last executing test programs: 7.931437076s ago: executing program 1 (id=3475): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 7.31349101s ago: executing program 3 (id=3476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) 7.041674191s ago: executing program 1 (id=3479): socket(0x2a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 6.668674135s ago: executing program 1 (id=3481): syz_emit_ethernet(0x32, &(0x7f0000001840)={@link_local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3c, 0x24, 0x67, 0x0, 0x4, 0x21, 0x0, @remote, @multicast2}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0xa, 0x7, "e07576", 0x7, "4100fe"}}}}}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x68, 0x16, 0x20, 0x86a, 0x3, 0xa566, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x7, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x10, 0x1, 0xc8, 0x4a, 0x2b, 0x5, [], [{{0x9, 0x5, 0x6, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x3, 0x4) fcntl$notify(r0, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) fcntl$notify(r2, 0x402, 0x3) madvise(&(0x7f0000e24000/0x3000)=nil, 0x3000, 0x9) 6.480934271s ago: executing program 2 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8]}}) 6.45261101s ago: executing program 3 (id=3484): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 6.372785132s ago: executing program 2 (id=3485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r5, 0x400, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r8}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) 6.063030993s ago: executing program 3 (id=3487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x4}) sendmsg$unix(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 5.105238087s ago: executing program 2 (id=3491): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x680441, 0x0) sendfile(r0, r0, 0x0, 0x40008) 4.10076135s ago: executing program 4 (id=3492): r0 = syz_open_dev$loop(0x0, 0x2, 0x6200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff620af0fff8ffffff71"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="12c075f82354321cc06692a9e66235eeccc259ad5eeecf9741c90f3c0837db88fa6b47c051aea8f9f2296153e9a1fa2f900599a87bc0aad60aad79a65b9b6f1b7e39cf6e016282f469184d0bc62efdf59d24b6073b", 0x55}], 0x1}}], 0x1, 0x8516f5aa53426b45) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.074173038s ago: executing program 2 (id=3494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000"], 0x20}}, 0x0) 3.738967672s ago: executing program 4 (id=3495): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000aac000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/144) 3.733199911s ago: executing program 1 (id=3497): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 3.661450814s ago: executing program 3 (id=3498): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 3.410964898s ago: executing program 0 (id=3499): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xfff2}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x312a}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x69e1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.280123958s ago: executing program 3 (id=3500): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 3.27990302s ago: executing program 1 (id=3501): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.263328971s ago: executing program 2 (id=3502): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300015bc550000000500010007000000580008801c00078007001a00242e0000100007800c001840fffffffffffffffd10"], 0x80}}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400)=0x7, 0xffffffffffffffff, 0x0, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0001800600060065580000040502"], 0x528}}, 0xc000) 3.180490116s ago: executing program 0 (id=3503): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x3, {0x0, 0x1, 0x3}}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 3.048188896s ago: executing program 3 (id=3504): syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xb, 0x9e, 0x87, 0x10, 0x1435, 0x828, 0xa604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x26, 0x3, 0x1, 0xab, 0xa6, 0x3, 0x7, [], [{{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, 0x0) 2.852706353s ago: executing program 1 (id=3505): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f000000a2c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f00000033c0)="a456d84a85584a9380b21b3b1a65d5703c30c217239bfcd259a6bf06ffcd66891473c5ceb4feb33b8a32b01921cfb745b960c2b8e430a8ad5d73b8c265d1f41f953bbcb743e452b0762cf57d05de5d0c8cc4bf52f97a48d1cb0485f43951170104fc294e1276cc60fd366bc1347e49482015cb5ce80a4004e501ef96a50e8b4d1879ed9e0cfac0d55bbf47a4c226f190b5ed894b272f54032c86cbdf6670c9d1315a8e6994f3c1b05eca5cc763d5fcbaea768b2a6f36be0a835e19716e708cba93", 0xc1}, {&(0x7f00000034c0)="8a81a627684926d300dcf7d3368dba96ce12ccdf030033f898310b6496ead774fc788e14278d601170dc89ed5a3dd47288cfd335d1f9c9541db6a3d3c7c9eb17dad94c7b91749088a788e895a237dac591da5284de981b757cd41517c4efa859a2626545436ab97e22bfa2baa077c064c3081c73e487575733137288ea2f3e2a859a0ff85d0a1d13394b35a0cd143ceb47b7e9748375f9e7fbf8c016843f0c7aac4539a97e326059f22891199bb36322bb091e156d5aed616a69a7352abe7283796067febe20b523", 0xc8}, {&(0x7f00000002c0)="63c1a96b2d6948c01b13fb175ba1", 0xe}], 0x5}, {0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000036c0)}, {&(0x7f0000003780)="386775dcb2601bffb26bc0de96e22141b662b85c758126fb9efdd4ed1e47e742c418bf0b6f12c7d02ccaea7015cdfe65204bc2d285225b4cf3a88ddd8a0b6b1c72b1cd77506efd8a952ad0f362fbe17185af36258aa41fdb929c5d7ba1693a4eeaa45a1d06a6f674126a32380e1107ce76568bfec6c82c70fdb55316856ab7761e0860f0901e7e2bb4af12d16af19d9616290142142ee862e82deceea0f9927bed5bfd09bc5b20ca12511e4dc545203ce2292f9f75a722a4aa9990d318fcf0c21b6acf8f8a1c662a406ebcdb68a866fb307bac41f074", 0xd6}, {&(0x7f0000000380)="15314d5fbfbc0b7d6e35a36fbc317d38fb701785c7", 0x15}, {0x0}, {&(0x7f0000003980)="1a5e553e457ef75b5c887d7567d49ecdac6e039715e323c65cf32fa5361fb4364fa3d7a46fba1f5be74fa0569c03ac34c73a21ca97fa952fbc4ff0e7d602bf3a54dcaa72537572bcbb40b406f4f25cc35d0392e19c3f9c", 0x57}, {&(0x7f0000003a00)="6451036e91c27b1bcfbb4769da69a06f2e635bee8602944cc97c52d2ca7f566a057476a6df48e371cb875d441f1ec70c6e0691657a5d73bad200b70fe82adf6f575665400d03a3bb1cd8ab44a1d4666b5dfe1a4719f501ef6245d1f5e9aefa01e06c1629b1c7e6d63c0eae759c3ee0de3a81811cf7022c47b150bff08b3307fbc2eaaeb9b3a2c857d9191c9199f0affcb88c8efdfc5a1662a242b3cdc582eb8c8a69b8be700e6a026504f9f02317097e0d3a4251da669a2e8d3ea02eace34afd820ff055309b", 0xc6}, {&(0x7f0000003b00)="24612835411421384fe21849e4d5c44af9491954af2eff4c9119b86e7bc4515788f5d869510b25f856e2077e6c7c4551bf6c688ba3091aff711171619267ccc0c45fd53b0d7fbf8d3e5df19fc08aef68db790d63b3b343ea244b1d3edd086944216ae312b8c02c840ffd69f243d51bc5b008d91b4b5cfc2d6f5f11acb3e56937b2df6be6a3bd439a02134cab46314772b5993dc5106d4b03b94ecd2a19e9a115b6cc7aa4a3f2a6a14ee4e83071325235cdc10b5f12cac52de89926333c540703233b15e1dc43761d3f", 0xc9}, {&(0x7f0000003c00)="ffabd931f1ef0688ef81afb1df5bc12d669affe7a483d3e93c57ec87416ab22ef6dc7b26457668dd9e56a98fa4830f589674cb12ea2d76ba063dfb5d511f390080cdf9104953209f23e899e2bff4b02fe4be", 0x52}], 0x8, &(0x7f0000003d00)=[@iv={0x108, 0x117, 0x2, 0xee, "5ccfe041ecf9c732e1c2491f93fbfa0f7d6da9d23307475e98cbd283963e64c4e82c86906745af3e0e006b63d6a7829b9700ae64c35e1127ee646193d89699684a02549a8628f75105182933db1c0012ce07b1135b12bca3461f7f8e18267a95d78b10022161bcd50ab6784bd4f27cd3206921949d70a50e27620103ba1e73a766809baf5fa7d4d0be66b21e678996f9fb0ef81a18f4c33014e2fdd99312e02a271e38cbbe4d1383a6f72607bb32243fc14c9acc8380ecf6f6bbc7b1dc3591daee5adfaecc2774b72f55fd44b99a6c82e43e37599d6a1c7914cd188ad4bb12a6bd7c902a11c07a1285dd261bd2da"}, @op={0x18}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa54}, @assoc={0x18, 0x117, 0x4, 0x369a}, @assoc={0x18, 0x117, 0x4, 0xc}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x1b0, 0x4000850}, {0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000003e80)="1577c98fc5feddc4afb939fe46dba8f5fdb3ae5bdcf2eb48974a4ee5b33f977215576fb128b385521df40007f5629029208b703ffa81b21d9ff28b811392c24e3cd6773caaaa2d8952df", 0x4a}, {&(0x7f0000003f00)="8f10669916cbdd7dc782275baa6ac0fa7ce6b2d827aad4884b9b4fba2793071781e6070630a8aee26c2e2c86244ba72bd0fac6680f2fd9e72619c8fc04e69ce0cf2b33273d2e7d4a1afba1473a5e98fc99518ea0d06ab410343e10748adf853d869b8dab6603e64be01a257182aa78c437f3b7668ce14957e7bc94ec371f3fc5ff5dd287a20997023363dc92fed1808132eb57a6452e05b08dd20c51c7709cb3abd960b2190a6cc48060bd67c28b1e6724dc7922c4da433d9a7ff0850943ffb5babdf6180f8713e3e59d00ad499cf9f3f70b8db4e9b9c96554e04718778b3bdf7b7178355f7703ad22c302c0c7c6330f3c", 0xf1}, {&(0x7f0000004000)="f20f077d5e459a4a2582f3c7c3d1d14ea83a4de42d46c58a0144b9bf02b7ffcafba9a3741630cd29af44f1e8f1ceecca015b85f0895d6a566b3aee1ad4252d2686bec0d45c0105b896266d09e7a5047de15b04cb63f93a311e98840d85de52952941e89cbec16121e3e9bd40d16a0ff452eed23da72d391e6ca5f77901b7b070a94096f92c0a4243a94e69c6d7ba9aaf8d949c7c7b267de08703a3bfb2f5538e4f53e5cd930e523771ac9da8f6ea1aaca38ae8a01d0fb64a88200e06d024ed2dcba3df27d7271e3af7ed9cdfe236625748dfac1ef54340f285ef500b889586cdbf21b4edd0f6ec204e6f0db6e40251d4151673b234", 0xf5}], 0x3, 0x0, 0x0, 0x40428c0}, {0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004a40)="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", 0x1000}, {0x0}, {&(0x7f0000004140)="41516b26fd96c88f6a6f66008d387d0d42e1ad7fc317", 0x16}, {&(0x7f0000006a40)="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", 0xfe0}, {0x0}, {&(0x7f0000004240)}, {&(0x7f0000004340)="6c2b630b573a6f5f91eac73d9000deb1a04affa5012653edd301e8c357868cf2c33389c138a6e3b41fe60d32a462a872a5fe50f27c8d55d63f055c7365e609d6da334a891476c35a5e6c42b23f171602d9bca67561c49bd0bcf8033efbd451a56db5fe7b481c3643a1917791610b83b662ecde557459b464dd2e4078d261dd3b875779b72fe2a294", 0x88}, {&(0x7f0000004400)="707a47b08d0f9ef9a087c4fc8851e90f04b34d41be6dedebd7", 0x19}], 0x8, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004480)="52014e42b75b477cb362eac801549ffb88b8a780e17de40592ecc30a2217b7db003eb4d533ef666f6806d6d2eaacc3504e0199dd63e1f1ece75b6d26fb4b9a9b3a3b10adabb7a1ba0508938f4853e45cbba0b4a8fad51d54f7f42e2c2655e0abcd60cb001bbd10af7e10f7f425340c7589830bf6def4be3857ea82a20c41a74f551c13007b52186fadf2288883b00224434c202b46", 0x95}], 0x1, &(0x7f0000004580)=[@iv={0x68, 0x117, 0x2, 0x4d, "45dfd72bf65f6c8b1bbe04bf6300915360b8a2660c2e63b8cd95b7e68f3cc6f4146f045382711a85704be99fb750cc559674917b4a3072ac6523c70cf6ac14552b2524f08a505bcfa56c18603a"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x80, 0x4080}, {0x0, 0x0, 0x0, 0x0, &(0x7f000000a3c0)=ANY=[@ANYBLOB], 0x2d8, 0x80}, {0x0, 0x0, &(0x7f000000a240)=[{&(0x7f0000009140)="42dbbf710c65656a52cf858b8a7c33de633f57145a7934b7c71ab9fe35cd501058c28b7900ab73d8285cc9111f7393f8741a0befefe9e2f358a7c2459c409f4dc3a818f726b59930b95b9592b19db91b2a5a632dc3ce15f701e10c6a51cf6544dd3b9793744b23b88ebab2f3f7795116db90e1fef518c6772e560079a1d792", 0x7f}, {0x0}, {&(0x7f0000009240)}], 0x3, &(0x7f000000a280), 0x0, 0x90}], 0x7, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r7 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r7) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x200000a) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f00000000c0)='affs\x00', 0x8007, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.477374086s ago: executing program 0 (id=3506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a14000000020a01"], 0x3c}}, 0x0) 1.435580796s ago: executing program 2 (id=3507): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000001880)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd60010000009c110020010000000000000000000000000000fe8000000000000000000000000000aa4e"], 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000440)=""/239, 0xef}], 0x2}, 0x10000) 896.126667ms ago: executing program 4 (id=3508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x4}) sendmsg$unix(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 680.505255ms ago: executing program 0 (id=3509): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)='_', 0xffc3}], 0x1}, 0x880) 597.064205ms ago: executing program 0 (id=3510): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 493.142379ms ago: executing program 4 (id=3511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x4b8, 0xffffffff, 0x328, 0x328, 0x328, 0xfeffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x7f000000, 0xff000000], 'vcan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x2f, 0x7, 0x2, 0x40}, 0x2f2, 0x23c, 0x260, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x100000000000, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [0x0, 0x0, 0x0, 0xffffffff], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x514) 389.178053ms ago: executing program 0 (id=3512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000"], 0x20}}, 0x0) 342.872269ms ago: executing program 4 (id=3513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 0s ago: executing program 4 (id=3514): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000580000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='net_dev_start_xmit\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000", @ANYRES8=r3, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): 536.210696][ T30] audit: type=1400 audit(1734279819.293:312770): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 536.238695][ T30] audit: type=1400 audit(1734279819.293:312771): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 536.255830][ T5827] audit: audit_lost=134783 audit_rate_limit=0 audit_backlog_limit=64 [ 536.261895][ T30] audit: type=1400 audit(1734279819.293:312772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 536.289046][ T5827] audit: backlog limit exceeded [ 536.294925][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.301498][ T5827] audit: audit_lost=134784 audit_rate_limit=0 audit_backlog_limit=64 [ 536.310287][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.040588][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.213720][T12851] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 537.913847][T12879] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2591'. [ 538.036753][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 538.158937][T12886] bond3 (unregistering): Released all slaves [ 538.304625][T12891] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 540.046121][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 540.046124][T12935] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 540.152555][T12940] bond4 (unregistering): Released all slaves [ 541.153068][ T30] kauditd_printk_skb: 9617 callbacks suppressed [ 541.153088][ T30] audit: type=1400 audit(1734279824.273:318144): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12979 comm="syz-executor" path="/proc/1393/oom_score_adj" dev="proc" ino=31391 [ 541.203862][ T30] audit: type=1400 audit(1734279824.273:318145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12979 comm="syz-executor" name="544" dev="tmpfs" ino=2829 [ 541.208289][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.230421][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.236657][ T30] audit: type=1400 audit(1734279824.273:318146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12979 comm="syz-executor" name="544" dev="tmpfs" ino=2829 [ 541.236992][ C0] audit: audit_lost=136208 audit_rate_limit=0 audit_backlog_limit=64 [ 541.264314][ C0] audit: backlog limit exceeded [ 541.282380][ T5827] audit: audit_lost=136209 audit_rate_limit=0 audit_backlog_limit=64 [ 541.306804][ T5827] audit: backlog limit exceeded [ 541.312913][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.242315][ T6077] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 543.517513][ T6077] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.551872][ T6077] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.612099][ T6077] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.639777][ T6077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.707405][ T6077] usb 5-1: Product: syz [ 543.726442][ T6077] usb 5-1: Manufacturer: syz [ 543.731117][ T6077] usb 5-1: SerialNumber: syz [ 544.056124][ T6077] usb 5-1: 0:2 : does not exist [ 544.199756][ T6077] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 544.599394][ T6077] usb 5-1: USB disconnect, device number 6 [ 546.323729][ T30] kauditd_printk_skb: 6678 callbacks suppressed [ 546.323756][ T30] audit: type=1400 audit(1734279829.163:322689): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6064 comm="kworker/0:14" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 547.001831][ T30] audit: type=1400 audit(1734279829.163:322690): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6064 comm="kworker/0:14" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 547.092374][ T30] audit: type=1400 audit(1734279829.163:322691): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13088 comm="syz.1.2686" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 548.068427][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.075345][ T5815] audit: audit_lost=136926 audit_rate_limit=0 audit_backlog_limit=64 [ 548.083543][ T5815] audit: backlog limit exceeded [ 548.085087][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.088499][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.096229][ T5821] audit: audit_lost=136927 audit_rate_limit=0 audit_backlog_limit=64 [ 548.101765][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.795107][T13123] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2699'. [ 551.335869][ T30] kauditd_printk_skb: 3044 callbacks suppressed [ 551.335889][ T30] audit: type=1400 audit(1734279834.453:324426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5815 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 551.351489][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 551.365695][T13148] audit: audit_backlog=66 > audit_backlog_limit=64 [ 551.375503][T13148] audit: audit_lost=137366 audit_rate_limit=0 audit_backlog_limit=64 [ 551.383902][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 551.390516][ C0] audit: audit_lost=137367 audit_rate_limit=0 audit_backlog_limit=64 [ 551.398693][ C0] audit: backlog limit exceeded [ 551.404773][ T5815] audit: audit_lost=137368 audit_rate_limit=0 audit_backlog_limit=64 [ 551.413151][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 551.413179][ C0] audit: audit_lost=137369 audit_rate_limit=0 audit_backlog_limit=64 [ 551.632447][T13159] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2714'. [ 553.547241][T13174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.772727][T13188] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2725'. [ 555.063650][T13191] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 556.400053][ T30] kauditd_printk_skb: 2495 callbacks suppressed [ 556.400078][ T30] audit: type=1400 audit(1734279838.743:326336): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13195 comm="syz.0.2729" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 556.808881][ T30] audit: type=1400 audit(1734279839.243:326337): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13195 comm="syz.0.2729" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 557.190778][ T30] audit: type=1400 audit(1734279839.743:326338): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13195 comm="syz.0.2729" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 557.420148][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.424524][ T30] audit: type=1400 audit(1734279839.923:326339): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13207 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 557.445993][ T5815] audit: audit_lost=137564 audit_rate_limit=0 audit_backlog_limit=64 [ 557.446021][ T5815] audit: backlog limit exceeded [ 557.446122][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.446137][ T5815] audit: audit_lost=137565 audit_rate_limit=0 audit_backlog_limit=64 [ 557.446154][ T5815] audit: backlog limit exceeded [ 557.543961][T13202] bond4 (unregistering): Released all slaves [ 557.887449][T13228] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2739'. [ 557.911408][T13231] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 559.567618][T13248] usb usb7: usbfs: process 13248 (syz.4.2747) did not claim interface 0 before use [ 560.556742][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 560.825384][T13270] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 560.836810][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.853565][T13270] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.862068][T13270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.874962][T13270] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 562.115318][ T30] kauditd_printk_skb: 4701 callbacks suppressed [ 562.115342][ T30] audit: type=1400 audit(1734279844.753:328927): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13271 comm="syz.1.2758" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 563.159497][ T30] audit: type=1400 audit(1734279846.213:328928): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5486 comm="dhcpcd" [ 563.223437][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.230005][ T5816] audit: audit_lost=138278 audit_rate_limit=0 audit_backlog_limit=64 [ 563.231930][ T30] audit: type=1400 audit(1734279846.213:328929): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5486 comm="dhcpcd" [ 563.241976][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.254021][ T30] audit: type=1400 audit(1734279846.213:328930): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5486 comm="dhcpcd" [ 563.261852][ T5816] audit: backlog limit exceeded [ 563.276056][ T30] audit: type=1400 audit(1734279846.213:328931): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5486 comm="dhcpcd" [ 563.282079][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.523869][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 563.714171][T13304] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 564.008900][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 564.370567][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 564.609650][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.624048][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 565.198085][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2802'. [ 566.632207][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 567.420221][T13429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2825'. [ 567.430635][ T30] kauditd_printk_skb: 9974 callbacks suppressed [ 567.430655][ T30] audit: type=1400 audit(1734279850.153:334571): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13417 comm="syz.2.2823" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 567.480088][ T30] audit: type=1400 audit(1734279850.153:334572): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13417 comm="syz.2.2823" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 567.503339][ T30] audit: type=1400 audit(1734279850.153:334573): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13417 comm="syz.2.2823" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 567.526507][ T30] audit: type=1400 audit(1734279850.243:334574): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13417 comm="syz.2.2823" name="559" dev="tmpfs" ino=2911 [ 567.546206][ T30] audit: type=1400 audit(1734279850.243:334575): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13417 comm="syz.2.2823" name="559" dev="tmpfs" ino=2911 [ 567.567781][ T30] audit: type=1400 audit(1734279850.243:334576): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13417 comm="syz.2.2823" name="559" dev="tmpfs" ino=2911 [ 567.617767][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 567.624618][ T5831] audit: audit_lost=139751 audit_rate_limit=0 audit_backlog_limit=64 [ 567.633137][ T5831] audit: backlog limit exceeded [ 567.638033][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 567.691214][T13429] bond3 (unregistering): Released all slaves [ 567.758979][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'. [ 567.780021][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'. [ 568.103491][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 568.545404][T13464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2841'. [ 568.572343][T13465] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 568.586802][T13464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2841'. [ 568.638990][T13465] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 569.556953][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 569.863526][T13486] bond3 (unregistering): Released all slaves [ 570.784015][T13501] netlink: 'syz.1.2857': attribute type 7 has an invalid length. [ 570.801928][T13501] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2857'. [ 570.868103][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 572.471814][ T30] kauditd_printk_skb: 5946 callbacks suppressed [ 572.471838][ T30] audit: type=1400 audit(1734279854.763:339009): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13527 comm="syz.0.2869" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 572.501226][ T30] audit: type=1400 audit(1734279855.533:339010): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=13526 comm="syz.1.2868" opid=13526 ocomm="syz.1.2868" [ 572.520704][ T30] audit: type=1400 audit(1734279855.543:339011): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13526 comm="syz.1.2868" name="newroot" dev="tmpfs" ino=2 [ 572.521007][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.539935][ T30] audit: type=1400 audit(1734279855.543:339012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13526 comm="syz.1.2868" name="/" dev="devtmpfs" ino=1 [ 572.539977][ T30] audit: type=1400 audit(1734279855.543:339013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13526 comm="syz.1.2868" name="char" dev="devtmpfs" ino=1318 [ 572.540021][ T30] audit: type=1400 audit(1734279855.543:339014): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13526 comm="syz.1.2868" name="char" dev="devtmpfs" ino=1318 [ 572.540056][ T30] audit: type=1400 audit(1734279855.543:339015): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13526 comm="syz.1.2868" name="/" dev="devtmpfs" ino=1 [ 572.623823][ T5827] audit: audit_lost=140257 audit_rate_limit=0 audit_backlog_limit=64 [ 572.623853][ T5827] audit: backlog limit exceeded [ 572.863772][T13547] __nla_validate_parse: 3 callbacks suppressed [ 572.863794][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 572.937701][T13547] bond4 (unregistering): Released all slaves [ 573.135338][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 575.449981][T13587] netlink: 'syz.0.2892': attribute type 25 has an invalid length. [ 575.782192][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 575.791752][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 575.800107][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 575.811843][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 575.823479][ T5819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 575.830983][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 576.207424][ T7057] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.364458][ T7057] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.909460][ T7057] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.197071][ T7057] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.510124][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2903'. [ 577.517381][ T5827] audit_log_start: 5704 callbacks suppressed [ 577.517402][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.521463][ T30] audit: type=1400 audit(1734279860.623:342811): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 577.525282][ T5827] audit: audit_lost=140900 audit_rate_limit=0 audit_backlog_limit=64 [ 577.525305][ T5827] audit: backlog limit exceeded [ 577.525438][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.525456][ T5827] audit: audit_lost=140901 audit_rate_limit=0 audit_backlog_limit=64 [ 577.525474][ T5827] audit: backlog limit exceeded [ 577.525703][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.525720][ T5827] audit: audit_lost=140902 audit_rate_limit=0 audit_backlog_limit=64 [ 577.525744][ T5827] audit: backlog limit exceeded [ 577.578147][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2903'. [ 578.170961][ T5819] Bluetooth: hci5: command tx timeout [ 578.503334][T13629] netlink: 'syz.2.2905': attribute type 25 has an invalid length. [ 578.703179][T13591] chnl_net:caif_netlink_parms(): no params data found [ 578.919622][ T7057] bridge_slave_1: left allmulticast mode [ 578.943393][ T7057] bridge_slave_1: left promiscuous mode [ 578.969702][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.107669][ T7057] bridge_slave_0: left allmulticast mode [ 579.132612][ T7057] bridge_slave_0: left promiscuous mode [ 579.161956][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.485760][ T5819] Bluetooth: hci5: command tx timeout [ 580.945874][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 582.003178][ T7057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.023332][ T7057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.045842][ T7057] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 582.080641][ T7057] bond0 (unregistering): Released all slaves [ 582.094089][ T7057] bond1 (unregistering): Released all slaves [ 582.107809][ T7057] bond2 (unregistering): Released all slaves [ 582.486493][T13591] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.494042][T13591] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.501534][T13591] bridge_slave_0: entered allmulticast mode [ 582.508786][T13591] bridge_slave_0: entered promiscuous mode [ 582.522859][ T5821] audit_log_start: 3675 callbacks suppressed [ 582.522877][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.551890][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.553505][ T7057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.558436][ C0] audit: audit_lost=141335 audit_rate_limit=0 audit_backlog_limit=64 [ 582.558457][ C0] audit: backlog limit exceeded [ 582.559244][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.565809][ T5819] Bluetooth: hci5: command tx timeout [ 582.573377][ C0] audit: audit_lost=141336 audit_rate_limit=0 audit_backlog_limit=64 [ 582.573400][ C0] audit: backlog limit exceeded [ 582.604040][ T30] audit: type=1400 audit(1734279865.633:345191): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 582.623521][ T5821] audit: audit_lost=141337 audit_rate_limit=0 audit_backlog_limit=64 [ 584.399317][T13591] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.500584][T13591] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.508061][T13698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2927'. [ 584.521987][T13591] bridge_slave_1: entered allmulticast mode [ 584.529279][T13591] bridge_slave_1: entered promiscuous mode [ 584.641914][ T5819] Bluetooth: hci5: command tx timeout [ 585.623120][T13591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.674434][T13710] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2932'. [ 585.694290][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 