last executing test programs: 7m1.715066053s ago: executing program 32 (id=18699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000140005000c000100000008001300ffff000005000b00010000000800090057240b2b080002000101000008000e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 5m20.978773807s ago: executing program 0 (id=20351): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x54000002, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 5m20.882214996s ago: executing program 0 (id=20353): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xe4c, 0x2000, 0x1df, 0x9, 0x3, "bfdd16c70a883f27"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) 5m20.754554484s ago: executing program 0 (id=20354): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x2, 0xffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000880)={0x20, r1, 0x0, 0x0, 0x0}) 5m20.610161805s ago: executing program 0 (id=20359): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m20.478756627s ago: executing program 0 (id=20363): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0xeb3}}, 0x10) 5m20.241419173s ago: executing program 0 (id=20367): r0 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xb6*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\&A\xe7$\xcd\xce\xd1\xd7\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%=I\xf4\x85\x95\x8a\xa6\x93^\xe4\xb8zL\xe0\x1d\x1aV\xa5H\xee\xc1}\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw$\x97\x81.\x02\x04m\xfbT2\a\x00\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc3\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\f\xf7#\xbb\xf4\xbf\xe9\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\x00\x00LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x9c\xcc\xba\ty\xcc.\x93\xaf\xe3>\x19\xa9\xac\xf8$\xf2l\x7f\xdaJp{\x15\xc4\x11OL\x83:t\xd6\x92\x18F\xc1\x00\x00\x00\x00', 0x3) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 5m20.012800614s ago: executing program 33 (id=20367): r0 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xb6*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\&A\xe7$\xcd\xce\xd1\xd7\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%=I\xf4\x85\x95\x8a\xa6\x93^\xe4\xb8zL\xe0\x1d\x1aV\xa5H\xee\xc1}\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw$\x97\x81.\x02\x04m\xfbT2\a\x00\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc3\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\f\xf7#\xbb\xf4\xbf\xe9\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\x00\x00LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x9c\xcc\xba\ty\xcc.\x93\xaf\xe3>\x19\xa9\xac\xf8$\xf2l\x7f\xdaJp{\x15\xc4\x11OL\x83:t\xd6\x92\x18F\xc1\x00\x00\x00\x00', 0x3) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 3m45.980727923s ago: executing program 5 (id=21859): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="5b09ec56", 0x4}], 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 3m45.843762767s ago: executing program 5 (id=21863): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x8000001, 0x12) 3m45.690442529s ago: executing program 5 (id=21867): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)='W', 0x1}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 3m44.692063523s ago: executing program 5 (id=21884): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3m43.67901251s ago: executing program 5 (id=21898): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000040)='./bus\x00') 3m43.541124228s ago: executing program 5 (id=21900): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) 3m27.418971279s ago: executing program 34 (id=21900): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) 1m52.235457022s ago: executing program 1 (id=23613): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}}, 0x0) 1m52.037859737s ago: executing program 1 (id=23614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0xfffffffa}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 1m51.025541343s ago: executing program 1 (id=23629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "acfa"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m50.798908919s ago: executing program 1 (id=23634): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m50.632606245s ago: executing program 1 (id=23637): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 1m50.167954103s ago: executing program 1 (id=23642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="491863cfab233e1ab76911be620742513af7d45a07444dcf5fc0e59582a4278b4afea9cd7f8ee90fb43c06333d2b6592dd4b0b29a2b6ee71", 0x38}], 0x1, 0x0, 0x0, 0xc010}], 0x1, 0x1) 1m49.78666847s ago: executing program 35 (id=23642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="491863cfab233e1ab76911be620742513af7d45a07444dcf5fc0e59582a4278b4afea9cd7f8ee90fb43c06333d2b6592dd4b0b29a2b6ee71", 0x38}], 0x1, 0x0, 0x0, 0xc010}], 0x1, 0x1) 1m13.980331716s ago: executing program 8 (id=24094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 1m13.808928657s ago: executing program 8 (id=24097): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x11) fcntl$notify(r0, 0x402, 0x0) 1m13.591993941s ago: executing program 8 (id=24100): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=@can_newroute={0x24, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x24005040) 1m13.43281436s ago: executing program 8 (id=24105): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 1m13.267186579s ago: executing program 8 (id=24107): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m12.691992712s ago: executing program 8 (id=24113): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0xfffffd85) 1m12.20636435s ago: executing program 36 (id=24113): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0xfffffd85) 51.805109552s ago: executing program 6 (id=24402): setregid(0xee00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) 51.621192576s ago: executing program 6 (id=24404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x6, 0x0, 0x8, 0xad, 0x3ff}, 0x9c) 51.387996305s ago: executing program 6 (id=24408): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 51.140950482s ago: executing program 6 (id=24410): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) 50.921695658s ago: executing program 6 (id=24412): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x0, 0x1}, 0xff}, 0x18) 50.199467411s ago: executing program 6 (id=24423): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x30, r0, 0x1, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d5}, 0x0) 49.806553637s ago: executing program 37 (id=24423): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x30, r0, 0x1, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d5}, 0x0) 2.542724377s ago: executing program 3 (id=25082): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) 2.284827425s ago: executing program 3 (id=25087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) lseek(r1, 0x10004, 0x4) 2.265597268s ago: executing program 4 (id=25089): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) close(0x3) 2.252816136s ago: executing program 2 (id=25090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r1, 0x435, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20) 2.137037088s ago: executing program 2 (id=25092): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) 2.097391019s ago: executing program 7 (id=25093): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff00600300000000", 0x16, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.086590549s ago: executing program 3 (id=25094): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xa00}, &(0x7f0000000180)=0x8) 2.037012068s ago: executing program 4 (id=25095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="99a1b29f890c", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4}}}}}}, 0x0) 1.94394328s ago: executing program 7 (id=25097): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 1.907936044s ago: executing program 2 (id=25098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000008c"]) 1.819891535s ago: executing program 3 (id=25100): syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c6e}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000280)=0x19) 1.78883561s ago: executing program 4 (id=25101): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.664528683s ago: executing program 2 (id=25103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfdef) 1.502071835s ago: executing program 2 (id=25106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r0, 0x0, 0x100000}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0) close(r1) 1.433557033s ago: executing program 2 (id=25107): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f", @ANYBLOB="f3"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x531) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.130292893s ago: executing program 3 (id=25112): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9003", 0x0, 0x3a, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], "5467e8296fe849e5"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "caa7c1b7f4c336af"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 1.087425355s ago: executing program 9 (id=25113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="00000a00bbbbbbbbbbbbaaaaaaaaaabb8100470008004519001400650000012f"], 0x2a) 1.000006805s ago: executing program 3 (id=25114): syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 940.389743ms ago: executing program 7 (id=25115): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x9}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000540)=0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) 816.029347ms ago: executing program 9 (id=25116): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x92) r1 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x1b87, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x20000, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 710.286371ms ago: executing program 7 (id=25117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 669.937653ms ago: executing program 4 (id=25118): r0 = syz_io_uring_setup(0x110, &(0x7f0000001240)={0x0, 0xfad6, 0x0, 0xfffffffa, 0xfffffffc}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00'}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x21, {0x106, 0x6c4}, 0xf0}, 0x1) 523.936822ms ago: executing program 9 (id=25119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='H\x00', 0x2}], 0x1) 487.995534ms ago: executing program 4 (id=25120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x8914}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4854e4aa40c14a76, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @multicast, @empty}}, 0x20) 330.344895ms ago: executing program 9 (id=25121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="0600fd00450000000a0034"], 0x58}, 0x1, 0x0, 0x0, 0x20000985}, 0xe010) 263.612707ms ago: executing program 7 (id=25122): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 153.781393ms ago: executing program 9 (id=25123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 150.700522ms ago: executing program 4 (id=25124): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 86.636007ms ago: executing program 7 (id=25125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7839, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x0) 0s ago: executing program 9 (id=25126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x100) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): g up backlog [ 1332.686235][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.902809][T16454] usb 7-1: language id specifier not provided by device, defaulting to English [ 1333.104983][T16454] uclogic 0003:256C:006D.0095: failed retrieving Huion firmware version: -71 [ 1333.115476][T16454] uclogic 0003:256C:006D.0095: failed probing parameters: -71 [ 1333.135248][T16454] uclogic 0003:256C:006D.0095: probe with driver uclogic failed with error -71 [ 1333.162065][T16454] usb 7-1: USB disconnect, device number 7 [ 1333.541884][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.566435][T22768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22803'. [ 1334.050878][T22789] netlink: 156 bytes leftover after parsing attributes in process `syz.3.22811'. [ 1334.652027][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.936068][T16464] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 1334.964615][T22824] bridge0: port 4(batadv0) entered blocking state [ 1334.965348][T16464] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1334.985647][T22824] bridge0: port 4(batadv0) entered disabled state [ 1334.992565][T22824] batadv0: entered allmulticast mode [ 1335.036980][T22824] batadv0: entered promiscuous mode [ 1335.521583][ T5114] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1335.531206][ T5114] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1335.592964][ T5116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.609570][ T5114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.763844][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.228877][T16455] kernel write not supported for file /amidi2 (pid: 16455 comm: kworker/0:7) [ 1336.343448][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22854'. [ 1336.877645][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.634783][ T30] kauditd_printk_skb: 9694 callbacks suppressed [ 1337.634799][ T30] audit: type=1400 audit(2000525323.583:2065520): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22927 comm="syz-executor" name="4791" dev="tmpfs" ino=24175 [ 1337.720314][T22930] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1337.725404][ T30] audit: type=1400 audit(2000525323.611:2065521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22927 comm="syz-executor" name="4791" dev="tmpfs" ino=24175 [ 1337.727357][T22932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1337.765503][T22930] audit: audit_lost=218258 audit_rate_limit=0 audit_backlog_limit=64 [ 1337.775177][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1337.782469][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1337.784674][T22934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1337.789031][ C1] audit: audit_lost=218259 audit_rate_limit=0 audit_backlog_limit=64 [ 1337.796156][T22930] audit: backlog limit exceeded [ 1337.987284][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.228552][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22884'. [ 1338.257449][T22948] bridge_slave_1: default FDB implementation only supports local addresses [ 1338.842922][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.024344][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.091698][T22991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.100623][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.174815][T23032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22922'. [ 1340.210856][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.275029][T23036] netlink: 'syz.6.22924': attribute type 10 has an invalid length. [ 1340.290069][T23036] netlink: 40 bytes leftover after parsing attributes in process `syz.6.22924'. [ 1340.314828][T23036] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1340.328717][T23036] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.354284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.402929][T23036] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1341.062698][T23065] netlink: 312 bytes leftover after parsing attributes in process `syz.6.22937'. [ 1341.277266][T23074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22940'. [ 1341.323004][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.686752][T23091] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1341.755807][ T5116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.764018][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.776014][T23095] tipc: Started in network mode [ 1341.789304][T23095] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1341.820175][T23095] tipc: Enabled bearer , priority 0 [ 1342.184792][T23113] random: crng reseeded on system resumption [ 1342.434905][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.443128][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.795179][T23113] Restarting kernel threads ... done. [ 1342.995823][ T30] kauditd_printk_skb: 10999 callbacks suppressed [ 1342.995842][ T30] audit: type=1400 audit(2000525328.597:2075435): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5823 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.69 dest=53244 netif=eth0 [ 1343.005105][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1343.025528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.025826][T16455] tipc: Node number set to 11578026 [ 1343.029238][ T5824] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1343.033208][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1343.054300][ T5824] audit: audit_lost=218627 audit_rate_limit=0 audit_backlog_limit=64 [ 1343.056710][ C1] audit: audit_lost=218628 audit_rate_limit=0 audit_backlog_limit=64 [ 1343.068314][ T5824] audit: backlog limit exceeded [ 1343.072810][ C1] audit: backlog limit exceeded [ 1343.073520][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1343.077909][ T30] audit: type=1400 audit(2000525328.597:2075436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1343.546270][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.888298][T18403] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1344.073132][T18403] usb 4-1: Using ep0 maxpacket: 32 [ 1344.087043][T18403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.117550][T18403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.161122][T18403] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1344.198138][T18403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.221063][T18403] usb 4-1: config 0 descriptor?? [ 1344.239473][T18403] hub 4-1:0.0: USB hub found [ 1344.332687][T23201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22994'. [ 1344.495545][T18403] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1344.611245][T23207] program