.038975][ C0] net_ratelimit: 3319 callbacks suppressed [ 1559.038998][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1642.639155][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1642.646165][ C0] rcu: 1-...!: (0 ticks this GP) idle=9794/1/0x4000000000000000 softirq=234660/234660 fqs=0 [ 1642.659359][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1149/1:b..l [ 1642.667311][ C0] rcu: (detected by 0, t=10506 jiffies, g=272157, q=3794 ncpus=2) [ 1642.675226][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1642.675265][ C1] NMI backtrace for cpu 1 [ 1642.675280][ C1] CPU: 1 UID: 0 PID: 16330 Comm: syz.1.23760 Not tainted 6.14.0-rc2-syzkaller #0 [ 1642.675297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1642.675308][ C1] RIP: 0010:kasan_check_range+0x9/0x290 [ 1642.675336][ C1] Code: e3 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 <41> 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f [ 1642.675349][ C1] RSP: 0018:ffffc90000a188c8 EFLAGS: 00000046 [ 1642.675363][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b21da [ 1642.675374][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c6840 [ 1642.675385][ C1] RBP: 0000000000000008 R08: ffffffff942c6847 R09: 1ffffffff2858d08 [ 1642.675395][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: ffff88806849e4d4 [ 1642.675408][ C1] R13: dffffc0000000000 R14: 0000000000000100 R15: ffff88806849e5b8 [ 1642.675420][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1642.675433][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1642.675444][ C1] CR2: 0000001b3311eff8 CR3: 000000006ec4c000 CR4: 00000000003526f0 [ 1642.675459][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1642.675469][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1642.675479][ C1] Call Trace: [ 1642.675487][ C1] [ 1642.675497][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1642.675517][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1642.675538][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1642.675562][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1642.675579][ C1] ? nmi_handle+0x14f/0x5a0 [ 1642.675600][ C1] ? nmi_handle+0x2a/0x5a0 [ 1642.675621][ C1] ? kasan_check_range+0x9/0x290 [ 1642.675638][ C1] ? default_do_nmi+0x63/0x160 [ 1642.675654][ C1] ? exc_nmi+0x123/0x1f0 [ 1642.675669][ C1] ? end_repeat_nmi+0xf/0x53 [ 1642.675693][ C1] ? mark_lock+0x9a/0x360 [ 1642.675715][ C1] ? kasan_check_range+0x9/0x290 [ 1642.675733][ C1] ? kasan_check_range+0x9/0x290 [ 1642.675751][ C1] ? kasan_check_range+0x9/0x290 [ 1642.675768][ C1] [ 1642.675774][ C1] [ 1642.675780][ C1] mark_lock+0x9a/0x360 [ 1642.675802][ C1] __lock_acquire+0xc3e/0x2100 [ 1642.675827][ C1] lock_acquire+0x1ed/0x550 [ 1642.675845][ C1] ? debug_object_deactivate+0x158/0x390 [ 1642.675866][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1642.675885][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1642.675904][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1642.675924][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 1642.675941][ C1] ? debug_object_deactivate+0x158/0x390 [ 1642.675957][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1642.675980][ C1] debug_object_deactivate+0x158/0x390 [ 1642.675997][ C1] ? advance_sched+0xa02/0xca0 [ 1642.676014][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1642.676038][ C1] debug_deactivate+0x1b/0x220 [ 1642.676062][ C1] __hrtimer_run_queues+0x305/0xd30 [ 1642.676091][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1642.676113][ C1] ? sched_clock+0x4a/0x70 [ 1642.676136][ C1] ? read_tsc+0x9/0x20 [ 1642.676150][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1642.676172][ C1] hrtimer_interrupt+0x403/0xa40 [ 1642.676204][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1642.676227][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1642.676247][ C1] [ 1642.676252][ C1] [ 1642.676258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1642.676279][ C1] RIP: 0010:check_preemption_disabled+0x4b/0x120 [ 1642.676303][ C1] Code: 8b 05 41 be 15 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c <41> 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 [ 1642.676316][ C1] RSP: 0018:ffffc90003b3f1a8 EFLAGS: 00000282 [ 1642.676329][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88806849da00 [ 1642.676339][ C1] RDX: 0000000000000000 RSI: ffffffff8c5fb720 RDI: ffffffff8c5fb6e0 [ 1642.676350][ C1] RBP: 0000000000000160 R08: ffffffff822eed3e R09: 1ffffffff2858d08 [ 1642.676361][ C1] R10: dffffc0000000000 R11: fffffbfff2858d09 R12: 000000000005a222 [ 1642.676372][ C1] R13: ffff88805bc9b0c0 R14: ffffffff822eec70 