585.739859][T13591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.074618][ T7057] hsr_slave_0: left promiscuous mode [ 586.107636][ T7057] hsr_slave_1: left promiscuous mode [ 586.151493][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.180076][T13721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2935'. [ 586.189389][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.404339][T13721] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2935'. [ 587.728352][ T30] kauditd_printk_skb: 1985 callbacks suppressed [ 587.728377][ T30] audit: type=1400 audit(1734279870.393:346529): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13717 comm="syz.0.2936" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 587.777043][ T7057] veth1_macvtap: left promiscuous mode [ 587.808971][ T7057] veth0_macvtap: left promiscuous mode [ 587.937522][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.944856][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.951418][ C0] audit: audit_lost=141554 audit_rate_limit=0 audit_backlog_limit=64 [ 587.959565][ C0] audit: backlog limit exceeded [ 587.965531][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.972137][ C0] audit: audit_lost=141555 audit_rate_limit=0 audit_backlog_limit=64 [ 587.975358][ T5831] audit: audit_lost=141556 audit_rate_limit=0 audit_backlog_limit=64 [ 587.980212][ C0] audit: backlog limit exceeded [ 587.994416][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2939'. [ 588.011923][ T7057] veth1_vlan: left promiscuous mode [ 588.027308][ T7057] veth0_vlan: left promiscuous mode [ 588.035848][T13731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.492145][T13631] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 588.859990][T13631] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 588.940285][T13631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.149137][T13631] usb 5-1: Product: syz [ 589.166811][T13743] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2944'. [ 589.177036][T13631] usb 5-1: Manufacturer: syz [ 589.210264][T13631] usb 5-1: SerialNumber: syz [ 589.227895][T13631] usb 5-1: config 0 descriptor?? [ 589.363604][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 589.473523][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 589.698538][ T7057] team0 (unregistering): Port device team_slave_1 removed [ 589.746357][ T7057] team0 (unregistering): Port device team_slave_0 removed [ 590.253628][T13591] team0: Port device team_slave_0 added [ 590.273740][T13591] team0: Port device team_slave_1 added [ 590.303429][T13631] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 590.352216][T13631] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 590.362571][T13631] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 590.369468][T13631] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 590.533429][T13631] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 590.536042][T13591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.552234][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.599818][T13597] usb 5-1: USB disconnect, device number 7 [ 590.607824][T13591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.622373][T13591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.629465][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.684903][T13591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.772140][T13759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2949'. [ 590.783004][T13759] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2949'. [ 590.870271][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2951'. [ 592.112386][T13591] hsr_slave_0: entered promiscuous mode [ 592.640196][T13591] hsr_slave_1: entered promiscuous mode [ 592.692132][T13591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.728403][T13591] Cannot create hsr debugfs directory [ 592.745478][ T30] kauditd_printk_skb: 1857 callbacks suppressed [ 592.745499][ T30] audit: type=1400 audit(1734279875.863:347860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5831 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 592.895370][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.902209][ T5821] audit: audit_lost=141733 audit_rate_limit=0 audit_backlog_limit=64 [ 592.910318][ T5821] audit: backlog limit exceeded [ 592.916859][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.924476][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.931104][ C0] audit: audit_lost=141734 audit_rate_limit=0 audit_backlog_limit=64 [ 592.939292][ C0] audit: backlog limit exceeded [ 592.944931][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.951483][ C0] audit: audit_lost=141735 audit_rate_limit=0 audit_backlog_limit=64 [ 593.059320][T13777] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2955'. [ 594.130471][T13784] netlink: 'syz.2.2957': attribute type 25 has an invalid length. [ 595.088176][T13794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2961'. [ 595.112211][T13792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2960'. [ 595.121234][T13792] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2960'. [ 595.391098][T13806] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2965'. [ 595.568307][T13591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.595945][T13591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.636984][ T5881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 595.804608][T13591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 595.820450][T13591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.800358][T13591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.827449][T13591] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.146109][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.153437][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.291796][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 597.366226][T13597] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 597.390872][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.398097][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.531881][T13597] usb 5-1: Using ep0 maxpacket: 8 [ 597.593338][T13597] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 597.611951][T13597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.620035][T13597] usb 5-1: Product: syz [ 597.677163][T13597] usb 5-1: Manufacturer: syz [ 597.708136][T13597] usb 5-1: SerialNumber: syz [ 597.755654][T13597] usb 5-1: config 0 descriptor?? [ 597.760700][ T30] kauditd_printk_skb: 2775 callbacks suppressed [ 597.760719][ T30] audit: type=1400 audit(1734279880.873:350046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13830 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 597.820039][T13833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.833934][T13820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.840551][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.840575][ T5821] audit: audit_lost=141945 audit_rate_limit=0 audit_backlog_limit=64 [ 597.855589][T13820] audit: audit_lost=141946 audit_rate_limit=0 audit_backlog_limit=64 [ 597.861961][T13833] audit: audit_lost=141947 audit_rate_limit=0 audit_backlog_limit=64 [ 597.864136][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.877094][T13833] audit: backlog limit exceeded [ 597.878360][ C0] audit: audit_lost=141948 audit_rate_limit=0 audit_backlog_limit=64 [ 597.925468][T13832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2974'. [ 597.943661][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'. [ 597.982784][T13832] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2974'. [ 598.090552][T13840] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2977'. [ 598.156206][T13597] usb read operation failed. (-32) [ 598.175516][T13597] usb write operation failed. (-71) [ 598.193125][T13597] usb write operation failed. (-71) [ 598.212158][T13597] usb write operation failed. (-71) [ 598.229192][T13597] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 598.296541][T13597] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 598.325876][T13597] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 599.333998][T13591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.435968][T13591] veth0_vlan: entered promiscuous mode [ 599.593681][T13591] veth1_vlan: entered promiscuous mode [ 599.896060][T13591] veth0_macvtap: entered promiscuous mode [ 600.139436][T13591] veth1_macvtap: entered promiscuous mode [ 600.527985][T13591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.559536][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2984'. [ 600.579912][T13591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.595804][T13591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.648444][T13868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2986'. [ 600.661775][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 600.667354][T13591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.673816][T13869] netlink: 'syz.4.2985': attribute type 10 has an invalid length. [ 600.695018][T13868] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2986'. [ 600.701112][T13591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.714802][T13591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.728544][T13591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.750633][T13591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.769783][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.843378][T13591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.862283][T13591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.884517][T13591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.901477][T13591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.791987][ T30] kauditd_printk_skb: 2765 callbacks suppressed [ 602.792037][ T30] audit: type=1400 audit(1734279885.433:352451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13591 comm="syz-executor" name="netdev:wlan0" dev="debugfs" ino=35397 [ 603.021012][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.030413][T13591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.037621][ T5815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.044610][ T5831] audit: audit_backlog=66 > audit_backlog_limit=64 [ 603.051146][ T5831] audit: audit_lost=142090 audit_rate_limit=0 audit_backlog_limit=64 [ 603.072037][T13591] audit: audit_lost=142091 audit_rate_limit=0 audit_backlog_limit=64 [ 603.080207][T13591] audit: backlog limit exceeded [ 603.085414][ T5827] audit: audit_lost=142092 audit_rate_limit=0 audit_backlog_limit=64 [ 603.093682][ T5815] audit: audit_lost=142093 audit_rate_limit=0 audit_backlog_limit=64 [ 603.421359][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.479322][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.604473][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.672915][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.629216][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 605.949953][T13930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 605.959607][T13930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 605.967935][T13930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 605.975973][T13930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 605.991886][T13930] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 605.999318][T13930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.128944][ T5815] syz-executor (5815) used greatest stack depth: 18768 bytes left [ 606.380735][T13926] chnl_net:caif_netlink_parms(): no params data found [ 607.350026][T13926] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.361291][T13926] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.370352][T13926] bridge_slave_0: entered allmulticast mode [ 607.385459][T13926] bridge_slave_0: entered promiscuous mode [ 607.581970][T13926] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.589315][T13926] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.713487][T13926] bridge_slave_1: entered allmulticast mode [ 607.731446][T13926] bridge_slave_1: entered promiscuous mode [ 608.098767][ T5819] Bluetooth: hci1: command tx timeout [ 608.284304][ T30] kauditd_printk_skb: 4559 callbacks suppressed [ 608.284355][ T30] audit: type=1400 audit(1734279891.303:355273): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13960 comm="syz.1.3013" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 608.397499][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.434811][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.441387][ C0] audit: audit_lost=142673 audit_rate_limit=0 audit_backlog_limit=64 [ 608.449494][ C0] audit: backlog limit exceeded [ 608.454935][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.461459][ C0] audit: audit_lost=142674 audit_rate_limit=0 audit_backlog_limit=64 [ 608.469561][ C0] audit: backlog limit exceeded [ 608.481992][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.488569][ C0] audit: audit_lost=142675 audit_rate_limit=0 audit_backlog_limit=64 [ 608.623442][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 608.664333][T13926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.677482][T13926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.808150][T13926] team0: Port device team_slave_0 added [ 608.828289][T13926] team0: Port device team_slave_1 added [ 608.989975][T13926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.005532][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.036470][T13926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.084605][T13926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.091579][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.144459][T13926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.343510][T13926] hsr_slave_0: entered promiscuous mode [ 609.365093][T13926] hsr_slave_1: entered promiscuous mode [ 609.414393][T13926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.448903][T13926] Cannot create hsr debugfs directory [ 610.171822][ T5819] Bluetooth: hci1: command tx timeout [ 610.772474][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 611.005179][T14004] input: syz1 as /devices/virtual/input/input6 [ 611.571812][ T6063] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 611.736199][T13926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.756177][ T6063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.775983][ T6063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.790356][T13926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.798884][ T6063] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 611.812442][T13926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.822242][ T6063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.839053][T13926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 611.849959][ T6063] usb 1-1: config 0 descriptor?? [ 611.891870][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 612.022355][T13926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.040184][T13926] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.064961][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.072176][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.118303][ T5922] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 612.136449][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.149573][ T5922] usb 2-1: Product: syz [ 612.156474][ T5922] usb 2-1: Manufacturer: syz [ 612.163839][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.171072][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.185904][ T5922] usb 2-1: SerialNumber: syz [ 612.200003][ T5922] usb 2-1: config 0 