syz.6.22997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.658378][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.731853][T18403] usbhid 4-1:0.0: can't add hid device: -71 [ 1344.750814][T18403] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1344.808344][T18403] usb 4-1: USB disconnect, device number 3 [ 1345.002431][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.171422][T16464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.415942][T23238] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.445390][T23238] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.480515][T23238] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.523731][T23238] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.537130][T23238] geneve4: entered promiscuous mode [ 1345.548040][T23238] geneve4: entered allmulticast mode [ 1345.555473][T23238] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.564413][T23238] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.575352][T23238] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.584557][T23238] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.586024][T23246] trusted_key: encrypted_key: keyword 'upcate' not recognized [ 1345.645574][T23244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23014'. [ 1345.660432][T23244] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 1345.867534][T18403] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1346.045082][T18403] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1346.069230][T18403] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1346.101310][T18403] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.133328][T18403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.161927][T23248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1346.191195][T18403] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.434495][T16454] usb 4-1: USB disconnect, device number 4 [ 1346.876181][T23296] input: syz0 as /devices/virtual/input/input197 [ 1346.883644][T16457] net_ratelimit: 4 callbacks suppressed [ 1346.883660][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.963878][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23039'. [ 1346.982730][T23298] bridge: RTM_NEWNEIGH with unconfigured vlan 16 on bridge0 [ 1347.323842][T23311] macsec2: entered promiscuous mode [ 1347.346742][T23311] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 1347.372673][T23311] macsec2: entered allmulticast mode [ 1347.400832][T23311] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 1347.919812][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.938291][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.993604][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.364254][ T30] kauditd_printk_skb: 10926 callbacks suppressed [ 1348.364272][ T30] audit: type=1400 audit(2000525333.610:2085316): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23355 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1348.396648][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1348.403556][T23355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1348.410223][T23355] audit: audit_lost=218982 audit_rate_limit=0 audit_backlog_limit=64 [ 1348.418351][ T5823] audit: audit_lost=218983 audit_rate_limit=0 audit_backlog_limit=64 [ 1348.421346][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1348.434575][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1348.441139][ C1] audit: audit_lost=218984 audit_rate_limit=0 audit_backlog_limit=64 [ 1348.449282][ C1] audit: backlog limit exceeded [ 1348.454867][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1349.109391][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.195085][T23385] netlink: 72 bytes leftover after parsing attributes in process `syz.3.23080'. [ 1349.509275][T23389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.23082'. [ 1349.735584][T23400] nr0: tun_chr_ioctl cmd 1074025676 [ 1349.742432][T23400] nr0: owner set to 774 [ 1350.217398][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.536910][T23434] 9pnet_fd: Insufficient options for proto=fd [ 1350.730529][T27142] Bluetooth: hci3: command 0x0405 tx timeout [ 1350.736824][T23445] xt_hashlimit: max too large, truncated to 1048576 [ 1350.753093][T23445] Cannot find set identified by id 0 to match [ 1350.965454][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23110'. [ 1351.168851][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.337452][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.241840][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23124'. [ 1352.441575][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.385444][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.397871][ T5116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.430201][T23537] ip6tnl1: entered promiscuous mode [ 1353.444986][T23537] ip6tnl1: entered allmulticast mode [ 1353.552545][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.713999][ T30] kauditd_printk_skb: 10359 callbacks suppressed [ 1353.714017][ T30] audit: type=1400 audit(2000525338.615:2094662): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23548 comm="syz-executor" name="4855" dev="tmpfs" ino=24497 [ 1353.760023][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1353.784173][T23552] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1353.789942][T17409] audit: audit_lost=219323 audit_rate_limit=0 audit_backlog_limit=64 [ 1353.798564][ T30] audit: type=1400 audit(2000525338.624:2094663): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=23548 comm="syz-executor" opid=23548 ocomm="syz-executor" [ 1353.816171][T17409] audit: backlog limit exceeded [ 1353.818888][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1353.829248][ C1] audit: audit_lost=219324 audit_rate_limit=0 audit_backlog_limit=64 [ 1353.836657][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1353.837453][ C1] audit: backlog limit exceeded [ 1354.076430][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.665165][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.017164][T23590] sctp: [Deprecated]: syz.1.23171 (pid 23590) Use of int in max_burst socket option. [ 1355.017164][T23590] Use struct sctp_assoc_value instead [ 1355.101150][T23597] netlink: 'syz.6.23174': attribute type 12 has an invalid length. [ 1355.261204][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23178'. [ 1355.776615][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.118787][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.290671][T27142] Bluetooth: hci3: command 0x0405 tx timeout [ 1356.446579][T23663] netlink: 136 bytes leftover after parsing attributes in process `syz.7.23204'. [ 1356.632176][T18403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.888293][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.134437][T23697] netlink: 44 bytes leftover after parsing attributes in process `syz.6.23220'. [ 1357.891506][T23720] xt_recent: Unsupported userspace flags (000000de) [ 1357.999948][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.172621][T16455] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1358.342194][T16455] usb 7-1: device descriptor read/64, error -71 [ 1358.609083][T16455] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1358.801662][T16455] usb 7-1: device descriptor read/64, error -71 [ 1358.812657][T23751] netlink: 'syz.7.23246': attribute type 3 has an invalid length. [ 1358.837828][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23246'. [ 1358.855409][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.939763][T16455] usb usb7-port1: attempt power cycle [ 1359.071217][ T30] kauditd_printk_skb: 10534 callbacks suppressed [ 1359.071236][ T30] audit: type=1400 audit(2000525343.638:2104320): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23757 comm="syz-executor" name="4650" dev="tmpfs" ino=23425 [ 1359.091438][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1359.107448][T23757] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1359.111653][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.127340][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1359.133944][ C1] audit: audit_lost=219620 audit_rate_limit=0 audit_backlog_limit=64 [ 1359.136128][ T30] audit: type=1400 audit(2000525343.638:2104321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23757 comm="syz-executor" name="4650" dev="tmpfs" ino=23425 [ 1359.142007][ C1] audit: backlog limit exceeded [ 1359.167504][T23757] audit: audit_lost=219621 audit_rate_limit=0 audit_backlog_limit=64 [ 1359.186559][ T5823] audit: audit_lost=219622 audit_rate_limit=0 audit_backlog_limit=64 [ 1359.195051][T23757] audit: backlog limit exceeded [ 1359.326058][T16455] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1359.368699][T16455] usb 7-1: device descriptor read/8, error -71 [ 1359.541263][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.625297][T16455] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1359.657782][T16455] usb 7-1: device descriptor read/8, error -71 [ 1359.775188][T16455] usb usb7-port1: unable to enumerate USB device [ 1360.227213][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.236635][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.342359][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.612633][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.781191][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23289'. [ 1362.113215][T16455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.277337][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.445415][T23874] input: syz1 as /devices/virtual/input/input198 [ 1363.559224][T16457] net_ratelimit: 1 callbacks suppressed [ 1363.559243][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.806723][T23921] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.23325'. [ 1364.425298][ T30] kauditd_printk_skb: 10136 callbacks suppressed [ 1364.425318][ T30] audit: type=1400 audit(2000525348.633:2113181): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23946 comm="syz-executor" name="674" dev="tmpfs" ino=3469 [ 1364.435130][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1364.463377][ T30] audit: type=1400 audit(2000525348.633:2113182): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=23946 comm="syz-executor" opid=23946 ocomm="syz-executor" [ 1364.478543][ T5820] audit: audit_lost=220051 audit_rate_limit=0 audit_backlog_limit=64 [ 1364.497858][T23949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1364.504628][ T30] audit: type=1400 audit(2000525348.633:2113183): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23947 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1364.504668][ T30] audit: type=1400 audit(2000525348.633:2113184): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23947 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1364.504700][ T30] audit: type=1400 audit(2000525348.633:2113185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23947 comm="syz-executor" name="4815" dev="tmpfs" ino=24301 [ 1364.504729][ T30] audit: type=1400 audit(2000525348.633:2113186): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=23947 comm="syz-executor" opid=23947 ocomm="syz-executor" [ 1364.504758][ T30] audit: type=1400 audit(2000525348.633:2113187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23946 comm="syz-executor" name="674" dev="tmpfs" ino=3469 [ 1364.671027][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.702621][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.825310][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23340'. [ 1364.990249][T23965] random: crng reseeded on system resumption [ 1365.017138][ T5087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.026048][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.408875][T23979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23351'. [ 1365.417997][T23979] netlink: 39 bytes leftover after parsing attributes in process `syz.3.23351'. [ 1365.791984][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.822481][T23993] netlink: 1344 bytes leftover after parsing attributes in process `syz.7.23357'. [ 1366.243011][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23364'. [ 1366.894596][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.300050][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23376'. [ 1367.321128][T24041] netlink: 'syz.1.23378': attribute type 1 has an invalid length. [ 1367.343734][T24041] netlink: 134708 bytes leftover after parsing attributes in process `syz.1.23378'. [ 1367.343896][T24036] netlink: 152 bytes leftover after parsing attributes in process `syz.7.23376'. [ 1367.673884][ T5114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.942058][T18403] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1368.006356][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.091915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.120463][T24070] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1368.121597][T18403] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1368.135602][T24070] overlayfs: conflicting options: metacopy=off,verity=require [ 1368.164519][T18403] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1368.188165][T18403] usb 7-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1368.208146][T18403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.235078][T18403] usb 7-1: config 0 descriptor?? [ 1368.240997][T24058] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1368.736981][T18403] hid (null): unknown global tag 0x13 [ 1368.752384][T18403] hid (null): bogus close delimiter [ 1368.774867][T18403] uclogic 0003:28BD:0078.0097: interface is invalid, ignoring [ 1368.992705][T18403] usb 7-1: USB disconnect, device number 12 [ 1369.118106][T16457] net_ratelimit: 3 callbacks suppressed [ 1369.118125][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.132111][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.782172][ T30] kauditd_printk_skb: 7189 callbacks suppressed [ 1369.782190][ T30] audit: type=1400 audit(2000525353.656:2120140): lsm=SMACK fn=smack_file_lock action=granted subject="_" object="_" requested=l pid=24098 comm="syz.1.23406" path="/4839/file1" dev="tmpfs" ino=24429 [ 1369.805614][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1369.808736][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1369.821254][ C1] audit: audit_lost=220134 audit_rate_limit=0 audit_backlog_limit=64 [ 1369.829398][ C1] audit: backlog limit exceeded [ 1369.835087][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1369.841647][ C1] audit: audit_lost=220135 audit_rate_limit=0 audit_backlog_limit=64 [ 1369.849792][ C1] audit: backlog limit exceeded [ 1369.850455][ T5820] audit: audit_lost=220136 audit_rate_limit=0 audit_backlog_limit=64 [ 1369.854765][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1370.155532][T18403] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1370.230191][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.249220][ T5114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.326153][T18403] usb 7-1: Using ep0 maxpacket: 16 [ 1370.335355][T18403] usb 7-1: config index 0 descriptor too short (expected 69, got 36) [ 1370.351663][T18403] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.374407][T18403] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1370.384167][T18403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.411166][T18403] usb 7-1: Product: syz [ 1370.416866][T18403] usb 7-1: Manufacturer: syz [ 1370.422441][T18403] usb 7-1: SerialNumber: syz [ 1370.429802][T18403] usb 7-1: config 0 descriptor?? [ 1370.438649][T18403] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1370.491058][ T5116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.129079][T24159] netlink: 'syz.4.23431': attribute type 4 has an invalid length. [ 1371.164638][T24159] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.23431'. [ 1371.192441][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.313191][T18403] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1371.340131][T18403] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1371.350983][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.366238][T18403] usb 7-1: USB disconnect, device number 13 [ 1371.403273][T24170] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1371.982439][T24188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input199 [ 1372.458998][T16457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.997583][T16457] kernel write not supported for file /snd/seq (pid: 16457 comm: kworker/1:3) [ 1373.119479][T24235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.148950][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.425514][T24251] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1373.768081][T24259] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23474'. [ 1374.677364][T16454] net_ratelimit: 2 callbacks suppressed [ 1374.677382][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.870154][T18403] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1375.040732][T18403] usb 4-1: Using ep0 maxpacket: 16 [ 1375.063657][T18403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.079939][T18403] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1375.100118][T18403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.117586][T18403] usb 4-1: config 0 descriptor?? [ 1375.143866][ T30] kauditd_printk_skb: 9682 callbacks suppressed [ 1375.143886][ T30] audit: type=1400 audit(2000525358.651:2128311): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.180663][ T30] audit: type=1400 audit(2000525358.651:2128312): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.209933][ T30] audit: type=1400 audit(2000525358.651:2128313): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.283698][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.315989][ T30] audit: type=1400 audit(2000525358.651:2128314): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.356422][ T30] audit: type=1400 audit(2000525358.698:2128315): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21301 comm="kworker/u8:0" saddr=10.128.0.169 src=30008 daddr=10.128.0.69 dest=53244 netif=eth0 [ 