R15: ffff88801c080000 [ 1642.676384][ C1] ? page_ext_get+0x20/0x2a0 [ 1642.676403][ C1] ? page_ext_get+0xee/0x2a0 [ 1642.676423][ C1] ? page_ext_get+0x20/0x2a0 [ 1642.676438][ C1] rcu_is_watching+0x15/0xb0 [ 1642.676461][ C1] ? page_ext_get+0x20/0x2a0 [ 1642.676476][ C1] rcu_read_lock_held+0x15/0x50 [ 1642.676500][ C1] page_ext_get+0x192/0x2a0 [ 1642.676517][ C1] page_table_check_clear+0x4b/0x550 [ 1642.676537][ C1] unmap_page_range+0x376d/0x48d0 [ 1642.676564][ C1] ? validate_chain+0x11e/0x5920 [ 1642.676594][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1642.676612][ C1] ? mas_next_node+0xb99/0xe00 [ 1642.676632][ C1] ? mas_next_slot+0xdc6/0xea0 [ 1642.676654][ C1] ? uprobe_munmap+0x183/0x460 [ 1642.676675][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 1642.676696][ C1] unmap_vmas+0x3cc/0x5f0 [ 1642.676717][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1642.676743][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1642.676761][ C1] exit_mmap+0x283/0xd40 [ 1642.676802][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1642.676828][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1642.676848][ C1] ? uprobe_clear_state+0x271/0x290 [ 1642.676866][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 1642.676885][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1642.676902][ C1] __mmput+0x115/0x410 [ 1642.676925][ C1] exit_mm+0x220/0x310 [ 1642.676944][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1642.676962][ C1] ? taskstats_exit+0x326/0xa60 [ 1642.676982][ C1] do_exit+0x9ad/0x28e0 [ 1642.677004][ C1] ? __pfx_do_exit+0x10/0x10 [ 1642.677024][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1642.677044][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1642.677063][ C1] ? cgroup_freezing+0x2a8/0x350 [ 1642.677082][ C1] do_group_exit+0x207/0x2c0 [ 1642.677101][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1642.677118][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1642.677142][ C1] get_signal+0x16b2/0x1750 [ 1642.677171][ C1] ? __pfx_get_signal+0x10/0x10 [ 1642.677198][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1642.677216][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1642.677233][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1642.677256][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1642.677278][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1642.677299][ C1] do_syscall_64+0x100/0x230 [ 1642.677321][ C1] ? clear_bhb_loop+0x35/0x90 [ 1642.677343][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.677364][ C1] RIP: 0033:0x7ff03db8cde9 [ 1642.677378][ C1] Code: Unable to access opcode bytes at 0x7ff03db8cdbf. [ 1642.677386][ C1] RSP: 002b:00007ff03e9f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1642.677402][ C1] RAX: fffffffffffffe00 RBX: 00007ff03dda5fa8 RCX: 00007ff03db8cde9 [ 1642.677414][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff03dda5fa8 [ 1642.677424][ C1] RBP: 00007ff03dda5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.677434][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff03dda5fac [ 1642.677444][ C1] R13: 0000000000000000 R14: 00007fffc3e08820 R15: 00007fffc3e08908 [ 1642.677461][ C1] [ 1642.678259][ C0] task:kworker/u8:8 state:R running task stack:19896 pid:1149 tgid:1149 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1643.415224][ C0] Workqueue: bat_events batadv_nc_worker [ 1643.421004][ C0] Call Trace: [ 1643.424315][ C0] [ 1643.427275][ C0] __schedule+0x18bc/0x4c40 [ 1643.431814][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1643.436993][ C0] ? __pfx___schedule+0x10/0x10 [ 1643.442091][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1643.448166][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 1643.453489][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 1643.459054][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1643.465208][ C0] irqentry_exit+0x5e/0x90 [ 1643.469744][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1643.475955][ C0] RIP: 0010:kasan_check_range+0x1be/0x290 [ 1643.481863][ C0] Code: 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e 41 5f <5d> c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 c5 00 [ 1643.501532][ C0] RSP: 0018:ffffc9000403f970 EFLAGS: 00000256 [ 1643.507647][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff819ad130 [ 1643.515953][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901a3370 [ 1643.523959][ C0] RBP: 0000000000000000 R08: ffffffff901a3377 R09: 1ffffffff203466e [ 1643.531966][ C0] R10: dffffc0000000000 R11: fffffbfff203466f R12: 1ffff92000807f3c [ 1643.539972][ C0] R13: ffffffff8bb965bb