last executing test programs: 8.531660588s ago: executing program 4 (id=3319): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e6d0d02"], 0x70) rmdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) poll(&(0x7f0000000080)=[{r4}, {r4}], 0x2, 0x24b) write$uinput_user_dev(r4, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read$FUSE(r3, &(0x7f00000103c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) socket$inet6(0xa, 0x0, 0x0) 7.066553234s ago: executing program 3 (id=3328): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe9, 0xdb, 0x77, 0x40, 0x6cd, 0x10c, 0x3bc0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0x19, 0x35}}]}}]}}, 0x0) 6.556950774s ago: executing program 0 (id=3332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) syz_clone(0x8db4c100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.782040338s ago: executing program 0 (id=3339): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.573126101s ago: executing program 0 (id=3341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x67}, [@call]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) read$watch_queue(r1, &(0x7f0000000100)=""/33, 0x21) pread64(r1, &(0x7f0000000080)=""/128, 0x80, 0x0) 5.470434782s ago: executing program 1 (id=3342): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x101d0}], 0x1}, 0x0) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 5.388988705s ago: executing program 3 (id=3344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0x20) 5.279825789s ago: executing program 3 (id=3345): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 5.244074972s ago: executing program 4 (id=3346): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 5.197195453s ago: executing program 0 (id=3347): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0xb, @private0={0xfc, 0x2}}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x54}}, 0x0) 5.100155141s ago: executing program 3 (id=3349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) syz_clone(0x8db4c100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.085418323s ago: executing program 1 (id=3350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001980)=""/4077, &(0x7f0000000040)=0xfed) 4.98913927s ago: executing program 0 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x2000000, 0x2e, 0x0, &(0x7f0000000600)="5cdd3086ddffff6633c9bb0000a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.953053045s ago: executing program 4 (id=3352): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents(r2, &(0x7f0000000040)=""/104, 0x68) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x37, 0x0, r3}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 4.945971509s ago: executing program 2 (id=3353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.89761037s ago: executing program 1 (id=3354): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_find_extent_range_exit\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000009c0)}, 0x10) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000680)={0x8098f903, 0x0, "5d77c3defd75c9bd8354a99d4fb1d91e7427ce0f7bcfad5e9d03616e0ab7235f", 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^!Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\xa4\xde\x8a\xf4w\xe6\x93\xe2\xf7\xf6\x02\xb8\x19\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xe4\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xe0\x15\xe4W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11h\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x03\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfa\'\xa5F\xe6\xdf\xc1\x80Sv\x92\xb1uo\xc1\x95H\xd6\xdew-;\vr\f\x0f\xe9\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\x00\x00\x00\x00\x00\x00\x00\x00\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3K/E#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\b\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca>\x17\x02.\xcb3\xfc\ns\xea\xbf&\xae\x02\x00\x00\x00\x00\x00\x00\x00:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xda0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04"], 0x20) 4.677054638s ago: executing program 2 (id=3357): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x67}, [@call]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) read$watch_queue(r1, &(0x7f0000000100)=""/33, 0x21) pread64(r1, &(0x7f0000000080)=""/128, 0x80, 0x0) 4.565045839s ago: executing program 4 (id=3358): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/3, &(0x7f0000000200)=0x3) 4.563154457s ago: executing program 1 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0x1}, 0x48) syz_open_dev$ttys(0xc, 0x2, 0x0) ioperm(0x0, 0x9, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, &(0x7f00000000c0)=0xb0) bpf$BPF_BTF_GET_FD_BY_ID(0x64, 0x0, 0x0) r5 = io_uring_setup(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa0305944ab4ea6f7ae55d88fecf90b1a7511bf7498c1b22b8de0522200000000000000", 0xc120, 0x8c1, 0x0, 0x27) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000002008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r8, 0x407, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4.557607814s ago: executing program 2 (id=3360): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x101d0}], 0x1}, 0x0) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 4.507281399s ago: executing program 3 (id=3361): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)={0x20002007}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d, 0x2}) 4.355051308s ago: executing program 4 (id=3362): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0xb, @private0={0xfc, 0x2}}, @IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x54}}, 0x0) 4.34060238s ago: executing program 3 (id=3363): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 4.33259036s ago: executing program 2 (id=3364): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x8f2, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_procfs(0x0, 0x0) io_uring_enter(r0, 0x2df0, 0x0, 0x0, 0x0, 0x0) 4.301401771s ago: executing program 1 (id=3365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x2000000, 0x2e, 0x0, &(0x7f0000000600)="5cdd3086ddffff6633c9bb0000a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.067706418s ago: executing program 1 (id=3366): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f040e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r5}, 0x10) fcntl$setlease(r4, 0x400, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000080)={0x0, r9}) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000040)={0x0, r9}) close_range(r7, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f000000000c0000000c0000000b000000090000000000000b0300000000305f615f610000612e0000000000000000"], &(0x7f00000000c0)=""/43, 0x2f, 0x2b, 0x1, 0x7f}, 0x20) 3.806929133s ago: executing program 2 (id=3367): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents(r2, &(0x7f0000000040)=""/104, 0x68) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x37, 0x0, r3}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 0s ago: executing program 2 (id=3368): socket(0x10, 0x0, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$caif(r0, &(0x7f0000001900)=@rfm={0x25, 0x0, "ce3be9aa21659d915c39644d05f361b1"}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000800)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000940)={&(0x7f00000003c0)=[0x0], 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000980)={0x9, r2, r3}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0xc8, 0x8, 0x158, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x4, 0x6}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@hl={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6138a7a65f77c015) kernel console output (not intermixed with test programs): permission action=granted subject="_" object="_" requested=x pid=11885 comm="syz-executor" name="56" dev="tmpfs" ino=301 [ 451.597492][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 451.597537][T11890] audit: audit_backlog=66 > audit_backlog_limit=64 [ 451.610823][T11890] audit: audit_lost=392 audit_rate_limit=0 audit_backlog_limit=64 [ 451.613774][ T5678] audit: audit_lost=393 audit_rate_limit=0 audit_backlog_limit=64 [ 451.618819][T11890] audit: backlog limit exceeded [ 451.618953][T11890] audit: audit_backlog=66 > audit_backlog_limit=64 [ 451.626855][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 453.469637][ T5134] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 453.816536][ T5134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.949967][ T5134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.006921][ T5134] usb 2-1: config 1 interface 1 has no altsetting 0 [ 454.052657][ T5134] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.080878][ T5134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.116223][ T5134] usb 2-1: Product: syz [ 454.126174][ T5134] usb 2-1: Manufacturer: syz [ 454.154405][ T5134] usb 2-1: SerialNumber: syz [ 454.174220][ T5134] usb 2-1: selecting invalid altsetting 1 [ 454.185012][ T5134] usb 2-1: selecting invalid altsetting 0 [ 454.209498][ T5134] usb 2-1: selecting invalid altsetting 0 [ 454.228120][ T5134] cdc_ncm 2-1:1.0: bind() failure [ 454.258646][ T5134] usb 2-1: selecting invalid altsetting 0 [ 454.264557][ T5134] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -22 [ 454.282757][ T5134] usb 2-1: selecting invalid altsetting 0 [ 454.294304][ T5134] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -22 [ 454.306281][ T5134] usb 2-1: selecting invalid altsetting 0 [ 454.325299][ T5134] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 454.427537][T11928] dccp_invalid_packet: P.Data Offset(68) too large [ 455.559719][T10611] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 455.585402][T11960] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2269'. [ 455.614794][T11960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 455.632616][T11962] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 455.644609][T11960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2269'. [ 455.667312][T11960] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2269'. [ 455.703899][T11960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 455.783399][T10611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.817761][T10611] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 455.845898][T10611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.863465][ T5134] usb 2-1: USB disconnect, device number 12 [ 455.915309][T10611] usb 5-1: Product: syz [ 455.924747][T10611] usb 5-1: Manufacturer: syz [ 455.932165][T10611] usb 5-1: SerialNumber: syz [ 456.139275][ T4477] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 456.194751][T10611] usb 5-1: config 0 descriptor?? [ 456.481520][ T29] kauditd_printk_skb: 4009 callbacks suppressed [ 456.481611][ T29] audit: type=1400 audit(1720266579.994:13065): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11964 comm="syz.2.2271" name="newroot" dev="tmpfs" ino=2 [ 456.560020][ T4477] Bluetooth: hci0: command 0x0405 tx timeout [ 456.898025][ T29] audit: type=1400 audit(1720266580.004:13066): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11964 comm="syz.2.2271" name="/" dev="devtmpfs" ino=1 [ 456.927898][ T29] audit: type=1400 audit(1720266580.004:13067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=11964 comm="syz.2.2271" name="ptmx" dev="devtmpfs" ino=617 [ 457.020366][T11951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.038138][T11973] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.045121][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.051777][ C0] audit: audit_lost=541 audit_rate_limit=0 audit_backlog_limit=64 [ 457.059695][ C0] audit: backlog limit exceeded [ 457.066606][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.068459][ T29] audit: type=1400 audit(1720266580.004:13068): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=11964 comm="syz.2.2271" path="/dev/ptmx" dev="devtmpfs" ino=617 [ 457.435930][T10611] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 457.463897][T10611] usb 5-1: USB disconnect, device number 20 [ 457.919049][ T5179] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 457.952297][T11990] dccp_invalid_packet: P.Data Offset(0) too small [ 458.168804][ T4477] Bluetooth: hci4: command 0x0406 tx timeout [ 458.192928][ T5179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.204744][ T5179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.214734][ T5179] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 458.224910][ T5179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.241668][ T5179] usb 3-1: config 0 descriptor?? [ 458.528432][T10611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 458.686495][ T5179] hid (null): bogus close delimiter [ 458.730010][ T5179] itetech 0003:06CB:73F5.000F: bogus close delimiter [ 458.743458][ T5179] itetech 0003:06CB:73F5.000F: item 0 1 2 10 parsing failed [ 458.744179][T10611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.759121][ T5179] itetech 0003:06CB:73F5.000F: probe with driver itetech failed with error -22 [ 458.795532][T10611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.816978][T10611] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.836918][T10611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.857645][T10611] usb 2-1: SerialNumber: syz [ 458.929216][ T783] usb 3-1: USB disconnect, device number 9 [ 459.142595][T10611] usb 2-1: 0:2 : does not exist [ 459.171441][T10611] usb 2-1: unit 5 not found! [ 459.208666][ T5179] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 459.213283][T10611] usb 2-1: USB disconnect, device number 13 [ 459.408311][ T5179] usb 5-1: Using ep0 maxpacket: 8 [ 459.425625][ T5179] usb 5-1: config 0 has no interfaces? [ 459.431645][ T5179] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 459.443427][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.465628][ T5179] usb 5-1: config 0 descriptor?? [ 459.845454][ T5204] usb 5-1: USB disconnect, device number 21 [ 460.218421][T12023] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2291'. [ 460.849839][ T5072] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 461.853643][ T29] kauditd_printk_skb: 5140 callbacks suppressed [ 461.853665][ T29] audit: type=1400 audit(1720266585.534:17326): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12059 comm="syz.4.2306" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 461.882857][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.930945][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 461.937758][ C1] audit: audit_lost=839 audit_rate_limit=0 audit_backlog_limit=64 [ 461.943493][T10678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 461.945694][ C1] audit: backlog limit exceeded [ 461.958549][T10678] audit: audit_lost=840 audit_rate_limit=0 audit_backlog_limit=64 [ 461.964122][T12049] audit: audit_backlog=66 > audit_backlog_limit=64 [ 461.966409][T10678] audit: backlog limit exceeded [ 461.966435][T10678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 461.985363][ T5678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 461.992267][ T5072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.040742][ T5072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.071809][ T5072] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 462.087005][ T5072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.100982][ T5072] usb 4-1: config 0 descriptor?? [ 462.579446][T10611] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 462.798426][T10611] usb 3-1: Using ep0 maxpacket: 8 [ 462.823019][T10611] usb 3-1: config 0 has no interfaces? [ 462.881212][T10611] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 462.958595][ T5133] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 463.011149][T10611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.185827][T10611] usb 3-1: config 0 descriptor?? [ 463.263024][ T5133] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.370978][ T5133] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.379434][ T5072] hid (null): bogus close delimiter [ 463.392655][ T5072] itetech 0003:06CB:73F5.0010: bogus close delimiter [ 463.399683][ T5072] itetech 0003:06CB:73F5.0010: item 0 1 2 10 parsing failed [ 463.404930][ T5133] usb 5-1: config 1 interface 1 has no altsetting 0 [ 463.407818][ T5072] itetech 0003:06CB:73F5.0010: probe with driver itetech failed with error -22 [ 463.425770][ T5072] usb 4-1: USB disconnect, device number 18 [ 463.437047][ T5133] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.486951][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.502479][ T5133] usb 5-1: Product: syz [ 463.506798][ T5133] usb 5-1: Manufacturer: syz [ 463.513409][ T5133] usb 5-1: SerialNumber: syz [ 463.525263][ T5133] usb 5-1: selecting invalid altsetting 1 [ 463.546887][ T5133] usb 5-1: selecting invalid altsetting 0 [ 463.561627][ T5133] usb 5-1: selecting invalid altsetting 0 [ 463.592015][ T5133] cdc_ncm 5-1:1.0: bind() failure [ 463.621261][ T5133] usb 5-1: selecting invalid altsetting 0 [ 463.627088][ T5133] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -22 [ 463.670425][ T5133] usb 5-1: selecting invalid altsetting 0 [ 463.676235][ T5133] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -22 [ 463.699889][ T5133] usb 5-1: selecting invalid altsetting 0 [ 463.705701][ T5133] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 463.764275][T12090] pim6reg: entered allmulticast mode [ 463.899455][ T4477] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 463.997517][ T4477] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 464.079303][T12094] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 464.090980][T12094] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 464.115319][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 464.284859][T12096] team1: Mode changed to "loadbalance" [ 465.015896][T10611] usb 3-1: USB disconnect, device number 10 [ 465.615198][ T5133] usb 5-1: USB disconnect, device number 22 [ 466.056029][T12118] pim6reg: entered allmulticast mode [ 466.076668][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 466.144960][ T4477] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 466.194017][T12121] team2: Mode changed to "loadbalance" [ 466.355004][ T4477] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 466.496944][T12129] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 466.514995][T12129] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 466.543659][T12138] netlink: 'syz.2.2334': attribute type 46 has an invalid length. [ 466.557295][T12138] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2334'. [ 466.862217][ T29] kauditd_printk_skb: 3937 callbacks suppressed [ 466.862238][ T29] audit: type=1400 audit(1720266590.544:20578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 466.927355][ T29] audit: type=1400 audit(1720266590.544:20579): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 466.958375][T10611] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 466.996022][ T29] audit: type=1400 audit(1720266590.544:20580): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 466.999845][T10308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.037227][ T29] audit: type=1400 audit(1720266590.544:20581): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 467.058350][ T29] audit: type=1400 audit(1720266590.544:20582): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 467.092756][T10308] audit: audit_lost=1072 audit_rate_limit=0 audit_backlog_limit=64 [ 467.105559][T10308] audit: backlog limit exceeded [ 467.113880][T10308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.122117][ T29] audit: type=1400 audit(1720266590.544:20583): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12145 comm="syz-executor" name="124" dev="tmpfs" ino=654 [ 467.171096][T10611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.278436][T10611] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 467.310676][T10611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.331721][T10611] usb 3-1: Product: syz [ 467.346856][T10611] usb 3-1: Manufacturer: syz [ 467.359419][T10611] usb 3-1: SerialNumber: syz [ 467.376617][T10611] usb 3-1: config 0 descriptor?? [ 467.424755][T12152] pim6reg: entered allmulticast mode [ 467.836871][T12164] netlink: 'syz.0.2347': attribute type 46 has an invalid length. [ 467.848123][T12164] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2347'. [ 467.955884][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 468.054556][T10611] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 468.083886][T10611] usb 3-1: USB disconnect, device number 11 [ 469.824335][T12210] pim6reg: entered allmulticast mode [ 470.588697][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 471.868438][ T29] kauditd_printk_skb: 5801 callbacks suppressed [ 471.868457][ T29] audit: type=1400 audit(1720266595.554:26067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12257 comm="modprobe" name="lib" dev="sda1" ino=239 [ 471.923067][T12257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.928683][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.944094][T12258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.951866][ T5678] audit: audit_lost=1181 audit_rate_limit=0 audit_backlog_limit=64 [ 471.961160][ T5678] audit: backlog limit exceeded [ 471.966229][T12257] audit: audit_lost=1182 audit_rate_limit=0 audit_backlog_limit=64 [ 471.974543][T12258] audit: audit_lost=1183 audit_rate_limit=0 audit_backlog_limit=64 [ 471.976286][ T29] audit: type=1400 audit(1720266595.574:26068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12257 comm="modprobe" name="/" dev="sda1" ino=2 [ 471.983040][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.208354][ T4477] Bluetooth: hci6: command 0x0406 tx timeout [ 473.656466][T12278] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 475.503275][T12312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 476.542905][ T5188] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 476.782176][ T5188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.807714][ T5188] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 476.821787][ T5188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.852813][ T5188] usb 4-1: Product: syz [ 476.874827][ T5188] usb 4-1: Manufacturer: syz [ 476.896299][ T5188] usb 4-1: SerialNumber: syz [ 476.904800][ T29] kauditd_printk_skb: 4103 callbacks suppressed [ 476.904816][ T29] audit: type=1400 audit(1720266600.584:29754): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 476.955479][ T5188] usb 4-1: config 0 descriptor?? [ 476.962565][T10308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.980397][ T29] audit: type=1400 audit(1720266600.584:29755): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 477.006827][T12323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.034110][T10308] audit: audit_lost=1323 audit_rate_limit=0 audit_backlog_limit=64 [ 477.043131][T12323] audit: audit_lost=1324 audit_rate_limit=0 audit_backlog_limit=64 [ 477.058385][T10308] audit: backlog limit exceeded [ 477.070032][T12323] audit: backlog limit exceeded [ 477.081486][T10308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.089631][T12323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 477.503597][T12342] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.524504][T12342] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 