1375.387744][ T30] audit: type=1400 audit(2000525358.866:2128316): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.416018][ T30] audit: type=1400 audit(2000525358.866:2128317): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.443111][ T30] audit: type=1400 audit(2000525358.866:2128318): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=24284 comm="syz.3.23487" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1375.469272][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1375.475825][ C1] audit: audit_lost=220641 audit_rate_limit=0 audit_backlog_limit=64 [ 1375.595638][T18403] mcp2221 0003:04D8:00DD.0098: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1375.626932][T11052] Bluetooth: hci0: command tx timeout [ 1375.789529][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.825336][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.047166][T18403] usb 4-1: USB disconnect, device number 5 [ 1376.644662][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.653301][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.902082][T16454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.148140][T24354] tap0: tun_chr_ioctl cmd 2148553947 [ 1377.272530][T24361] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1377.281991][T24361] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1377.292807][T24361] veth0_to_bridge: entered allmulticast mode [ 1377.300751][T24361] veth0_to_bridge: entered promiscuous mode [ 1377.307762][T24360] netlink: 16 bytes leftover after parsing attributes in process `syz.6.23520'. [ 1378.034134][T16454] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1378.136744][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23538'. [ 1378.204958][T16454] usb 4-1: Using ep0 maxpacket: 16 [ 1378.230564][T16454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.264380][T16454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1378.293364][T16454] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1378.316142][T16454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.337166][T16454] usb 4-1: Product: syz [ 1378.346894][T16454] usb 4-1: Manufacturer: syz [ 1378.351761][T16454] usb 4-1: SerialNumber: syz [ 1378.463769][T24411] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.23544'. [ 1378.825105][T16454] usb 4-1: cannot find UAC_HEADER [ 1378.873606][T16454] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1378.910715][T16454] usb 4-1: USB disconnect, device number 6 [ 1380.509282][ T30] kauditd_printk_skb: 7743 callbacks suppressed [ 1380.509300][ T30] audit: type=1400 audit(2000525363.684:2135102): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24450 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1380.539233][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1380.545820][T21229] audit: audit_lost=220964 audit_rate_limit=0 audit_backlog_limit=64 [ 1380.554643][T24450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1380.561093][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1380.567501][T24450] audit: audit_lost=220965 audit_rate_limit=0 audit_backlog_limit=64 [ 1380.567705][ C1] audit: audit_lost=220966 audit_rate_limit=0 audit_backlog_limit=64 [ 1380.577866][T21229] audit: backlog limit exceeded [ 1380.583771][ C1] audit: backlog limit exceeded [ 1380.584479][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1381.400530][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23578'. [ 1381.629664][T24492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23582'. [ 1381.820092][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23587'. [ 1381.831739][T24499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.23586'. [ 1383.593336][T16454] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1383.766776][T16454] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1383.780876][T16454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.823606][T16454] usb 7-1: config 0 descriptor?? [ 1383.841070][T16454] cp210x 7-1:0.0: cp210x converter detected [ 1384.299591][T16454] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1384.319075][T16454] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1384.511186][T24582] netlink: 'syz.7.23617': attribute type 1 has an invalid length. [ 1384.527723][T24582] netlink: 'syz.7.23617': attribute type 4 has an invalid length. [ 1384.535425][T18401] usb 7-1: USB disconnect, device number 14 [ 1384.536597][T24585] input input200: cannot allocate more than FF_MAX_EFFECTS effects [ 1384.545716][T18401] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1384.549786][T24582] netlink: 188 bytes leftover after parsing attributes in process `syz.7.23617'. [ 1384.578831][T24582] NCSI netlink: No device for ifindex 458760 [ 1384.627028][T18401] cp210x 7-1:0.0: device disconnected [ 1385.647685][T24627] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1385.731447][T18401] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1385.869028][ T30] kauditd_printk_skb: 9950 callbacks suppressed [ 1385.869046][ T30] audit: type=1400 audit(2000525368.697:2143981): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24630 comm="syz.6.23639" name="729" dev="tmpfs" ino=3747 [ 1385.897755][ T30] audit: type=1400 audit(2000525368.697:2143982): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24630 comm="syz.6.23639" name="729" dev="tmpfs" ino=3747 [ 1385.917788][ T30] audit: type=1400 audit(2000525368.697:2143983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=24630 comm="syz.6.23639" name="file0" dev="tmpfs" ino=3752 [ 1385.942599][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1385.946919][T24616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1385.962541][T24616] audit: audit_lost=221328 audit_rate_limit=0 audit_backlog_limit=64 [ 1385.963019][ T5823] audit: audit_lost=221329 audit_rate_limit=0 audit_backlog_limit=64 [ 1385.975566][T24616] audit: backlog limit exceeded [ 1385.991158][ T30] audit: type=1400 audit(2000525368.697:2143984): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=24630 comm="syz.6.23639" path="/729/file0" dev="tmpfs" ino=3752 [ 1385.993134][T24616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1386.023460][T18401] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1386.038513][T18401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.071839][T18401] usb 4-1: Product: syz [ 1386.116280][T18401] usb 4-1: Manufacturer: syz [ 1386.121134][T18401] usb 4-1: SerialNumber: syz [ 1386.136569][T18401] usb 4-1: config 0 descriptor?? [ 1386.633912][T18401] usb 4-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 1386.859082][T21301] batadv0: left allmulticast mode [ 1386.868248][T18401] usb 4-1: failed to fetch extended address, random address set [ 1386.878045][T21301] batadv0: left promiscuous mode [ 1386.885184][T21301] bridge0: port 4(batadv0) entered disabled state [ 1386.929409][T21301] team0: left allmulticast mode [ 1386.934391][T21301] C: left allmulticast mode [ 1386.953267][T21301] dummy0: left allmulticast mode [ 1386.982383][T21301] bridge0: port 3(team0) entered disabled state [ 1387.019292][T27142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1387.032272][T27142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1387.040349][T21301] bridge_slave_1: left allmulticast mode [ 1387.048229][T27142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1387.057019][T21301] bridge_slave_1: left promiscuous mode [ 1387.062730][T21301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.071974][T27142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1387.079833][T27142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1387.089488][T27142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1387.098855][T21301] bridge_slave_0: left promiscuous mode [ 1387.106020][T21301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.837452][T18400] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1388.015374][T18400] usb 7-1: Using ep0 maxpacket: 16 [ 1388.042208][T18400] usb 7-1: config 0 has no interfaces? [ 1388.050669][T18400] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1388.071085][T18400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.092502][T18400] usb 7-1: Product: syz [ 1388.096919][T18400] usb 7-1: Manufacturer: syz [ 1388.101561][T18400] usb 7-1: SerialNumber: syz [ 1388.128556][T18400] usb 7-1: config 0 descriptor?? [ 1388.367820][T16457] usb 7-1: USB disconnect, device number 15 [ 1389.018339][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23651'. [ 1389.088268][T21301] team0: Port device bridge4 removed [ 1389.137973][T21301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.148412][T21301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.168039][T21301] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1389.182864][T21301] bond0 (unregistering): Released all slaves [ 1389.203033][T21301] bond1 (unregistering): Released all slaves [ 1389.310515][T11052] Bluetooth: hci2: command tx timeout [ 1389.493843][T21301] bond2 (unregistering): Released all slaves [ 1389.707848][T24674] netlink: zone id is out of range [ 1389.716183][T24674] netlink: set zone limit has 8 unknown bytes [ 1389.848838][T21301] bond3 (unregistering): Released all slaves [ 1389.860627][T21301] bond4 (unregistering): Released all slaves [ 1389.871164][T21301] bond5 (unregistering): Released all slaves [ 1390.081332][T21301] bond6 (unregistering): Released all slaves [ 1390.123944][T18401] usb 4-1: USB disconnect, device number 7 [ 1390.257182][T21301] tipc: Disabling bearer [ 1390.269263][T21301] tipc: Left network mode [ 1390.582358][T18401] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1390.770428][T18401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.788816][T18401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.799184][T18401] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1390.817283][T24648] chnl_net:caif_netlink_parms(): no params data found [ 1390.833533][T18401] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1390.853174][T18401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.872682][T18401] usb 4-1: config 0 descriptor?? [ 1391.008090][T18401] usbhid 4-1:0.0: can't add hid device: -71 [ 1391.015599][T18401] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1391.031111][T24697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23665'. [ 1391.050682][T24697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23665'. [ 1391.068393][T18401] usb 4-1: USB disconnect, device number 8 [ 1391.092759][T24697] netlink: 'syz.6.23665': attribute type 4 has an invalid length. [ 1391.165513][T21301] hsr_slave_0: left promiscuous mode [ 1391.172746][T21301] hsr_slave_1: left promiscuous mode [ 1391.245913][ T30] kauditd_printk_skb: 3361 callbacks suppressed [ 1391.245930][ T30] audit: type=1400 audit(2000525373.730:2147067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1391.252105][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1391.253216][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1391.273036][ T30] audit: type=1400 audit(2000525373.730:2147068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1391.278025][ C1] audit: audit_lost=221423 audit_rate_limit=0 audit_backlog_limit=64 [ 1391.303973][ T30] audit: type=1400 audit(2000525373.730:2147069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1391.311938][ C1] audit: backlog limit exceeded [ 1391.314098][T24700] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1391.332045][ T5823] audit: audit_lost=221424 audit_rate_limit=0 audit_backlog_limit=64 [ 1391.350106][T24700] audit: audit_lost=221425 audit_rate_limit=0 audit_backlog_limit=64 [ 1391.525570][T11052] Bluetooth: hci2: command tx timeout [ 1392.634161][T21301] C (unregistering): left promiscuous mode [ 1392.645069][T21301] team0 (unregistering): Port device C removed [ 1392.658947][T24029] smc: removing ib device syz1 [ 1392.898358][T21301] bridge_slave_0 (unregistering): left allmulticast mode [ 1393.167603][T21301] dummy0 (unregistering): left promiscuous mode [ 1393.175553][T21301] team0 (unregistering): Port device dummy0 removed [ 1393.275304][T24648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.284550][T24648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.293548][T24648] bridge_slave_0: entered allmulticast mode [ 1393.301598][T24648] bridge_slave_0: entered promiscuous mode [ 1393.309418][T24648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.333386][T24648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.358319][T24648] bridge_slave_1: entered allmulticast mode [ 1393.379294][T24648] bridge_slave_1: entered promiscuous mode [ 1393.500649][T24648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.570726][T24648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.749602][T11052] Bluetooth: hci2: command tx timeout [ 1393.768292][T24648] team0: Port device team_slave_0 added [ 1393.817712][T24648] team0: Port device team_slave_1 added [ 1393.889677][T24648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.897284][T24648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.954040][T24648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.971387][T24648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.980317][T24648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.016127][T24648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.087150][T24648] hsr_slave_0: entered promiscuous mode [ 1394.105596][T24648] hsr_slave_1: entered promiscuous mode [ 1394.127841][T24648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1394.141909][T24648] Cannot create hsr debugfs directory [ 1394.546820][T24648] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1394.563978][T24648] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1394.594298][T24648] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1394.618042][T24648] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1394.782665][T24648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.822271][T24648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.845875][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.853086][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.911676][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.918865][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.975927][T24648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1395.006326][T24648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1395.544515][T24648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.975046][T11052] Bluetooth: hci2: command tx timeout [ 1396.321949][T24648] veth0_vlan: entered promiscuous mode [ 1396.339363][T24648] veth1_vlan: entered promiscuous mode [ 1396.380127][T24648] veth0_macvtap: entered promiscuous mode [ 1396.391837][T24648] veth1_macvtap: entered promiscuous mode [ 1396.429706][T24648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.440897][T24648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.452523][T24648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.463816][T24648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.479887][T24648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.495664][T24648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.510445][T24648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.521197][T24648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.532081][T24648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.543366][T24648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.551192][T24823] netlink: 830 bytes leftover after parsing attributes in process `syz.4.23715'. [ 1396.568319][T24648] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.588649][T24648] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.605485][ T30] kauditd_printk_skb: 7483 callbacks suppressed [ 1396.605503][ T30] audit: type=1400 audit(2000525378.743:2154055): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1396.619737][T24648] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.635897][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1396.646934][ T5823] audit: audit_lost=221592 audit_rate_limit=0 audit_backlog_limit=64 [ 1396.649310][T24648] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.655106][ T5823] audit: backlog limit exceeded [ 1396.669336][ T30] audit: type=1400 audit(2000525378.743:2154056): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1396.697728][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1396.708329][ T5823] audit: audit_lost=221593 audit_rate_limit=0 audit_backlog_limit=64 [ 1396.723343][ T30] audit: type=1400 audit(2000525378.743:2154057): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1396.757751][T24648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1396.778620][ T5823] audit: backlog limit exceeded [ 1396.849088][ T5103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.864167][ T5103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.953333][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.972606][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.447418][T24840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.991900][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23732'. [ 1398.004351][T24859] io-wq is not configured for unbound workers [ 1398.131963][T24867] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1398.151861][T24871] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 1398.172736][T24872] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 1398.186013][T24873] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 1398.421575][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23741'. [ 1398.446198][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23741'. [ 1399.065054][T24908] mkiss: ax0: crc mode is auto. [ 1399.391418][T24919] netlink: 16 bytes leftover after parsing attributes in process `syz.8.23757'. [ 1400.533547][T24959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1400.742234][T24969] sctp: [Deprecated]: syz.4.23779 (pid 24969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1400.742234][T24969] Use struct sctp_sack_info instead [ 1401.522352][T24995] tap0: tun_chr_ioctl