descriptor?? [ 612.241814][ T5819] Bluetooth: hci1: command tx timeout [ 612.259456][T13926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.281764][T13926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.297806][ T6063] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 612.307284][ T6063] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 612.321938][ T6063] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 612.330867][ T6063] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 612.338177][ T6063] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 612.359554][ T6063] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 612.415741][ T5922] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 612.424265][ T5922] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -32) [ 612.546731][ T5922] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32 [ 612.601003][ T5922] usb 2-1: USB disconnect, device number 6 [ 612.945753][T13926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.999997][T13926] veth0_vlan: entered promiscuous mode [ 613.040396][T13926] veth1_vlan: entered promiscuous mode [ 613.089269][T13926] veth0_macvtap: entered promiscuous mode [ 613.102897][T13926] veth1_macvtap: entered promiscuous mode [ 613.126895][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.137547][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.148140][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.159294][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.169505][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.180293][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.191208][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.201899][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.212854][T13926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.253712][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 613.277501][T13926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.288475][T13926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.297024][ T30] kauditd_printk_skb: 4114 callbacks suppressed [ 613.297045][ T30] audit: type=1400 audit(1734279896.413:359028): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14032 comm="syz-executor" name="590" dev="tmpfs" ino=3050 [ 613.300288][T13926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.305137][ T30] audit: type=1400 audit(1734279896.423:359029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14032 comm="syz-executor" name="590" dev="tmpfs" ino=3050 [ 613.404195][T13926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.428753][ T6063] usb 1-1: USB disconnect, device number 6 [ 613.436622][T13591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.437935][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.452281][ T27] audit: audit_lost=142800 audit_rate_limit=0 audit_backlog_limit=64 [ 613.460344][T13926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.460395][T13926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.460427][T13926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.469353][T13591] audit: audit_lost=142801 audit_rate_limit=0 audit_backlog_limit=64 [ 613.471155][ T30] audit: type=1400 audit(1734279896.473:359030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14032 comm="syz-executor" name="590" dev="tmpfs" ino=3050 [ 613.510350][T13591] audit: backlog limit exceeded [ 613.539659][T13591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.545098][ T27] audit: backlog limit exceeded [ 613.681253][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.702470][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.822814][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.839861][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.322067][ T5819] Bluetooth: hci1: command tx timeout [ 614.460474][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 614.512554][T13930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.561344][T13930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.570525][T13930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.660035][T13930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.669201][T13930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 614.678179][T13930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.944664][T14066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3052'. [ 614.975986][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3052'. [ 614.999626][T14066] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3052'. [ 615.030844][T14066] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3052'. [ 615.073045][T14068] netlink: 'syz.2.3053': attribute type 10 has an invalid length. [ 615.090027][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.097622][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.119462][T14068] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.126724][T14068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.134293][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.141441][T14068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.154243][T14068] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 615.438952][T14079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.446733][T14079] IPv6: NLM_F_CREATE should be set when creating new route [ 615.454028][T14079] IPv6: NLM_F_CREATE should be set when creating new route [ 615.513806][T14054] chnl_net:caif_netlink_parms(): no params data found [ 615.557740][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 615.657518][ T67] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.859200][ T67] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.869419][ T5922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 615.934079][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.956457][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.974836][T14054] bridge_slave_0: entered allmulticast mode [ 615.982517][T14054] bridge_slave_0: entered promiscuous mode [ 616.001358][ T67] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.025748][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.031872][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 616.040966][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.054847][T14054] bridge_slave_1: entered allmulticast mode [ 616.065201][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 616.065744][T14054] bridge_slave_1: entered promiscuous mode [ 616.093678][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.122807][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 616.137558][ T67] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.147876][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.147909][ T5922] usb 3-1: Product: syz [ 616.147927][ T5922] usb 3-1: Manufacturer: syz [ 616.147945][ T5922] usb 3-1: SerialNumber: syz [ 616.150769][ T5922] usb 3-1: config 0 descriptor?? [ 616.242405][ T5922] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 616.258126][ T5922] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 616.317464][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.369058][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.561980][T14054] team0: Port device team_slave_0 added [ 616.630460][T14054] team0: Port device team_slave_1 added [ 616.856127][ T5922] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 616.886188][ T5819] Bluetooth: hci0: command tx timeout [ 616.896531][ T5922] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 616.908416][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.947463][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.075950][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.188040][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.217859][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.286081][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.474440][T14106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3064'. [ 617.507451][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 617.539749][T14106] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3064'. [ 617.562050][T14106] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3064'. [ 617.586992][ T67] bridge_slave_1: left allmulticast mode [ 617.611929][ T5922] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 617.620714][ T5922] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 617.620990][ T67] bridge_slave_1: left promiscuous mode [ 617.672855][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.703672][ T67] bridge_slave_0: left allmulticast mode [ 617.709377][ T67] bridge_slave_0: left promiscuous mode [ 617.734958][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.821735][ T5922] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 617.834096][ T5922] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 618.029502][ T5922] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 618.038062][ T5922] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 618.068549][ T5922] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 618.106863][ T5922] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 618.145431][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 618.148888][ T5922] usb 3-1: USB disconnect, device number 10 [ 618.351085][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.367471][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.378390][ T67] bond0 (unregistering): Released all slaves [ 618.391307][ T67] bond1 (unregistering): Released all slaves [ 618.530149][ T67] bond2 (unregistering): Released all slaves [ 618.543566][ T67] bond3 (unregistering): Released all slaves [ 618.560381][T14054] hsr_slave_0: entered promiscuous mode [ 618.572912][ T30] kauditd_printk_skb: 5948 callbacks suppressed [ 618.572932][ T30] audit: type=1400 audit(1734279901.693:363285): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5805 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 618.603810][T14054] hsr_slave_1: entered promiscuous mode [ 618.609504][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.612162][ T30] audit: type=1400 audit(1734279901.693:363286): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 618.622013][T13926] audit: audit_lost=143369 audit_rate_limit=0 audit_backlog_limit=64 [ 618.646851][T14054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.655021][T14054] Cannot create hsr debugfs directory [ 618.665146][ T30] audit: type=1400 audit(1734279901.693:363287): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 618.681777][T13926] audit: backlog limit exceeded [ 618.705843][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.712996][T13926] audit: audit_lost=143370 audit_rate_limit=0 audit_backlog_limit=64 [ 618.722230][ T30] audit: type=1400 audit(1734279901.723:363288): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13926 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.722673][T13926] audit: backlog limit exceeded [ 618.975797][ T5819] Bluetooth: hci0: command tx timeout [ 619.035122][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 619.447028][ T67] hsr_slave_0: left promiscuous mode [ 619.465497][ T67] hsr_slave_1: left promiscuous mode [ 619.471899][T14134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3075'. [ 619.482155][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3075'. [ 619.491327][T14134] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3075'. [ 619.500849][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.500931][T14134] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3075'. [ 619.517631][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.557691][ T67] veth1_macvtap: left promiscuous mode [ 619.568290][ T67] veth0_macvtap: left promiscuous mode [ 619.993272][ T67] team0 (unregistering): Port device team_slave_1 removed [ 620.046198][ T67] team0 (unregistering): Port device team_slave_0 removed [ 620.981359][T14152] bond4 (unregistering): Released all slaves [ 621.045427][T13930] Bluetooth: hci0: command tx timeout [ 621.175670][T14157] netlink: 'syz.1.3084': attribute type 10 has an invalid length. [ 621.209145][ T67] IPVS: stop unused estimator thread 0... [ 621.216878][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.224435][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.275413][T14157] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.282740][T14157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.290218][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.297424][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.334031][T14157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 621.472489][T14054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 621.513397][T14054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 621.572178][T14054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 621.601802][T14054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 621.647227][T14173] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 622.042533][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.063416][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.075628][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.082811][ T7057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.196643][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.203963][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.443881][T14188] bond4 (unregistering): Released all slaves [ 622.695926][T14203] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 622.963180][T14054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.099601][T14054] veth0_vlan: entered promiscuous mode [ 623.107642][T14213] __nla_validate_parse: 20 callbacks suppressed [ 623.107664][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 623.125123][T13930] Bluetooth: hci0: command tx timeout [ 623.163163][T14054] veth1_vlan: entered promiscuous mode [ 623.207615][T14054] veth0_macvtap: entered promiscuous mode [ 623.228955][T14054] veth1_macvtap: entered promiscuous mode [ 623.253135][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.270736][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.280737][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.295443][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.306595][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.317881][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.327913][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.338451][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.349720][T14054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.383782][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.395069][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.405523][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.416129][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.427187][T14054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.438855][T14054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.448033][T14054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.456882][T14054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.465760][T14054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.582331][ T30] kauditd_printk_skb: 6617 callbacks suppressed [ 623.582351][ T30] audit: type=1400 audit(1734279906.693:368467): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="syz-executor" name="statistics" dev="debugfs" ino=37793 [ 623.627272][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.653947][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.681951][ T30] audit: type=1400 audit(1734279906.693:368468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="syz-executor" name="statistics" dev="debugfs" ino=37793 [ 623.691306][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 623.703336][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 623.709928][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 623.723009][ C0] audit: audit_lost=143852 audit_rate_limit=0 audit_backlog_limit=64 [ 623.726313][T13926] audit: audit_lost=143853 audit_rate_limit=0 audit_backlog_limit=64 [ 623.731087][ C0] audit: backlog limit exceeded [ 623.732077][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 623.744854][ T30] audit: type=1400 audit(1734279906.693:368469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="syz-executor" name="statistics" dev="debugfs" ino=37793 [ 623.859185][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.870510][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.085720][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 624.108958][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3112'. [ 624.171362][T14231] bond1 (unregistering): Released all slaves [ 624.181720][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 624.342431][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 624.371138][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 624.403659][T14237] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 624.775491][ T25] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 624.784733][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.792860][ T25] usb 3-1: Product: syz [ 624.797060][ T25] usb 3-1: Manufacturer: syz [ 624.801773][ T25] usb 3-1: SerialNumber: syz [ 624.854947][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.864836][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.866460][ T25] usb 3-1: config 0 descriptor?? [ 624.873946][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.887140][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.895812][ T5819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 624.903540][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.910372][ T25] usb 3-1: no audio or video endpoints found [ 625.296396][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.307281][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.544479][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.579592][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.676616][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.687828][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.710579][T14247] chnl_net:caif_netlink_parms(): no params data found [ 625.752862][ T6077] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 625.798139][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.818977][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.914487][ T6077] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.927032][ T6077] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.944496][ T6077] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 625.956610][ T6077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 625.972124][ T6077] usb 2-1: SerialNumber: syz [ 626.001364][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.012824][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.021710][T14247] bridge_slave_0: entered allmulticast mode [ 626.029717][T14247] bridge_slave_0: entered promiscuous mode [ 626.040831][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.049446][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.056994][T14247] bridge_slave_1: entered allmulticast mode [ 626.064232][T14247] bridge_slave_1: entered promiscuous mode [ 626.176731][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.204735][ T6077] usb 2-1: 0:2 : does not exist [ 626.224865][ T6077] usb 2-1: USB disconnect, device number 7 [ 626.243273][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.317229][ T52] bridge_slave_1: left allmulticast mode [ 626.324554][ T52] bridge_slave_1: left promiscuous mode [ 626.331042][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.341201][ T52] bridge_slave_0: left allmulticast mode [ 626.347238][ T52] bridge_slave_0: left promiscuous mode [ 626.353704][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.896655][ T52] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 626.962197][T13930] Bluetooth: hci2: command tx timeout [ 627.053920][ T5869] usb 3-1: USB disconnect, device number 11 [ 627.073663][ T1087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 627.491236][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.531156][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.551122][ T52] bond0 (unregistering): Released all slaves [ 627.577698][ T52] bond1 (unregistering): Released all slaves [ 627.624823][ T52] bond2 (unregistering): (slave bond3): Releasing backup interface [ 627.664947][ T52] bond2 (unregistering): Released all slaves [ 627.942899][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 628.273376][ T52] bond3 (unregistering): Released all slaves [ 628.374396][T14247] team0: Port device team_slave_0 added [ 628.487076][T14290] bond4 (unregistering): Released all slaves [ 628.592670][T14247] team0: Port device team_slave_1 added [ 628.598336][ T30] kauditd_printk_skb: 4096 callbacks suppressed [ 628.598363][ T30] audit: type=1400 audit(1734279911.713:371844): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14296 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 628.680024][ T30] audit: type=1400 audit(1734279911.713:371845): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14296 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 628.727684][ T30] audit: type=1400 audit(1734279911.713:371846): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14296 comm="syz-executor" name="25" dev="tmpfs" ino=141 [ 628.747859][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.751722][ T30] audit: type=1400 audit(1734279911.713:371847): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=14296 comm="syz-executor" opid=14296 ocomm="syz-executor" [ 628.759605][ T5827] audit: audit_lost=144095 audit_rate_limit=0 audit_backlog_limit=64 [ 628.783305][ T5827] audit: backlog limit exceeded [ 628.806744][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.818619][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.825511][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.829607][ T30] audit: type=1400 audit(1734279911.713:371848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14296 comm="syz-executor" name="25" dev="tmpfs" ino=141 [ 628.851975][ T5827] audit: audit_lost=144096 audit_rate_limit=0 audit_backlog_limit=64 [ 628.887668][ T6064] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 628.897277][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.928091][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.952959][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.028738][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.042748][T13930] Bluetooth: hci2: command tx timeout [ 629.061920][ T6064] usb 3-1: Using ep0 maxpacket: 16 [ 629.083638][ T6064] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 629.111811][ T6064] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 629.141704][ T6064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.175521][ T6064] usb 3-1: config 0 descriptor?? [ 629.206845][ T6064] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 629.387928][ T6064] bcm5974 3-1:0.0: could not read from device [ 629.484151][ T52] hsr_slave_0: left promiscuous mode [ 629.499915][ T52] hsr_slave_1: left promiscuous mode [ 629.528563][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.556951][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.672227][ T5178] bcm5974 3-1:0.0: could not read from device [ 629.683864][ T52] veth1_macvtap: left promiscuous mode [ 629.700134][ T52] veth0_macvtap: left promiscuous mode [ 629.706021][ T6064] input: failed to attach handler mousedev to device input7, error: -5 [ 629.718462][ T6064] usb 3-1: USB disconnect, device number 12 [ 629.719355][ T5178] bcm5974 3-1:0.0: could not read from device [ 629.731409][ T52] veth1_vlan: left promiscuous mode [ 629.754766][ T52] veth0_vlan: left promiscuous mode [ 629.764577][ T5178] bcm5974 3-1:0.0: could not read from device [ 631.125018][T13930] Bluetooth: hci2: command tx timeout [ 631.304624][ T52] team0 (unregistering): Port device team_slave_1 removed [ 631.353712][ T52] team0 (unregistering): Port device team_slave_0 removed [ 631.817768][T14247] hsr_slave_0: entered promiscuous mode [ 631.825937][T14247] hsr_slave_1: entered promiscuous mode [ 631.832638][T14247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.840381][T14247] Cannot create hsr debugfs directory [ 632.426989][ T52] IPVS: stop unused estimator thread 0... [ 632.461819][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 632.622097][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 632.643415][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.671770][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.701837][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 632.731803][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.781161][T14247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.794360][T14247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.815035][ T25] usb 3-1: config 0 descriptor?? [ 632.825976][ T25] hub 3-1:0.0: USB hub found [ 632.842553][T14247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.881071][T14247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 633.026332][ T25] hub 3-1:0.0: 1 port detected [ 633.278494][T13930] Bluetooth: hci2: command tx timeout [ 633.655769][ T30] kauditd_printk_skb: 3147 callbacks suppressed [ 633.655791][ T30] audit: type=1400 audit(1734279916.773:374544): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14344 comm="syz.2.3146" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 633.759765][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.801735][ T30] audit: type=1400 audit(1734279916.833:374545): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6064 comm="kworker/0:14" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 633.847758][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.852923][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.855500][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.867561][ C0] audit: audit_lost=144250 audit_rate_limit=0 audit_backlog_limit=64 [ 633.873455][ T5827] audit: audit_lost=144251 audit_rate_limit=0 audit_backlog_limit=64 [ 633.875671][ C0] audit: backlog limit exceeded [ 633.884400][ T30] audit: type=1400 audit(1734279916.943:374546): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 633.889658][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.935686][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.996644][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.003846][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.027975][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.035193][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.062383][T14365] batadv0: entered promiscuous mode [ 634.078176][T14365] batadv0: left promiscuous mode [ 634.305012][T14368] hub 3-1:0.0: activate --> -90 [ 634.512081][T14368] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 634.512425][ T6063] usb 3-1: USB disconnect, device number 13 [ 634.684673][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.806215][T14247] veth0_vlan: entered promiscuous mode [ 634.845604][T14247] veth1_vlan: entered promiscuous mode [ 634.901542][T14247] veth0_macvtap: entered promiscuous mode [ 634.947194][T14247] veth1_macvtap: entered promiscuous mode [ 634.998339][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.033180][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.044084][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.065162][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.085765][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.121901][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.141848][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.161895][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.173813][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.224993][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.242832][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.259244][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.279507][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.289648][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.351725][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.372831][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.386243][T14247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.395203][T14247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.404022][T14247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.412818][T14247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.655781][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.696067][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.863350][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.902540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.212241][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'. [ 637.399976][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'. [ 638.647391][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 638.663367][ T30] kauditd_printk_skb: 7340 callbacks suppressed [ 638.663391][ T30] audit: type=1400 audit(1734279921.783:378996): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 638.729323][ T30] audit: type=1400 audit(1734279921.803:378997): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 638.745354][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.750664][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.762939][ C0] audit: audit_lost=145217 audit_rate_limit=0 audit_backlog_limit=64 [ 638.768861][T13591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.771023][ C0] audit: backlog limit exceeded [ 638.777831][T14460] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.783414][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.795740][ C0] audit: audit_lost=145218 audit_rate_limit=0 audit_backlog_limit=64 [ 639.330086][ T6077] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 640.011755][ T6077] usb 2-1: Using ep0 maxpacket: 8 [ 640.019815][ T6077] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.072377][ T6077] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.121671][ T6077] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.150373][ T6077] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.201752][ T6077] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.231484][ T6077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.311951][T14476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3193'. [ 640.669072][ T6077] usb 2-1: GET_CAPABILITIES returned 0 [ 640.674775][ T6077] usbtmc 2-1:16.0: can't read capabilities [ 640.837313][ T6077] usb 2-1: USB disconnect, device number 8 [ 641.086326][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 641.096701][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.111143][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.124276][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.133627][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 641.141055][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.183518][T14480] chnl_net:caif_netlink_parms(): no params data found [ 642.221827][T13631] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 642.382282][T13631] usb 3-1: Using ep0 maxpacket: 16 [ 