477.600787][T12342] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.650213][T12342] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 477.824837][ T5188] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 477.856902][ T5188] usb 4-1: USB disconnect, device number 19 [ 478.293161][T12359] syz.4.2417: attempt to access beyond end of device [ 478.293161][T12359] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 478.344111][T12359] F2FS-fs (loop4): Unable to read 1th superblock [ 478.385730][T12359] syz.4.2417: attempt to access beyond end of device [ 478.385730][T12359] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 478.452561][T12359] F2FS-fs (loop4): Unable to read 2th superblock [ 480.057377][T12384] tipc: Started in network mode [ 480.074843][T12384] tipc: Node identity 1, cluster identity 4711 [ 480.110001][T12384] tipc: Node number set to 1 [ 481.582182][T12402] Cannot find add_set index 0 as target [ 481.908659][ T29] kauditd_printk_skb: 3650 callbacks suppressed [ 481.908679][ T29] audit: type=1400 audit(1720266605.594:33016): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12411 comm="syz-executor" name="93" dev="tmpfs" ino=514 [ 481.949771][T12410] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.957347][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.963992][ C1] audit: audit_lost=1460 audit_rate_limit=0 audit_backlog_limit=64 [ 481.964462][T12410] audit: audit_lost=1461 audit_rate_limit=0 audit_backlog_limit=64 [ 481.971932][ C1] audit: backlog limit exceeded [ 481.972831][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.980834][ T5678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 481.984820][ C1] audit: audit_lost=1462 audit_rate_limit=0 audit_backlog_limit=64 [ 481.984840][ C1] audit: backlog limit exceeded [ 482.154933][T12416] tipc: Started in network mode [ 482.211857][T12416] tipc: Node identity 1, cluster identity 4711 [ 482.271576][T12416] tipc: Node number set to 1 [ 482.362471][T12421] delete_channel: no stack [ 483.042162][T12424] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 483.119581][ T5137] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 483.335804][ T5137] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.350710][ T5137] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.376515][ T5137] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.387954][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.404946][ T5137] usb 4-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 483.423725][ T5137] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 483.476973][ T5137] usb 4-1: SerialNumber: syz [ 483.770628][T12447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.782088][ T5137] usb 4-1: 0:2 : does not exist [ 483.971136][T12455] futex_wake_op: syz.4.2463 tries to shift op by -1; fix this program [ 484.458113][ T5137] usb 4-1: USB disconnect, device number 20 [ 485.903944][T12486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 486.316391][T12500] netlink: 'syz.0.2482': attribute type 4 has an invalid length. [ 486.922975][ T29] kauditd_printk_skb: 5542 callbacks suppressed [ 486.922996][ T29] audit: type=1400 audit(1720266610.594:38200): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12490 comm="syz.3.2478" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 486.960362][ T29] audit: type=1400 audit(1720266610.604:38201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12518 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 486.967528][T10796] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.989327][ T29] audit: type=1400 audit(1720266610.604:38202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12518 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 487.037535][T12519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.044655][T12520] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.044681][T12520] audit: audit_lost=1583 audit_rate_limit=0 audit_backlog_limit=64 [ 487.044699][T12520] audit: backlog limit exceeded [ 487.067931][T12520] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.087442][T10796] audit: audit_lost=1584 audit_rate_limit=0 audit_backlog_limit=64 [ 487.364885][T12527] netlink: 'syz.4.2494': attribute type 4 has an invalid length. [ 487.721316][T12533] futex_wake_op: syz.1.2495 tries to shift op by -1; fix this program [ 488.738430][ T5188] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 488.981454][ T5188] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 489.023191][ T5188] usb 2-1: config 0 has no interface number 0 [ 489.053856][ T5188] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.138275][ T5188] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.168309][ T5188] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 489.193317][ T5188] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 489.249175][ T5188] usb 2-1: Manufacturer: syz [ 489.285709][ T5188] usb 2-1: config 0 descriptor?? [ 490.455487][ T5188] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0011/input/input22 [ 490.615997][ T5188] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 490.638511][ T5188] usb 2-1: USB disconnect, device number 14 [ 490.990284][T12572] futex_wake_op: syz.0.2510 tries to shift op by -1; fix this program [ 491.933129][ T29] kauditd_printk_skb: 3090 callbacks suppressed [ 491.933148][ T29] audit: type=1400 audit(1720266615.614:40967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.933413][ T29] audit: type=1400 audit(1720266615.614:40968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.933721][ T29] audit: type=1400 audit(1720266615.614:40969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.933977][ T29] audit: type=1400 audit(1720266615.614:40970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.934334][ T29] audit: type=1400 audit(1720266615.614:40971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.935249][ T29] audit: type=1400 audit(1720266615.614:40972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.935533][ T29] audit: type=1400 audit(1720266615.614:40973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.936966][ T29] audit: type=1400 audit(1720266615.614:40974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 491.937021][ T29] audit: type=1400 audit(1720266615.614:40975): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12579 comm="syz.2.2516" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 491.937272][ T29] audit: type=1400 audit(1720266615.614:40976): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12573 comm="syz.0.2512" name="12576-7" dev="debugfs" ino=46933 [ 492.113061][T12582] netlink: 'syz.2.2516': attribute type 28 has an invalid length. [ 492.113089][T12582] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2516'. [ 492.119097][T12582] input: syz0 as /devices/virtual/input/input23 [ 492.341143][T12592] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.698410][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 493.874686][T12634] loop0: detected capacity change from 0 to 1 [ 494.298798][T12639] netlink: 'syz.1.2533': attribute type 28 has an invalid length. [ 494.306698][T12639] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2533'. [ 494.323077][T12639] input: syz0 as /devices/virtual/input/input24 [ 495.143097][T12651] batman_adv: batadv0: Adding interface: ipvlan2 [ 495.158750][T12651] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.224032][T12651] batman_adv: batadv0: Interface activated: ipvlan2 [ 495.393941][ T4477] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 496.087313][T12664] infiniband syz2: set active [ 496.102852][T12664] infiniband syz2: added veth1_to_bridge [ 496.282688][T12664] RDS/IB: syz2: added [ 496.288006][T12664] smc: adding ib device syz2 with port count 1 [ 496.301472][T12664] smc: ib device syz2 port 1 has pnetid [ 496.457444][ T4477] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 496.488827][ T783] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 496.508400][T12676] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 496.563575][T12676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2545'. [ 496.613353][T12679] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 496.632766][T12679] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 496.724947][ T783] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.780907][ T783] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.817737][ T783] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.848065][ T783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.875947][ T783] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 496.917271][ T783] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 496.976387][ T29] kauditd_printk_skb: 5860 callbacks suppressed [ 496.976407][ T29] audit: type=1400 audit(1720266620.654:46462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12690 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 497.000844][ T783] usb 5-1: SerialNumber: syz [ 497.092223][ T29] audit: type=1400 audit(1720266620.694:46463): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12690 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 497.201680][ T29] audit: type=1400 audit(1720266620.694:46464): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12690 comm="syz-executor" name="107" dev="tmpfs" ino=582 [ 497.235254][ T9036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.264668][ T9036] audit: audit_lost=1819 audit_rate_limit=0 audit_backlog_limit=64 [ 497.292222][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.298890][ C1] audit: audit_lost=1820 audit_rate_limit=0 audit_backlog_limit=64 [ 497.306860][ C1] audit: backlog limit exceeded [ 497.308377][ T9036] audit: backlog limit exceeded [ 497.313821][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.359225][ T783] usb 5-1: 0:2 : does not exist [ 497.418564][ T783] usb 5-1: USB disconnect, device number 23 [ 499.068340][ T5137] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 499.298308][ T5137] usb 5-1: Using ep0 maxpacket: 8 [ 499.337214][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.399056][ T5137] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=96.12 [ 499.447182][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.477203][ T5137] usb 5-1: config 0 descriptor?? [ 499.496510][ T5137] usb 5-1: bad CDC descriptors [ 499.966406][T10611] usb 5-1: USB disconnect, device number 24 [ 500.353542][T12754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 500.394064][T12754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.419801][T12754] batman_adv: batadv0: Adding interface: ipvlan3 [ 500.430516][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.452013][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.452022][T12754] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.452061][T12754] batman_adv: batadv0: Interface activated: ipvlan3 [ 500.497962][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.519417][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.539253][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 500.548971][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.823305][T12770] netlink: 'syz.0.2578': attribute type 15 has an invalid length. [ 501.779741][T12787] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 501.859417][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.865892][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.979385][ T29] kauditd_printk_skb: 6409 callbacks suppressed [ 501.979405][ T29] audit: type=1400 audit(1720266881.666:52749): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10796 comm="syz-executor" path="/116" dev="tmpfs" ino=630 [ 502.027104][T12796] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.038547][T10796] audit: audit_backlog=66 > audit_backlog_limit=64 [ 502.055419][T10796] audit: audit_lost=1863 audit_rate_limit=0 audit_backlog_limit=64 [ 502.063950][ T5678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 502.071876][T12796] audit: audit_lost=1864 audit_rate_limit=0 audit_backlog_limit=64 [ 502.082226][T10796] audit: backlog limit exceeded [ 502.082886][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 502.087092][T10796] audit: audit_backlog=66 > audit_backlog_limit=64 [ 502.087112][T10796] audit: audit_lost=1865 audit_rate_limit=0 audit_backlog_limit=64 [ 502.657762][ T5092] Bluetooth: hci4: command tx timeout [ 502.986707][T12758] chnl_net:caif_netlink_parms(): no params data found [ 503.337272][T12835] syz2: rxe_newlink: already configured on veth1_to_bridge [ 503.436719][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.464764][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.486814][T12758] bridge_slave_0: entered allmulticast mode [ 503.506849][T12758] bridge_slave_0: entered promiscuous mode [ 503.539360][T12758] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.557444][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.568775][T12758] bridge_slave_1: entered allmulticast mode [ 503.587354][T12758] bridge_slave_1: entered promiscuous mode [ 503.747950][T12758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.757350][T12758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.928635][ T5092] Bluetooth: hci0: command 0x0405 tx timeout [ 504.022393][T12758] team0: Port device team_slave_0 added [ 504.049600][T12758] team0: Port device team_slave_1 added [ 504.115894][T10308] syz-executor (10308) used greatest stack depth: 18448 bytes left [ 504.209093][T12758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.240050][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.360693][T12758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.412494][T12758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.433225][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.461297][T12758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.572373][T12758] hsr_slave_0: entered promiscuous mode [ 504.618101][T12758] hsr_slave_1: entered promiscuous mode [ 504.640199][T12758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.651960][T12758] Cannot create hsr debugfs directory [ 504.728777][ T4477] Bluetooth: hci4: command tx timeout [ 505.392900][T12860] gre1: entered allmulticast mode [ 506.107038][ T5092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 506.117537][ T5092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 506.126191][ T5092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 506.134718][ T5092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 506.145009][ T5092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 506.177148][ T5092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.313763][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'. [ 506.538100][T12758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.666304][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.748332][ T783] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 506.789554][T12758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.808634][ T5092] Bluetooth: hci4: command tx timeout [ 506.953286][T12758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.978601][ T783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.989664][ T29] kauditd_printk_skb: 4774 callbacks suppressed [ 506.989681][ T29] audit: type=1400 audit(1720266886.676:56879): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12873 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 507.005641][ T783] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 507.039314][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.045724][ T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.046180][T12873] audit: audit_backlog=66 > audit_backlog_limit=64 [ 507.066023][ T29] audit: type=1400 audit(1720266886.686:56880): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=12871 comm="syz.2.2612" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 507.077275][ T783] usb 3-1: Product: syz [ 507.094618][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.098493][ T5678] audit: audit_lost=2082 audit_rate_limit=0 audit_backlog_limit=64 [ 507.113081][T12873] audit: audit_lost=2083 audit_rate_limit=0 audit_backlog_limit=64 [ 507.120993][ T783] usb 3-1: Manufacturer: syz [ 507.125653][ T783] usb 3-1: SerialNumber: syz [ 507.125676][ T5678] audit: backlog limit exceeded [ 507.135595][ T29] audit: type=1400 audit(1720266886.686:56881): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=12871 comm="syz.2.2612" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 507.157043][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.163828][T12873] audit: backlog limit exceeded [ 507.193331][ T783] usb 3-1: config 0 descriptor?? [ 507.246558][T12758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.326167][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.429693][ T4477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.442105][ T4477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.450700][ T4477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.460477][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.482229][ T4477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.493153][ T4477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.501848][ T4477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.778409][ T5072] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 507.796837][ T783] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 507.817767][ T783] usb 3-1: USB disconnect, device number 12 [ 507.957852][T12867] chnl_net:caif_netlink_parms(): no params data found [ 507.981051][ T5072] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.999916][T12758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.018794][ T5072] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.030909][T12758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.038467][ T5072] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 508.058333][ T5072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.080198][ T5072] usb 5-1: config 0 descriptor?? [ 508.107486][T12758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.149526][ T35] bridge_slave_1: left allmulticast mode [ 508.155251][ T35] bridge_slave_1: left promiscuous mode [ 508.169024][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.182656][ T35] bridge_slave_0: left allmulticast mode [ 508.189184][ T35] bridge_slave_0: left promiscuous mode [ 508.194937][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.248828][ T4477] Bluetooth: hci5: command tx timeout [ 508.539599][ T5072] logitech-hidpp-device 0003:046D:C086.0012: ignoring exceeding usage max [ 508.566769][ T5072] logitech-hidpp-device 0003:046D:C086.0012: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 508.873111][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.888547][ T5092] Bluetooth: hci4: command tx timeout [ 508.908124][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.931748][ T35] bond0 (unregistering): Released all slaves [ 508.942194][ T5072] usb 5-1: USB disconnect, device number 25 [ 508.968706][T12758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 509.048131][T12886] gre1: entered allmulticast mode [ 509.070552][ T35] tipc: Left network mode [ 509.174919][T12867] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.187010][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.197491][T12867] bridge_slave_0: entered allmulticast mode [ 509.210298][T12867] bridge_slave_0: entered promiscuous mode [ 509.436058][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.468446][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.581960][ T5092] Bluetooth: hci0: command tx timeout [ 509.732033][T12867] bridge_slave_1: entered allmulticast mode [ 509.881185][T12867] bridge_slave_1: entered promiscuous mode [ 510.328468][ T5092] Bluetooth: hci5: command tx timeout [ 510.404423][T12877] chnl_net:caif_netlink_parms(): no params data found [ 510.447429][T12867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.506590][T12867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.810284][T12867] team0: Port device team_slave_0 added [ 510.853385][ T35] hsr_slave_0: left promiscuous mode [ 510.893020][ T35] hsr_slave_1: left promiscuous mode [ 510.924422][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.955614][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.003856][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.029938][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.115558][ T35] veth1_macvtap: left allmulticast mode [ 511.121613][ T35] veth1_macvtap: left promiscuous mode [ 511.128506][ T35] veth0_macvtap: left promiscuous mode [ 511.138529][ T35] veth1_vlan: left promiscuous mode [ 511.144000][ T35] veth0_vlan: left promiscuous mode [ 511.614843][ T5092] Bluetooth: hci0: command tx timeout [ 512.071591][ T29] kauditd_printk_skb: 2999 callbacks suppressed [ 512.071625][ T29] audit: type=1400 audit(1720266891.746:59789): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.148487][ T29] audit: type=1400 audit(1720266891.786:59790): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.198570][ T29] audit: type=1400 audit(1720266891.786:59791): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.218642][ T29] audit: type=1400 audit(1720266891.786:59792): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5678 comm="syz-executor" name="573" dev="tmpfs" ino=3074 [ 512.253241][ T29] audit: type=1400 audit(1720266891.786:59793): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.284483][ T29] audit: type=1400 audit(1720266891.786:59794): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.326819][ T35] team0 (unregistering): Port device team_slave_1 removed [ 512.345424][ T29] audit: type=1400 audit(1720266891.786:59795): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.377255][ T29] audit: type=1400 audit(1720266891.786:59796): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.413075][ T5092] Bluetooth: hci5: command tx timeout [ 512.425530][ T29] audit: type=1400 audit(1720266891.786:59797): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 512.455684][ T29] audit: type=1400 audit(1720266891.786:59798): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 512.491807][ T35] team0 (unregistering): Port device team_slave_0 removed [ 513.133244][T12867] team0: Port device team_slave_1 added [ 513.189559][T12922] gre1: entered allmulticast mode [ 513.293548][ T5092] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 513.535899][T12867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.568241][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.648329][T12867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.661938][T12867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.676697][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.704803][T12867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.791991][ T5092] Bluetooth: hci0: command tx timeout [ 513.964065][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.031460][T12877] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.134972][T12877] bridge_slave_0: entered allmulticast mode [ 514.400224][T12877] bridge_slave_0: entered promiscuous mode [ 514.488510][ T5092] Bluetooth: hci5: command tx timeout [ 514.584155][T12867] hsr_slave_0: entered promiscuous mode [ 514.601196][T12867] hsr_slave_1: entered