cmd 1074025673 [ 1401.991312][ T30] kauditd_printk_skb: 10482 callbacks suppressed [ 1401.991329][ T30] audit: type=1400 audit(2000525383.776:2163659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25008 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1402.044008][ T30] audit: type=1400 audit(2000525383.776:2163660): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25008 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1402.048086][T25011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23798'. [ 1402.084834][ T30] audit: type=1400 audit(2000525383.776:2163661): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25008 comm="syz-executor" name="28" dev="tmpfs" ino=153 [ 1402.111690][T24648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1402.117203][ T30] audit: type=1400 audit(2000525383.776:2163662): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=25008 comm="syz-executor" opid=25008 ocomm="syz-executor" [ 1402.118256][T24648] audit: audit_lost=221894 audit_rate_limit=0 audit_backlog_limit=64 [ 1402.137147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1402.151507][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1402.158428][ C1] audit: audit_lost=221895 audit_rate_limit=0 audit_backlog_limit=64 [ 1402.162582][T25011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23798'. [ 1402.166563][ C1] audit: backlog limit exceeded [ 1402.181118][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1402.520823][T25017] syz_tun: entered allmulticast mode [ 1402.538291][T25016] syz_tun: left allmulticast mode [ 1404.230776][T25073] netlink: 80 bytes leftover after parsing attributes in process `syz.8.23825'. [ 1404.240145][T25073] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23825'. [ 1404.686983][T27142] Bluetooth: hci2: Unknown advertising packet type: 0x75 [ 1404.687079][T27142] Bluetooth: hci2: adv larger than maximum supported [ 1404.695886][T27142] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1404.967443][T25108] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1405.172400][T25114] IPv6: Can't replace route, no match found [ 1406.495289][T25165] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1407.343462][ T30] kauditd_printk_skb: 9154 callbacks suppressed [ 1407.343480][ T30] audit: type=1400 audit(2000525388.780:2171845): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25192 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1407.408589][ T30] audit: type=1400 audit(2000525388.780:2171846): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25192 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1407.413314][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1407.441521][ T30] audit: type=1400 audit(2000525388.780:2171847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25192 comm="syz-executor" name="307" dev="tmpfs" ino=1573 [ 1407.455083][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1407.468084][ C1] audit: audit_lost=222221 audit_rate_limit=0 audit_backlog_limit=64 [ 1407.474034][ T30] audit: type=1400 audit(2000525388.780:2171848): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=25192 comm="syz-executor" opid=25192 ocomm="syz-executor" [ 1407.476235][ C1] audit: backlog limit exceeded [ 1407.497806][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1407.501429][ T5820] audit: audit_lost=222222 audit_rate_limit=0 audit_backlog_limit=64 [ 1408.657130][T25215] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1410.338708][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23914'. [ 1410.371710][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23914'. [ 1410.397488][T25272] nbd: socks must be embedded in a SOCK_ITEM attr [ 1410.621555][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23919'. [ 1410.640433][T25281] netlink: 'syz.4.23919': attribute type 30 has an invalid length. [ 1410.672377][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23919'. [ 1411.303242][ T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1411.489200][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 1411.523008][ T47] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.553473][ T47] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1411.576592][ T47] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1411.603019][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.649137][ T47] usb 9-1: config 0 descriptor?? [ 1412.169788][ T47] steelseries 0003:1038:12B6.0099: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.8-1/input0 [ 1412.213051][T25326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23939'. [ 1412.570102][T16454] usb 9-1: USB disconnect, device number 2 [ 1412.666943][T25336] bpf: Bad value for 'uid' [ 1412.693254][ T30] kauditd_printk_skb: 7526 callbacks suppressed [ 1412.693272][ T30] audit: type=1400 audit(2000525393.794:2178620): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=21229 comm="syz-executor" name="319" dev="tmpfs" ino=1634 [ 1412.740610][T25337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.761572][T25337] audit: audit_lost=222494 audit_rate_limit=0 audit_backlog_limit=64 [ 1412.773301][ T30] audit: type=1400 audit(2000525393.822:2178621): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=25 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.69 dest=53244 netif=eth0 [ 1412.795817][T25337] audit: backlog limit exceeded [ 1412.795948][T25337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.795963][T25337] audit: audit_lost=222495 audit_rate_limit=0 audit_backlog_limit=64 [ 1412.795977][T25337] audit: backlog limit exceeded [ 1412.796123][T25337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.796136][T25337] audit: audit_lost=222496 audit_rate_limit=0 audit_backlog_limit=64 [ 1413.391379][T25363] pimreg: entered allmulticast mode [ 1413.408058][T25363] pimreg: left allmulticast mode [ 1414.820364][ T47] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1415.003519][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 1415.017536][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.035584][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.045774][ T47] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1415.054859][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.069671][ T47] usb 7-1: config 0 descriptor?? [ 1415.079953][ T47] hub 7-1:0.0: USB hub found [ 1415.294264][ T47] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1415.761488][ T47] hid-generic 0003:046D:C31C.009A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 1416.092849][ T9] usb 7-1: USB disconnect, device number 16 [ 1416.376667][T25456] netlink: 60 bytes leftover after parsing attributes in process `syz.7.24000'. [ 1416.755345][ T47] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1416.917691][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.949837][ T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.983354][ T47] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1417.012779][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.038508][ T47] usb 9-1: config 0 descriptor?? [ 1417.049329][T25482] tap0: tun_chr_ioctl cmd 1074025677 [ 1417.060620][T25482] tap0: linktype set to 825 [ 1417.119528][T25486] program syz.3.24016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1417.492714][ T47] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1417.512834][ T47] cp2112 0003:10C4:EA90.009B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1417.707650][ T47] cp2112 0003:10C4:EA90.009B: Part Number: 0x82 Device Version: 0xFE [ 1417.845988][T25505] hugetlbfs: syz.6.24024 (25505): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1417.928032][ T47] cp2112 0003:10C4:EA90.009B: error requesting SMBus config [ 1417.944002][ T47] cp2112 0003:10C4:EA90.009B: probe with driver cp2112 failed with error -71 [ 1417.973623][ T47] usb 9-1: USB disconnect, device number 3 [ 1418.067626][ T30] kauditd_printk_skb: 9942 callbacks suppressed [ 1418.067644][ T30] audit: type=1400 audit(2000525398.817:2187279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25514 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1418.119986][ T30] audit: type=1400 audit(2000525398.817:2187280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25514 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1418.141609][ T30] audit: type=1400 audit(2000525398.817:2187281): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25514 comm="syz-executor" name="813" dev="tmpfs" ino=4177 [ 1418.166944][T16450] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1418.174907][ T30] audit: type=1400 audit(2000525398.817:2187282): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=25514 comm="syz-executor" opid=25514 ocomm="syz-executor" [ 1418.199946][ T30] audit: type=1400 audit(2000525398.817:2187283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25514 comm="syz-executor" name="813" dev="tmpfs" ino=4177 [ 1418.231694][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1418.232656][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1418.243036][T17409] audit: audit_lost=222930 audit_rate_limit=0 audit_backlog_limit=64 [ 1418.244797][ C1] audit: audit_lost=222931 audit_rate_limit=0 audit_backlog_limit=64 [ 1418.253324][T25509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1418.349263][T16450] usb 4-1: Using ep0 maxpacket: 8 [ 1418.357521][T16450] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1418.384956][T16450] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1418.430827][T16450] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1418.460430][T16450] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1418.478993][T16450] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1418.530138][T16450] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1418.557777][T16450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.843778][T16450] usb 4-1: GET_CAPABILITIES returned 0 [ 1418.849445][T16450] usbtmc 4-1:16.0: can't read capabilities [ 1419.064213][ T47] usb 4-1: USB disconnect, device number 9 [ 1419.139914][T18400] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1419.310466][T18400] usb 9-1: Using ep0 maxpacket: 8 [ 1419.326336][T18400] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1419.348771][T18400] usb 9-1: config 179 has no interface number 0 [ 1419.357806][T18400] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1419.377589][T18400] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1419.394352][T18400] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1419.408911][T18400] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1419.422253][T18400] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1419.436427][T18400] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1419.445680][T18400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.458986][T25541] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1419.747874][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input203 [ 1419.764640][T25573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24055'. [ 1419.982693][ T47] usb 9-1: USB disconnect, device number 4 [ 1419.982693][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1419.982829][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1420.005647][ T47] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1420.129429][T25576] netlink: 'syz.7.24056': attribute type 21 has an invalid length. [ 1420.143904][T25576] netlink: 128 bytes leftover after parsing attributes in process `syz.7.24056'. [ 1420.153814][T25576] netlink: 'syz.7.24056': attribute type 4 has an invalid length. [ 1420.162549][T25576] netlink: 'syz.7.24056': attribute type 5 has an invalid length. [ 1420.187220][T25576] netlink: 3 bytes leftover after parsing attributes in process `syz.7.24056'. [ 1420.586233][T25591] loop6: detected capacity change from 0 to 8 [ 1420.608246][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.617527][ C0] buffer_io_error: 4 callbacks suppressed [ 1420.617545][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.636947][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.646221][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.657121][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.666356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.677539][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.686771][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.707851][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.717262][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.727203][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.736409][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.745821][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.755016][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.763767][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.772978][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.780900][T25591] ldm_validate_partition_table(): Disk read failed. [ 1420.816435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.825891][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.834908][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1420.844174][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1420.856369][T25591] Dev loop6: unable to read RDB block 0 [ 1420.871850][T25591] loop6: unable to read partition table [ 1420.877844][T25591] loop6: partition table beyond EOD, truncated [ 1420.884850][T25591] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1422.588191][T25663] Invalid/unusable pipe [ 1423.095876][T25681] QAT: Device 198 not found [ 1423.267843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.467281][ T30] kauditd_printk_skb: 9772 callbacks suppressed [ 1423.467298][ T30] audit: type=1400 audit(2000525403.868:2195846): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25690 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1423.528630][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1423.540475][ T30] audit: type=1400 audit(2000525403.896:2195847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25690 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1423.569472][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1423.576118][ C1] audit: audit_lost=223336 audit_rate_limit=0 audit_backlog_limit=64 [ 1423.584218][ C1] audit: backlog limit exceeded [ 1423.589761][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1423.596305][ C1] audit: audit_lost=223337 audit_rate_limit=0 audit_backlog_limit=64 [ 1423.604437][ C1] audit: backlog limit exceeded [ 1423.632361][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.890933][T11052] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1424.905492][T11052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1424.920009][T11052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1424.944468][T11052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1424.954513][T11052] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1424.962120][T11052] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1425.482495][T25721] chnl_net:caif_netlink_parms(): no params data found [ 1425.707610][T25721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.715829][T25721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.723266][T25721] bridge_slave_0: entered allmulticast mode [ 1425.730374][T25721] bridge_slave_0: entered promiscuous mode [ 1425.739157][T25753] netlink: 'syz.6.24139': attribute type 3 has an invalid length. [ 1425.765163][T25753] netlink: 72 bytes leftover after parsing attributes in process `syz.6.24139'. [ 1425.782634][T25721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.811263][T25721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.818498][T25721] bridge_slave_1: entered allmulticast mode [ 1425.827136][T25721] bridge_slave_1: entered promiscuous mode [ 1425.887053][T25755] netlink: 'syz.7.24140': attribute type 25 has an invalid length. [ 1425.898751][T25755] netlink: 20 bytes leftover after parsing attributes in process `syz.7.24140'. [ 1425.916442][T25721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.936761][T25721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.124724][T25721] team0: Port device team_slave_0 added [ 1426.150672][T25721] team0: Port device team_slave_1 added [ 1426.295289][T25721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.332658][T25721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.382228][T25721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.441747][T25721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.461629][T25721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.517069][T25721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.600509][T25721] hsr_slave_0: entered promiscuous mode [ 1426.628682][T25721] hsr_slave_1: entered promiscuous mode [ 1426.661896][T25721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.672041][T25721] Cannot create hsr debugfs directory [ 1426.775444][T25789] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 1426.819632][T25789] netdevsim netdevsim7: Falling back to sysfs fallback for: ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1427.012620][T25721] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1427.039066][T25721] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1427.058722][T25721] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1427.084165][T25721] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1427.190014][T11052] Bluetooth: hci2: command tx timeout [ 1427.283024][T25721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.318759][T25803] bond0: entered promiscuous mode [ 1427.323878][T25803] bond_slave_0: entered promiscuous mode [ 1427.337620][T25803] bond_slave_1: entered promiscuous mode [ 1427.356294][T25803] bond0: left promiscuous mode [ 1427.367589][T25803] bond_slave_0: left promiscuous mode [ 1427.389703][T25803] bond_slave_1: left promiscuous mode [ 1427.442329][T25721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.462937][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.470117][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.525118][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.532508][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.677639][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24165'. [ 