R14: ffff88804f87fbc0 R15: dffffc0000000000 [ 1643.547970][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1643.553035][ C0] ? lock_release+0xb0/0xa30 [ 1643.557825][ C0] lock_release+0xb0/0xa30 [ 1643.562264][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1643.567393][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1643.572342][ C0] ? __pfx_lock_release+0x10/0x10 [ 1643.577383][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1643.583383][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1643.588335][ C0] batadv_nc_worker+0x28b/0x610 [ 1643.593206][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1643.598152][ C0] ? process_scheduled_works+0x976/0x1840 [ 1643.603882][ C0] process_scheduled_works+0xa66/0x1840 [ 1643.609552][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1643.615548][ C0] ? assign_work+0x364/0x3d0 [ 1643.620154][ C0] worker_thread+0x870/0xd30 [ 1643.624769][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1643.629809][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1643.634930][ C0] kthread+0x7a9/0x920 [ 1643.639028][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.643664][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1643.648823][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.653458][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.658086][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.662703][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1643.667920][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1643.673135][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.677742][ C0] ret_from_fork+0x4b/0x80 [ 1643.682173][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.686783][ C0] ret_from_fork_asm+0x1a/0x30 [ 1643.691613][ C0] [ 1643.694648][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g272157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1643.707172][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=127740 [ 1643.715167][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g272157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1643.726634][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1643.736633][ C0] rcu: RCU grace-period kthread stack dump: [ 1643.742551][ C0] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1643.754505][ C0] Call Trace: [ 1643.757808][ C0] [ 1643.760768][ C0] __schedule+0x18bc/0x4c40 [ 1643.765300][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1643.771268][ C0] ? __pfx___schedule+0x10/0x10 [ 1643.776137][ C0] ? __pfx_lock_release+0x10/0x10 [ 1643.781198][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1643.786161][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1643.792518][ C0] ? schedule+0x90/0x320 [ 1643.796787][ C0] schedule+0x14b/0x320 [ 1643.800958][ C0] schedule_timeout+0x15a/0x290 [ 1643.805820][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1643.811201][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1643.816569][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1643.822267][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1643.827511][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1643.832400][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1643.837625][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1643.842852][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1643.847817][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1643.853113][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1643.859114][ C0] ? finish_swait+0xd4/0x1e0 [ 1643.863745][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1643.869060][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1643.873698][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1643.879015][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1643.884945][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1643.889990][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1643.895203][ C0] kthread+0x7a9/0x920 [ 1643.899283][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.904007][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1643.909230][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.913852][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.918478][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.923098][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1643.928601][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1643.933977][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.938627][ C0] ret_from_fork+0x4b/0x80 [ 1643.943192][ C0] ? __pfx_kthread+0x10/0x10 [ 1643.947808][ C0] ret_from_fork_asm+0x1a/0x30 [ 1643.952663][ C0]