promiscuous mode [ 514.637409][T12867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.647100][T12867] Cannot create hsr debugfs directory [ 514.681103][T12758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.694230][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.704340][T12877] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.723688][T12877] bridge_slave_1: entered allmulticast mode [ 514.748138][T12877] bridge_slave_1: entered promiscuous mode [ 514.949465][T12877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.991222][T12758] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.013206][T12877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.124405][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.131672][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.173878][T12877] team0: Port device team_slave_0 added [ 515.200608][T12877] team0: Port device team_slave_1 added [ 515.220146][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.227340][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.368648][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 515.850915][ T5092] Bluetooth: hci0: command tx timeout [ 515.962524][T12877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.038469][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.275033][T12877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.391204][T12877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.399615][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.509328][T12877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.623096][T12867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.841936][T12867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.880846][T12877] hsr_slave_0: entered promiscuous mode [ 516.899468][T12877] hsr_slave_1: entered promiscuous mode [ 516.918680][T12877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.937153][T12877] Cannot create hsr debugfs directory [ 517.025706][T12867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.079953][ T29] kauditd_printk_skb: 2896 callbacks suppressed [ 517.079975][ T29] audit: type=1400 audit(1720266896.756:62566): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 517.098594][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 517.116688][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 517.120579][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 517.125398][T10678] audit: audit_lost=2158 audit_rate_limit=0 audit_backlog_limit=64 [ 517.129865][ C1] audit: audit_lost=2159 audit_rate_limit=0 audit_backlog_limit=64 [ 517.129887][ C1] audit: backlog limit exceeded [ 517.138067][T10678] audit: backlog limit exceeded [ 517.147670][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 517.152519][ T29] audit: type=1400 audit(1720266896.756:62567): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 517.305211][T12867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.024382][T12867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.380986][T12867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.721525][T12867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.763514][T12758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.829303][T12867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.126991][T12758] veth0_vlan: entered promiscuous mode [ 519.221705][T12758] veth1_vlan: entered promiscuous mode [ 519.485773][T12877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.533327][T12758] veth0_macvtap: entered promiscuous mode [ 519.593931][T12877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.664555][T12867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.767425][T12877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.919454][T12758] veth1_macvtap: entered promiscuous mode [ 520.014880][T12877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.234534][T12867] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.339695][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.346949][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.430855][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.438111][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.488899][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.516981][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.527302][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.538116][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.548094][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.565342][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.579538][T12758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.640396][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.674689][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.698256][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.717662][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.728007][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.744359][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.769587][T12758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.816092][T12758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.835436][T12758] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.858899][T12758] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.867665][T12758] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.987748][T12867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.282629][ T5283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.318213][ T5283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.502206][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.593111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.618891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.101771][ T29] kauditd_printk_skb: 5062 callbacks suppressed [ 522.102093][ T29] audit: type=1400 audit(1720266901.776:67072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2882 comm="kworker/u8:9" name="08:02:11:00:00:01" dev="debugfs" ino=50002 [ 522.209513][T13042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 522.216079][T13042] audit: audit_lost=2349 audit_rate_limit=0 audit_backlog_limit=64 [ 522.260046][T12758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 522.272211][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.288386][T12758] audit: audit_lost=2350 audit_rate_limit=0 audit_backlog_limit=64 [ 522.296462][T13042] audit: backlog limit exceeded [ 522.316605][T13042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 522.323882][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 522.354399][T12758] audit: backlog limit exceeded [ 522.368792][ T29] audit: type=1400 audit(1720266901.776:67073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12758 comm="syz-executor" name="/" dev="sda1" ino=2 [ 522.460264][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.467474][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.503167][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.510473][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.766959][T12867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.968148][T12867] veth0_vlan: entered promiscuous mode [ 522.999924][T12867] veth1_vlan: entered promiscuous mode [ 523.066062][T13060] netlink: 'syz.2.2672': attribute type 29 has an invalid length. [ 523.119651][T12867] veth0_macvtap: entered promiscuous mode [ 523.153225][T12867] veth1_macvtap: entered promiscuous mode [ 523.334156][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2674'. [ 523.426211][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.636024][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.802533][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.958581][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.018367][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.098310][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.278863][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.305058][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.369126][T12867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.261452][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.290923][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.315694][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.346554][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.371067][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.388953][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.408325][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.427725][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.446421][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.472489][T12867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.524076][T12867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.548660][T12867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.558400][T12867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.567154][T12867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.800383][T12877] veth0_vlan: entered promiscuous mode [ 525.909405][T13091] netlink: 'syz.2.2683': attribute type 29 has an invalid length. [ 525.921514][T12877] veth1_vlan: entered promiscuous mode [ 526.044984][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.091285][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.905442][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.959001][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.012015][T12877] veth0_macvtap: entered promiscuous mode [ 527.108628][ T29] kauditd_printk_skb: 5923 callbacks suppressed [ 527.108648][ T29] audit: type=1400 audit(1720266906.776:70418): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12867 comm="syz-executor" name="/" dev="sda1" ino=2 [ 527.115765][T13106] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.134663][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.142015][T13106] audit: audit_lost=3220 audit_rate_limit=0 audit_backlog_limit=64 [ 527.147224][ C1] audit: audit_lost=3221 audit_rate_limit=0 audit_backlog_limit=64 [ 527.155216][T13106] audit: backlog limit exceeded [ 527.163039][ C1] audit: backlog limit exceeded [ 527.167154][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.168069][T13106] audit: audit_backlog=65 > audit_backlog_limit=64 [ 527.172812][ C1] audit: audit_lost=3222 audit_rate_limit=0 audit_backlog_limit=64 [ 527.189532][T12877] veth1_macvtap: entered promiscuous mode [ 527.241901][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.298333][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.311461][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.337597][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.361084][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.384695][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.416162][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.439863][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.487808][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.528444][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.565035][T12877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.617648][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.664692][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.698512][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.732895][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.759419][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.774382][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.785211][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.796246][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.823573][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.847767][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.881441][T12877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.922975][T12877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.950902][T12877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.969553][T13131] Dead loop on virtual device ip6_vti0, fix it urgently! [ 527.980727][T12877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.992297][T13124] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 528.008684][T13124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2605'. [ 528.028287][T12877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.366499][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.388720][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.551550][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.570953][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.700831][T13157] netlink: 'syz.2.2704': attribute type 2 has an invalid length. [ 528.785820][T13157] siw: device registration error -23 [ 530.553329][T13175] netlink: 'syz.3.2712': attribute type 10 has an invalid length. [ 530.600575][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 530.661929][T13175] team0: Port device netdevsim0 added [ 530.698584][T13182] netlink: 'syz.3.2712': attribute type 10 has an invalid length. [ 530.829286][T13189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.919674][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 531.936528][T13214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.066565][T13219] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 532.118394][ T29] kauditd_printk_skb: 7492 callbacks suppressed [ 532.118415][ T29] audit: type=1400 audit(1720266911.806:76282): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12877 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 532.128033][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.155015][T13222] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.165011][T13222] audit: audit_lost=3766 audit_rate_limit=0 audit_backlog_limit=64 [ 532.175748][T13224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.181629][T13225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.199296][ T29] audit: type=1400 audit(1720266911.806:76283): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12877 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 532.199410][T13225] audit: audit_lost=3767 audit_rate_limit=0 audit_backlog_limit=64 [ 532.223693][T13219] team0: Port device netdevsim0 added [ 532.240137][T13222] audit: backlog limit exceeded [ 532.241253][T13226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.280604][T13229] xt_TPROXY: Can be used only with -p tcp or -p udp [ 532.296436][T13223] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 532.546385][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 533.139865][T13254] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 533.198380][T13254] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2744'. [ 533.496161][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 533.689224][T13272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.716987][T13272] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 534.431424][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 534.530312][ T5134] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 534.971490][ T5134] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 534.997068][ T5134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.109802][ T5134] usb 3-1: config 0 descriptor?? [ 536.133668][T13325] netlink: 'syz.1.2771': attribute type 2 has an invalid length. [ 536.198738][T13325] siw: device registration error -23 [ 536.236754][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 536.271706][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 536.534972][ T5134] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 537.091253][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 537.145537][T13358] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20000 [ 537.155456][ T29] kauditd_printk_skb: 6938 callbacks suppressed [ 537.155474][ T29] audit: type=1400 audit(1720266916.836:82362): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13357 comm="syz.1.2788" name="newroot" dev="tmpfs" ino=2 [ 537.193986][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.194037][T12877] audit: audit_backlog=66 > audit_backlog_limit=64 [ 537.201691][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 537.207516][ T29] audit: type=1400 audit(1720266916.836:82363): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13357 comm="syz.1.2788" name="/" dev="proc" ino=1 [ 537.213776][ C1] audit: audit_lost=4057 audit_rate_limit=0 audit_backlog_limit=64 [ 537.213804][ C1] audit: backlog limit exceeded [ 537.213993][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.232606][T12877] audit: audit_lost=4058 audit_rate_limit=0 audit_backlog_limit=64 [ 537.240300][ C1] audit: audit_lost=4059 audit_rate_limit=0 audit_backlog_limit=64 [ 537.961241][ T5179] usb 3-1: USB disconnect, device number 13 [ 538.608532][ T783] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 538.613840][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 538.638750][T13404] netlink: 'syz.1.2807': attribute type 25 has an invalid length. [ 538.664936][T13404] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.674400][T13404] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.683196][T13404] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.692165][T13404] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.819824][ T783] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.841770][ T783] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 538.872107][ T783] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.898752][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.929333][T13398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 539.166862][ T5134] usb 5-1: USB disconnect, device number 26 [ 540.441729][T13443] tipc: Invalid UDP bearer configuration [ 540.441819][T13443] tipc: Enabling of bearer rejected, failed to enable media [ 542.164363][ T29] kauditd_printk_skb: 5222 callbacks suppressed [ 542.164383][ T29] audit: type=1400 audit(1720266921.846:87264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 542.208863][T13466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.216467][ T5678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 542.231379][T13466] audit: audit_lost=4167 audit_rate_limit=0 audit_backlog_limit=64 [ 542.240047][T13451] audit: audit_backlog=66 > audit_backlog_limit=64 [ 542.246588][T13451] audit: audit_lost=4168 audit_rate_limit=0 audit_backlog_limit=64 [ 542.248207][ T5678] audit: audit_lost=4169 audit_rate_limit=0 audit_backlog_limit=64 [ 542.262897][ T29] audit: type=1400 audit(1720266921.846:87265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 542.268296][T13466] audit: backlog limit exceeded [ 542.298705][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.938491][ T783] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 543.292460][ T783] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.356526][ T783] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.433398][ T783] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.496770][ T783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.546862][T13474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 543.869834][ T5179] usb 2-1: USB disconnect, device number 15 [ 544.058295][ T5072] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 544.447122][ T5072] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 544.468941][ T5072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.502020][ T5072] usb 5-1: config 0 descriptor?? [ 546.670312][ T5072] pegasus 5-1:0.0: probe with driver pegasus failed with error -121 [ 547.172190][ T29] kauditd_printk_skb: 4117 callbacks suppressed [ 547.172211][ T29] audit: type=1400 audit(1720266926.846:90974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 547.172297][ T29] audit: type=1400 audit(1720266926.856:90975): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="33" dev="tmpfs" ino=189 [ 547.172610][ T29] audit: type=1400 audit(1720266926.856:90976): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=12877 comm="syz-executor" path="/33/cgroup.cpu" dev="tmpfs" ino=191 [ 547.172780][ T29] audit: type=1400 audit(1720266926.856:90977): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 547.172873][ T29] audit: type=1400 audit(1720266926.856:90978): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 547.172984][ T29] audit: type=1400 audit(1720266926.856:90979): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="33" dev="tmpfs" ino=189 [ 547.173174][ T29] audit: type=1400 audit(1720266926.856:90980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12877 comm="syz-executor" name="33" dev="tmpfs" ino=189 [ 547.173262][ T29] audit: type=1400 audit(1720266926.856:90981): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=12877 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=191 [ 547.173352][ T29] audit: type=1400 audit(1720266926.856:90982): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=12877 comm="syz-executor" name="33" dev="tmpfs" ino=189 [ 547.187690][ T29] audit: type=1400 audit(1720266926.866:90983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12758 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 547.572609][T13534] No control pipe specified [ 548.297295][ T5137] usb 5-1: USB disconnect, device number 27 [ 548.452590][ T5134] kernel write not supported for file /sysvipc/shm (pid: 5134 comm: kworker/0:5) [ 548.946686][T13568] netlink: 'syz.2.2867': attribute type 2 has an invalid length. [ 548.970583][T13568] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2867'. [ 549.122380][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2869'. [ 549.296563][T13578] team0: Port device veth3 added [ 550.465806][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 550.479403][T13594] netlink: 'syz.1.2875': attribute type 25 has an invalid length. [ 550.882671][T13612] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2884'. [ 551.569525][T13623] netlink: 'syz.3.2889': attribute type 2 has an invalid length. [ 551.602791][T13623] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2889'. [ 552.188279][ T29] kauditd_printk_skb: 4328 callbacks suppressed [ 552.188299][ T29] audit: type=1400 audit(1720266931.866:95312): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13635 comm="syz.3.2896" path="/sys/kernel/debug/sync/sw_sync" dev="debugfs" ino=2889 [ 552.260185][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 552.262417][T12867] audit: audit_backlog=66 > audit_backlog_limit=64 [ 552.273569][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 552.280136][ C1] audit: audit_lost=4306 audit_rate_limit=0 audit_backlog_limit=64 [ 552.288017][ C1] audit: backlog limit exceeded [ 552.293008][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 552.299555][ C1] audit: audit_lost=4307 audit_rate_limit=0 audit_backlog_limit=64 [ 552.307442][ C1] audit: backlog limit exceeded [ 552.312440][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 552.661391][T13656] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 552.672344][T13656] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 553.476272][ T5133] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 553.629232][T13652] No control pipe specified [ 553.728311][ T5133] usb 3-1: Using ep0 maxpacket: 32 [ 553.743632][ T5133] usb 3-1: config 1 interface 0 has no altsetting 0 [ 553.767948][ T5133] usb 3-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 553.797302][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.816079][ T5133] usb 3-1: Product: Ц [ 553.830760][ T5133] usb 3-1: Manufacturer: 㡘 [ 553.835434][ T5133] usb 3-1: SerialNumber: щ [ 553.837667][T13673] netlink: 'syz.3.2911': attribute type 21 has an invalid length. [ 555.485091][ T5133] usbhid 3-1:1.0: can't add hid device: -71 [ 555.491397][ T5133] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 555.519573][ T5133] usb 3-1: USB disconnect, device number 14 [ 555.925304][T13707] netlink: 'syz.0.2924': attribute type 21 has an invalid length. [ 556.524800][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 557.198470][ T29] kauditd_printk_skb: 5379 callbacks suppressed [ 557.198491][ T29] audit: type=1400 audit(1720266936.866:100178): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 557.243219][ T29] audit: type=1400 audit(1720266936.866:100179): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 557.296727][ T29] audit: type=1400 audit(1720266936.866:100180): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=5678 comm="syz-executor" name="loop4" dev="devtmpfs" ino=652 [ 557.307807][T13749] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.325042][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.334411][T13749] audit: audit_lost=4481 audit_rate_limit=0 audit_backlog_limit=64 [ 557.334490][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.344448][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.348923][ C1] audit: audit_lost=4482 audit_rate_limit=0 audit_backlog_limit=64 [ 557.348944][ C1] audit: backlog limit exceeded [ 557.869465][T13764] tipc: Invalid UDP bearer configuration [ 557.869551][T13764] tipc: Enabling of bearer rejected, failed to enable media [ 560.184400][T13800] ufs: You didn't specify the type of your ufs filesystem [ 560.184400][T13800] [ 560.184400][T13800] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 560.184400][T13800] [ 560.184400][T13800] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 560.298010][T13800] syz.4.2964: attempt to access beyond end of device [ 560.298010][T13800] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 560.438373][ T5137] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 560.665209][ T5137] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 560.698881][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.706975][ T5137] usb 3-1: Product: syz [ 560.818747][ T5137] usb 3-1: Manufacturer: syz [ 560.839641][ T5137] usb 3-1: SerialNumber: syz [ 560.858618][ T5137] usb 3-1: config 0 descriptor?? [ 560.940736][T13814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.711708][ T5137] usb-storage 3-1:0.0: USB Mass Storage device detected [ 561.864252][ T5137] usb 3-1: USB disconnect, device number 15 [ 561.995142][T13828] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2974'. [ 562.209922][ T29] kauditd_printk_skb: 4508 callbacks suppressed [ 562.209943][ T29] audit: type=1400 audit(1720266941.896:104370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13831 comm="syz.0.2980" name="newroot" dev="tmpfs" ino=2 [ 562.241494][ T5092] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 562.267720][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.284552][ T5678] audit: audit_lost=4590 audit_rate_limit=0 audit_backlog_limit=64 [ 562.289916][ T29] audit: type=1400 audit(1720266941.886:104369): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13836 comm="syz.3.2982" name="newroot" dev="tmpfs" ino=2 [ 562.298207][ T5678] audit: backlog limit exceeded [ 562.315380][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.324899][T12867] audit: audit_lost=4591 audit_rate_limit=0 audit_backlog_limit=64 [ 562.326555][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.333242][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.333268][ C1] audit: audit_lost=4592 audit_rate_limit=0 audit_backlog_limit=64 [ 562.418306][ T5072] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 562.611161][ T5072] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 562.635552][ T5072] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 562.663586][T13846] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2985'. [ 562.667839][ T5072] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.699669][ T5072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.710230][ T5072] usb 2-1: SerialNumber: syz [ 562.888984][T13852] ufs: You didn't specify the type of your ufs filesystem [ 562.888984][T13852] [ 562.888984][T13852] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 562.888984][T13852] [ 562.888984][T13852] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 562.933369][T13852] syz.0.2987: attempt to access beyond end of device [ 562.933369][T13852] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 563.057230][ T5072] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 563.297842][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.304550][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.991390][ T5092] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 564.378320][T10611] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 564.572345][T10611] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 564.572386][T10611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.572463][T10611] usb 3-1: Product: syz [ 564.572484][T10611] usb 3-1: Manufacturer: syz [ 564.572502][T10611] usb 3-1: SerialNumber: syz [ 564.582894][T10611] usb 3-1: config 0 descriptor?? [ 564.832791][T10611] usb-storage 3-1:0.0: USB Mass Storage device detected [ 564.912171][T10611] usb 3-1: USB disconnect, device number 16 [ 565.111926][ T5072] usb 2-1: USB disconnect, device number 16 [ 565.568674][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 565.607851][T13916] netlink: 'syz.3.3011': attribute type 25 has an invalid length. [ 565.642250][T13916] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.652179][T13916] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.661824][T13916] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.670678][T13916] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.020873][ T5092] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 566.088793][T13934] VFS: could not find a valid V7 on nullb0. [ 566.328528][ T5092] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 566.337820][ T5092] Bluetooth: hci5: Injecting HCI hardware error event [ 566.349076][ T4477] Bluetooth: hci5: hardware error 0x00 [ 566.648904][T13953] lo: entered promiscuous mode [ 566.681128][T13952] lo: left promiscuous mode [ 566.818563][ T5137] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 567.022358][ T5137] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 567.054141][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.068584][ T5137] usb 4-1: Product: syz [ 567.079266][ T5137] usb 4-1: Manufacturer: syz [ 567.088387][ T5137] usb 4-1: SerialNumber: syz [ 567.109095][ T5137] usb 4-1: config 0 descriptor?? [ 567.337290][T13963] tipc: Invalid UDP bearer configuration [ 567.337598][T13963] tipc: Enabling of bearer rejected, failed to enable media [ 567.347164][ T29] kauditd_printk_skb: 6428 callbacks suppressed [ 567.347185][ T29] audit: type=1400 audit(1720266947.026:110276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12867 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 567.377893][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.881840][ T29] audit: type=1400 audit(1720266947.036:110277): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5133 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 568.358656][ T29] audit: type=1400 audit(1720266947.036:110278): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5133 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 568.381585][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.388609][ T29] audit: type=1400 audit(1720266947.036:110279): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5133 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 568.411252][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.425923][ T29] audit: type=1400 audit(1720266947.206:110280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13960 comm="syz.2.3029" name="newroot" dev="tmpfs" ino=2 [ 568.445064][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.460698][ T4477] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 568.527643][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.541213][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.547814][ C1] audit: audit_lost=4767 audit_rate_limit=0 audit_backlog_limit=64 [ 568.550225][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.555838][ C1] audit: backlog limit exceeded [ 568.608837][ T5137] usb-storage 4-1:0.0: USB Mass Storage device detected [ 568.738757][ T5137] usb 4-1: USB disconnect, device number 21 [ 568.931508][T13976] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 570.102693][T14018] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 570.841188][T14040] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 570.848988][T14040] PKCS7: Only support pkcs7_signedData type [ 571.089031][T14045] ufs: You didn't specify the type of your ufs filesystem [ 571.089031][T14045] [ 571.089031][T14045] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 571.089031][T14045] [ 571.089031][T14045] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 571.123740][T14045] syz.1.3060: attempt to access beyond end of device [ 571.123740][T14045] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 572.159166][T14071] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 572.165764][T14071] PKCS7: Only support pkcs7_signedData type [ 572.368735][ T29] kauditd_printk_skb: 4833 callbacks suppressed [ 572.368756][ T29] audit: type=1400 audit(1720266952.046:115110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5678 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 572.383199][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.407988][ T5678] audit: audit_lost=4770 audit_rate_limit=0 audit_backlog_limit=64 [ 572.408975][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.416363][ T5678] audit: backlog limit exceeded [ 572.437305][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.438383][ T4515] audit: audit_lost=4771 audit_rate_limit=0 audit_backlog_limit=64 [ 572.444787][T14075] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.452774][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.458842][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.288430][ T5072] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 573.540395][ T5072] usb 3-1: New USB device found, idVendor=13d3, idProduct=3472, bcdDevice=77.0d [ 573.549699][ T5072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.557747][ T5072] usb 3-1: Product: syz [ 573.568216][ T5072] usb 3-1: Manufacturer: syz [ 573.572882][ T5072] usb 3-1: SerialNumber: syz [ 573.610540][ T5072] usb 3-1: config 0 descriptor?? [ 574.005552][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 574.117893][ T5132] usb 3-1: USB disconnect, device number 17 [ 575.902633][T14127] netlink: 'syz.2.3094': attribute type 10 has an invalid length. [ 575.914670][T14127] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3094'. [ 575.944572][T14127] bridge0: entered promiscuous mode [ 576.056987][T14138] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3096'. [ 576.156052][T14140] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 576.156052][T14140] The task syz.4.3095 (14140) triggered the difference, watch for misbehavior. [ 576.390661][T14148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3095'. [ 576.462124][T14148] unsupported nlmsg_type 40 [ 577.393218][ T29] kauditd_printk_skb: 4172 callbacks suppressed [ 577.393239][ T29] audit: type=1400 audit(1720266957.076:118924): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12877 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 577.445647][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.480093][ T29] audit: type=1400 audit(1720266957.076:118925): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14160 comm="syz.3.3105" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 577.486833][T12877] audit: audit_lost=4893 audit_rate_limit=0 audit_backlog_limit=64 [ 577.553008][T12877] audit: backlog limit exceeded [ 577.558052][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.558663][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.571232][ C1] audit: audit_lost=4894 audit_rate_limit=0 audit_backlog_limit=64 [ 577.579235][ C1] audit: backlog limit exceeded [ 577.594061][ T29] audit: type=1400 audit(1720266957.076:118926): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14160 comm="syz.3.3105" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 578.368463][ T5137] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 578.518403][ T5072] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 578.550662][ T5137] usb 4-1: Using ep0 maxpacket: 16 [ 578.574394][ T5137] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 578.590920][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.614738][ T5137] usb 4-1: Product: syz [ 578.622196][ T5137] usb 4-1: Manufacturer: syz [ 578.626845][ T5137] usb 4-1: SerialNumber: syz [ 578.641506][T14196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3114'. [ 578.673826][ T5137] usb 4-1: config 0 descriptor?? [ 578.693216][ T5137] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 578.720533][ T5137] dvb-usb: bulk message failed: -22 (2/0) [ 578.740623][ T5137] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 578.768282][ T5072] usb 1-1: Using ep0 maxpacket: 32 [ 578.776420][ T5137] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 578.776541][ T5072] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.823855][ T5137] usb 4-1: media controller created [ 578.838639][ T5072] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.865867][ T5137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.878575][ T5072] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.909337][ T5072] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 578.918809][ T5137] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 578.927747][ T5137] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 578.937860][ T5072] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.983710][ T5072] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 579.022319][ T5072] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.043395][ T5072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.103520][ T5072] usb 1-1: Product: syz [ 579.107757][ T5072] usb 1-1: Manufacturer: syz [ 579.118416][T14174] loop0: detected capacity change from 0 to 6 [ 579.139733][T14174] Dev loop0: unable to read RDB block 6 [ 579.148330][T14174] loop0: AHDI p1 [ 579.150679][ T5072] usb 1-1: SerialNumber: syz [ 579.178641][T14174] loop0: partition table partially beyond EOD, truncated [ 579.378384][ T5137] rc_core: IR keymap rc-dtt200u not found [ 579.384180][ T5137] Registered IR keymap rc-empty [ 579.414237][ T5137] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 579.460328][ T5137] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input25 [ 579.594861][ T5137] dvb-usb: schedule remote query interval to 300 msecs. [ 579.603634][ T5072] cdc_ncm 1-1:1.0: bind() failure [ 579.618421][ T5137] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 579.652436][ T5072] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 579.652529][ T5137] usb 4-1: USB disconnect, device number 22 [ 579.675069][ T5072] cdc_ncm 1-1:1.1: bind() failure [ 579.699801][ T5072] usb 1-1: USB disconnect, device number 16 [ 579.812558][ T5137] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 579.977096][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 581.618575][ T5072] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 581.755469][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 582.105677][T14252] program syz.4.3137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.115502][T14252] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 582.134477][T14252] ubi0: attaching mtd0 [ 582.152941][T14252] ubi0: scanning is finished [ 582.157649][T14252] ubi0: empty MTD device detected [ 582.587987][ T29] kauditd_printk_skb: 4129 callbacks suppressed [ 582.588010][ T29] audit: type=1400 audit(1720266962.246:122758): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14243 comm="syz.4.3137" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 582.670994][ T5072] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.694428][T14252] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 582.698266][ T5072] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 582.723814][ T29] audit: type=1400 audit(1720266962.296:122759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4515 comm="syslogd" name="/" dev="sda1" ino=2 [ 582.768684][T12758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.779133][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.785697][ C1] audit: audit_lost=4995 audit_rate_limit=0 audit_backlog_limit=64 [ 582.793713][ C1] audit: backlog limit exceeded [ 582.796020][ T5072] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.798962][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.810560][T12758] audit: audit_lost=4996 audit_rate_limit=0 audit_backlog_limit=64 [ 582.814595][ C1] audit: audit_lost=4997 audit_rate_limit=0 audit_backlog_limit=64 [ 582.830499][ C1] audit: backlog limit exceeded [ 582.858232][ T5072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.951271][T14232] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 583.360020][ T5072] usb 1-1: USB disconnect, device number 17 [ 583.488967][T14271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.695876][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3149'. [ 583.809815][T14280] Bluetooth: MGMT ver 1.22 [ 584.139152][T14284] Scaler: ================= START STATUS ================= [ 584.237038][T14284] Scaler: ================== END STATUS ================== [ 584.338881][T14291] program syz.3.3152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.350108][T14291] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 584.361274][T14291] ubi0: attaching mtd0 [ 584.373542][T14291] ubi0: scanning is finished [ 584.534420][T14291] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 584.542216][T14291] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 584.549684][T14291] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 584.556787][T14291] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 584.564380][T14291] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 584.571444][T14291] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 584.579654][T14291] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1104908390 [ 584.590585][T14291] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 584.623217][T14292] ubi0: background thread "ubi_bgt0d" started, PID 14292 [ 585.226889][T14304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.329407][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 585.929727][ T5179] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 586.856120][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 586.931135][ T5179] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 586.955872][ T5179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.987448][ T5179] usb 1-1: config 0 descriptor?? [ 587.016435][ T5179] cp210x 1-1:0.0: cp210x converter detected [ 587.198797][ T5133] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 587.399088][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 587.432214][ T5133] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 587.457752][ T5179] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 587.460369][ T5133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.486469][ T5179] usb 1-1: cp210x converter now attached to ttyUSB0 [ 587.496401][ T5133] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 587.519291][ T5133] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 587.570115][ T5133] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.592878][ T29] kauditd_printk_skb: 6232 callbacks suppressed [ 587.592896][ T29] audit: type=1400 audit(1720266967.276:128821): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12758 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 587.613532][ T5133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.627499][T12758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.629109][T14349] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.636247][T10678] audit: audit_backlog=66 > audit_backlog_limit=64 [ 587.641529][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.647759][T10678] audit: audit_lost=5055 audit_rate_limit=0 audit_backlog_limit=64 [ 587.665286][T12758] audit: audit_lost=5056 audit_rate_limit=0 audit_backlog_limit=64 [ 587.677355][T14349] audit: audit_lost=5057 audit_rate_limit=0 audit_backlog_limit=64 [ 587.686316][T14369] audit: audit_backlog=66 > audit_backlog_limit=64 [ 587.695521][ T5133] usb 2-1: Product: syz [ 587.698304][ T29] audit: type=1400 audit(1720266967.276:128822): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=2882 comm="kworker/u8:9" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 587.700318][ T5133] usb 2-1: Manufacturer: syz [ 587.722670][T12758] audit: backlog limit exceeded [ 587.735204][ T5179] usb 1-1: USB disconnect, device number 18 [ 587.757872][ T5133] usb 2-1: SerialNumber: syz [ 587.781196][ T5179] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 587.821445][ T5179] cp210x 1-1:0.0: device disconnected [ 588.125891][ T5134] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 588.241512][ T5133] usb 2-1: 0:2 : does not exist [ 588.277414][ T5133] usb 2-1: USB disconnect, device number 17 [ 588.338309][ T5134] usb 3-1: Using ep0 maxpacket: 8 [ 588.372061][T14384] program syz.3.3193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.383210][T14384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 588.394532][T14384] ubi: mtd0 is already attached to ubi0 [ 588.468015][ T5134] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.570317][ T5134] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.716936][ T5134] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x76 has an invalid bInterval 100, changing to 10 [ 588.841525][ T5134] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 24936, setting to 1024 [ 588.894058][ T5134] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 588.978373][ T5134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.052766][ T5134] hub 3-1:1.0: bad descriptor, ignoring hub [ 589.087488][ T5134] hub 3-1:1.0: probe with driver hub failed with error -5 [ 589.140323][ T5134] cdc_wdm 3-1:1.0: skipping garbage [ 589.167922][ T5134] cdc_wdm 3-1:1.0: skipping garbage [ 589.182362][ T5134] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 589.262340][ T5134] usb 3-1: USB disconnect, device number 18 [ 589.448598][ T5179] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 589.659328][ T5179] usb 5-1: Using ep0 maxpacket: 16 [ 589.696514][ T5179] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 589.712830][ T5179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.722184][ T5179] usb 5-1: Product: syz [ 589.726480][ T5179] usb 5-1: Manufacturer: syz [ 589.731363][ T5179] usb 5-1: SerialNumber: syz [ 589.748876][ T5179] usb 5-1: config 