642.390102][T13631] usb 3-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 642.411918][T13631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 642.438271][T13631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 642.449570][T13631] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.465605][T13631] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 642.488789][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.508861][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.516291][T13631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.532050][T14480] bridge_slave_0: entered allmulticast mode [ 642.544378][T13631] usb 3-1: Product: syz [ 642.548593][T13631] usb 3-1: Manufacturer: syz [ 642.569345][T14480] bridge_slave_0: entered promiscuous mode [ 642.581669][T13631] usb 3-1: SerialNumber: syz [ 642.598096][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.630646][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.649502][T13631] usb 3-1: config 0 descriptor?? [ 642.664159][T13631] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 642.669636][T14480] bridge_slave_1: entered allmulticast mode [ 642.681500][T14480] bridge_slave_1: entered promiscuous mode [ 643.203138][ T5819] Bluetooth: hci4: command tx timeout [ 643.532925][T14480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.556704][T14480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.608414][T14515] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3203'. [ 643.627598][T14516] netlink: 'syz.1.3205': attribute type 10 has an invalid length. [ 643.655823][T14480] team0: Port device team_slave_0 added [ 643.669193][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.676612][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.685323][ T30] kauditd_printk_skb: 3036 callbacks suppressed [ 643.685343][ T30] audit: type=1400 audit(1734279926.783:381397): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=14247 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=49 [ 643.711790][ T30] audit: type=1400 audit(1734279926.783:381398): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=14247 comm="syz-executor" name="7" dev="tmpfs" ino=47 [ 643.734670][T14480] team0: Port device team_slave_1 added [ 643.761227][ T30] audit: type=1400 audit(1734279926.783:381399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 643.782982][T14368] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 643.801238][T14484] audit: audit_backlog=66 > audit_backlog_limit=64 [ 643.801245][T13591] audit: audit_backlog=66 > audit_backlog_limit=64 [ 643.808573][ T30] audit: type=1400 audit(1734279926.783:381400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 643.815162][T14512] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.835330][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.847454][ C0] audit: audit_lost=145433 audit_rate_limit=0 audit_backlog_limit=64 [ 643.855633][ C0] audit: backlog limit exceeded [ 643.877353][T14480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.878619][T13631] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 643.884739][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.913189][T14518] loop2: detected capacity change from 0 to 7 [ 643.941240][T14518] Dev loop2: unable to read RDB block 7 [ 643.947514][T14518] loop2: unable to read partition table [ 643.953585][T14518] loop2: partition table beyond EOD, truncated [ 643.961642][T14518] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 644.011527][T14480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.022642][T14368] usb 1-1: Using ep0 maxpacket: 8 [ 644.031362][T14480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.038457][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.064689][T14480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.105488][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 644.112821][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 644.120602][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 644.127545][T13631] usb 3-1: USB disconnect, device number 14 [ 644.133625][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 644.133650][ C1] gspca_main: Resubmit URB failed with error -19 [ 644.174406][T14368] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 644.184167][T14368] usb 1-1: config 0 has no interface number 0 [ 644.190312][T14368] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.251426][T14368] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 644.263776][T14368] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 644.275036][T14368] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 644.285580][T14368] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.999861][ T5819] Bluetooth: hci4: command tx timeout [ 646.089121][T14480] hsr_slave_0: entered promiscuous mode [ 646.107381][T14480] hsr_slave_1: entered promiscuous mode [ 646.128407][T14480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.284936][T14480] Cannot create hsr debugfs directory [ 646.386139][T14368] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 646.395553][T14368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.403865][T14368] usb 1-1: Product: syz [ 646.408075][T14368] usb 1-1: Manufacturer: syz [ 646.413032][T14368] usb 1-1: SerialNumber: syz [ 646.425464][T14368] usb 1-1: config 0 descriptor?? [ 646.590170][T14368] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 646.724028][T14542] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3215'. [ 646.824697][T14368] usb 1-1: USB disconnect, device number 7 [ 646.957046][T13631] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 647.239143][T14480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.306776][T13631] usb 3-1: Using ep0 maxpacket: 32 [ 647.386969][T13631] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 647.531894][T13631] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 647.565240][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3216'. [ 647.581745][T13631] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 647.620931][T13631] usb 3-1: config 1 has no interface number 0 [ 647.645434][T13631] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.672070][T13631] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 647.691769][T13631] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 647.700952][T13631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.706682][T14548] bond1: entered promiscuous mode [ 647.730026][T13631] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 647.732442][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'. [ 647.822158][T14480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.873529][T14552] bond1 (unregistering): Released all slaves [ 647.885255][T14554] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3218'. [ 647.930702][T13631] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 647.945019][T14480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.091885][T13930] Bluetooth: hci4: command tx timeout [ 648.113197][T14480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.521417][ T6063] usb 3-1: USB disconnect, device number 15 [ 648.549993][ T6063] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 649.178077][ T30] kauditd_printk_skb: 2371 callbacks suppressed [ 649.178123][ T30] audit: type=1400 audit(1734279931.853:383013): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14557 comm="syz.1.3220" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 649.423744][ T30] audit: type=1400 audit(1734279932.533:383014): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 650.266185][ T30] audit: type=1400 audit(1734279932.853:383016): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14557 comm="syz.1.3220" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 650.455657][ T30] audit: type=1400 audit(1734279933.353:383017): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14557 comm="syz.1.3220" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 650.675706][T13930] Bluetooth: hci4: command tx timeout [ 650.701382][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.723333][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.759455][T14565] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.773397][T14565] audit: audit_lost=145688 audit_rate_limit=0 audit_backlog_limit=64 [ 650.781965][T14054] audit: audit_lost=145689 audit_rate_limit=0 audit_backlog_limit=64 [ 650.819442][T13926] audit: audit_lost=145690 audit_rate_limit=0 audit_backlog_limit=64 [ 651.136168][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 651.193248][T14480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 651.243536][T14480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 651.354357][T14480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 651.404449][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3228'. [ 651.563355][T14480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 652.235366][T14586] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3229'. [ 652.251984][ T6064] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 652.274067][T14480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.318097][T14480] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.350733][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.357978][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.399071][T14480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 652.409797][T14480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.424342][ T6064] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 652.433133][ T6064] usb 3-1: config 0 has no interface number 0 [ 652.443823][ T6064] usb 3-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 652.488822][ T6064] usb 3-1: config 0 interface 2 has no altsetting 0 [ 652.551445][ T6064] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 652.601464][ T6064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.638246][ T6064] usb 3-1: Product: syz [ 652.651479][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.658627][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.692577][ T6064] usb 3-1: Manufacturer: syz [ 652.697253][ T6064] usb 3-1: SerialNumber: syz [ 653.447776][ T6064] usb 3-1: config 0 descriptor?? [ 653.458014][T14572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 653.498213][T14600] all (unregistering): Released all slaves [ 653.800008][ T6064] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.816728][ T6064] usb 3-1: invalid MIDI in EP 0 [ 654.215634][T14611] audit_log_start: 3298 callbacks suppressed [ 654.215684][T14611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.228597][T14611] audit: audit_lost=146126 audit_rate_limit=0 audit_backlog_limit=64 [ 654.236969][T14611] audit: backlog limit exceeded [ 654.242113][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.242136][ C0] audit: audit_lost=146127 audit_rate_limit=0 audit_backlog_limit=64 [ 654.242156][ C0] audit: backlog limit exceeded [ 654.262388][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.269351][T14611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 654.277629][ T27] audit: audit_lost=146128 audit_rate_limit=0 audit_backlog_limit=64 [ 654.285956][T14611] audit: audit_lost=146129 audit_rate_limit=0 audit_backlog_limit=64 [ 654.905639][T14480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.942791][ T6064] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 654.989528][ T6064] usb 3-1: USB disconnect, device number 16 [ 655.386128][T14627] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3242'. [ 657.210411][T14480] veth0_vlan: entered promiscuous mode [ 657.221073][T14480] veth1_vlan: entered promiscuous mode [ 657.244982][T14480] veth0_macvtap: entered promiscuous mode [ 657.254007][T14480] veth1_macvtap: entered promiscuous mode [ 657.268794][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.279368][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.290217][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.301340][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.311242][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.321797][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.331678][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.342202][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.352103][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.362912][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.374053][T14480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.385662][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.396196][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.407130][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.425819][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.435844][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.446586][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.456510][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.467035][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.476585][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3254'. [ 657.478266][T14480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.697176][T14480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.778551][T14480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.894493][T14480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.072653][ T1087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.111843][T14480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.324954][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.332983][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.357890][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.365897][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.986258][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 659.223969][ T30] kauditd_printk_skb: 6857 callbacks suppressed [ 659.223989][ T30] audit: type=1400 audit(1734279942.333:389306): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=14054 comm="syz-executor" path="/51" dev="tmpfs" ino=270 [ 659.255941][T14698] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.262915][T14698] audit: audit_lost=146987 audit_rate_limit=0 audit_backlog_limit=64 [ 659.271025][T14698] audit: backlog limit exceeded [ 659.276259][ T30] audit: type=1400 audit(1734279942.343:389307): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 659.297315][T14698] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.303917][T14698] audit: audit_lost=146988 audit_rate_limit=0 audit_backlog_limit=64 [ 659.312418][ T30] audit: type=1400 audit(1734279942.343:389308): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 659.332919][T14698] audit: backlog limit exceeded [ 659.338716][T14698] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.946156][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 660.326840][T13597] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 660.348815][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 660.351751][T13597] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 660.429985][T13597] usb 5-1: USB disconnect, device number 8 [ 660.454392][T14731] bond1: entered promiscuous mode [ 660.493340][T14731] bond1 (unregistering): Released all slaves [ 660.867381][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 662.508595][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 663.363811][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'. [ 664.251347][ T30] kauditd_printk_skb: 5489 callbacks suppressed [ 664.251366][ T30] audit: type=1400 audit(1734279947.363:394464): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14806 