1428.132500][T25721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.790467][T25721] veth0_vlan: entered promiscuous mode [ 1428.814594][ T30] kauditd_printk_skb: 10646 callbacks suppressed [ 1428.814612][ T30] audit: type=1400 audit(2000525408.863:2205031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25850 comm="syz-executor" name="4829" dev="tmpfs" ino=24333 [ 1428.851005][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1428.858186][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1428.861774][T17409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1428.864802][ C1] audit: audit_lost=223828 audit_rate_limit=0 audit_backlog_limit=64 [ 1428.864822][ C1] audit: backlog limit exceeded [ 1428.865320][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1428.876707][T25721] veth1_vlan: entered promiscuous mode [ 1428.879544][ C1] audit: audit_lost=223829 audit_rate_limit=0 audit_backlog_limit=64 [ 1428.897982][T17409] audit: audit_lost=223830 audit_rate_limit=0 audit_backlog_limit=64 [ 1428.904480][ C1] audit: backlog limit exceeded [ 1429.062003][T25721] veth0_macvtap: entered promiscuous mode [ 1429.089596][T25721] veth1_macvtap: entered promiscuous mode [ 1429.137667][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.194005][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.225807][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.270035][T25860] serio: Serial port ptm0 [ 1429.276394][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.297667][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.356481][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.381478][T25721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.395079][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.405863][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.416281][T27142] Bluetooth: hci2: command tx timeout [ 1429.422120][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.438036][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.448849][T25721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.459819][T25721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.471784][T25721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.482797][T25721] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.492090][T25721] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.501317][T25721] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.510500][T25721] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.704163][ T5150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.744624][ T5150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.828830][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.849878][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.579568][T25893] netlink: 72 bytes leftover after parsing attributes in process `syz.3.24196'. [ 1430.762727][T25900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.24199'. [ 1430.775950][T25900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.24199'. [ 1431.109024][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24205'. [ 1431.147130][T25914] openvswitch: netlink: VXLAN extension 0 has unexpected len 12 expected 0 [ 1431.552628][T27142] Bluetooth: hci5: command 0x1003 tx timeout [ 1431.559562][T11052] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1431.637331][T11052] Bluetooth: hci2: command tx timeout [ 1432.019580][T25942] xt_hashlimit: size too large, truncated to 1048576 [ 1433.556955][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24234'. [ 1433.861329][T11052] Bluetooth: hci2: command tx timeout [ 1434.106175][T16464] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1434.180963][ T30] kauditd_printk_skb: 7718 callbacks suppressed [ 1434.180981][ T30] audit: type=1400 audit(2000525413.886:2212309): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25721 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1434.225378][T25721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1434.231948][T25721] audit: audit_lost=223978 audit_rate_limit=0 audit_backlog_limit=64 [ 1434.232678][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1434.246701][ C1] audit: audit_lost=223979 audit_rate_limit=0 audit_backlog_limit=64 [ 1434.254801][ C1] audit: backlog limit exceeded [ 1434.274350][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1434.276264][T25721] audit: backlog limit exceeded [ 1434.282455][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1434.292727][ C1] audit: audit_lost=223980 audit_rate_limit=0 audit_backlog_limit=64 [ 1434.301914][T16464] usb 7-1: Using ep0 maxpacket: 16 [ 1434.320501][T16464] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1434.351418][T16464] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1434.372191][T16464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.380553][T16464] usb 7-1: Product: syz [ 1434.405810][T16464] usb 7-1: Manufacturer: syz [ 1434.410677][T16464] usb 7-1: SerialNumber: syz [ 1434.436957][T16464] usb 7-1: config 0 descriptor?? [ 1434.463468][T16464] hub 7-1:0.0: bad descriptor, ignoring hub [ 1434.491273][T16464] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1434.542768][T16464] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input204 [ 1435.557514][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24255'. [ 1435.567304][T26029] netlink: 48 bytes leftover after parsing attributes in process `syz.6.24255'. [ 1435.582840][T26029] vlan2: entered allmulticast mode [ 1435.879665][T26037] team0: No ports can be present during mode change [ 1436.729794][T26071] netlink: 'syz.7.24273': attribute type 10 has an invalid length. [ 1436.749291][T26071] netlink: 152 bytes leftover after parsing attributes in process `syz.7.24273'. [ 1438.238728][T16460] usb 7-1: USB disconnect, device number 17 [ 1438.518017][T26135] netlink: 'syz.6.24304': attribute type 1 has an invalid length. [ 1438.543188][T26135] netlink: 134708 bytes leftover after parsing attributes in process `syz.6.24304'. [ 1438.833039][T18400] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1439.004722][T18400] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1439.056438][T18400] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1439.065551][T18400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.101748][T18400] usb 4-1: config 0 descriptor?? [ 1439.199438][T26166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24319'. [ 1439.485153][T16450] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1439.547021][ T30] kauditd_printk_skb: 9280 callbacks suppressed [ 1439.547039][ T30] audit: type=1400 audit(2000525418.900:2220883): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21229 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1439.582712][T26179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1439.589423][T26179] audit: audit_lost=224221 audit_rate_limit=0 audit_backlog_limit=64 [ 1439.592874][T26140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1439.599304][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1439.606286][T26140] audit: audit_lost=224222 audit_rate_limit=0 audit_backlog_limit=64 [ 1439.612758][T26170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1439.626775][T21229] audit: audit_lost=224223 audit_rate_limit=0 audit_backlog_limit=64 [ 1439.633336][ T30] audit: type=1400 audit(2000525418.900:2220884): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=26175 comm="syz.6.24323" saddr=10.128.0.169 src=30008 daddr=10.128.0.69 dest=53244 netif=eth0 [ 1439.635355][T26170] audit: audit_lost=224224 audit_rate_limit=0 audit_backlog_limit=64 [ 1439.699827][T18400] aquacomputer_d5next 0003:0C70:F00B.009C: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 1439.718712][T16450] usb 10-1: Using ep0 maxpacket: 32 [ 1439.731832][T16450] usb 10-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=64.02 [ 1439.742514][T16450] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.753527][T16450] usb 10-1: Product: syz [ 1439.758023][T16450] usb 10-1: Manufacturer: syz [ 1439.763634][T16450] usb 10-1: SerialNumber: syz [ 1439.770495][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24326'. [ 1439.796072][T16450] usb 10-1: config 0 descriptor?? [ 1439.828276][T26183] bond1 (unregistering): Released all slaves [ 1439.966315][ T47] usb 4-1: USB disconnect, device number 10 [ 1440.055024][T16450] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 1440.076304][T16450] usb 10-1: USB disconnect, device number 2 [ 1440.461487][T26200] syzkaller0: tun_chr_ioctl cmd 35111 [ 1440.938960][T26220] netlink: 'syz.9.24344': attribute type 1 has an invalid length. [ 1441.323946][T16450] kernel read not supported for file /dsp (pid: 16450 comm: kworker/0:2) [ 1441.606165][T26249] kvm: user requested TSC rate below hardware speed [ 1441.635547][T26251] loop4: detected capacity change from 0 to 524255232 [ 1442.897078][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24375'. [ 1443.373473][T26306] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 1443.389157][T26306] macvtap1: entered promiscuous mode [ 1443.398926][T26306] batman_adv: batadv0: Adding interface: macvtap1 [ 1443.405448][T26306] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.431748][T26306] batman_adv: batadv0: Interface activated: macvtap1 [ 1444.214608][T26332] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1444.227053][T26332] dvmrp1: linktype set to 776 [ 1444.237988][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24396'. [ 1444.252318][T26336] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1444.444721][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24398'. [ 1444.894036][ T30] kauditd_printk_skb: 9409 callbacks suppressed [ 1444.894053][ T30] audit: type=1400 audit(2000525423.919:2229624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26356 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1444.931525][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24407'. [ 1444.948163][T25721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1444.955672][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1444.962333][ C1] audit: audit_lost=224452 audit_rate_limit=0 audit_backlog_limit=64 [ 1444.971146][ C1] audit: backlog limit exceeded [ 1444.976669][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1444.982029][T25721] audit: audit_lost=224453 audit_rate_limit=0 audit_backlog_limit=64 [ 1444.983248][ C1] audit: audit_lost=224454 audit_rate_limit=0 audit_backlog_limit=64 [ 1444.999560][ C1] audit: backlog limit exceeded [ 1444.999834][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24407'. [ 1445.005192][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.543635][T26370] netlink: 280 bytes leftover after parsing attributes in process `syz.9.24414'. [ 1447.151884][ T47] kernel write not supported for file /amidi2 (pid: 47 comm: kworker/1:1) [ 1447.197842][T27142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1447.213259][T27142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1447.223286][T27142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1447.246817][T27142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1447.257476][T27142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1447.264841][T27142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1447.570469][T26421] chnl_net:caif_netlink_parms(): no params data found [ 1447.577511][ T47] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1447.776634][ T47] usb 10-1: Using ep0 maxpacket: 8 [ 1447.799662][T26421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.811915][T26421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.812488][ T47] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.830134][T26421] bridge_slave_0: entered allmulticast mode [ 1447.840669][T26421] bridge_slave_0: entered promiscuous mode [ 1447.858924][T26421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.875981][T26421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.894279][T26421] bridge_slave_1: entered allmulticast mode [ 1447.894876][ T47] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1447.906026][T26421] bridge_slave_1: entered promiscuous mode [ 1447.939027][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.984565][ T47] usb 10-1: config 0 descriptor?? [ 1448.001470][ T47] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1448.020817][T26421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.060602][T26421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.115994][T26453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24451'. [ 1448.168228][T26421] team0: Port device team_slave_0 added [ 1448.183677][T26453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24451'. [ 1448.219772][T26421] team0: Port device team_slave_1 added [ 1448.285744][T26421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.300580][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.394928][T26421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.434096][T26421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.459492][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.485431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.517093][T26421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.614853][T26421] hsr_slave_0: entered promiscuous mode [ 1448.635480][T26421] hsr_slave_1: entered promiscuous mode [ 1448.667358][T26421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1448.675296][T26421] Cannot create hsr debugfs directory [ 1448.850900][T26469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1448.914189][ T47] gspca_vc032x: reg_w err -71 [ 1448.924427][ T47] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1448.944454][ T47] usb 10-1: USB disconnect, device number 3 [ 1449.528166][T27142] Bluetooth: hci4: command tx timeout [ 1449.655268][T26421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1449.678459][T26421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1449.709337][T26421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1449.750955][T26421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1449.876601][T26500] input: syz1 as /devices/virtual/input/input205 [ 1449.966044][T26421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.011609][T26421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.042441][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.049700][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.090305][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.097474][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.253069][ T30] kauditd_printk_skb: 8394 callbacks suppressed [ 1450.253088][ T30] audit: type=1400 audit(2000525428.923:2237160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26509 comm="modprobe" name="lib" dev="sda1" ino=1562 [ 1450.278275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.300299][T26509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1450.300450][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1450.313815][T26509] audit: audit_lost=224742 audit_rate_limit=0 audit_backlog_limit=64 [ 1450.314380][T26514] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1450.321915][T26509] audit: backlog limit exceeded [ 1450.343365][ T30] audit: type=1400 audit(2000525428.923:2237161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26509 comm="modprobe" name="/" dev="sda1" ino=2 [ 1450.344969][T21229] audit: audit_lost=224743 audit_rate_limit=0 audit_backlog_limit=64 [ 1450.370776][T26509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1450.370797][T26509] audit: audit_lost=224744 audit_rate_limit=0 audit_backlog_limit=64 [ 1450.749107][T26421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.871785][T26421] veth0_vlan: entered promiscuous mode [ 1450.885176][T26421] veth1_vlan: entered promiscuous mode [ 1450.960578][T26421] veth0_macvtap: entered promiscuous mode [ 1451.002993][T26421] veth1_macvtap: entered promiscuous mode [ 1451.071116][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.109606][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.151193][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.189829][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.214329][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.242128][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.262201][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.296713][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.317173][T26421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.340988][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.352237][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.364341][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.375441][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.410319][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.422382][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.432621][T26421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.443682][T26421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.455276][T26421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.507910][T26421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.533417][T26421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.553261][T26421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.562048][T26421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.735403][T27142] Bluetooth: hci4: command tx timeout [ 1451.833562][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.841441][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.923262][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.935227][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.056913][T26595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.311600][T26603] loop9: detected capacity change from 0 to 8 [ 1453.319560][T26603] Dev loop9: unable to read RDB block 8 [ 1453.326154][T26603] loop9: unable to read partition table [ 1453.334081][T26603] loop9: partition table beyond EOD, truncated [ 1453.341897][T26603] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 1453.445691][T16450] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1453.624289][T16450] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 1453.639090][T16450] usb 10-1: config 150 has no interface number 0 [ 1453.652967][T16450] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1453.668072][T16450] usb 10-1: config 150 interface 1 has no altsetting 0 [ 1453.697898][T16450] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1453.721179][T16450] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.755811][T16450] usb 10-1: Product: syz [ 1453.760135][T16450] usb 10-1: Manufacturer: syz [ 1453.765665][T16450] usb 10-1: SerialNumber: syz [ 1453.959889][T27142] Bluetooth: hci4: command tx timeout [ 1454.048888][T16450] xr_serial 10-1:150.204: xr_serial converter detected [ 1454.690593][T16450] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1454.702116][T16450] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1454.719406][T16450] usb 10-1: USB disconnect, device number 4 [ 1454.731845][T16450] xr_serial 10-1:150.204: device disconnected [ 1455.175052][T26648] openvswitch: netlink: nsh attribute has 65535 unknown bytes. [ 1455.191190][T26648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.622107][ T30] kauditd_printk_skb: 8925 callbacks suppressed [ 1455.622125][ T30] audit: type=1400 audit(2000525433.946:2245591): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=21229 comm="syz-executor" opid=26576 ocomm="syz.7.24506" [ 1455.684210][T26668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1455.705428][T26668] audit: audit_lost=224910 audit_rate_limit=0 audit_backlog_limit=64 [ 1455.705773][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1455.723266][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1455.723352][ T30] audit: type=1400 audit(2000525433.946:2245592): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=21229 comm="syz-executor" opid=26576 ocomm="syz.7.24506" [ 1455.729797][ C1] audit: audit_lost=224911 audit_rate_limit=0 audit_backlog_limit=64 [ 1455.729820][ C1] audit: backlog limit exceeded [ 1455.730839][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1455.754670][T26668] audit: backlog limit exceeded [ 1455.855458][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24553'. [ 1456.182896][T27142] Bluetooth: hci4: command tx timeout [ 1457.565431][T26714] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1458.210795][T26741] netlink: zone id is out of range [ 1458.217614][T26741] netlink: zone id is out of range [ 1458.222901][T26741] netlink: zone id is out of range [ 1458.230395][T26741] netlink: zone id is out of range [ 1458.248228][T26741] netlink: zone id is out of range [ 1458.255874][T26745] input: syz0 as /devices/virtual/input/input206 [ 1458.267327][T26741] netlink: zone id is out of range [ 1458.296045][T26741] netlink: zone id is out of range [ 1458.306841][T26741] netlink: zone id is out of range [ 1458.414809][T26751] netlink: 277 bytes leftover after parsing attributes in process `syz.7.24586'. [ 1459.597719][T26796] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1459.614373][T26796] syzkaller0: linktype set to 0 [ 1459.614897][T26785] sctp: [Deprecated]: syz.2.24602 (pid 26785) Use of int in max_burst socket option. [ 1459.614897][T26785] Use struct sctp_assoc_value instead [ 1459.933079][T26806] netlink: 'syz.9.24612': attribute type 1 has an invalid length. [ 1460.554990][T16450] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1460.716220][T16450] usb 4-1: Using ep0 maxpacket: 8 [ 1460.723744][T16450] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1460.734882][T16450] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1460.764995][T16450] usb 4-1: config 0 has no interface number 0 [ 1460.772205][T16450] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1460.784515][T16450] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1460.796200][T16450] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1460.831003][T16450] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1460.841565][T16450] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1460.850554][T16450] usb 4-1: Product: syz [ 1460.857492][T16450] usb 4-1: config 0 descriptor?? [ 1460.863800][T26826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1460.971765][ T30] kauditd_printk_skb: 8366 callbacks suppressed [ 1460.971783][ T30] audit: type=1400 audit(2000525438.951:2252580): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1461.020832][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1461.042758][T26421] audit: audit_lost=225378 audit_rate_limit=0 audit_backlog_limit=64 [ 1461.043449][T26833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1461.052086][T26421] audit: backlog limit exceeded [ 1461.071412][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1461.079385][ T30] audit: type=1400 audit(2000525438.979:2252581): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1461.087712][T26833] audit: audit_lost=225379 audit_rate_limit=0 audit_backlog_limit=64 [ 1461.108891][T26826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1461.118131][T26421] audit: audit_lost=225380 audit_rate_limit=0 audit_backlog_limit=64 [ 1461.555268][T16450] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input207 [ 1461.829364][T16450] usb 4-1: USB disconnect, device number 11 [ 1461.835373][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1462.873880][T26891] netlink: 'syz.7.24649': attribute type 4 has an invalid length. [ 1463.335553][T26908] lo: entered promiscuous mode [ 1463.345073][T26908] net_ratelimit: 76 callbacks suppressed [ 1463.345092][T26908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1463.689628][T26923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24664'. [ 1464.309902][T26942] syz.2.24673 (26942): drop_caches: 2 [ 1464.315856][T26942] syz.2.24673 (26942): drop_caches: 2 [ 1464.688081][ T47] kernel read not supported for file /video37 (pid: 47 comm: kworker/1:1) [ 1465.003545][T16460] kernel write not supported for file /sg0 (pid: 16460 comm: kworker/1:5) [ 1465.846651][T18400] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1466.050905][T18400] usb 3-1: Using ep0 maxpacket: 8 [ 1466.062802][T18400] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.075703][T18400] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1466.085725][T18400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1466.094156][T18400] usb 3-1: SerialNumber: syz [ 1466.113006][T18400] usb 3-1: config 0 descriptor?? [ 1466.349634][ T30] kauditd_printk_skb: 8790 callbacks suppressed [ 1466.349652][ T30] audit: type=1400 audit(2000525443.974:2260531): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21229 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1466.363287][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.378938][T18400] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1466.386123][T27002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.402072][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.402537][T18400] usb 3-1: No valid video chain found. [ 1466.408733][ C1] audit: audit_lost=225662 audit_rate_limit=0 audit_backlog_limit=64 [ 1466.422293][ C1] audit: backlog limit exceeded [ 1466.426120][ T30] audit: type=1400 audit(2000525443.974:2260532): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21229 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1466.428151][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1466.453076][ C1] audit: audit_lost=225663 audit_rate_limit=0 audit_backlog_limit=64 [ 1466.456409][ T30] audit: type=1400 audit(2000525443.974:2260533): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21229 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1466.638502][ T47] usb 3-1: USB disconnect, device number 103 [ 1467.276269][T27028] misc userio: Begin command sent, but we're already running [ 1467.483833][T27036] autofs4:pid:27036:validate_dev_ioctl: invalid path supplied for cmd(0xc0189379) [ 1467.932083][T27057] batadv_slave_0: entered promiscuous mode [ 1467.950810][T27054] batadv_slave_0: left promiscuous mode [ 1468.256768][T27071] netlink: 'syz.9.24729': attribute type 1 has an invalid length. [ 1469.214416][T16460] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1469.315811][T27106] usb usb8: usbfs: process 27106 (syz.2.24745) did not claim interface 0 before use [ 1469.386323][T16460] usb 10-1: Using ep0 maxpacket: 16 [ 1469.393967][T16460] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1469.413992][T16460] usb 10-1: config 0 has no interface number 0 [ 1469.420988][T16460] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1469.442143][T16460] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1469.466787][T16460] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1469.477551][T16460] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1469.488251][T16460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.496868][T16460] usb 10-1: Product: syz [ 1469.501518][T16460] usb 10-1: Manufacturer: syz [ 1469.507528][T16460] usb 10-1: SerialNumber: syz [ 1469.515404][T16460] usb 10-1: config 0 descriptor?? [ 1469.521630][T27094] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1469.530143][T27094] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1469.757106][T27094] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1469.764721][T27094] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1470.656803][T16460] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1470.668479][T27136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24757'. [ 1470.687462][T16460] usb 10-1: USB disconnect, device number 5 [ 1470.697603][T27137] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1470.791629][T27141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24760'. [ 1470.816681][T27141] netlink: 112 bytes leftover after parsing attributes in process `syz.7.24760'. [ 1470.827785][T27141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24760'. [ 1470.875760][T27144] syzkaller1: entered promiscuous mode [ 1470.881316][T27144] syzkaller1: entered allmulticast mode [ 1470.889536][T27144] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 1471.712220][ T30] kauditd_printk_skb: 9089 callbacks suppressed [ 1471.712238][ T30] audit: type=1400 audit(2000525448.997:2268253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1471.766431][ T30] audit: type=1400 audit(2000525448.997:2268254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1471.818458][ T30] audit: type=1400 audit(2000525448.997:2268255): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=27169 comm="syz-executor" opid=27169 ocomm="syz-executor" [ 1471.872103][ T30] audit: type=1400 audit(2000525448.997:2268256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1471.873234][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1471.901904][ T30] audit: type=1400 audit(2000525448.997:2268257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1471.933500][ T30] audit: type=1400 audit(2000525448.997:2268258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1471.937774][T26421] audit: audit_lost=226124 audit_rate_limit=0 audit_backlog_limit=64 [ 1471.965450][ T30] audit: type=1400 audit(2000525448.997:2268259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1471.998416][ T30] audit: type=1400 audit(2000525448.997:2268260): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27169 comm="syz-executor" name="129" dev="tmpfs" ino=664 [ 1472.603329][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24785'. [ 1473.173172][T27222] netlink: 140 bytes leftover after parsing attributes in process `syz.9.24795'. [ 1473.886034][T27142] Bluetooth: hci3: command 0x0405 tx timeout [ 1473.892311][T27166] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1474.776665][T27166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1474.789919][T27166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1474.801278][T27166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1474.807631][T27166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1474.814463][T27166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1474.821403][T27166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1474.828001][T27166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1474.835914][T27166] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1474.968064][T27236] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 1475.269854][T27250] netlink: 277 bytes leftover after parsing attributes in process `syz.7.24805'. [ 1475.927784][T18400] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1476.110033][T27142] Bluetooth: hci3: command 0x0405 tx timeout [ 1476.144143][T18400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.160135][T18400] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.172771][T18400] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.182888][T18400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.191147][T18400] usb 3-1: Product: syz [ 1476.195677][T18400] usb 3-1: Manufacturer: syz [ 1476.200421][T18400] usb 3-1: SerialNumber: syz [ 1476.249591][T27282] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24818'. [ 1476.272018][T27280] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.24818'. [ 1476.462498][T18400] usb 3-1: 0:2 : does not exist [ 1476.476467][T18400] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1476.532691][T18400] usb 3-1: USB disconnect, device number 104 [ 1476.965460][T27142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1476.972263][T11052] Bluetooth: hci2: command 0x0c1a tx timeout [ 1477.063041][ T30] kauditd_printk_skb: 7426 callbacks suppressed [ 1477.063057][ T30] audit: type=1400 audit(2000525454.011:2274483): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27308 comm="syz.9.24831" name="ieee80211" dev="debugfs" ino=1039 [ 1477.105113][T21229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.112898][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.114773][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.119505][ C1] audit: audit_lost=226535 audit_rate_limit=0 audit_backlog_limit=64 [ 1477.134091][ C1] audit: backlog limit exceeded [ 1477.135687][T27310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.140013][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1477.146853][T27310] audit: audit_lost=226536 audit_rate_limit=0 audit_backlog_limit=64 [ 1477.152560][ C1] audit: audit_lost=226537 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.344192][T11052] Bluetooth: hci3: command 0x0405 tx timeout [ 1479.188683][T11052] Bluetooth: hci2: command 0x0c1a tx timeout [ 1479.188879][T27142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1479.438575][T27385] netlink: 132 bytes leftover after parsing attributes in process `syz.7.24863'. [ 1480.557471][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24886'. [ 1481.412326][T27142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1481.416440][T11052] Bluetooth: hci2: command 0x0c1a tx timeout [ 1482.398014][T27488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24909'. [ 1482.425900][ T30] kauditd_printk_skb: 9605 callbacks suppressed [ 1482.425919][ T30] audit: type=1400 audit(2000525459.015:2283101): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27496 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1482.477459][T27499] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1482.490668][ T30] audit: type=1400 audit(2000525459.015:2283102): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27496 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1482.510997][T27499] audit: audit_lost=226872 audit_rate_limit=0 audit_backlog_limit=64 [ 1482.534425][ T30] audit: type=1400 audit(2000525459.015:2283103): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27496 comm="syz-executor" name="158" dev="tmpfs" ino=812 [ 1482.545250][T27499] audit: backlog limit exceeded [ 1482.588576][T27499] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1482.589453][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1482.605027][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1482.611619][ C1] audit: audit_lost=226873 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.148964][T27518] loop2: detected capacity change from 0 to 7 [ 1483.167888][T27518] Dev loop2: unable to read RDB block 7 [ 1483.188859][T27518] loop2: unable to read partition table [ 1483.202802][T16457] kernel write not supported for file /1159/loginuid (pid: 16457 comm: kworker/1:3) [ 1483.204926][T27518] loop2: partition table beyond EOD, truncated [ 1483.236564][T27518] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1484.010190][T27554] veth0_to_bridge: entered promiscuous mode [ 1484.030633][T27553] veth0_to_bridge: left promiscuous mode [ 1484.089493][T27558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.138596][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1484.309557][T16460] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1484.324161][ T9] usb 4-1: config 0 has no interfaces? [ 1484.334419][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1484.361407][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.391310][ T9] usb 4-1: Product: syz [ 1484.405232][ T9] usb 4-1: Manufacturer: syz [ 1484.421375][ T9] usb 4-1: SerialNumber: syz [ 1484.443486][ T9] usb 4-1: config 0 descriptor?? [ 1484.527376][T16460] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.577595][T16460] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1484.590587][T16460] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.620293][T16460] usb 10-1: config 0 descriptor?? [ 1484.871869][T16460] usbhid 10-1:0.0: can't add hid device: -71 [ 1484.880604][T16460] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1484.897453][T16460] usb 10-1: USB disconnect, device number 6 [ 1484.910300][T27549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.931144][T27549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.948480][ T9] usb 4-1: USB disconnect, device number 12 [ 