0 descriptor?? [ 589.770700][ T5179] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 589.798630][ T5179] dvb-usb: bulk message failed: -22 (2/0) [ 589.808322][ T5179] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 589.835677][ T5179] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 589.846536][ T5179] usb 5-1: media controller created [ 589.856886][ T5179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.873643][ T5179] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 589.883619][ T5179] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 589.958356][ T5072] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 590.038413][ T5133] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 590.132365][T14390] loop0: detected capacity change from 0 to 6 [ 590.149852][ T5179] rc_core: IR keymap rc-dtt200u not found [ 590.155659][ T5179] Registered IR keymap rc-empty [ 590.167361][ T5072] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.177552][T14390] Dev loop0: unable to read RDB block 6 [ 590.194528][T14390] loop0: AHDI p1 [ 590.199450][ T5179] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 590.212026][ T5072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.212589][T14390] loop0: partition table partially beyond EOD, [ 590.234981][ T5179] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 590.241598][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 590.266294][ T5072] usb 2-1: config 0 descriptor?? [ 590.268786][T14390] truncated [ 590.274744][ T5133] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 590.275236][ T5072] cp210x 2-1:0.0: cp210x converter detected [ 590.295227][ T5179] dvb-usb: schedule remote query interval to 300 msecs. [ 590.298847][ T5133] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.302545][ T5179] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 590.376982][ T5133] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 590.408457][ T5133] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 590.419868][ T5132] usb 5-1: USB disconnect, device number 28 [ 590.443553][ T5133] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 590.468628][ T5133] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.484049][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.506772][ T5133] usb 1-1: Product: syz [ 590.516343][ T5132] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 590.539433][ T5133] usb 1-1: Manufacturer: syz [ 590.544533][ T5133] usb 1-1: SerialNumber: syz [ 590.739996][ T5072] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 590.775415][ T5072] usb 2-1: cp210x converter now attached to ttyUSB0 [ 590.884927][ T5133] usb 1-1: 0:2 : does not exist [ 590.911931][ T5133] usb 1-1: USB disconnect, device number 19 [ 590.998784][ T5179] usb 2-1: USB disconnect, device number 18 [ 591.020339][ T5179] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 591.032266][ T5179] cp210x 2-1:0.0: device disconnected [ 591.203443][T14448] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 591.224019][T14448] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3222'. [ 591.240586][T14448] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 592.598556][ T29] kauditd_printk_skb: 5760 callbacks suppressed [ 592.598578][ T29] audit: type=1400 audit(1720266972.286:133921): lsm=SMACK fn=smack_inode_getxattr action=granted subject="_" object="*" requested=r pid=14468 comm="syz.0.3228" name="AF_VSOCK" dev="sockfs" ino=56116 [ 592.637702][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.645717][T14473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.651281][T14472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.655052][ T4515] audit: audit_lost=5278 audit_rate_limit=0 audit_backlog_limit=64 [ 592.660148][T14470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.670866][T14473] audit: audit_lost=5279 audit_rate_limit=0 audit_backlog_limit=64 [ 592.683303][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.684075][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.696520][ C1] audit: audit_lost=5280 audit_rate_limit=0 audit_backlog_limit=64 [ 592.880165][T14477] input: syz0 as /devices/virtual/input/input27 [ 593.948278][ T5137] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 593.958673][ T5133] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 594.151052][ T5133] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.184471][ T5137] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 594.209418][ T5133] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 594.223564][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.237889][ T5133] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.252251][ T5137] usb 1-1: config 0 descriptor?? [ 594.257572][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.270023][ T5137] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 594.281436][T14491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.368304][ T5072] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 594.749563][ T5072] usb 3-1: Using ep0 maxpacket: 32 [ 594.777111][ T5072] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.808672][ T5072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.815892][ T5132] usb 2-1: USB disconnect, device number 19 [ 594.842105][ T5072] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 594.858394][ T5072] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 594.869633][ T5072] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 594.884378][ T5072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.917522][ T5072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.951393][ T5072] usb 3-1: Product: syz [ 594.955722][ T5072] usb 3-1: Manufacturer: syz [ 594.975476][ T5072] usb 3-1: SerialNumber: syz [ 595.113738][ T5133] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 595.392027][ T5072] usb 3-1: 0:2 : does not exist [ 595.474219][ T5072] usb 3-1: USB disconnect, device number 19 [ 595.998318][ T5133] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 596.017812][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.035207][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.044909][ T5133] usb 4-1: config 0 descriptor?? [ 596.050363][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.063897][ T5133] cp210x 4-1:0.0: cp210x converter detected [ 596.192810][ T5137] usb 1-1: USB disconnect, device number 20 [ 596.559856][ T5133] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 596.598099][ T5133] usb 4-1: cp210x converter now attached to ttyUSB0 [ 596.857447][ T5133] usb 4-1: USB disconnect, device number 23 [ 596.889238][ T5133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.942815][ T5133] cp210x 4-1:0.0: device disconnected [ 597.382473][T14540] input: syz0 as /devices/virtual/input/input28 [ 597.524345][T14542] ufs: You didn't specify the type of your ufs filesystem [ 597.524345][T14542] [ 597.524345][T14542] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 597.524345][T14542] [ 597.524345][T14542] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 597.558299][ T5137] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 597.587910][T14542] syz.1.3254: attempt to access beyond end of device [ 597.587910][T14542] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 597.611225][ T29] kauditd_printk_skb: 4607 callbacks suppressed [ 597.611246][ T29] audit: type=1400 audit(1720266977.286:137891): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14545 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 597.656865][ T29] audit: type=1400 audit(1720266977.286:137892): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14545 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 597.715905][T14548] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.725418][T14533] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.732270][T14533] audit: audit_lost=5497 audit_rate_limit=0 audit_backlog_limit=64 [ 597.741296][T12758] audit: audit_backlog=66 > audit_backlog_limit=64 [ 597.750473][ T29] audit: type=1400 audit(1720266977.286:137893): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14545 comm="syz-executor" name="261" dev="tmpfs" ino=1409 [ 597.758104][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.769914][T14533] audit: backlog limit exceeded [ 597.770650][T14548] audit: audit_lost=5498 audit_rate_limit=0 audit_backlog_limit=64 [ 597.838388][ T5137] usb 1-1: Using ep0 maxpacket: 16 [ 597.870589][ T5137] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 598.072796][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.098393][ T5137] usb 1-1: Product: syz [ 598.166314][T14555] program syz.2.3261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.176380][T14555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 598.187854][T14555] ubi: mtd0 is already attached to ubi0 [ 598.608287][ T5137] usb 1-1: Manufacturer: syz [ 598.613112][ T5137] usb 1-1: SerialNumber: syz [ 598.641095][ T5137] usb 1-1: config 0 descriptor?? [ 598.667605][ T5137] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 598.678217][ T5137] dvb-usb: bulk message failed: -22 (2/0) [ 598.684141][ T5137] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 598.919390][ T5137] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 598.973260][ T5137] usb 1-1: media controller created [ 599.007414][ T5137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.042911][T14533] loop0: detected capacity change from 0 to 6 [ 599.087548][T14533] Dev loop0: unable to read RDB block 6 [ 599.116882][ T5137] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 599.131146][T14533] loop0: AHDI p1 [ 599.151762][T14533] loop0: partition table partially beyond EOD, truncated [ 599.162918][ T5137] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 599.609640][ T5132] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 599.688514][ T5137] rc_core: IR keymap rc-dtt200u not found [ 599.705784][ T5137] Registered IR keymap rc-empty [ 599.737678][ T5137] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 599.760412][ T5137] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input29 [ 599.782240][ T5137] dvb-usb: schedule remote query interval to 300 msecs. [ 599.793200][ T5137] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 599.815664][ T5137] usb 1-1: USB disconnect, device number 21 [ 599.870226][ T5132] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 599.904230][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.005012][ T5132] usb 5-1: config 0 descriptor?? [ 600.011240][ T5137] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 600.059517][ T5132] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 600.605504][T14595] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3274'. [ 600.624937][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 600.985671][T14603] input: syz0 as /devices/virtual/input/input30 [ 601.193735][T14608] input: syz0 as /devices/virtual/input/input31 [ 601.464928][T14560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.505817][T14560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.701688][ T5134] usb 5-1: USB disconnect, device number 29 [ 601.874551][T14624] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3284'. [ 602.619579][ T29] kauditd_printk_skb: 6132 callbacks suppressed [ 602.619594][ T29] audit: type=1400 audit(1720266982.306:143331): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14638 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 602.683603][T12758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.683651][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.690540][ T29] audit: type=1400 audit(1720266982.326:143332): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14638 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 602.696714][ C1] audit: audit_lost=5731 audit_rate_limit=0 audit_backlog_limit=64 [ 602.696735][ C1] audit: backlog limit exceeded [ 602.709809][T14640] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.720206][T12758] audit: audit_lost=5732 audit_rate_limit=0 audit_backlog_limit=64 [ 602.731556][T14641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.739953][T14642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.355073][T14661] binder: 14660:14661 ioctl 4018620d 0 returned -22 [ 603.441010][T14663] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3299'. [ 605.076100][T14714] input: syz0 as /devices/virtual/input/input32 [ 606.588637][ T5134] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 606.831848][ T5134] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=3b.c0 [ 606.866937][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.907013][ T5134] usb 4-1: config 0 descriptor?? [ 606.971610][ T5134] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 607.001910][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 607.025464][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 607.035761][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 607.050770][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 607.064433][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 607.073595][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 607.121100][ T5134] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 607.187565][ T5134] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 607.220837][ T5134] usb 4-1: USB disconnect, device number 24 [ 607.243793][ T5134] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 607.311450][ T5134] keyspan 4-1:0.0: device disconnected [ 607.634895][ T29] kauditd_printk_skb: 7146 callbacks suppressed [ 607.634917][ T29] audit: type=1400 audit(1720266987.316:149758): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14758 comm="syz.2.3338" path="/dev/ptmx" dev="devtmpfs" ino=617 [ 607.690870][ T29] audit: type=1400 audit(1720266987.346:149759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12867 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 607.713801][T12867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.739772][T12867] audit: audit_lost=5974 audit_rate_limit=0 audit_backlog_limit=64 [ 607.748997][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.755543][T12877] audit: audit_lost=5975 audit_rate_limit=0 audit_backlog_limit=64 [ 607.762377][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.775992][ T29] audit: type=1400 audit(1720266987.346:149760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12867 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 607.777861][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.795321][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.806481][T12877] audit: backlog limit exceeded [ 608.099047][T14774] netlink: 'syz.0.3347': attribute type 11 has an invalid length. [ 609.055094][ C1] hrtimer: interrupt took 21927749 ns [ 609.395324][T14817] devpts: called with bogus options [ 613.186389][T10678] audit_log_start: 3680 callbacks suppressed [ 613.186410][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.198975][T10678] audit: audit_lost=6339 audit_rate_limit=0 audit_backlog_limit=64 [ 613.206895][T10678] audit: backlog limit exceeded [ 613.209096][ T5678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.211763][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.211785][T10678] audit: audit_lost=6340 audit_rate_limit=0 audit_backlog_limit=64 [ 613.211802][T10678] audit: backlog limit exceeded [ 613.211818][T10678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.211833][T10678] audit: audit_lost=6341 audit_rate_limit=0 audit_backlog_limit=64 [ 613.219130][ T5678] audit: audit_lost=6342 audit_rate_limit=0 audit_backlog_limit=64 [ 619.098193][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 619.098218][ T29] audit: type=1400 audit(1720266992.896:152439): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.133175][T12877] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.142663][T12877] audit: audit_lost=6355 audit_rate_limit=0 audit_backlog_limit=64 [ 619.190458][ T29] audit: type=1400 audit(1720266992.896:152440): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190524][ T29] audit: type=1400 audit(1720266992.896:152441): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190577][ T29] audit: type=1400 audit(1720266992.896:152442): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190635][ T29] audit: type=1400 audit(1720266992.896:152443): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5071 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190688][ T29] audit: type=1400 audit(1720266992.896:152444): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10678 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190739][ T29] audit: type=1400 audit(1720266998.726:152445): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5133 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 619.190790][ T29] audit: type=1400 audit(1720266998.726:152446): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5133 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.0.63 dest=55850 netif=eth0 [ 631.824265][T14824] audit_log_start: 283 callbacks suppressed [ 631.824288][T14824] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.841131][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.863454][T14824] audit: audit_lost=6379 audit_rate_limit=0 audit_backlog_limit=64 [ 631.885954][ C1] audit: audit_lost=6380 audit_rate_limit=0 audit_backlog_limit=64 [ 631.885974][ C1] audit: backlog limit exceeded [ 631.886318][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.949321][ T4746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.949527][ T4746] audit: audit_lost=6381 audit_rate_limit=0 audit_backlog_limit=64 [ 631.949547][ T4746] audit: backlog limit exceeded [ 631.949778][ T4746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.978787][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.978857][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.131260][ T4515] audit_log_start: 80 callbacks suppressed [ 659.131283][ T4515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.150829][ C1] audit: audit_lost=6409 audit_rate_limit=0 audit_backlog_limit=64 [ 659.150850][ C1] audit: backlog limit exceeded [ 659.151199][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.151216][ C1] audit: audit_lost=6410 audit_rate_limit=0 audit_backlog_limit=64 [ 659.151235][ C1] audit: backlog limit exceeded [ 659.151456][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.151473][ C1] audit: audit_lost=6411 audit_rate_limit=0 audit_backlog_limit=64 [ 659.151491][ C1] audit: backlog limit exceeded [ 659.151719][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.546682][ T5088] Bluetooth: hci4: command 0x0406 tx timeout [ 660.046818][T14823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.055096][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 720.055120][ T29] audit: type=1400 audit(1720267061.976:152839): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1043 comm="kworker/u8:6" saddr=10.128.0.169 src=47048 daddr=10.128.0.63 dest=22 netif=eth0 [ 720.055211][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 6000 jiffies s: 34885 root: 0x2/. [ 720.055256][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 720.055280][ T19] Sending NMI from CPU 0 to CPUs 1: [ 720.055317][ C1] NMI backtrace for cpu 1 [ 720.055335][ C1] CPU: 1 PID: 5133 Comm: kworker/1:4 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 720.055354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 720.055367][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 720.055393][ C1] RIP: 0010:__lock_acquire+0x126d/0x1fd0 [ 720.055415][ C1] Code: 10 8b 18 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 15 f7 92 be 08 00 00 00 e8 5b 15 86 00 48 0f a3 1d f3 95 84 11 <73> 1d 48 69 c3 c8 00 00 00 48 8d 98 80 74 c5 92 48 ba 00 00 00 00 [ 720.055430][ C1] RSP: 0018:ffffc90000a16a90 EFLAGS: 00000057 [ 720.055444][ C1] RAX: 0000000000000001 RBX: 0000000000000e0f RCX: ffffffff81727f85 [ 720.055456][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92f71740 [ 720.055468][ C1] RBP: 8b05339088c608f1 R08: ffffffff92f71747 R09: 1ffffffff25ee2e8 [ 720.055482][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2e9 R12: ffff888063e99e00 [ 720.055495][ C1] R13: ffff888063e99e00 R14: 0000000000000001 R15: ffff888063e99e00 [ 720.055508][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 720.055523][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.055536][ C1] CR2: 00007fffe0acacd8 CR3: 0000000069452000 CR4: 00000000003506f0 [ 720.055551][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 720.055561][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 720.055572][ C1] Call Trace: [ 720.055579][ C1] [ 720.055587][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 720.055607][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 720.055637][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 720.055674][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 720.055693][ C1] ? nmi_handle+0x14f/0x5a0 [ 720.055718][ C1] ? nmi_handle+0x2a/0x5a0 [ 720.055742][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 720.055759][ C1] ? default_do_nmi+0x63/0x160 [ 720.055777][ C1] ? exc_nmi+0x123/0x1f0 [ 720.055794][ C1] ? end_repeat_nmi+0xf/0x53 [ 720.055821][ C1] ? __lock_acquire+0x1265/0x1fd0 [ 720.055839][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 720.055856][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 720.055874][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 720.055890][ C1] [ 720.055896][ C1] [ 720.055909][ C1] lock_acquire+0x1ed/0x550 [ 720.055925][ C1] ? advance_sched+0xab/0xca0 [ 720.055953][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 720.055971][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.055998][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 720.056021][ C1] ? __pfx_lock_release+0x10/0x10 [ 720.056041][ C1] ? __pfx_advance_sched+0x10/0x10 [ 720.056065][ C1] _raw_spin_lock+0x2e/0x40 [ 720.056088][ C1] ? advance_sched+0xab/0xca0 [ 720.056111][ C1] advance_sched+0xab/0xca0 [ 720.056137][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.056162][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.056191][ C1] ? __pfx_advance_sched+0x10/0x10 [ 720.056215][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 720.056238][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 720.056263][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 720.056291][ C1] hrtimer_interrupt+0x396/0x990 [ 720.056323][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 720.056349][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 720.056371][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.056396][ C1] RIP: 0010:console_flush_all+0xaad/0xfd0 [ 720.056421][ C1] Code: ff ff e8 b6 ce 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 a8 ce 1f 00 e8 93 de 06 0a 4d 85 f6 74 b6 e8 99 ce 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 [ 720.056434][ C1] RSP: 0018:ffffc90000a17120 EFLAGS: 00000246 [ 720.056447][ C1] RAX: 1ffff92000142e70 RBX: 0000000000000000 RCX: ffff888063e99e00 [ 720.056458][ C1] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.056468][ C1] RBP: ffffc90000a172d0 R08: ffffffff817657c4 R09: 1ffffffff25ee2b0 [ 720.056480][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: ffffffff8eb0fa38 [ 720.056493][ C1] R13: ffffffff8eb0f9e0 R14: 0000000000000200 R15: dffffc0000000000 [ 720.056508][ C1] ? console_flush_all+0xa44/0xfd0 [ 720.056537][ C1] ? console_flush_all+0x152/0xfd0 [ 720.056563][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 720.056581][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 720.056617][ C1] console_unlock+0x13b/0x4d0 [ 720.056641][ C1] ? __pfx_console_unlock+0x10/0x10 [ 720.056664][ C1] ? vprintk_emit+0x300/0x770 [ 720.056687][ C1] ? vprintk_emit+0x571/0x770 [ 720.056709][ C1] ? vprintk_emit+0x3cf/0x770 [ 720.056729][ C1] vprintk_emit+0x5a6/0x770 [ 720.056751][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 720.056773][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.056798][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 720.056830][ C1] _printk+0xd5/0x120 [ 720.056853][ C1] ? audit_log_start+0x8a3/0xa30 [ 720.056878][ C1] ? __pfx__printk+0x10/0x10 [ 720.056901][ C1] ? __wake_up_common_lock+0x18c/0x1e0 [ 720.056922][ C1] audit_log_start+0x8da/0xa30 [ 720.056950][ C1] ? __pfx_audit_log_start+0x10/0x10 [ 720.056981][ C1] ? __pfx_smack_log_callback+0x10/0x10 [ 720.057004][ C1] common_lsm_audit+0xdd/0x1b30 [ 720.057024][ C1] ? __pfx_lock_release+0x10/0x10 [ 720.057041][ C1] ? __pfx_common_lsm_audit+0x10/0x10 [ 720.057065][ C1] ? netlbl_unlabel_getattr+0x2c/0x700 [ 720.057091][ C1] smack_log+0x421/0x540 [ 720.057114][ C1] ? __pfx_smack_log+0x10/0x10 [ 720.057135][ C1] ? __pfx_smack_from_netlbl+0x10/0x10 [ 720.057158][ C1] smk_access+0x4a4/0x4e0 [ 720.057182][ C1] smack_socket_sock_rcv_skb+0x6d6/0x13a0 [ 720.057202][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 720.057223][ C1] ? __pfx_smack_socket_sock_rcv_skb+0x10/0x10 [ 720.057248][ C1] ? __pfx_validate_chain+0x10/0x10 [ 720.057269][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 720.057297][ C1] ? sock_def_readable+0xd7/0x5b0 [ 720.057332][ C1] ? tcp_do_parse_auth_options+0x29b/0x330 [ 720.057354][ C1] security_sock_rcv_skb+0x6d/0xa0 [ 720.057379][ C1] sk_filter_trim_cap+0x184/0xa80 [ 720.057401][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 720.057424][ C1] tcp_v4_rcv+0x2756/0x37b0 [ 720.057466][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 720.057490][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 720.057512][ C1] ip_protocol_deliver_rcu+0x225/0x430 [ 720.057536][ C1] ? ip_local_deliver_finish+0x22e/0x5f0 [ 720.057558][ C1] ip_local_deliver_finish+0x33f/0x5f0 [ 720.057583][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 720.057605][ C1] NF_HOOK+0x3a4/0x450 [ 720.057631][ C1] ? NF_HOOK+0x9a/0x450 [ 720.057650][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 720.057672][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 720.057699][ C1] ip_sublist_rcv_finish+0x3be/0x4f0 [ 720.057723][ C1] ip_sublist_rcv+0x75d/0xab0 [ 720.057744][ C1] ? __pfx_packet_rcv+0x10/0x10 [ 720.057770][ C1] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 720.057792][ C1] ? skb_orphan+0xae/0xd0 [ 720.057813][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 720.057839][ C1] ip_list_rcv+0x42b/0x480 [ 720.057863][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 720.057886][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 720.057908][ C1] __netif_receive_skb_list_core+0x95a/0x980 [ 720.057934][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 720.057959][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 720.057982][ C1] ? timekeeping_get_ns+0x2c0/0x420 [ 720.058009][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 720.058031][ C1] netif_receive_skb_list_internal+0xa51/0xe30 [ 720.058055][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 720.058079][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 720.058103][ C1] ? dev_gro_receive+0x108f/0x24b0 [ 720.058133][ C1] napi_gro_receive+0x5aa/0xc90 [ 720.058156][ C1] receive_buf+0x1d03/0x3820 [ 720.058181][ C1] ? __pfx_receive_buf+0x10/0x10 [ 720.058197][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 720.058226][ C1] virtnet_poll+0x7f8/0x18c0 [ 720.058251][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 720.058268][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 720.058287][ C1] ? __pfx_lock_release+0x10/0x10 [ 720.058306][ C1] ? mark_lock+0x9a/0x350 [ 720.058327][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 720.058345][ C1] __napi_poll+0xcb/0x490 [ 720.058369][ C1] net_rx_action+0x7bb/0x10a0 [ 720.058392][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 720.058408][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.058431][ C1] handle_softirqs+0x2c4/0x970 [ 720.058448][ C1] ? do_softirq+0x11b/0x1e0 [ 720.058465][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 720.058501][ C1] do_softirq+0x11b/0x1e0 [ 720.058516][ C1] [ 720.058521][ C1] [ 720.058527][ C1] ? __pfx_do_softirq+0x10/0x10 [ 720.058542][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 720.058559][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 720.058576][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.058595][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 720.058615][ C1] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 720.058632][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 720.058649][ C1] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 720.058668][ C1] wg_packet_encrypt_worker+0x2e8/0x1610 [ 720.058694][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.058712][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 720.058727][ C1] ? trace_pelt_se_tp+0x3d/0x140 [ 720.058749][ C1] ? __update_load_avg_se+0x6a0/0xaf0 [ 720.058778][ C1] ? look_up_lock_class+0x77/0x160 [ 720.058811][ C1] ? register_lock_class+0x102/0x980 [ 720.058827][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 720.058845][ C1] ? __pfx_lock_release+0x10/0x10 [ 720.058879][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 720.058898][ C1] ? mark_lock+0x9a/0x350 [ 720.058917][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 720.058947][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 720.058964][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 720.058982][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 720.059005][ C1] ? process_scheduled_works+0x945/0x1830 [ 720.059021][ C1] process_scheduled_works+0xa2c/0x1830 [ 720.059050][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.059071][ C1] ? assign_work+0x364/0x3d0 [ 720.059088][ C1] worker_thread+0x86d/0xd50 [ 720.059110][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 720.059137][ C1] ? __kthread_parkme+0x169/0x1d0 [ 720.059156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 720.059173][ C1] kthread+0x2f0/0x390 [ 720.059192][ C1] ? __pfx_worker_thread+0x10/0x10 [ 720.059208][ C1] ? __pfx_kthread+0x10/0x10 [ 720.059228][ C1] ret_from_fork+0x4b/0x80 [ 720.059249][ C1] ? __pfx_kthread+0x10/0x10 [ 720.059268][ C1] ret_from_fork_asm+0x1a/0x30 [ 720.059298][ C1] [ 720.059881][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.059944][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.089226][ T29] audit: type=1400 audit(1720267099.726:152840): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089283][ T29] audit: type=1400 audit(1720267099.726:152841): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089327][ T29] audit: type=1400 audit(1720267099.726:152842): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089387][ T29] audit: type=1400 audit(1720267099.726:152843): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089430][ T29] audit: type=1400 audit(1720267099.726:152844): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089475][ T29] audit: type=1400 audit(1720267099.726:152845): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089517][ T29] audit: type=1400 audit(1720267099.726:152846): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089559][ T29] audit: type=1400 audit(1720267099.726:152847): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 720.089622][ T29] audit: type=1400 audit(1720267099.726:152848): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4746 comm="dhcpcd" [ 736.938094][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 736.938127][ C0] rcu: 1-....: (1 GPs behind) idle=2144/1/0x4000000000000000 softirq=53748/53749 fqs=9 [ 736.939139][ C0] rcu: hardirqs softirqs csw/system [ 736.939151][ C0] rcu: number: 0 0 0 [ 736.939167][ C0] rcu: cputime: 0 100 0 ==> 17280(ms) [ 736.939185][ C0] rcu: (detected by 0, t=10503 jiffies, g=78365, q=526 ncpus=2) [ 736.939206][ C0] Sending NMI from CPU 0 to CPUs 1: [ 736.939238][ C1] NMI backtrace for cpu 1 [ 736.939250][ C1] CPU: 1 PID: 5133 Comm: kworker/1:4 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 736.939269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 736.939283][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 736.939308][ C1] RIP: 0010:debug_objects_fill_pool+0x43/0x9b0 [ 736.939338][ C1] Code: 01 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 60 01 00 00 49 be 00 00 00 00 00 fc ff df 48 c7 84 24 a0 00 00 00 b3 8a b5 41 <48> c7 84 24 a8 00 00 00 ce 73 b4 8d 48 c7 84 24 b0 00 00 00 c0 d0 [ 736.939353][ C1] RSP: 0018:ffffc90000a16aa0 EFLAGS: 00000086 [ 736.939368][ C1] RAX: 122f1c63e0019f00 RBX: ffffc90000a16cd0 RCX: 0000000000000000 [ 736.939381][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a16ce0 [ 736.939393][ C1] RBP: ffffc90000a16c50 R08: ffffc90000a16ccf R09: 0000000000000000 [ 736.939406][ C1] R10: ffffc90000a16cc0 R11: fffff52000142d9a R12: 0000000000000000 [ 736.939418][ C1] R13: 1ffff92000142d94 R14: dffffc0000000000 R15: ffff888023cf6340 [ 736.939432][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 736.939446][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.939459][ C1] CR2: 00007fffe0acacd8 CR3: 0000000069452000 CR4: 00000000003506f0 [ 736.939475][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.939485][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.939496][ C1] Call Trace: [ 736.939504][ C1] [ 736.939512][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 736.939532][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 736.939553][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 736.939571][ C1] ? nmi_handle+0x2a/0x5a0 [ 736.939606][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 736.939626][ C1] ? nmi_handle+0x14f/0x5a0 [ 736.939651][ C1] ? nmi_handle+0x2a/0x5a0 [ 736.939678][ C1] ? debug_objects_fill_pool+0x43/0x9b0 [ 736.939701][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 736.939718][ C1] ? default_do_nmi+0x63/0x160 [ 736.939738][ C1] ? exc_nmi+0x123/0x1f0 [ 736.939756][ C1] ? end_repeat_nmi+0xf/0x53 [ 736.939789][ C1] ? debug_objects_fill_pool+0x43/0x9b0 [ 736.939815][ C1] ? debug_objects_fill_pool+0x43/0x9b0 [ 736.939842][ C1] ? debug_objects_fill_pool+0x43/0x9b0 [ 736.939867][ C1] [ 736.939873][ C1] [ 736.939881][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 736.939912][ C1] ? advance_sched+0xa02/0xca0 [ 736.939956][ C1] debug_object_activate+0x135/0x510 [ 736.939982][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 736.940006][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 736.940035][ C1] ? advance_sched+0xa02/0xca0 [ 736.940063][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 736.940089][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 736.940117][ C1] enqueue_hrtimer+0x30/0x3c0 [ 736.940144][ C1] __hrtimer_run_queues+0x6cb/0xd50 [ 736.940167][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 736.940194][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 736.940223][ C1] hrtimer_interrupt+0x396/0x990 [ 736.940258][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 736.940284][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 736.940307][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.940331][ C1] RIP: 0010:console_flush_all+0xaad/0xfd0 [ 736.940356][ C1] Code: ff ff e8 b6 ce 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 a8 ce 1f 00 e8 93 de 06 0a 4d 85 f6 74 b6 e8 99 ce 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 [ 736.940369][ C1] RSP: 0018:ffffc90000a17120 EFLAGS: 00000246 [ 736.940382][ C1] RAX: 1ffff92000142e70 RBX: 0000000000000000 RCX: ffff888063e99e00 [ 736.940393][ C1] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.940403][ C1] RBP: ffffc90000a172d0 R08: ffffffff817657c4 R09: 1ffffffff25ee2b0 [ 736.940415][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: ffffffff8eb0fa38 [ 736.940427][ C1] R13: ffffffff8eb0f9e0 R14: 0000000000000200 R15: dffffc0000000000 [ 736.940443][ C1] ? console_flush_all+0xa44/0xfd0 [ 736.940473][ C1] ? console_flush_all+0x152/0xfd0 [ 736.940518][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 736.940555][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 736.940592][ C1] console_unlock+0x13b/0x4d0 [ 736.940621][ C1] ? __pfx_console_unlock+0x10/0x10 [ 736.940647][ C1] ? vprintk_emit+0x300/0x770 [ 736.940673][ C1] ? vprintk_emit+0x571/0x770 [ 736.940698][ C1] ? vprintk_emit+0x3cf/0x770 [ 736.940720][ C1] vprintk_emit+0x5a6/0x770 [ 736.940745][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 736.940770][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 736.940799][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 736.940835][ C1] _printk+0xd5/0x120 [ 736.940861][ C1] ? audit_log_start+0x8a3/0xa30 [ 736.940889][ C1] ? __pfx__printk+0x10/0x10 [ 736.940916][ C1] ? __wake_up_common_lock+0x18c/0x1e0 [ 736.940939][ C1] audit_log_start+0x8da/0xa30 [ 736.940971][ C1] ? __pfx_audit_log_start+0x10/0x10 [ 736.941008][ C1] ? __pfx_smack_log_callback+0x10/0x10 [ 736.941037][ C1] common_lsm_audit+0xdd/0x1b30 [ 736.941061][ C1] ? __pfx_lock_release+0x10/0x10 [ 736.941079][ C1] ? __pfx_common_lsm_audit+0x10/0x10 [ 736.941107][ C1] ? netlbl_unlabel_getattr+0x2c/0x700 [ 736.941136][ C1] smack_log+0x421/0x540 [ 736.941162][ C1] ? __pfx_smack_log+0x10/0x10 [ 736.941185][ C1] ? __pfx_smack_from_netlbl+0x10/0x10 [ 736.941212][ C1] smk_access+0x4a4/0x4e0 [ 736.941240][ C1] smack_socket_sock_rcv_skb+0x6d6/0x13a0 [ 736.941263][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 736.941286][ C1] ? __pfx_smack_socket_sock_rcv_skb+0x10/0x10 [ 736.941316][ C1] ? __pfx_validate_chain+0x10/0x10 [ 736.941339][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 736.941372][ C1] ? sock_def_readable+0xd7/0x5b0 [ 736.941399][ C1] ? tcp_do_parse_auth_options+0x29b/0x330 [ 736.941426][ C1] security_sock_rcv_skb+0x6d/0xa0 [ 736.941455][ C1] sk_filter_trim_cap+0x184/0xa80 [ 736.941482][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 736.941510][ C1] tcp_v4_rcv+0x2756/0x37b0 [ 736.941564][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 736.941594][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 736.941620][ C1] ip_protocol_deliver_rcu+0x225/0x430 [ 736.941648][ C1] ? ip_local_deliver_finish+0x22e/0x5f0 [ 736.941674][ C1] ip_local_deliver_finish+0x33f/0x5f0 [ 736.941715][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 736.941751][ C1] NF_HOOK+0x3a4/0x450 [ 736.941776][ C1] ? NF_HOOK+0x9a/0x450 [ 736.941798][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 736.941821][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 736.941852][ C1] ip_sublist_rcv_finish+0x3be/0x4f0 [ 736.941880][ C1] ip_sublist_rcv+0x75d/0xab0 [ 736.941904][ C1] ? __pfx_packet_rcv+0x10/0x10 [ 736.941934][ C1] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 736.941957][ C1] ? skb_orphan+0xae/0xd0 [ 736.941981][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 736.942010][ C1] ip_list_rcv+0x42b/0x480 [ 736.942041][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 736.942067][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 736.942090][ C1] __netif_receive_skb_list_core+0x95a/0x980 [ 736.942120][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 736.942146][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 736.942171][ C1] ? timekeeping_get_ns+0x2c0/0x420 [ 736.942201][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 736.942224][ C1] netif_receive_skb_list_internal+0xa51/0xe30 [ 736.942251][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 736.942274][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 736.942298][ C1] ? dev_gro_receive+0x108f/0x24b0 [ 736.942329][ C1] napi_gro_receive+0x5aa/0xc90 [ 736.942353][ C1] receive_buf+0x1d03/0x3820 [ 736.942382][ C1] ? __pfx_receive_buf+0x10/0x10 [ 736.942398][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 736.942429][ C1] virtnet_poll+0x7f8/0x18c0 [ 736.942457][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 736.942474][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 736.942494][ C1] ? __pfx_lock_release+0x10/0x10 [ 736.942514][ C1] ? mark_lock+0x9a/0x350 [ 736.942537][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 736.942556][ C1] __napi_poll+0xcb/0x490 [ 736.942581][ C1] net_rx_action+0x7bb/0x10a0 [ 736.942606][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 736.942623][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 736.942648][ C1] handle_softirqs+0x2c4/0x970 [ 736.942668][ C1] ? do_softirq+0x11b/0x1e0 [ 736.942685][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 736.942705][ C1] do_softirq+0x11b/0x1e0 [ 736.942720][ C1] [ 736.942725][ C1] [ 736.942731][ C1] ? __pfx_do_softirq+0x10/0x10 [ 736.942746][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 736.942762][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 736.942781][ C1] ? rcu_is_watching+0x15/0xb0 [ 736.942801][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 736.942818][ C1] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 736.942835][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 736.942852][ C1] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 736.942872][ C1] wg_packet_encrypt_worker+0x2e8/0x1610 [ 736.942901][ C1] ? rcu_is_watching+0x15/0xb0 [ 736.942918][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 736.942934][ C1] ? trace_pelt_se_tp+0x3d/0x140 [ 736.942956][ C1] ? __update_load_avg_se+0x6a0/0xaf0 [ 736.942987][ C1] ? look_up_lock_class+0x77/0x160 [ 736.943010][ C1] ? register_lock_class+0x102/0x980 [ 736.943031][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 736.943050][ C1] ? __pfx_lock_release+0x10/0x10 [ 736.943067][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 736.943087][ C1] ? mark_lock+0x9a/0x350 [ 736.943107][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 736.943140][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 736.943157][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 736.943176][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 736.943200][ C1] ? process_scheduled_works+0x945/0x1830 [ 736.943217][ C1] process_scheduled_works+0xa2c/0x1830 [ 736.943248][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 736.943270][ C1] ? assign_work+0x364/0x3d0 [ 736.943288][ C1] worker_thread+0x86d/0xd50 [ 736.943310][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 736.943337][ C1] ? __kthread_parkme+0x169/0x1d0 [ 736.943357][ C1] ? __pfx_worker_thread+0x10/0x10 [ 736.943374][ C1] kthread+0x2f0/0x390 [ 736.943393][ C1] ? __pfx_worker_thread+0x10/0x10 [ 736.943410][ C1] ? __pfx_kthread+0x10/0x10 [ 736.943440][ C1] ret_from_fork+0x4b/0x80 [ 736.943461][ C1] ? __pfx_kthread+0x10/0x10 [ 736.943479][ C1] ret_from_fork_asm+0x1a/0x30 [ 736.943509][ C1] [ 736.944233][ C0] rcu: rcu_preempt kthread starved for 1685 jiffies! g78365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 736.944258][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 736.944269][ C0] rcu: RCU grace-period kthread stack dump: [ 736.944278][ C0] task:rcu_preempt state:R running task stack:26128 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 736.944323][ C0] Call Trace: [ 736.944331][ C0] [ 736.944344][ C0] __schedule+0x1796/0x49d0 [ 736.944389][ C0] ? __pfx___schedule+0x10/0x10 [ 736.944413][ C0] ? __pfx_lock_release+0x10/0x10 [ 736.944434][ C0] ? __asan_memset+0x23/0x50 [ 736.944467][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 736.944490][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 736.944516][ C0] ? schedule+0x90/0x320 [ 736.944535][ C0] schedule+0x14b/0x320 [ 736.944558][ C0] schedule_timeout+0x1be/0x310 [ 736.944588][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 736.944618][ C0] ? __pfx_process_timeout+0x10/0x10 [ 736.944649][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 736.944688][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 736.944723][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 736.944746][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 736.944786][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 736.944825][ C0] ? finish_swait+0xd4/0x1e0 [ 736.944848][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 736.944872][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 736.944891][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 736.944927][ C0] ? __kthread_parkme+0x169/0x1d0 [ 736.944954][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 736.944975][ C0] kthread+0x2f0/0x390 [ 736.945000][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 736.945022][ C0] ? __pfx_kthread+0x10/0x10 [ 736.945068][ C0] ret_from_fork+0x4b/0x80 [ 736.945095][ C0] ? __pfx_kthread+0x10/0x10 [ 736.945123][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.945170][ C0] [ 736.945179][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 736.945188][ C0] CPU: 0 PID: 1043 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 736.945211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 736.945225][ C0] Workqueue: events_unbound toggle_allocation_gate [ 736.945248][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 736.945280][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c9 0c 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 74 08 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 58 08 [ 736.945299][ C0] RSP: 0018:ffffc900040d7700 EFLAGS: 00000293 [ 736.945318][ C0] RAX: ffffffff818a1e68 RBX: 1ffff110172a8891 RCX: ffff888021ecbc00 [ 736.945336][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 736.945350][ C0] RBP: ffffc900040d78e0 R08: ffffffff818a1e37 R09: 1ffffffff25ee2b0 [ 736.945367][ C0] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: dffffc0000000000 [ 736.945384][ C0] R13: ffff8880b9544488 R14: ffff8880b943f880 R15: 0000000000000001 [ 736.945400][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 736.945419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.945435][ C0] CR2: 000055d01c2950d8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 736.945454][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.945468][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.945483][ C0] Call Trace: [ 736.945492][ C0] [ 736.945501][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 736.945532][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 736.945570][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 736.945617][ C0] ? __pfx_lock_release+0x10/0x10 [ 736.945650][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 736.945677][ C0] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 736.945711][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 736.945736][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 736.945770][ C0] ? acct_account_cputime+0x207/0x210 [ 736.945797][ C0] ? update_process_times+0x1ce/0x230 [ 736.945822][ C0] ? tick_nohz_handler+0x37c/0x500 [ 736.945856][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 