comm="syz.4.3315" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 664.313815][T14247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.320393][T14247] audit: audit_lost=147105 audit_rate_limit=0 audit_backlog_limit=64 [ 664.322862][ T30] audit: type=1400 audit(1734279947.413:394465): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14806 comm="syz.4.3315" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 664.329597][T14480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.352467][ T30] audit: type=1400 audit(1734279947.413:394466): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14806 comm="syz.4.3315" saddr=10.128.0.169 src=30008 daddr=10.128.0.252 dest=48208 netif=eth0 [ 664.381929][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.381953][ C0] audit: audit_lost=147106 audit_rate_limit=0 audit_backlog_limit=64 [ 664.381973][ C0] audit: backlog limit exceeded [ 664.388902][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.943533][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3328'. [ 667.161943][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 667.203789][T14855] bond1: entered promiscuous mode [ 667.472117][T14862] bond1 (unregistering): Released all slaves [ 667.881975][T14878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.932586][ T6077] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 668.031177][T14878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.142570][ T6077] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.181666][ T6077] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 668.222387][T14878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.262095][ T6077] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.281750][ T6077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 668.289825][ T6077] usb 5-1: SerialNumber: syz [ 668.374602][T14878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.563613][T14878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.579703][T14545] usb 5-1: USB disconnect, device number 9 [ 668.677266][T14878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.392878][T14878] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.418044][ T30] kauditd_printk_skb: 4231 callbacks suppressed [ 669.418065][ T30] audit: type=1400 audit(1734279952.533:397012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14891 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 669.495592][T14892] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.517539][T14247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.524995][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.529628][T14892] audit: audit_lost=147671 audit_rate_limit=0 audit_backlog_limit=64 [ 669.531525][ C0] audit: audit_lost=147672 audit_rate_limit=0 audit_backlog_limit=64 [ 669.547839][ C0] audit: backlog limit exceeded [ 669.548366][ T30] audit: type=1400 audit(1734279952.533:397013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14891 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 669.553413][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.578766][ C0] audit: audit_lost=147673 audit_rate_limit=0 audit_backlog_limit=64 [ 669.591506][T14878] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.895295][T14906] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 669.908941][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.916339][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.242039][T14545] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 670.401763][T14545] usb 1-1: Using ep0 maxpacket: 16 [ 670.407228][ T5869] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 670.417143][T14545] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.427685][T14545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.439249][T14545] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.448642][T14545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.456713][T14545] usb 1-1: Product: syz [ 670.460975][T14545] usb 1-1: Manufacturer: syz [ 670.465836][T14545] usb 1-1: SerialNumber: syz [ 670.575839][ T5869] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 670.584168][ T5869] usb 3-1: config 0 has no interface number 0 [ 670.590353][ T5869] usb 3-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 670.613119][ T5869] usb 3-1: config 0 interface 2 has no altsetting 0 [ 670.632805][ T5869] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 670.651929][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.660060][ T5869] usb 3-1: Product: syz [ 670.673148][ T5869] usb 3-1: Manufacturer: syz [ 670.678037][ T5869] usb 3-1: SerialNumber: syz [ 670.684383][T14545] usb 1-1: 0:2 : does not exist [ 670.698853][T14545] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 670.706346][T14923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 670.708718][ T5869] usb 3-1: config 0 descriptor?? [ 670.713116][T14923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 670.731749][T14923] vhci_hcd vhci_hcd.0: Device attached [ 670.739158][T14545] usb 1-1: USB disconnect, device number 8 [ 670.746071][T14919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 670.911880][T13597] vhci_hcd: vhci_device speed not set [ 670.977220][ T5869] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.981831][T13597] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 670.986793][ T5869] usb 3-1: invalid MIDI in EP 0 [ 670.991807][ T6064] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 671.044508][ T5869] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 671.061283][ T5869] usb 3-1: USB disconnect, device number 17 [ 671.168293][ T6064] usb 5-1: config 0 has no interfaces? [ 671.174006][ T6064] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 671.183265][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.193803][ T6064] usb 5-1: config 0 descriptor?? [ 671.361954][ T5922] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 671.424656][T14924] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 671.433020][ T5869] usb 5-1: USB disconnect, device number 10 [ 671.440559][ T52] vhci_hcd: stop threads [ 671.458768][ T52] vhci_hcd: release socket [ 671.468843][ T52] vhci_hcd: disconnect device [ 671.532520][ T5922] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 671.548033][ T5922] usb 2-1: config 0 has no interface number 0 [ 671.557915][ T5922] usb 2-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 671.569170][ T5922] usb 2-1: config 0 interface 2 has no altsetting 0 [ 671.588680][ T5922] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 671.611878][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.633276][ T5922] usb 2-1: Product: syz [ 671.645216][ T5922] usb 2-1: Manufacturer: syz [ 671.666795][ T5922] usb 2-1: SerialNumber: syz [ 671.684438][ T5922] usb 2-1: config 0 descriptor?? [ 671.709165][T14928] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 671.956577][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.001442][ T5922] usb 2-1: invalid MIDI in EP 0 [ 672.198257][ T5922] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 672.241290][ T5922] usb 2-1: USB disconnect, device number 9 [ 672.969866][T14967] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 672.996123][T14967] team0: Failed to send options change via netlink (err -105) [ 673.004295][T14967] team0: Port device netdevsim0 added [ 673.013593][T14967] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 673.099786][ T67] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 673.165907][T14967] team0: Failed to send options change via netlink (err -105) [ 673.186300][T14967] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 673.222148][T14967] team0: Port device netdevsim0 removed [ 673.245655][T14967] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 674.451712][ T30] kauditd_printk_skb: 5559 callbacks suppressed [ 674.451736][ T30] audit: type=1400 audit(1734279957.553:400987): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14975 comm="syz.1.3382" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 674.478220][ T6077] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 674.523110][T14480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.530064][T14480] audit: audit_lost=148205 audit_rate_limit=0 audit_backlog_limit=64 [ 674.531725][ T30] audit: type=1400 audit(1734279957.613:400988): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14979 comm="syz.0.3384" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 674.547832][T14480] audit: backlog limit exceeded [ 674.558006][ T30] audit: type=1400 audit(1734279957.613:400989): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14979 comm="syz.0.3384" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 674.558052][ T30] audit: type=1400 audit(1734279957.613:400990): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14979 comm="syz.0.3384" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 674.558090][ T30] audit: type=1400 audit(1734279957.633:400991): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14480 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 674.558129][ T30] audit: type=1400 audit(1734279957.633:400992): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14480 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 674.558165][ T30] audit: type=1400 audit(1734279957.633:400993): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14480 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 674.601792][ T6063] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 674.711837][ T6077] usb 1-1: Using ep0 maxpacket: 16 [ 674.719494][ T6077] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 674.733682][ T6077] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 674.744070][ T6077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.762869][ T6077] usb 1-1: config 0 descriptor?? [ 674.784212][ T6077] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 674.854375][ T6063] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 674.862877][ T6063] usb 2-1: config 0 has no interface number 0 [ 674.869484][ T6063] usb 2-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 674.880724][ T6063] usb 2-1: config 0 interface 2 has no altsetting 0 [ 674.912540][ T6063] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 674.922295][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.930370][ T6063] usb 2-1: Product: syz [ 674.948172][ T6063] usb 2-1: Manufacturer: syz [ 674.961808][ T6063] usb 2-1: SerialNumber: syz [ 674.971011][ T6063] usb 2-1: config 0 descriptor?? [ 674.977598][T14978] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 674.985064][ T5178] bcm5974 1-1:0.0: could not read from device [ 675.008325][ T6077] bcm5974 1-1:0.0: could not read from device [ 675.033263][ T5178] bcm5974 1-1:0.0: could not read from device [ 675.056238][ T6077] input: failed to attach handler mousedev to device input9, error: -5 [ 675.077908][ T6077] usb 1-1: USB disconnect, device number 9 [ 675.078620][ T5178] bcm5974 1-1:0.0: could not read from device [ 675.240194][ T6063] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.270879][ T6063] usb 2-1: invalid MIDI in EP 0 [ 675.388050][ T6063] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 675.418549][ T6063] usb 2-1: USB disconnect, device number 10 [ 676.648773][T13597] vhci_hcd: vhci_device speed not set [ 676.962532][ T7057] wlan1: Trigger new scan to find an IBSS to join [ 677.081713][T13631] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 677.361706][T13631] usb 3-1: Using ep0 maxpacket: 16 [ 677.370851][T13631] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.391096][T13631] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.422343][T13631] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.431749][T13631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.439846][T13631] usb 3-1: Product: syz [ 677.460714][T13631] usb 3-1: Manufacturer: syz [ 677.475875][T13631] usb 3-1: SerialNumber: syz [ 677.736179][T13631] usb 3-1: 0:2 : does not exist [ 677.746765][T13631] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 677.824127][T13631] usb 3-1: USB disconnect, device number 18 [ 679.058631][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 679.461985][ T30] kauditd_printk_skb: 3642 callbacks suppressed [ 679.462007][ T30] audit: type=1400 audit(1734279962.583:404540): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13926 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 679.491870][T14247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.502759][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.509332][T14054] audit: audit_lost=148240 audit_rate_limit=0 audit_backlog_limit=64 [ 679.512487][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.517683][T14247] audit: audit_lost=148241 audit_rate_limit=0 audit_backlog_limit=64 [ 679.523959][ C0] audit: audit_lost=148242 audit_rate_limit=0 audit_backlog_limit=64 [ 679.523981][ C0] audit: backlog limit exceeded [ 679.524107][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.524125][ C0] audit: audit_lost=148243 audit_rate_limit=0 audit_backlog_limit=64 [ 680.001807][ T7057] wlan1: Trigger new scan to find an IBSS to join [ 680.187753][T15075] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.345660][T15075] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.554769][T15075] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.428430][T15075] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.664179][T15075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.768356][T15075] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.806861][T15075] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.877422][T15075] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.971795][ T5922] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 682.124106][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 682.141747][ T5922] usb 5-1: config 0 has no interface number 0 [ 682.161717][ T5922] usb 5-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 682.230048][ T5922] usb 5-1: config 0 interface 2 has no altsetting 0 [ 682.245777][ T5922] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 682.255251][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.452974][ T5922] usb 5-1: Product: syz [ 682.457220][ T5922] usb 5-1: Manufacturer: syz [ 682.462069][ T5922] usb 5-1: SerialNumber: syz [ 682.469261][ T5922] usb 5-1: config 0 descriptor?? [ 682.476074][T15098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 682.972646][ T5881] wlan1: Creating new IBSS network, BSSID 02:9d:ce:d1:ab:ec [ 683.443176][T13930] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 683.455174][T13930] Bluetooth: hci0: Injecting HCI hardware error event [ 683.466197][ T5819] Bluetooth: hci0: hardware error 0x00 [ 683.857447][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.879876][ T5922] usb 5-1: invalid MIDI in EP 0 [ 683.952193][T15125] netlink: 'syz.1.3441': attribute type 10 has an invalid length. [ 684.006069][ T5881] wlan1: Trigger new scan to find an IBSS to join [ 684.116335][ T5922] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 684.138042][ T5922] usb 5-1: USB disconnect, device number 11 [ 684.475717][T13926] audit_log_start: 4928 callbacks suppressed [ 684.475738][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.509283][T13926] audit: audit_lost=148915 audit_rate_limit=0 audit_backlog_limit=64 [ 684.539487][T13926] audit: backlog limit exceeded [ 684.544746][ T30] audit: type=1400 audit(1734279967.573:407453): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14480 