1485.367854][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1485.538722][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1485.563041][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.607682][ T9] usb 10-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1485.636650][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.668819][ T9] usb 10-1: config 0 descriptor?? [ 1485.903078][ T9] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 1485.912341][ T9] input: Griffin PowerMate as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input209 [ 1486.348047][ C0] powermate: config urb returned -71 [ 1486.357003][ C0] powermate: config urb returned -71 [ 1486.362820][ C0] powermate: config urb returned -71 [ 1486.368421][ C0] powermate: config urb returned -71 [ 1486.375102][ T9] usb 10-1: USB disconnect, device number 7 [ 1486.381102][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1486.433905][T27626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24970'. [ 1487.228030][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1487.407159][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.436397][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.467472][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1487.496686][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1487.506200][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.521188][ T9] usb 4-1: config 0 descriptor?? [ 1487.655136][T27684] overlayfs: invalid origin (0000) [ 1487.752154][ T47] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1487.773489][ T30] kauditd_printk_skb: 10257 callbacks suppressed [ 1487.773507][ T30] audit: type=1400 audit(2000525464.029:2292195): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=27679 comm="syz.9.24992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1487.799869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.806828][ T30] audit: type=1400 audit(2000525464.029:2292196): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27679 comm="syz.9.24992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1487.828143][ T30] audit: type=1400 audit(2000525464.029:2292197): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27679 comm="syz.9.24992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1487.851353][ T30] audit: type=1400 audit(2000525464.057:2292198): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=27685 comm="syz.7.24994" saddr=10.128.0.169 src=30008 daddr=10.128.0.69 dest=53244 netif=eth0 [ 1487.874125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.901657][ T30] audit: type=1400 audit(2000525464.094:2292199): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27679 comm="syz.9.24992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1487.932504][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1487.939784][ T5823] audit: audit_lost=227263 audit_rate_limit=0 audit_backlog_limit=64 [ 1487.948142][ T5823] audit: backlog limit exceeded [ 1487.953530][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1487.960546][ T30] audit: type=1400 audit(2000525464.169:2292200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1487.979476][ T47] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1487.984128][ T9] plantronics 0003:047F:FFFF.009D: No inputs registered, leaving [ 1488.004091][ T47] usb 10-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1488.033743][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.061098][ T47] usb 10-1: config 0 descriptor?? [ 1488.061795][ T9] plantronics 0003:047F:FFFF.009D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1488.371695][ T9] usb 4-1: USB disconnect, device number 13 [ 1488.470628][T27699] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.24999'. [ 1488.535630][ T47] logitech-hidpp-device 0003:046D:C262.009E: hidraw0: USB HID v1.01 Device [HID 046d:c262] on usb-dummy_hcd.9-1/input0 [ 1489.463789][T16460] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1489.629805][T27750] random: crng reseeded on system resumption [ 1489.657119][T16460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1489.679661][T16460] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1489.710296][T16460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.722261][T16460] usb 4-1: config 0 descriptor?? [ 1489.730600][T27728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1490.187545][T16460] elan 0003:04F3:0755.009F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1490.402226][T16457] usb 4-1: USB disconnect, device number 14 [ 1490.731008][ T9] usb 10-1: USB disconnect, device number 8 [ 1490.805207][T27771] Falling back ldisc for ttyS3. [ 1492.353196][T27828] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 1493.145287][ T30] kauditd_printk_skb: 9114 callbacks suppressed [ 1493.145305][ T30] audit: type=1400 audit(2000525469.043:2300449): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27860 comm="modprobe" name="/" dev="sda1" ino=2 [ 1493.175594][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1493.175652][T27860] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1493.193669][T26421] audit: audit_lost=227554 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.193823][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1493.208337][ C1] audit: audit_lost=227555 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.216455][ C1] audit: backlog limit exceeded [ 1493.222094][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1493.223479][T26421] audit: backlog limit exceeded [ 1493.228636][ C1] audit: audit_lost=227556 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.437715][T27870] overlay: filesystem on ./bus not supported as upperdir [ 1493.739074][T27886] batadv_slave_1: entered promiscuous mode [ 1493.757633][T27885] batadv_slave_1: left promiscuous mode [ 1495.129209][T16460] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1495.331505][T16460] usb 3-1: Using ep0 maxpacket: 16 [ 1495.355111][T16460] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1495.368332][T16460] usb 3-1: config 0 has no interface number 0 [ 1495.388589][T16460] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1495.408025][T16460] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1495.440313][T16460] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1495.459807][T16460] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1495.467955][T16460] usb 3-1: Product: syz [ 1495.491776][T16460] usb 3-1: SerialNumber: syz [ 1495.499417][T16460] usb 3-1: config 0 descriptor?? [ 1495.525494][T16460] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1495.533348][T16460] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input210 [ 1496.002232][T27974] netlink: 40 bytes leftover after parsing attributes in process `syz.9.25121'. [ 1496.045964][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1527.379655][ C1] audit_log_start: 6282 callbacks suppressed [ 1527.379680][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1527.392472][ C1] audit: audit_lost=227709 audit_rate_limit=0 audit_backlog_limit=64 [ 1527.400590][ C1] audit: backlog limit exceeded [ 1527.880574][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1527.887189][ C1] audit: audit_lost=227710 audit_rate_limit=0 audit_backlog_limit=64 [ 1527.895294][ C1] audit: backlog limit exceeded [ 1528.380878][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1528.387497][ C1] audit: audit_lost=227711 audit_rate_limit=0 audit_backlog_limit=64 [ 1528.395575][ C1] audit: backlog limit exceeded [ 1528.881941][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.885966][ C1] audit_log_start: 23 callbacks suppressed [ 1532.885989][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.898410][ C1] audit: audit_lost=227720 audit_rate_limit=0 audit_backlog_limit=64 [ 1532.906488][ C1] audit: backlog limit exceeded [ 1533.386328][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1533.392989][ C1] audit: audit_lost=227721 audit_rate_limit=0 audit_backlog_limit=64 [ 1533.401334][ C1] audit: backlog limit exceeded [ 1533.887002][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1533.893633][ C1] audit: audit_lost=227722 audit_rate_limit=0 audit_backlog_limit=64 [ 1533.901722][ C1] audit: backlog limit exceeded [ 1534.387648][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.393041][ C1] audit_log_start: 23 callbacks suppressed [ 1538.393065][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.405480][ C1] audit: audit_lost=227731 audit_rate_limit=0 audit_backlog_limit=64 [ 1538.413559][ C1] audit: backlog limit exceeded [ 1538.893738][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1538.900360][ C1] audit: audit_lost=227732 audit_rate_limit=0 audit_backlog_limit=64 [ 1538.908475][ C1] audit: backlog limit exceeded [ 1539.394283][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1539.401446][ C1] audit: audit_lost=227733 audit_rate_limit=0 audit_backlog_limit=64 [ 1539.409601][ C1] audit: backlog limit exceeded [ 1539.895110][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1543.821355][ C1] audit_log_start: 26 callbacks suppressed [ 1543.821379][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1543.835114][ C1] audit: audit_lost=227743 audit_rate_limit=0 audit_backlog_limit=64 [ 1543.843290][ C1] audit: backlog limit exceeded [ 1544.261289][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1544.267926][ C1] audit: audit_lost=227744 audit_rate_limit=0 audit_backlog_limit=64 [ 1544.276031][ C1] audit: backlog limit exceeded [ 1545.125216][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1545.131823][ C1] audit: audit_lost=227745 audit_rate_limit=0 audit_backlog_limit=64 [ 1545.140272][ C1] audit: backlog limit exceeded [ 1546.821033][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.276744][ C1] audit_log_start: 2 callbacks suppressed [ 1550.276768][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1550.289118][ C1] audit: audit_lost=227747 audit_rate_limit=0 audit_backlog_limit=64 [ 1550.297352][ C1] audit: backlog limit exceeded [ 1557.188757][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1557.195324][ C1] audit: audit_lost=227748 audit_rate_limit=0 audit_backlog_limit=64 [ 1557.203444][ C1] audit: backlog limit exceeded [ 1557.808099][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1557.814756][ C1] audit: audit_lost=227749 audit_rate_limit=0 audit_backlog_limit=64 [ 1557.822987][ C1] audit: backlog limit exceeded [ 1558.024040][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.030633][ C1] audit: audit_lost=227750 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.038763][ C1] audit: backlog limit exceeded [ 1558.239951][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1564.615357][ C1] audit_log_start: 11 callbacks suppressed [ 1564.615381][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1564.627805][ C1] audit: audit_lost=227755 audit_rate_limit=0 audit_backlog_limit=64 [ 1564.635900][ C1] audit: backlog limit exceeded [ 1570.755547][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1570.762118][ C1] audit: audit_lost=227756 audit_rate_limit=0 audit_backlog_limit=64 [ 1570.770280][ C1] audit: backlog limit exceeded [ 1571.526664][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1571.533242][ C1] audit: audit_lost=227757 audit_rate_limit=0 audit_backlog_limit=64 [ 1571.542030][ C1] audit: backlog limit exceeded [ 1585.090188][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1585.096765][ C1] audit: audit_lost=227758 audit_rate_limit=0 audit_backlog_limit=64 [ 1585.105296][ C1] audit: backlog limit exceeded [ 1599.172666][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1599.179254][ C1] audit: audit_lost=227759 audit_rate_limit=0 audit_backlog_limit=64 [ 1599.187381][ C1] audit: backlog limit exceeded [ 1608.448539][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1608.455534][ C1] rcu: 0-...!: (0 ticks this GP) idle=76fc/1/0x4000000000000000 softirq=215360/215360 fqs=1 [ 1608.468793][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1107/1:b..l [ 1608.476740][ C1] rcu: (detected by 1, t=10502 jiffies, g=268629, q=394 ncpus=2) [ 1608.484559][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1608.484597][ C0] NMI backtrace for cpu 0 [ 1608.484612][ C0] CPU: 0 UID: 0 PID: 27956 Comm: syz.3.25114 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 1608.484628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1608.484639][ C0] RIP: 0010:kasan_check_range+0x1b8/0x290 [ 1608.484667][ C0] Code: 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b <41> 5c 41 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 [ 1608.484679][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00000056 [ 1608.484692][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff819cd2e4 [ 1608.484703][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff903bd170 [ 1608.484712][ C0] RBP: 0000000000000000 R08: ffffffff903bd177 R09: 1ffffffff2077a2e [ 1608.484723][ C0] R10: dffffc0000000000 R11: fffffbfff2077a2f R12: 1ffff92000000f44 [ 1608.484734][ C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff2077a2f [ 1608.484745][ C0] FS: 00007f77783476c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1608.484758][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1608.484769][ C0] CR2: 00007f0285ad56c0 CR3: 0000000056f28000 CR4: 00000000003526f0 [ 1608.484784][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1608.484792][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1608.484802][ C0] Call Trace: [ 1608.484810][ C0] [ 1608.484819][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1608.484840][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1608.484861][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1608.484878][ C0] ? nmi_handle+0x2a/0x5a0 [ 1608.484904][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1608.484921][ C0] ? nmi_handle+0x14f/0x5a0 [ 1608.484939][ C0] ? nmi_handle+0x2a/0x5a0 [ 1608.484964][ C0] ? kasan_check_range+0x1b8/0x290 [ 1608.484982][ C0] ? default_do_nmi+0x63/0x160 [ 1608.484999][ C0] ? exc_nmi+0x123/0x1f0 [ 1608.485015][ C0] ? end_repeat_nmi+0xf/0x53 [ 1608.485038][ C0] ? lock_acquire+0xd4/0x550 [ 1608.485057][ C0] ? kasan_check_range+0x1b8/0x290 [ 1608.485077][ C0] ? kasan_check_range+0x1b8/0x290 [ 1608.485098][ C0] ? kasan_check_range+0x1b8/0x290 [ 1608.485117][ C0] [ 1608.485123][ C0] [ 1608.485129][ C0] lock_acquire+0xd4/0x550 [ 1608.485157][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1608.485175][ C0] ? __lock_acquire+0x1397/0x2100 [ 1608.485202][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1608.485220][ C0] ? debug_object_activate+0x17f/0x580 [ 1608.485240][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1608.485263][ C0] debug_object_activate+0x17f/0x580 [ 1608.485283][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1608.485300][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1608.485318][ C0] ? advance_sched+0xa02/0xca0 [ 1608.485339][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1608.485360][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1608.485380][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1608.485398][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 1608.485421][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1608.485435][ C0] ? sched_clock+0x4a/0x70 [ 1608.485451][ C0] ? read_tsc+0x9/0x20 [ 1608.485465][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1608.485487][ C0] hrtimer_interrupt+0x403/0xa40 [ 1608.485513][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1608.485534][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1608.485554][ C0] [ 1608.485559][ C0] [ 1608.485565][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1608.485589][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1608.485607][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba 02 99 f5 48 89 df e8 a2 4b 9a f5 e8 cd b5 c5 f5 fb bf 01 00 00 00 02 8c 8b f5 65 8b 05 d3 dd ff 73 85 c0 74 06 5b c3 cc cc cc cc [ 1608.485620][ C0] RSP: 0018:ffffc90004db7758 EFLAGS: 00000282 [ 1608.485632][ C0] RAX: 82e82ec733563300 RBX: ffff88807b976458 RCX: ffffffff819d4b6a [ 1608.485643][ C0] RDX: dffffc0000000000 RSI: ffffffff8c2ab3a0 RDI: 0000000000000001 [ 1608.485654][ C0] RBP: 1ffff1100b572059 R08: ffffffff94517967 R09: 1ffffffff28a2f2c [ 1608.485665][ C0] R10: dffffc0000000000 R11: fffffbfff28a2f2d R12: ffff88807b976458 [ 1608.485676][ C0] R13: ffff88805ab902c8 R14: 0000000081404000 R15: 1ffff1100b572058 [ 1608.485691][ C0] ? mark_lock+0x9a/0x360 [ 1608.485713][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1608.485730][ C0] io_poll_double_prepare+0x1fd/0x2e0 [ 1608.485750][ C0] ? io_poll_double_prepare+0x8c/0x2e0 [ 1608.485771][ C0] __io_queue_proc+0x3a4/0x540 [ 1608.485790][ C0] ? __pfx_io_async_queue_proc+0x10/0x10 [ 1608.485810][ C0] snd_rawmidi_poll+0x251/0x460 [ 1608.485825][ C0] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 1608.485840][ C0] __io_arm_poll_handler+0x34b/0x9d0 [ 1608.485864][ C0] io_arm_poll_handler+0x7de/0xbf0 [ 1608.485886][ C0] ? io_issue_sqe+0x7b5/0x12d0 [ 1608.485902][ C0] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 1608.485920][ C0] ? __pfx_io_async_queue_proc+0x10/0x10 [ 1608.485941][ C0] ? __pfx_io_issue_sqe+0x10/0x10 [ 1608.485972][ C0] io_queue_async+0xa4/0x4e0 [ 1608.485989][ C0] ? __pfx_io_req_task_submit+0x10/0x10 [ 1608.486006][ C0] io_handle_tw_list+0x380/0x500 [ 1608.486025][ C0] tctx_task_work_run+0x9a/0x370 [ 1608.486041][ C0] tctx_task_work+0x9a/0x100 [ 1608.486055][ C0] ? __pfx_tctx_task_work+0x10/0x10 [ 1608.486072][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1608.486088][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1608.486108][ C0] task_work_run+0x24f/0x310 [ 1608.486125][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1608.486138][ C0] ? futex_wait+0x285/0x360 [ 1608.486158][ C0] ? __pfx_futex_wait+0x10/0x10 [ 1608.486178][ C0] get_signal+0x15d1/0x1720 [ 1608.486197][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1608.486220][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1608.486238][ C0] ? __pfx_get_signal+0x10/0x10 [ 