736.945887][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 736.945916][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 736.945956][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 736.945986][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 736.946015][ C0] ? hrtimer_interrupt+0x396/0x990 [ 736.946067][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 736.946100][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 736.946126][ C0] [ 736.946134][ C0] [ 736.946143][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.946179][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 736.946206][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 736.946237][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 736.946270][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 736.946302][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 736.946324][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 736.946367][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 736.946396][ C0] ? __pfx___might_resched+0x10/0x10 [ 736.946420][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 736.946447][ C0] ? __pfx___might_resched+0x10/0x10 [ 736.946476][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 736.946501][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 736.946530][ C0] text_poke_bp_batch+0x352/0xb30 [ 736.946566][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 736.946589][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 736.946617][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 736.946652][ C0] text_poke_finish+0x30/0x50 [ 736.946674][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 736.946698][ C0] static_key_disable_cpuslocked+0xce/0x1c0 [ 736.946733][ C0] static_key_disable+0x1a/0x20 [ 736.946768][ C0] toggle_allocation_gate+0x1b8/0x250 [ 736.946790][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 736.946812][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 736.946847][ C0] ? process_scheduled_works+0x945/0x1830 [ 736.946867][ C0] process_scheduled_works+0xa2c/0x1830 [ 736.946916][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 736.946947][ C0] ? assign_work+0x364/0x3d0 [ 736.946973][ C0] worker_thread+0x86d/0xd50 [ 736.947010][ C0] ? __kthread_parkme+0x169/0x1d0 [ 736.947037][ C0] ? __pfx_worker_thread+0x10/0x10 [ 736.947059][ C0] kthread+0x2f0/0x390 [ 736.947084][ C0] ? __pfx_worker_thread+0x10/0x10 [ 736.947105][ C0] ? __pfx_kthread+0x10/0x10 [ 736.947131][ C0] ret_from_fork+0x4b/0x80 [ 736.947157][ C0] ? __pfx_kthread+0x10/0x10 [ 736.947182][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.947226][ C0] [ 848.242653][ T30] INFO: task kworker/u8:0:11 blocked for more than 188 seconds. [ 848.242681][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.242697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.242709][ T30] task:kworker/u8:0 state:D stack:20632 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 848.242753][ T30] Workqueue: netns cleanup_net [ 848.242784][ T30] Call Trace: [ 848.242794][ T30] [ 848.242810][ T30] __schedule+0x1796/0x49d0 [ 848.242862][ T30] ? __pfx___schedule+0x10/0x10 [ 848.242890][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.242919][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 848.242952][ T30] ? kthread_data+0x52/0xd0 [ 848.242977][ T30] ? schedule+0x90/0x320 [ 848.243000][ T30] ? wq_worker_sleeping+0x66/0x240 [ 848.243030][ T30] ? schedule+0x90/0x320 [ 848.243052][ T30] schedule+0x14b/0x320 [ 848.243079][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.243103][ T30] __mutex_lock+0x6a4/0xd70 [ 848.243134][ T30] ? __mutex_lock+0x527/0xd70 [ 848.243163][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 848.243198][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.243230][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 848.243256][ T30] ? cleanup_net+0x427/0xcc0 [ 848.243282][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 848.243311][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 848.243350][ T30] cleanup_net+0x615/0xcc0 [ 848.243383][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 848.243424][ T30] ? process_scheduled_works+0x945/0x1830 [ 848.243448][ T30] process_scheduled_works+0xa2c/0x1830 [ 848.243506][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.243553][ T30] ? assign_work+0x364/0x3d0 [ 848.243588][ T30] worker_thread+0x86d/0xd50 [ 848.243628][ T30] ? __kthread_parkme+0x169/0x1d0 [ 848.243658][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.243682][ T30] kthread+0x2f0/0x390 [ 848.243708][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.243731][ T30] ? __pfx_kthread+0x10/0x10 [ 848.243759][ T30] ret_from_fork+0x4b/0x80 [ 848.243792][ T30] ? __pfx_kthread+0x10/0x10 [ 848.243820][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.243867][ T30] [ 848.243915][ T30] INFO: task kworker/u8:5:1033 blocked for more than 188 seconds. [ 848.243930][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.243944][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.243954][ T30] task:kworker/u8:5 state:D stack:20272 pid:1033 tgid:1033 ppid:2 flags:0x00004000 [ 848.243991][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 848.244017][ T30] Call Trace: [ 848.244025][ T30] [ 848.244039][ T30] __schedule+0x1796/0x49d0 [ 848.244084][ T30] ? __pfx___schedule+0x10/0x10 [ 848.244110][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.244136][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 848.244166][ T30] ? kthread_data+0x52/0xd0 [ 848.244189][ T30] ? schedule+0x90/0x320 [ 848.244210][ T30] ? wq_worker_sleeping+0x66/0x240 [ 848.244237][ T30] ? schedule+0x90/0x320 [ 848.244258][ T30] schedule+0x14b/0x320 [ 848.244282][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.244304][ T30] __mutex_lock+0x6a4/0xd70 [ 848.244338][ T30] ? __mutex_lock+0x527/0xd70 [ 848.244365][ T30] ? addrconf_verify_work+0x19/0x30 [ 848.244391][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.244414][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.244442][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.244478][ T30] ? process_scheduled_works+0x945/0x1830 [ 848.244501][ T30] addrconf_verify_work+0x19/0x30 [ 848.244525][ T30] process_scheduled_works+0xa2c/0x1830 [ 848.244583][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.244618][ T30] ? assign_work+0x364/0x3d0 [ 848.244646][ T30] worker_thread+0x86d/0xd50 [ 848.244686][ T30] ? __kthread_parkme+0x169/0x1d0 [ 848.244715][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.244739][ T30] kthread+0x2f0/0x390 [ 848.244765][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.244788][ T30] ? __pfx_kthread+0x10/0x10 [ 848.244816][ T30] ret_from_fork+0x4b/0x80 [ 848.244843][ T30] ? __pfx_kthread+0x10/0x10 [ 848.244871][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.244917][ T30] [ 848.244966][ T30] INFO: task kworker/u8:9:2882 blocked for more than 188 seconds. [ 848.244981][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.244994][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.245004][ T30] task:kworker/u8:9 state:D stack:20304 pid:2882 tgid:2882 ppid:2 flags:0x00004000 [ 848.245061][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 848.245092][ T30] Call Trace: [ 848.245102][ T30] [ 848.245117][ T30] __schedule+0x1796/0x49d0 [ 848.245165][ T30] ? __pfx___schedule+0x10/0x10 [ 848.245191][ T30] ? __blk_flush_plug+0x449/0x500 [ 848.245222][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.245250][ T30] ? __blk_flush_plug+0x449/0x500 [ 848.245285][ T30] ? kthread_data+0x52/0xd0 [ 848.245309][ T30] ? schedule+0x90/0x320 [ 848.245332][ T30] ? wq_worker_sleeping+0x66/0x240 [ 848.245361][ T30] ? schedule+0x90/0x320 [ 848.245382][ T30] schedule+0x14b/0x320 [ 848.245409][ T30] io_schedule+0x8d/0x110 [ 848.245437][ T30] rq_qos_wait+0x2ff/0x420 [ 848.245473][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 848.245500][ T30] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 848.245526][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 848.245559][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 848.245601][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 848.245639][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 848.245690][ T30] wbt_wait+0x3cc/0x640 [ 848.245717][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 848.245741][ T30] ? __pfx_dd_bio_merge+0x10/0x10 [ 848.245776][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 848.245799][ T30] __rq_qos_throttle+0x68/0xb0 [ 848.245830][ T30] blk_mq_submit_bio+0x6f2/0x2170 [ 848.245866][ T30] ? blk_mq_submit_bio+0x4f6/0x2170 [ 848.245901][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 848.245952][ T30] __submit_bio+0x1c1/0x560 [ 848.245986][ T30] ? __pfx___submit_bio+0x10/0x10 [ 848.246017][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.246059][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 848.246096][ T30] ? __pfx___might_resched+0x10/0x10 [ 848.246127][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 848.246158][ T30] ? __pfx___folio_start_writeback+0x10/0x10 [ 848.246214][ T30] ext4_bio_write_folio+0x126d/0x1da0 [ 848.246261][ T30] mpage_submit_folio+0x1af/0x230 [ 848.246302][ T30] mpage_process_page_bufs+0x6c9/0x8d0 [ 848.246336][ T30] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 848.246370][ T30] ? kasan_save_track+0x51/0x80 [ 848.246400][ T30] ? kasan_save_track+0x3f/0x80 [ 848.246455][ T30] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 848.246531][ T30] ? ext4_init_io_end+0x29/0x130 [ 848.246557][ T30] ? rcu_is_watching+0x15/0xb0 [ 848.246591][ T30] ? ext4_init_io_end+0x29/0x130 [ 848.246619][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 848.246675][ T30] ext4_do_writepages+0xc52/0x3d40 [ 848.246704][ T30] ? hlock_conflict+0x59/0x1e0 [ 848.246786][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 848.246854][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 848.246902][ T30] ext4_writepages+0x213/0x3c0 [ 848.246930][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 848.246968][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 848.247007][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 848.247033][ T30] do_writepages+0x359/0x870 [ 848.247073][ T30] ? __pfx_do_writepages+0x10/0x10 [ 848.247115][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.247141][ T30] ? writeback_sb_inodes+0x5ea/0x1380 [ 848.247171][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.247194][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 848.247239][ T30] __writeback_single_inode+0x165/0x10b0 [ 848.247278][ T30] writeback_sb_inodes+0x99c/0x1380 [ 848.247311][ T30] ? mark_lock+0x9a/0x350 [ 848.247416][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 848.247508][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 848.247545][ T30] ? __pfx_move_expired_inodes+0x10/0x10 [ 848.247587][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 848.247631][ T30] __writeback_inodes_wb+0x11b/0x260 [ 848.247676][ T30] wb_writeback+0x495/0xd40 [ 848.247719][ T30] ? queue_io+0x3b1/0x5a0 [ 848.247756][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 848.247787][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.247837][ T30] wb_workfn+0xba1/0x1090 [ 848.247888][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 848.247929][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.247960][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.248003][ T30] ? process_scheduled_works+0x945/0x1830 [ 848.248294][ T30] process_scheduled_works+0xa2c/0x1830 [ 848.248391][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.248428][ T30] ? assign_work+0x364/0x3d0 [ 848.248459][ T30] worker_thread+0x86d/0xd50 [ 848.248496][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.248537][ T30] ? __kthread_parkme+0x169/0x1d0 [ 848.248569][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.248596][ T30] kthread+0x2f0/0x390 [ 848.248625][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.248650][ T30] ? __pfx_kthread+0x10/0x10 [ 848.248680][ T30] ret_from_fork+0x4b/0x80 [ 848.248710][ T30] ? __pfx_kthread+0x10/0x10 [ 848.248740][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.248791][ T30] [ 848.248806][ T30] INFO: task kworker/u9:1:4477 blocked for more than 188 seconds. [ 848.248823][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.248838][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.248850][ T30] task:kworker/u9:1 state:D stack:25040 pid:4477 tgid:4477 ppid:2 flags:0x00004000 [ 848.248895][ T30] Workqueue: hci4 hci_cmd_sync_work [ 848.248924][ T30] Call Trace: [ 848.248934][ T30] [ 848.248949][ T30] __schedule+0x1796/0x49d0 [ 848.248998][ T30] ? __pfx___schedule+0x10/0x10 [ 848.249026][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.249050][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.249093][ T30] ? kthread_data+0x52/0xd0 [ 848.249120][ T30] ? wq_worker_sleeping+0x66/0x240 [ 848.249150][ T30] ? schedule+0x90/0x320 [ 848.249172][ T30] schedule+0x14b/0x320 [ 848.249199][ T30] synchronize_rcu_expedited+0x710/0x830 [ 848.249235][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 848.249266][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 848.249310][ T30] ? __pfx___might_resched+0x10/0x10 [ 848.249348][ T30] ? rcu_is_watching+0x15/0xb0 [ 848.249390][ T30] synchronize_rcu+0x11b/0x360 [ 848.249419][ T30] ? __pfx_synchronize_rcu+0x10/0x10 [ 848.249449][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 848.249483][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 848.249521][ T30] hci_chan_del+0x119/0x1b0 [ 848.249555][ T30] l2cap_conn_del+0x4eb/0x680 [ 848.249590][ T30] l2cap_connect_cfm+0x11f/0x1220 [ 848.249615][ T30] ? hci_conn_failed+0x185/0x340 [ 848.249642][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.249674][ T30] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 848.249696][ T30] ? hci_disconnect_sync+0x218/0x3d0 [ 848.249737][ T30] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 848.249764][ T30] hci_conn_failed+0x1f6/0x340 [ 848.249794][ T30] hci_abort_conn_sync+0x583/0xde0 [ 848.249830][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.249860][ T30] ? hci_abort_conn_sync+0x1f6/0xde0 [ 848.249895][ T30] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 848.249937][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.249968][ T30] ? abort_conn_sync+0x26/0x270 [ 848.249996][ T30] ? abort_conn_sync+0x204/0x270 [ 848.250025][ T30] ? __pfx_abort_conn_sync+0x10/0x10 [ 848.250057][ T30] hci_cmd_sync_work+0x22b/0x400 [ 848.250093][ T30] ? process_scheduled_works+0x945/0x1830 [ 848.250118][ T30] process_scheduled_works+0xa2c/0x1830 [ 848.250175][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.250211][ T30] ? assign_work+0x364/0x3d0 [ 848.250242][ T30] worker_thread+0x86d/0xd50 [ 848.250278][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.250327][ T30] ? __kthread_parkme+0x169/0x1d0 [ 848.250358][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.250385][ T30] kthread+0x2f0/0x390 [ 848.250413][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.250438][ T30] ? __pfx_kthread+0x10/0x10 [ 848.250469][ T30] ret_from_fork+0x4b/0x80 [ 848.250499][ T30] ? __pfx_kthread+0x10/0x10 [ 848.250529][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.250598][ T30] [ 848.250641][ T30] INFO: task syz-executor:12867 blocked for more than 188 seconds. [ 848.250658][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.250673][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.250685][ T30] task:syz-executor state:D stack:20288 pid:12867 tgid:12867 ppid:1 flags:0x00004006 [ 848.250727][ T30] Call Trace: [ 848.250737][ T30] [ 848.250753][ T30] __schedule+0x1796/0x49d0 [ 848.250804][ T30] ? __pfx___schedule+0x10/0x10 [ 848.250834][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.250862][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 848.250908][ T30] ? schedule+0x90/0x320 [ 848.250931][ T30] schedule+0x14b/0x320 [ 848.250959][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.250984][ T30] __mutex_lock+0x6a4/0xd70 [ 848.251017][ T30] ? __mutex_lock+0x527/0xd70 [ 848.251047][ T30] ? synchronize_rcu_expedited+0x451/0x830 [ 848.251080][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.251116][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 848.251161][ T30] synchronize_rcu_expedited+0x451/0x830 [ 848.251206][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 848.251251][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.251293][ T30] ? __pfx_up_write+0x10/0x10 [ 848.251332][ T30] ? shrink_dentry_list+0x59c/0x5b0 [ 848.251372][ T30] namespace_unlock+0x29f/0x4d0 [ 848.251408][ T30] ? put_mnt_ns+0xd7/0x120 [ 848.251432][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.251460][ T30] ? __pfx_namespace_unlock+0x10/0x10 [ 848.251499][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 848.251544][ T30] ? free_nsproxy+0x4d/0x3b0 [ 848.251583][ T30] put_mnt_ns+0xdc/0x120 [ 848.251610][ T30] free_nsproxy+0x4d/0x3b0 [ 848.251650][ T30] do_exit+0xa22/0x27e0 [ 848.251708][ T30] ? __pfx_do_exit+0x10/0x10 [ 848.251739][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 848.251798][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.251825][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.251846][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 848.251883][ T30] do_group_exit+0x207/0x2c0 [ 848.251908][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 848.251939][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 848.251970][ T30] get_signal+0x16a1/0x1740 [ 848.252014][ T30] ? __pfx_vfs_read+0x10/0x10 [ 848.252043][ T30] ? __pfx_get_signal+0x10/0x10 [ 848.252084][ T30] arch_do_signal_or_restart+0x96/0x860 [ 848.252114][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 848.252144][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.252180][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 848.252214][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 848.252247][ T30] do_syscall_64+0x100/0x230 [ 848.252277][ T30] ? clear_bhb_loop+0x35/0x90 [ 848.252311][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.252344][ T30] RIP: 0033:0x7f748b3746bc [ 848.252364][ T30] RSP: 002b:00007fff0c5e8130 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.252405][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f748b3746bc [ 848.252422][ T30] RDX: 0000000000000028 RSI: 00007fff0c5e8230 RDI: 00000000000000f9 [ 848.252438][ T30] RBP: 00007fff0c5e81bc R08: 0000000000000000 R09: 0079746972756365 [ 848.252454][ T30] R10: 00007f748b4d17e0 R11: 0000000000000246 R12: 000000000000003e [ 848.252470][ T30] R13: 0000000000094c72 R14: 00000000000948d3 R15: 0000000000000008 [ 848.252503][ T30] [ 848.252521][ T30] INFO: task syz.3.3363:14810 blocked for more than 188 seconds. [ 848.252536][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.252550][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.252560][ T30] task:syz.3.3363 state:D stack:22896 pid:14810 tgid:14808 ppid:12758 flags:0x00004006 [ 848.252599][ T30] Call Trace: [ 848.252607][ T30] [ 848.252622][ T30] __schedule+0x1796/0x49d0 [ 848.252669][ T30] ? __pfx___schedule+0x10/0x10 [ 848.252695][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.252716][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.252767][ T30] ? schedule+0x90/0x320 [ 848.252788][ T30] schedule+0x14b/0x320 [ 848.252813][ T30] synchronize_rcu_expedited+0x684/0x830 [ 848.252846][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 848.252891][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 848.252918][ T30] ? __pfx___might_resched+0x10/0x10 [ 848.252944][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.252968][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 848.252993][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.253030][ T30] synchronize_rcu+0x11b/0x360 [ 848.253056][ T30] ? __pfx_synchronize_rcu+0x10/0x10 [ 848.253098][ T30] lockdep_unregister_key+0x4b7/0x540 [ 848.253128][ T30] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 848.253155][ T30] ? rcu_is_watching+0x15/0xb0 [ 848.253181][ T30] ? qdisc_reset+0x3bb/0x5a0 [ 848.253219][ T30] __qdisc_destroy+0x165/0x410 [ 848.253253][ T30] taprio_attach+0x24e/0x390 [ 848.253293][ T30] ? __pfx_taprio_attach+0x10/0x10 [ 848.253333][ T30] qdisc_graft+0x128a/0x1580 [ 848.253363][ T30] ? qdisc_graft+0x261/0x1580 [ 848.253402][ T30] ? __pfx_qdisc_graft+0x10/0x10 [ 848.253432][ T30] ? __pfx_qdisc_create+0x10/0x10 [ 848.253469][ T30] tc_modify_qdisc+0xf47/0x1e40 [ 848.253514][ T30] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 848.253569][ T30] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 848.253595][ T30] rtnetlink_rcv_msg+0x89b/0x1180 [ 848.253636][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 848.253691][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.253733][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.253762][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.253796][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 848.253831][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 848.253863][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 848.253886][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 848.253912][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.253941][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 848.253971][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.254023][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 848.254070][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.254113][ T30] ? ref_tracker_free+0x643/0x7e0 [ 848.254157][ T30] netlink_rcv_skb+0x1e3/0x430 [ 848.254190][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.254229][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.254288][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 848.254328][ T30] netlink_unicast+0x7ea/0x980 [ 848.254370][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 848.254397][ T30] ? __virt_addr_valid+0x183/0x520 [ 848.254433][ T30] ? __check_object_size+0x49c/0x900 [ 848.254462][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 848.254510][ T30] netlink_sendmsg+0x8db/0xcb0 [ 848.254556][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.254589][ T30] ? __import_iovec+0x536/0x820 [ 848.254618][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 848.254639][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 848.254679][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.254709][ T30] __sock_sendmsg+0x221/0x270 [ 848.254735][ T30] ____sys_sendmsg+0x525/0x7d0 [ 848.254775][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.254822][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 848.254854][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.254930][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.254957][ T30] ? do_syscall_64+0x100/0x230 [ 848.254992][ T30] ? do_syscall_64+0xb6/0x230 [ 848.255027][ T30] do_syscall_64+0xf3/0x230 [ 848.255059][ T30] ? clear_bhb_loop+0x35/0x90 [ 848.255093][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.255124][ T30] RIP: 0033:0x7f8494b75bd9 [ 848.255141][ T30] RSP: 002b:00007f84958a0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.255165][ T30] RAX: ffffffffffffffda RBX: 00007f8494d03f60 RCX: 00007f8494b75bd9 [ 848.255183][ T30] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 848.255198][ T30] RBP: 00007f8494be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 848.255213][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.255228][ T30] R13: 000000000000000b R14: 00007f8494d03f60 R15: 00007ffcd325db08 [ 848.255261][ T30] [ 848.255271][ T30] INFO: task syz.4.3362:14815 blocked for more than 229 seconds. [ 848.255286][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.255300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.255310][ T30] task:syz.4.3362 state:D stack:26800 pid:14815 tgid:14812 ppid:5678 flags:0x00000004 [ 848.255355][ T30] Call Trace: [ 848.255364][ T30] [ 848.255378][ T30] __schedule+0x1796/0x49d0 [ 848.255423][ T30] ? __pfx___schedule+0x10/0x10 [ 848.255449][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.255475][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 848.255516][ T30] ? schedule+0x90/0x320 [ 848.255537][ T30] schedule+0x14b/0x320 [ 848.255562][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.255584][ T30] __mutex_lock+0x6a4/0xd70 [ 848.255614][ T30] ? __mutex_lock+0x527/0xd70 [ 848.255641][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 848.255676][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.255720][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 848.255757][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 848.255794][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.255833][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.255862][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.255892][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 848.255915][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 848.255948][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 848.255970][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 848.255997][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.256026][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 848.256056][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.256086][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 848.256130][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 848.256171][ T30] ? ref_tracker_free+0x643/0x7e0 [ 848.256210][ T30] netlink_rcv_skb+0x1e3/0x430 [ 848.256241][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 848.256277][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.256337][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 848.256372][ T30] netlink_unicast+0x7ea/0x980 [ 848.256429][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 848.256457][ T30] ? __virt_addr_valid+0x183/0x520 [ 848.256505][ T30] ? __check_object_size+0x49c/0x900 [ 848.256531][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 848.256565][ T30] netlink_sendmsg+0x8db/0xcb0 [ 848.256610][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.256644][ T30] ? __import_iovec+0x536/0x820 [ 848.256673][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 848.256694][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 848.256728][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.256758][ T30] __sock_sendmsg+0x221/0x270 [ 848.256784][ T30] ____sys_sendmsg+0x525/0x7d0 [ 848.256822][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.256869][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 848.256902][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.256978][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.257004][ T30] ? do_syscall_64+0x100/0x230 [ 848.257039][ T30] ? do_syscall_64+0xb6/0x230 [ 848.257075][ T30] do_syscall_64+0xf3/0x230 [ 848.257114][ T30] ? clear_bhb_loop+0x35/0x90 [ 848.257148][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.257178][ T30] RIP: 0033:0x7f1b48975bd9 [ 848.257196][ T30] RSP: 002b:00007f1b497f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.257220][ T30] RAX: ffffffffffffffda RBX: 00007f1b48b03f60 RCX: 00007f1b48975bd9 [ 848.257238][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 848.257252][ T30] RBP: 00007f1b489e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 848.257267][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.257282][ T30] R13: 000000000000000b R14: 00007f1b48b03f60 R15: 00007ffc7117b3d8 [ 848.257315][ T30] [ 848.257336][ T30] [ 848.257336][ T30] Showing all locks held in the system: [ 848.257349][ T30] 4 locks held by kworker/u8:0/11: [ 848.257362][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.257425][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.257484][ T30] #2: ffffffff8f5c80d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 848.257544][ T30] #3: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 848.257613][ T30] 1 lock held by khungtaskd/30: [ 848.257626][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 848.257688][ T30] 3 locks held by kworker/u8:2/35: [ 848.257701][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.257761][ T30] #1: ffffc90000ab7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.257821][ T30] #2: ffff8880671a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 848.257893][ T30] 3 locks held by kworker/u8:4/63: [ 848.257907][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.257966][ T30] #1: ffffc900015c7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.258069][ T30] #2: ffff88805f780768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 848.258148][ T30] 3 locks held by kworker/u8:5/1033: [ 848.258161][ T30] #0: ffff88802a3eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.258221][ T30] #1: ffffc900040e7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.258282][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 848.258347][ T30] 5 locks held by kworker/u8:6/1043: [ 848.258361][ T30] 2 locks held by kworker/u8:7/1048: [ 848.258375][ T30] 3 locks held by kworker/u8:8/1058: [ 848.258388][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.258447][ T30] #1: ffffc90004267d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.258506][ T30] #2: ffff88806a248768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 848.258590][ T30] 4 locks held by kworker/u8:9/2882: [ 848.258603][ T30] #0: ffff88801bac6948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.258663][ T30] #1: ffffc90009957d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.258722][ T30] #2: ffff88807d1120e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 848.258794][ T30] #3: ffff88807d114b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 848.258853][ T30] 5 locks held by kworker/u9:1/4477: [ 848.258867][ T30] #0: ffff888020d11948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.258926][ T30] #1: ffffc9000cd9fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.258986][ T30] #2: ffff88807e14cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 848.259047][ T30] #3: ffff88807e14c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 848.259114][ T30] #4: ffffffff8f73f008 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 848.259175][ T30] 2 locks held by getty/4839: [ 848.259188][ T30] #0: ffff88802aebc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 848.259250][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 848.259327][ T30] 3 locks held by syz-executor/5071: [ 848.259340][ T30] #0: ffff88802ce252f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 848.259404][ T30] #1: ffff88807d112518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 848.259472][ T30] #2: ffff88807d116950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x203f/0x22a0 [ 848.259534][ T30] 3 locks held by kworker/0:4/5131: [ 848.259548][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 848.259606][ T30] #1: ffffc90004387d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 848.259665][ T30] #2: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 848.259746][ T30] 7 locks held by kworker/1:4/5133: [ 848.259770][ T30] 1 lock held by syz-executor/12867: [ 848.259784][ T30] #0: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 848.259864][ T30] 2 locks held by syz.3.3363/14810: [ 848.259877][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 848.259946][ T30] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 848.260009][ T30] 1 lock held by syz.4.3362/14815: [ 848.260022][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 848.260091][ T30] 2 locks held by syz.2.3368/14823: [ 848.260105][ T30] #0: ffff888061886e10 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 848.260178][ T30] #1: ffff88807a2ea258 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0x104/0x370 [ 848.260241][ T30] 1 lock held by dhcpcd/14825: [ 848.260254][ T30] #0: ffff888022378258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 848.260313][ T30] 1 lock held by dhcpcd/14826: [ 848.260331][ T30] #0: ffff88801f13c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 848.260389][ T30] 1 lock held by dhcpcd/14827: [ 848.260402][ T30] #0: ffff888058116258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 848.260478][ T30] 1 lock held by dhcpcd/14828: [ 848.260493][ T30] #0: ffff888058114258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 848.260586][ T30] 1 lock held by dhcpcd/14830: [ 848.260600][ T30] #0: ffff88805b6e8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 848.260666][ T30] [ 848.260674][ T30] ============================================= [ 848.260674][ T30] [ 848.260686][ T30] NMI backtrace for cpu 0 [ 848.260697][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.260721][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 848.260735][ T30] Call Trace: [ 848.260746][ T30] [ 848.260757][ T30] dump_stack_lvl+0x241/0x360 [ 848.260795][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.260830][ T30] ? __pfx__printk+0x10/0x10 [ 848.260860][ T30] ? vprintk_emit+0x631/0x770 [ 848.260894][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 848.260933][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 848.260966][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 848.260991][ T30] ? _printk+0xd5/0x120 [ 848.261021][ T30] ? __pfx__printk+0x10/0x10 [ 848.261053][ T30] ? __wake_up_klogd+0xcc/0x110 [ 848.261087][ T30] ? __pfx__printk+0x10/0x10 [ 848.261120][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 848.261155][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.261183][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 848.261215][ T30] watchdog+0xfde/0x1020 [ 848.261244][ T30] ? watchdog+0x1ea/0x1020 [ 848.261277][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.261303][ T30] kthread+0x2f0/0x390 [ 848.261337][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.261362][ T30] ? __pfx_kthread+0x10/0x10 [ 848.261392][ T30] ret_from_fork+0x4b/0x80 [ 848.261423][ T30] ? __pfx_kthread+0x10/0x10 [ 848.261452][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.261501][ T30] [ 848.261511][ T30] Sending NMI from CPU 0 to CPUs 1: [ 848.261542][ C1] NMI backtrace for cpu 1 [ 848.261556][ C1] CPU: 1 PID: 5133 Comm: kworker/1:4 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.261580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 848.261593][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 848.261613][ C1] RIP: 0010:validate_chain+0x606/0x5900 [ 848.261638][ C1] Code: c7 44 0c 2b 00 00 00 00 41 c6 44 0c 33 00 65 48 8b 0c 25 28 00 00 00 48 3b 8c 24 a0 02 00 00 0f 85 ee 4f 00 00 48 8d 65 d8 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 83 fb 03 41 b9 02 00 00 [ 848.261653][ C1] RSP: 0018:ffffc90000a16aa0 EFLAGS: 00000046 [ 848.261667][ C1] RAX: 0000000000000001 RBX: ffffffff92c5c538 RCX: 122f1c63e0019f00 [ 848.261681][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92f71588 [ 848.261693][ C1] RBP: ffffc90000a16ac0 R08: ffffffff92f7158f R09: 1ffffffff25ee2b1 [ 848.261707][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b2 R12: dffffc0000000000 [ 848.261721][ C1] R13: ffff888063e9a9f0 R14: d6bf87c490213bdc R15: ffffffff92f73418 [ 848.261735][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 848.261750][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.261762][ C1] CR2: 00007fffe0acacd8 CR3: 0000000069452000 CR4: 00000000003506f0 [ 848.261792][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 848.261802][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 848.261813][ C1] Call Trace: [ 848.261821][ C1] [ 848.261828][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 848.261848][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 848.261867][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 848.261886][ C1] ? __pfx_lock_release+0x10/0x10 [ 848.261911][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 848.261931][ C1] ? nmi_handle+0x14f/0x5a0 [ 848.261956][ C1] ? nmi_handle+0x2a/0x5a0 [ 848.261982][ C1] ? validate_chain+0x606/0x5900 [ 848.262002][ C1] ? debug_objects_fill_pool+0x43/0x9b0 [ 848.262026][ C1] ? default_do_nmi+0x63/0x160 [ 848.262046][ C1] ? exc_nmi+0x123/0x1f0 [ 848.262063][ C1] ? end_repeat_nmi+0xf/0x53 [ 848.262093][ C1] ? validate_chain+0x606/0x5900 [ 848.262115][ C1] ? validate_chain+0x606/0x5900 [ 848.262137][ C1] ? validate_chain+0x606/0x5900 [ 848.262159][ C1] [ 848.262164][ C1] [ 848.262171][ C1] __lock_acquire+0x1346/0x1fd0 [ 848.262198][ C1] lock_acquire+0x1ed/0x550 [ 848.262214][ C1] ? __hrtimer_run_queues+0x670/0xd50 [ 848.262239][ C1] ? advance_sched+0xa02/0xca0 [ 848.262266][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 848.262287][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 848.262311][ C1] ? taprio_set_budgets+0x32c/0x370 [ 848.262339][ C1] ? advance_sched+0xa02/0xca0 [ 848.262382][ C1] ? advance_sched+0xa02/0xca0 [ 848.262411][ C1] _raw_spin_lock_irq+0xd3/0x120 [ 848.262439][ C1] ? __hrtimer_run_queues+0x670/0xd50 [ 848.262464][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 848.262497][ C1] __hrtimer_run_queues+0x670/0xd50 [ 848.262523][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 848.262551][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 848.262587][ C1] hrtimer_interrupt+0x396/0x990 [ 848.262624][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 848.262653][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 848.262677][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 848.262715][ C1] RIP: 0010:console_flush_all+0xaad/0xfd0 [ 848.262740][ C1] Code: ff ff e8 b6 ce 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 a8 ce 1f 00 e8 93 de 06 0a 4d 85 f6 74 b6 e8 99 ce 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 [ 848.262754][ C1] RSP: 0018:ffffc90000a17120 EFLAGS: 00000246 [ 848.262768][ C1] RAX: 1ffff92000142e70 RBX: 0000000000000000 RCX: ffff888063e99e00 [ 848.262781][ C1] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 [ 848.262791][ C1] RBP: ffffc90000a172d0 R08: ffffffff817657c4 R09: 1ffffffff25ee2b0 [ 848.262804][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: ffffffff8eb0fa38 [ 848.262817][ C1] R13: ffffffff8eb0f9e0 R14: 0000000000000200 R15: dffffc0000000000 [ 848.262834][ C1] ? console_flush_all+0xa44/0xfd0 [ 848.262865][ C1] ? console_flush_all+0x152/0xfd0 [ 848.262891][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 848.262910][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 848.262943][ C1] console_unlock+0x13b/0x4d0 [ 848.262968][ C1] ? __pfx_console_unlock+0x10/0x10 [ 848.262992][ C1] ? vprintk_emit+0x300/0x770 [ 848.263016][ C1] ? vprintk_emit+0x571/0x770 [ 848.263039][ C1] ? vprintk_emit+0x3cf/0x770 [ 848.263059][ C1] vprintk_emit+0x5a6/0x770 [ 848.263083][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 848.263105][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.263132][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 848.263164][ C1] _printk+0xd5/0x120 [ 848.263188][ C1] ? audit_log_start+0x8a3/0xa30 [ 848.263214][ C1] ? __pfx__printk+0x10/0x10 [ 848.263238][ C1] ? __wake_up_common_lock+0x18c/0x1e0 [ 848.263259][ C1] audit_log_start+0x8da/0xa30 [ 848.263288][ C1] ? __pfx_audit_log_start+0x10/0x10 [ 848.263321][ C1] ? __pfx_smack_log_callback+0x10/0x10 [ 848.263346][ C1] common_lsm_audit+0xdd/0x1b30 [ 848.263368][ C1] ? __pfx_lock_release+0x10/0x10 [ 848.263386][ C1] ? __pfx_common_lsm_audit+0x10/0x10 [ 848.263412][ C1] ? netlbl_unlabel_getattr+0x2c/0x700 [ 848.263441][ C1] smack_log+0x421/0x540 [ 848.263465][ C1] ? __pfx_smack_log+0x10/0x10 [ 848.263487][ C1] ? __pfx_smack_from_netlbl+0x10/0x10 [ 848.263512][ C1] smk_access+0x4a4/0x4e0 [ 848.263537][ C1] smack_socket_sock_rcv_skb+0x6d6/0x13a0 [ 848.263558][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 848.263584][ C1] ? __pfx_smack_socket_sock_rcv_skb+0x10/0x10 [ 848.263610][ C1] ? __pfx_validate_chain+0x10/0x10 [ 848.263632][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 848.263660][ C1] ? sock_def_readable+0xd7/0x5b0 [ 848.263686][ C1] ? tcp_do_parse_auth_options+0x29b/0x330 [ 848.263722][ C1] security_sock_rcv_skb+0x6d/0xa0 [ 848.263748][ C1] sk_filter_trim_cap+0x184/0xa80 [ 848.263771][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 848.263795][ C1] tcp_v4_rcv+0x2756/0x37b0 [ 848.263840][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 848.263865][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 848.263888][ C1] ip_protocol_deliver_rcu+0x225/0x430 [ 848.263913][ C1] ? ip_local_deliver_finish+0x22e/0x5f0 [ 848.263935][ C1] ip_local_deliver_finish+0x33f/0x5f0 [ 848.263960][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 848.263983][ C1] NF_HOOK+0x3a4/0x450 [ 848.264006][ C1] ? NF_HOOK+0x9a/0x450 [ 848.264027][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 848.264049][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 848.264078][ C1] ip_sublist_rcv_finish+0x3be/0x4f0 [ 848.264105][ C1] ip_sublist_rcv+0x75d/0xab0 [ 848.264127][ C1] ? __pfx_packet_rcv+0x10/0x10 [ 848.264155][ C1] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 848.264178][ C1] ? skb_orphan+0xae/0xd0 [ 848.264201][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 848.264228][ C1] ip_list_rcv+0x42b/0x480 [ 848.264254][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 848.264279][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 848.264302][ C1] __netif_receive_skb_list_core+0x95a/0x980 [ 848.264331][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 848.264359][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 848.264384][ C1] ? timekeeping_get_ns+0x2c0/0x420 [ 848.264414][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 848.264438][ C1] netif_receive_skb_list_internal+0xa51/0xe30 [ 848.264465][ C1] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 848.264490][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 848.264514][ C1] ? dev_gro_receive+0x108f/0x24b0 [ 848.264544][ C1] napi_gro_receive+0x5aa/0xc90 [ 848.264573][ C1] receive_buf+0x1d03/0x3820 [ 848.264601][ C1] ? __pfx_receive_buf+0x10/0x10 [ 848.264618][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 848.264648][ C1] virtnet_poll+0x7f8/0x18c0 [ 848.264675][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 848.264693][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 848.264713][ C1] ? __pfx_lock_release+0x10/0x10 [ 848.264732][ C1] ? mark_lock+0x9a/0x350 [ 848.264754][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.264773][ C1] __napi_poll+0xcb/0x490 [ 848.264798][ C1] net_rx_action+0x7bb/0x10a0 [ 848.264821][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 848.264838][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.264863][ C1] handle_softirqs+0x2c4/0x970 [ 848.264881][ C1] ? do_softirq+0x11b/0x1e0 [ 848.264898][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 848.264918][ C1] do_softirq+0x11b/0x1e0 [ 848.264933][ C1] [ 848.264938][ C1] [ 848.264943][ C1] ? __pfx_do_softirq+0x10/0x10 [ 848.264959][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 848.264975][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 848.264992][ C1] ? rcu_is_watching+0x15/0xb0 [ 848.265010][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 848.265027][ C1] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 848.265043][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 848.265060][ C1] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 848.265098][ C1] wg_packet_encrypt_worker+0x2e8/0x1610 [ 848.265126][ C1] ? rcu_is_watching+0x15/0xb0 [ 848.265145][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 848.265162][ C1] ? trace_pelt_se_tp+0x3d/0x140 [ 848.265186][ C1] ? __update_load_avg_se+0x6a0/0xaf0 [ 848.265216][ C1] ? look_up_lock_class+0x77/0x160 [ 848.265241][ C1] ? register_lock_class+0x102/0x980 [ 848.265258][ C1] ? try_to_wake_up+0x8fb/0x1470 [ 848.265279][ C1] ? __pfx_lock_release+0x10/0x10 [ 848.265297][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 848.265317][ C1] ? mark_lock+0x9a/0x350 [ 848.265339][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 848.265371][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 848.265390][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.265410][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 848.265434][ C1] ? process_scheduled_works+0x945/0x1830 [ 848.265451][ C1] process_scheduled_works+0xa2c/0x1830 [ 848.265482][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.265504][ C1] ? assign_work+0x364/0x3d0 [ 848.265523][ C1] worker_thread+0x86d/0xd50 [ 848.265545][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 848.265582][ C1] ? __kthread_parkme+0x169/0x1d0 [ 848.265603][ C1] ? __pfx_worker_thread+0x10/0x10 [ 848.265621][ C1] kthread+0x2f0/0x390 [ 848.265642][ C1] ? __pfx_worker_thread+0x10/0x10 [ 848.265659][ C1] ? __pfx_kthread+0x10/0x10 [ 848.265681][ C1] ret_from_fork+0x4b/0x80 [ 848.265703][ C1] ? __pfx_kthread+0x10/0x10 [ 848.265724][ C1] ret_from_fork_asm+0x1a/0x30 [ 848.265756][ C1] [ 848.266539][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 848.266553][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 848.266575][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 848.266592][ T30] Call Trace: [ 848.266602][ T30] [ 848.266611][ T30] dump_stack_lvl+0x241/0x360 [ 848.266667][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.266703][ T30] ? __pfx__printk+0x10/0x10 [ 848.266732][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 848.266766][ T30] ? vscnprintf+0x5d/0x90 [ 848.266793][ T30] panic+0x349/0x860 [ 848.266826][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 848.266855][ T30] ? __pfx_panic+0x10/0x10 [ 848.266883][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 848.266917][ T30] ? __irq_work_queue_local+0x137/0x410 [ 848.266944][ T30] ? irq_work_queue+0xca/0x150 [ 848.266967][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.266995][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.267023][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 848.267050][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 848.267080][ T30] watchdog+0x101d/0x1020 [ 848.267108][ T30] ? watchdog+0x1ea/0x1020 [ 848.267141][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.267166][ T30] kthread+0x2f0/0x390 [ 848.267194][ T30] ? __pfx_watchdog+0x10/0x10 [ 848.267219][ T30] ? __pfx_kthread+0x10/0x10 [ 848.267248][ T30] ret_from_fork+0x4b/0x80 [ 848.267277][ T30] ? __pfx_kthread+0x10/0x10 [ 848.267305][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.267359][ T30] [ 849.415277][ T30] Shutting down cpus with NMI [ 849.415606][ T30] Kernel Offset: disabled