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 684.582225][T15142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.588796][T15142] audit: audit_lost=148916 audit_rate_limit=0 audit_backlog_limit=64 [ 684.602891][T15143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.612603][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.619168][T13926] audit: audit_lost=148917 audit_rate_limit=0 audit_backlog_limit=64 [ 684.648547][ T30] audit: type=1400 audit(1734279967.573:407455): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14480 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 687.531755][ T5819] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 687.578822][ T67] wlan1: Creating new IBSS network, BSSID 1e:31:f9:9e:9f:88 [ 687.985623][T15167] netlink: 'syz.4.3459': attribute type 25 has an invalid length. [ 688.092612][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 688.107488][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3459'. [ 688.183086][T15174] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3458'. [ 688.347746][T15174] openvswitch: netlink: Flow actions attr not present in new flow. [ 688.776414][T15172] bond1: entered promiscuous mode [ 688.935965][T15176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.979264][T15176] bond3: entered promiscuous mode [ 689.010780][T15176] bond1: (slave bond3): Enslaving as an active interface with an up link [ 689.143931][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 689.485097][ T30] kauditd_printk_skb: 2511 callbacks suppressed [ 689.485118][ T30] audit: type=1400 audit(1734279972.603:408966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15194 comm="syz-executor" name="113" dev="tmpfs" ino=597 [ 689.602876][ T30] audit: type=1400 audit(1734279972.603:408967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=15194 comm="syz-executor" name="113" dev="tmpfs" ino=597 [ 689.663967][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.670535][T14054] audit: audit_lost=149251 audit_rate_limit=0 audit_backlog_limit=64 [ 689.679503][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.680771][T13591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.686083][ C0] audit: audit_lost=149252 audit_rate_limit=0 audit_backlog_limit=64 [ 689.686103][ C0] audit: backlog limit exceeded [ 689.686671][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.701659][ T30] audit: type=1400 audit(1734279972.603:408968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15194 comm="syz-executor" name="113" dev="tmpfs" ino=597 [ 689.791900][T14545] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 689.992010][T14545] usb 3-1: Using ep0 maxpacket: 8 [ 690.004172][T14545] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 690.014045][T14545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.042582][T14545] usb 3-1: Product: syz [ 690.057518][T14545] usb 3-1: Manufacturer: syz [ 690.075167][T14545] usb 3-1: SerialNumber: syz [ 690.156804][T14545] usb 3-1: config 0 descriptor?? [ 690.953418][T15215] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3473'. [ 691.202477][T14545] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 691.609049][T15215] openvswitch: netlink: Flow actions attr not present in new flow. [ 691.793757][T14545] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 692.093332][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'. [ 692.230840][T15221] bond1: entered promiscuous mode [ 692.398714][T15227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 692.407112][ T5819] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 692.416322][ T5819] Bluetooth: hci5: Injecting HCI hardware error event [ 692.428675][T13930] Bluetooth: hci5: hardware error 0x00 [ 692.507649][T15227] bond2: entered promiscuous mode [ 692.542980][T15227] bond1: (slave bond2): Enslaving as an active interface with an up link [ 692.744873][T14545] usb 3-1: USB disconnect, device number 19 [ 692.748000][T15236] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 692.800695][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.808288][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.846239][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.853575][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.861111][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.868338][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.912673][T15236] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 693.161836][T13631] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 693.375830][T13631] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 693.417484][T13631] usb 2-1: config 0 has no interface number 0 [ 693.545439][T13631] usb 2-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 693.800793][T13631] usb 2-1: config 0 interface 2 has no altsetting 0 [ 693.847286][T13631] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 694.048329][T13631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.059615][T13631] usb 2-1: Product: syz [ 694.069782][T13631] usb 2-1: Manufacturer: syz [ 694.074527][T13631] usb 2-1: SerialNumber: syz [ 694.140234][T13631] usb 2-1: config 0 descriptor?? [ 694.225102][T15261] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3488'. [ 694.284872][T15238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 694.437333][T15261] openvswitch: netlink: Flow actions attr not present in new flow. [ 694.575112][T13930] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 694.777864][ T30] kauditd_printk_skb: 3540 callbacks suppressed [ 694.777911][ T30] audit: type=1400 audit(1734279977.893:410926): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15237 comm="syz.1.3481" name="118" dev="tmpfs" ino=624 [ 694.907822][T13631] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 694.969331][T13631] usb 2-1: invalid MIDI in EP 0 [ 695.002215][ T30] audit: type=1400 audit(1734279977.923:410927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=15237 comm="syz.1.3481" name="118" dev="tmpfs" ino=624 [ 695.052899][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.059989][ T27] audit: audit_lost=149784 audit_rate_limit=0 audit_backlog_limit=64 [ 695.080540][T14480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.088070][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.090741][T14054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.094654][ C0] audit: audit_lost=149785 audit_rate_limit=0 audit_backlog_limit=64 [ 695.094675][ C0] audit: backlog limit exceeded [ 695.095527][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.225756][T13631] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 695.295076][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3494'. [ 695.304500][T13631] usb 2-1: USB disconnect, device number 11 [ 695.573274][T15268] bond4: entered promiscuous mode [ 695.730803][T15274] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.773333][T15274] bond5: entered promiscuous mode [ 695.801502][T15274] bond4: (slave bond5): Enslaving as an active interface with an up link [ 696.274280][T15263] bridge_slave_1: left allmulticast mode [ 696.296127][T15263] bridge_slave_1: left promiscuous mode [ 696.334174][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.412485][T15298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.564527][T15263] bridge_slave_0: left allmulticast mode [ 696.697410][T15263] bridge_slave_0: left promiscuous mode [ 696.870854][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.141390][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 698.734577][T15263] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 698.929855][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3512'. [ 698.974633][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3513'. [ 698.984862][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3513'. [ 699.005312][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3513'. [ 699.029041][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3513'. [ 699.121956][T15263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.142658][T15263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.154954][T15263] bond0 (unregistering): Released all slaves [ 699.177854][T15263] bond1 (unregistering): Released all slaves [ 699.199548][T15263] bond2 (unregistering): Released all slaves [ 699.220739][T15263] bond3 (unregistering): Released all slaves [ 699.282924][T15325] bond1: entered promiscuous mode [ 699.312934][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 699.325573][ C0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 699.333995][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 699.344584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 699.354639][ C0] RIP: 0010:put_page+0x23/0x260 [ 699.359503][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 b8 3c 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 3f 1a 7e f8 48 8b 1b 48 89 de 48 83 [ 699.379134][ C0] RSP: 0018:ffffc90000156b90 EFLAGS: 00010202 [ 699.385218][ C0] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801beeda00 [ 699.393199][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.401173][ C0] RBP: dffffc0000000000 R08: ffffffff8984b45d R09: 1ffff1100b3c144c [ 699.409154][ C0] R10: dffffc0000000000 R11: ffffed100b3c144d R12: 0000000000000007 [ 699.417135][ C0] R13: ffff888059e0a242 R14: 0000000000000000 R15: 0000000000000000 [ 699.425115][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 699.434060][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.440647][ C0] CR2: 00007f2fccef6f98 CR3: 000000006bede000 CR4: 00000000003526f0 [ 699.448626][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.456599][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.464575][ C0] Call Trace: [ 699.467856][ C0] [ 699.470791][ C0] ? __die_body+0x5f/0xb0 [ 699.475131][ C0] ? die_addr+0xb0/0xe0 [ 699.479301][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 699.484866][ C0] ? asm_exc_general_protection+0x26/0x30 [ 699.490601][ C0] ? skb_release_data+0x46d/0x8a0 [ 699.495632][ C0] ? put_page+0x23/0x260 [ 699.499885][ C0] skb_release_data+0x483/0x8a0 [ 699.504748][ C0] __kfree_skb+0x55/0x70 [ 699.508997][ C0] tcp_ack+0x2442/0x6bc0 [ 699.513375][ C0] ? __pfx_tcp_ack+0x10/0x10 [ 699.517991][ C0] ? __lock_acquire+0x1397/0x2100 [ 699.523030][ C0] tcp_rcv_state_process+0x8eb/0x44e0 [ 699.528421][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 699.534237][ C0] ? sk_filter_trim_cap+0x5bf/0xa80 [ 699.539440][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 699.544476][ C0] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 699.549952][ C0] tcp_v4_do_rcv+0x77d/0xc70 [ 699.554563][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 699.559099][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 699.563966][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 699.568834][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 699.573706][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 699.579185][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 699.584831][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 699.590319][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 699.596339][ C0] NF_HOOK+0x3a4/0x450 [ 699.600456][ C0] ? NF_HOOK+0x9a/0x450 [ 699.604633][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 699.609237][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 699.615236][ C0] ? ip_rcv_finish+0x406/0x560 [ 699.620013][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 699.625139][ C0] NF_HOOK+0x3a4/0x450 [ 699.629221][ C0] ? __lock_acquire+0x1397/0x2100 [ 699.634280][ C0] ? NF_HOOK+0x9a/0x450 [ 699.638469][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 699.643080][ C0] ? ip_rcv_core+0x801/0xd10 [ 699.647691][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 699.652817][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 699.657327][ C0] __netif_receive_skb+0x2bf/0x650 [ 699.662457][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 699.667488][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 699.673131][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 699.679134][ C0] ? __pfx_lock_release+0x10/0x10 [ 699.684169][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 699.689297][ C0] process_backlog+0x662/0x15b0 [ 699.694167][ C0] ? process_backlog+0x33b/0x15b0 [ 699.699213][ C0] ? __pfx_process_backlog+0x10/0x10 [ 699.704507][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 699.710491][ C0] ? __lock_acquire+0x1397/0x2100 [ 699.715522][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 699.721854][ C0] __napi_poll+0xcb/0x490 [ 699.726199][ C0] net_rx_action+0x89b/0x1240 [ 699.730909][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 699.736036][ C0] ? sched_clock+0x4a/0x70 [ 699.740479][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 699.746810][ C0] ? __schedule+0x1803/0x4be0 [ 699.751533][ C0] handle_softirqs+0x2d4/0x9b0 [ 699.756319][ C0] ? run_ksoftirqd+0xca/0x130 [ 699.761022][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 699.766361][ C0] run_ksoftirqd+0xca/0x130 [ 699.770879][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 699.776006][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 699.781747][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 699.786875][ C0] smpboot_thread_fn+0x544/0xa30 [ 699.791828][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 699.796867][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 699.802340][ C0] kthread+0x2f0/0x390 [ 699.806429][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 699.811900][ C0] ? __pfx_kthread+0x10/0x10 [ 699.816495][ C0] ret_from_fork+0x4b/0x80 [ 699.820910][ C0] ? __pfx_kthread+0x10/0x10 [ 699.825523][ C0] ret_from_fork_asm+0x1a/0x30 [ 699.830335][ C0] [ 699.833367][ C0] Modules linked in: [ 699.837388][ C0] ---[ end trace 0000000000000000 ]--- [ 699.842917][ C0] RIP: 0010:put_page+0x23/0x260 [ 699.847826][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 b8 3c 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 3f 1a 7e f8 48 8b 1b 48 89 de 48 83 [ 699.867518][ C0] RSP: 0018:ffffc90000156b90 EFLAGS: 00010202 [ 699.872014][T13926] audit_log_start: 2961 callbacks suppressed [ 699.872033][T13926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.873736][ C0] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801beeda00 [ 699.880902][T13926] audit: audit_lost=150025 audit_rate_limit=0 audit_backlog_limit=64 [ 699.886211][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.886231][ C0] RBP: dffffc0000000000 R08: ffffffff8984b45d R09: 1ffff1100b3c144c [ 699.886261][ C0] R10: dffffc0000000000 R11: ffffed100b3c144d R12: 0000000000000007 [ 699.886277][ C0] R13: ffff888059e0a242 R14: 0000000000000000 R15: 0000000000000000 [ 699.898871][T14247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.902385][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 699.902412][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.910492][T14247] audit: audit_lost=150026 audit_rate_limit=0 audit_backlog_limit=64 [ 699.918363][ C0] CR2: 00007f2fccef6f98 CR3: 000000006bede000 CR4: 00000000003526f0 [ 699.926410][T13926] audit: backlog limit exceeded [ 699.934408][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.941002][ T30] audit: type=1400 audit(1734279982.963:413174): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=14247 comm="syz-executor" opid=15297 ocomm="syz.3.3504" [ 699.949790][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.949826][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 699.950080][ C0] Kernel Offset: disabled