1608.486257][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1608.486275][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1608.486290][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1608.486315][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1608.486336][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 1608.486358][ C0] do_syscall_64+0x100/0x230 [ 1608.486378][ C0] ? clear_bhb_loop+0x35/0x90 [ 1608.486397][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.486415][ C0] RIP: 0033:0x7f777758d169 [ 1608.486435][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1608.486447][ C0] RSP: 002b:00007f7778347038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.486462][ C0] RAX: 0000000000000200 RBX: 00007f77777a5fa0 RCX: 00007f777758d169 [ 1608.486472][ C0] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 1608.486482][ C0] RBP: 00007f777760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.486492][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1608.486501][ C0] R13: 0000000000000000 R14: 00007f77777a5fa0 R15: 00007ffd1e52c368 [ 1608.486519][ C0] [ 1608.486590][ C1] task:kworker/u8:5 state:R running task stack:18872 pid:1107 tgid:1107 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1609.195082][ C1] Workqueue: bat_events batadv_nc_worker [ 1609.200746][ C1] Call Trace: [ 1609.204036][ C1] [ 1609.206979][ C1] __schedule+0x18bc/0x4c40 [ 1609.211511][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1609.216555][ C1] ? __pfx___schedule+0x10/0x10 [ 1609.221427][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1609.227516][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1609.232847][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1609.238172][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1609.243957][ C1] irqentry_exit+0x5e/0x90 [ 1609.248943][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.255395][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 1609.260853][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9a c3 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1609.280481][ C1] RSP: 0018:ffffc90003ff7940 EFLAGS: 00000206 [ 1609.286563][ C1] RAX: 0000000000000001 RBX: 1ffff920007fef34 RCX: ffff8880277c46e8 [ 1609.294543][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ac600 RDI: ffffffff8c802ce0 [ 1609.302536][ C1] RBP: ffffc90003ff7aa0 R08: ffffffff94517847 R09: 1ffffffff28a2f08 [ 1609.310538][ C1] R10: dffffc0000000000 R11: fffffbfff28a2f09 R12: 1ffff920007fef30 [ 1609.318636][ C1] R13: dffffc0000000000 R14: ffffc90003ff79a0 R15: 0000000000000246 [ 1609.328171][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1609.333318][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1609.338354][ C1] ? __pfx_lock_release+0x10/0x10 [ 1609.343420][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1609.349521][ C1] batadv_nc_worker+0xec/0x610 [ 1609.354392][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1609.359341][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1609.364587][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 1609.370483][ C1] process_scheduled_works+0xabe/0x18e0 [ 1609.376626][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1609.382651][ C1] ? assign_work+0x364/0x3d0 [ 1609.387273][ C1] worker_thread+0x870/0xd30 [ 1609.391908][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1609.396969][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1609.402104][ C1] kthread+0x7a9/0x920 [ 1609.406207][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.410839][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1609.416025][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.420633][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.425246][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.429857][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.435169][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1609.440384][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.445012][ C1] ret_from_fork+0x4b/0x80 [ 1609.449817][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.454445][ C1] ret_from_fork_asm+0x1a/0x30 [ 1609.459289][ C1] [ 1609.462445][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g268629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1609.473795][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1609.483848][ C1] rcu: RCU grace-period kthread stack dump: [ 1609.489963][ C1] task:rcu_preempt state:R running task stack:25784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1609.504911][ C1] Call Trace: [ 1609.508318][ C1] [ 1609.511283][ C1] __schedule+0x18bc/0x4c40 [ 1609.515825][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1609.521778][ C1] ? __pfx___schedule+0x10/0x10 [ 1609.526680][ C1] ? __pfx_lock_release+0x10/0x10 [ 1609.531743][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1609.536717][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1609.543067][ C1] ? schedule+0x90/0x320 [ 1609.547322][ C1] schedule+0x14b/0x320 [ 1609.551510][ C1] schedule_timeout+0x15a/0x290 [ 1609.556658][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1609.562494][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1609.567895][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1609.573721][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1609.578852][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1609.584079][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1609.589988][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1609.595544][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1609.602810][ C1] ? finish_swait+0xd4/0x1e0 [ 1609.609494][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.615345][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1609.620947][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.626191][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1609.632218][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1609.637379][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.642646][ C1] kthread+0x7a9/0x920 [ 1609.646745][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.651369][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1609.656699][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.661313][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.665971][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.670586][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.675803][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1609.681038][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.685656][ C1] ret_from_fork+0x4b/0x80 [ 1609.690101][ C1] ? __pfx_kthread+0x10/0x10 [ 1609.694732][ C1] ret_from_fork_asm+0x1a/0x30 [ 1609.699538][ C1] [ 1609.702570][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1609.708929][ C1] CPU: 1 UID: 0 PID: 21229 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 1609.719984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1609.730075][ C1] RIP: 0010:preempt_count_add+0x76/0x190 [ 1609.735846][ C1] Code: c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 00 00 83 3d 8d 67 d2 18 00 75 11 65 8b 05 0c 53 74 7e 0f b6 c0 3d f5 00 00 00 73 5e <65> 8b 05 fb 52 74 7e 25 ff ff ff 7f 39 d8 75 44 4c 8b 74 24 18 4c [ 1609.756004][ C1] RSP: 0018:ffffc90000a27990 EFLAGS: 00000297 [ 1609.762089][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a61e903 [ 1609.770279][ C1] RDX: dffffc0000000000 RSI: ffffffff818127ef RDI: 0000000000000001 [ 1609.778431][ C1] RBP: ffffc90000a27ab8 R08: 0000000000000017 R09: ffffc90000a27b70 [ 1609.786865][ C1] R10: ffffc90000a27ad0 R11: ffffffff81ad6ba0 R12: dffffc0000000000 [ 1609.794845][ C1] R13: ffffc90000a27a80 R14: ffffffff818127ef R15: dffffc0000000000 [ 1609.803313][ C1] FS: 0000555583ba9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1609.812284][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.818943][ C1] CR2: 00007f07cb6d56c0 CR3: 0000000043684000 CR4: 00000000003526f0 [ 1609.826942][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1609.835015][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1609.843014][ C1] Call Trace: [ 1609.846300][ C1] [ 1609.849152][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1609.855503][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1609.861267][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1609.867123][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1609.873642][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1609.879556][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1609.885217][ C1] ? update_process_times+0x242/0x2f0 [ 1609.890617][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1609.895764][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1609.901253][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1609.906721][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 1609.912770][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1609.918513][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1609.924707][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1609.929908][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1609.936633][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1609.942496][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.948806][ C1] ? copy_mm+0x18af/0x2160 [ 1609.953255][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1609.959584][ C1] ? copy_mm+0x18af/0x2160 [ 1609.964014][ C1] ? preempt_count_add+0x76/0x190 [ 1609.969226][ C1] ? copy_mm+0x18af/0x2160 [ 1609.974039][ C1] unwind_next_frame+0xb0/0x22d0 [ 1609.979180][ C1] ? flush_tlb_mm_range+0x42d/0x710 [ 1609.984397][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1609.990560][ C1] arch_stack_walk+0x11c/0x150 [ 1609.995344][ C1] ? copy_mm+0x18af/0x2160 [ 1609.999776][ C1] stack_trace_save+0x118/0x1d0 [ 1610.004674][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1610.010323][ C1] ? __lock_acquire+0x1397/0x2100 [ 1610.015405][ C1] kasan_save_stack+0x3f/0x60 [ 1610.020096][ C1] ? kasan_save_stack+0x3f/0x60 [ 1610.025067][ C1] ? kasan_record_aux_stack+0xaa/0xc0 [ 1610.030984][ C1] ? kvfree_call_rcu+0xa9/0x3e0 [ 1610.035858][ C1] ? cfg80211_update_known_bss+0x7f3/0x1350 [ 1610.041767][ C1] ? __cfg80211_bss_update+0x153/0x2090 [ 1610.047690][ C1] ? cfg80211_inform_single_bss_data+0xe01/0x1ee0 [ 1610.054654][ C1] ? cfg80211_inform_bss_data+0x3c3/0x5820 [ 1610.061454][ C1] ? cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 1610.068016][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1610.074029][ C1] ? ieee80211_scan_rx+0x526/0x9c0 [ 1610.079261][ C1] ? ieee80211_rx_list+0x2cc0/0x38f0 [ 1610.084661][ C1] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1610.089817][ C1] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1610.096281][ C1] ? tasklet_action_common+0x426/0x620 [ 1610.101762][ C1] ? handle_softirqs+0x2d4/0x9b0 [ 1610.106902][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 1610.111788][ C1] ? irq_exit_rcu+0x9/0x30 [ 1610.116229][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1610.122068][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1610.128245][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1610.133721][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1610.139887][ C1] ? on_each_cpu_cond_mask+0x3f/0x80 [ 1610.145198][ C1] ? flush_tlb_mm_range+0x42d/0x710 [ 1610.150778][ C1] ? copy_mm+0x18af/0x2160 [ 1610.155250][ C1] ? __phys_addr+0xba/0x170 [ 1610.159773][ C1] kasan_record_aux_stack+0xaa/0xc0 [ 1610.165026][ C1] kvfree_call_rcu+0xa9/0x3e0 [ 1610.169971][ C1] cfg80211_update_known_bss+0x7f3/0x1350 [ 1610.175827][ C1] ? cmp_bss+0x8c7/0xea0 [ 1610.180457][ C1] __cfg80211_bss_update+0x153/0x2090 [ 1610.186416][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1610.191556][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1610.197432][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1610.203290][ C1] ? rcu_is_watching+0x15/0xb0 [ 1610.208452][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1610.213156][ C1] ? cfg80211_inform_single_bss_data+0xdea/0x1ee0 [ 1610.220148][ C1] cfg80211_inform_single_bss_data+0xe01/0x1ee0 [ 1610.227102][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1610.234051][ C1] ? cfg80211_inform_bss_data+0x3ab/0x5820 [ 1610.243397][ C1] cfg80211_inform_bss_data+0x3c3/0x5820 [ 1610.249506][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 1610.255021][ C1] ? validate_chain+0x11e/0x5920 [ 1610.260001][ C1] ? validate_chain+0x11e/0x5920 [ 1610.265053][ C1] ? mark_lock+0x9a/0x360 [ 1610.269438][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1610.275530][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1610.280763][ C1] ? mark_lock+0x9a/0x360 [ 1610.285108][ C1] ? __lock_acquire+0x1397/0x2100 [ 1610.290175][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1610.295211][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1610.301060][ C1] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 1610.307173][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1610.313687][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1610.319385][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1610.325603][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.331956][ C1] ? kcov_remote_start+0x97/0x7d0 [ 1610.337204][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 1610.343153][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 1610.348137][ C1] ieee80211_rx_list+0x2cc0/0x38f0 [ 1610.353420][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1610.358975][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1610.364993][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.371345][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1610.376381][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 1610.381371][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1610.387733][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1610.393278][ C1] ? skb_dequeue+0x113/0x150 [ 1610.397894][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1610.403898][ C1] tasklet_action_common+0x426/0x620 [ 1610.409207][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1610.415043][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.421398][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1610.426620][ C1] ? workqueue_softirq_action+0xce/0x140 [ 1610.432274][ C1] handle_softirqs+0x2d4/0x9b0 [ 1610.437167][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 1610.441969][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1610.447277][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1610.452504][ C1] __irq_exit_rcu+0xf7/0x220 [ 1610.457107][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1610.462423][ C1] irq_exit_rcu+0x9/0x30 [ 1610.466672][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1610.472316][ C1] [ 1610.475250][ C1] [ 1610.478182][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1610.484176][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1610.490271][ C1] Code: 8b 3d f4 13 92 0c 48 89 de 5b e9 83 5e 59 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d5 03 00 65 8b 15 80 f5 41 7e 81 e2 00 01 ff 00 [ 1610.509902][ C1] RSP: 0018:ffffc9000c3bf4f8 EFLAGS: 00000202 [ 1610.516001][ C1] RAX: ffffffff81b5ef25 RBX: 1ffff110170c8c75 RCX: ffff88802618bc00 [ 1610.524006][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1610.531998][ C1] RBP: ffffc9000c3bf700 R08: ffffffff81b5eef0 R09: 1ffffffff28a2f0e [ 1610.540001][ C1] R10: dffffc0000000000 R11: fffffbfff28a2f0f R12: ffff8880b873f9c8 [ 1610.547995][ C1] R13: ffff8880b86463a8 R14: ffff8880b873f9c0 R15: 0000000000000000 [ 1610.555988][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 1610.562151][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 1610.568322][ C1] smp_call_function_many_cond+0x1bc5/0x2d30 [ 1610.574319][ C1] ? __mutex_unlock_slowpath+0x227/0x800 [ 1610.579986][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1610.586321][ C1] ? __pfx_lock_release+0x10/0x10 [ 1610.591368][ C1] ? rcu_is_watching+0x15/0xb0 [ 1610.596139][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1610.601358][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1610.606478][ C1] flush_tlb_mm_range+0x42d/0x710 [ 1610.611521][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1610.617087][ C1] copy_mm+0x18af/0x2160 [ 1610.621362][ C1] ? __pfx_copy_mm+0x10/0x10 [ 1610.625984][ C1] ? __init_rwsem+0x122/0x160 [ 1610.630669][ C1] ? copy_signal+0x51c/0x640 [ 1610.635284][ C1] copy_process+0x17d1/0x3cf0 [ 1610.640006][ C1] ? copy_process+0x9fa/0x3cf0 [ 1610.644895][ C1] ? __pfx_copy_process+0x10/0x10 [ 1610.649959][ C1] kernel_clone+0x223/0x870 [ 1610.654480][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 1610.659868][ C1] ? vma_end_read+0x18/0x170 [ 1610.664466][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1610.669509][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1610.675278][ C1] __x64_sys_clone+0x267/0x2e0 [ 1610.680157][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1610.685467][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.691831][ C1] ? exc_page_fault+0x590/0x8b0 [ 1610.696695][ C1] ? do_syscall_64+0xb6/0x230 [ 1610.701411][ C1] do_syscall_64+0xf3/0x230 [ 1610.705940][ C1] ? clear_bhb_loop+0x35/0x90 [ 1610.710647][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.716558][ C1] RIP: 0033:0x7f0284d839d3 [ 1610.720988][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1610.742359][ C1] RSP: 002b:00007ffe372cae08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1610.751466][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0284d839d3 [ 1610.762413][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1610.770479][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1610.778465][ C1] R10: 0000555583ba97d0 R11: 0000000000000246 R12: 0000000000000000 [ 1610.786439][ C1] R13: 00000000000927c0 R14: 00000000001598eb R15: 00007ffe372cafa0 [ 1610.794439][ C1] [ 1613.503386][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1613.510094][ C1] audit: audit_lost=227760 audit_rate_limit=0 audit_backlog_limit=64 [ 1613.518672][ C1] audit: backlog limit exceeded