last executing test programs: 1m28.452515653s ago: executing program 4 (id=1402): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0xfffd}, @CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x30}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) 1m28.030485583s ago: executing program 4 (id=1404): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x2, 0x0, @void}, 0x10) 1m27.594830779s ago: executing program 4 (id=1405): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m24.01962439s ago: executing program 4 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_netdev_private(r3, 0x8932, &(0x7f00000010c0)="99803939e155fce925f4b101173a") setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000640)={0xfffffff1, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xa9}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x0, [[], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x2, 0x0, 0x0, 0x0, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000440)={r6, &(0x7f0000001380)='\x00', &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, 0x0, &(0x7f00000001c0)=""/133}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000001c0), 0x0}, 0x20) sendmmsg$inet6(r5, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x11) 59.193524494s ago: executing program 4 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_netdev_private(r3, 0x8932, &(0x7f00000010c0)="99803939e155fce925f4b101173a") setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000640)={0xfffffff1, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xa9}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x0, [[], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x2, 0x0, 0x0, 0x0, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000440)={r6, &(0x7f0000001380)='\x00', &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, 0x0, &(0x7f00000001c0)=""/133}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000001c0), 0x0}, 0x20) sendmmsg$inet6(r5, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x11) 48.412283012s ago: executing program 3 (id=1512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bffe00000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 48.236841775s ago: executing program 3 (id=1514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 48.03079571s ago: executing program 3 (id=1516): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat(r5, &(0x7f0000000340)='.\x00', 0x0, 0x131) lseek(r6, 0x0, 0x1) r7 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet6(r7, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 44.661131306s ago: executing program 3 (id=1519): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x1801, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 43.305478086s ago: executing program 3 (id=1520): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x8e, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 42.899688671s ago: executing program 3 (id=1521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0xf, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x8}, {&(0x7f0000000140)=""/9, 0xf}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 20.133368481s ago: executing program 4 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_netdev_private(r3, 0x8932, &(0x7f00000010c0)="99803939e155fce925f4b101173a") setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000640)={0xfffffff1, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xa9}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x0, [[], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x2, 0x0, 0x0, 0x0, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000440)={r6, &(0x7f0000001380)='\x00', &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, 0x0, &(0x7f00000001c0)=""/133}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, &(0x7f00000001c0), 0x0}, 0x20) sendmmsg$inet6(r5, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x11) 16.486047249s ago: executing program 0 (id=1581): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 15.156937204s ago: executing program 0 (id=1585): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x70}, 0x1, 0x7}, 0x0) 14.51562031s ago: executing program 0 (id=1587): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 12.717821166s ago: executing program 0 (id=1588): bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x0, @device_a, 0x0, @value=@device_b, 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x5c}}, 0x0) 10.560316767s ago: executing program 0 (id=1592): syz_emit_ethernet(0x4c, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0011aa00733700000080f31dc9c057b7dc460f872d9adc6eb282c405920aa2eae94908ab568eadf23d7f71954855d387a2b1d3be205668186861196e49754644a56c98c40495ef516a30f3915204f0690ead0a48e5a344b4f8a42c3c3ebe22db9f9eac2eccfb11133d3f726f365101cfb3aa4e23a6e04c0184252482d656ecd2a6e127a8315512652867feb07f2f1e1e46d044e5cd73b8daeace9a70d4d1b4"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000001800090000000000000000001c020000fe000001000c001a0000000000", @ANYRES32=0x0, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000001400)=0x10) r2 = socket$packet(0x11, 0x2, 0x300) write(r1, &(0x7f0000001740)="6d435fb669a662f2ab26450f2dbe637d8ffad2137baed19340016da1db6d9aa5a5e9dc1bcafb55e978dc5fff20f2a70fe3e85824aa91edf6d879de2bdd2ea0b0d0d24bf3d847d5c1858665dc7dbc2d0ff08dc8122a1e7d55daaa530c332efeac260453a21eb7706eb712b8ef524e497f0e6235f21ad201f180c9193abfbddf4fcd65c6d158fc6519fcff82f2e668d78eca05120f28d6571685557577d6d8fc28d48c05e2622109f85f9bc2d5e05a55e5ac9e8be47d8b3fa7", 0xb8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000000000000000000000000000081124000000000009500000700000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, 0x0, &(0x7f0000000080)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x4008080) 7.223707362s ago: executing program 1 (id=1596): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.838511329s ago: executing program 1 (id=1597): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$tun(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 5.247097922s ago: executing program 1 (id=1600): r0 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759ca14860e00", '\x00\x00\a\x00', "0300", "ffffffff", ["3f9fa4c6000900187eca3610", "808ea649b70100", "9100", "7f800000000000001000"]}) 5.082348066s ago: executing program 2 (id=1601): open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, 'vq\x00', 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4.882254332s ago: executing program 1 (id=1602): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 4.684619894s ago: executing program 2 (id=1603): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000200)={@hyper}) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) setregid(0x0, 0x0) ptrace(0x8, r5) wait4(0x0, 0x0, 0x0, 0x0) fchdir(r4) 4.510445835s ago: executing program 1 (id=1604): r0 = socket$kcm(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x22) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x0, "0022aed9ae659d4d95fd3d1fa09814", "aadb641b", "912ec72a", "5439cfe3", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad3eb5918df0f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0xd) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040600000000000000040000000000000000000253be97df6c4187149b547d6c57a0aa66139f75612594e7553394b9c7"], 0x14) write$binfmt_script(r1, &(0x7f0000000780), 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r0, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c800fc00f8000100100c0400050008000d6008000500fcffa700050003a908000000ec67000026070531140003f50b00bc000409040000002402000078050100110302000001040251000900ff0304090200050200faff020004090102000000ff7f0000ff07000001020e0007021b1b05010007020800010201000610ff0256f90000000001000000010000000b0859000400e9aaa6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f07a00400ffff0101"], 0x101) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f00000000c0)=0x1) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r7 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 3.899671296s ago: executing program 2 (id=1605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ff00000500030080ffffff0800020003"], 0x50}}, 0x0) 3.598992557s ago: executing program 2 (id=1606): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000020000008100000008000300", @ANYRES32=r3, @ANYBLOB="060066008e88000020003300088100000802110000000802110000010802110000010000000000000a0006"], 0x50}}, 0x0) 700.377732ms ago: executing program 2 (id=1607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 544.881135ms ago: executing program 0 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000a00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x3, 0x5, 0x3, 0x8, 0x34}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f11af57b1c7bb28e315651c2c7429433"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc4, 0x7, 0x1f, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x5, 0xfffb}]}, 0x6, [{0x2, &(0x7f0000000780)=@string={0x2}}, {0x41, &(0x7f0000000880)=@string={0x41, 0x3, "57ad5200feee01bfa008d3668c4c834222e4b5cc6c1749727eac282d6309341e71776735d406d3a6c0e2f2a599c7c2b77b2ded3aaf0fa29b190cd8037f510e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0a}}, {0x0, 0x0}, {0x2c, &(0x7f00000009c0)=@string={0x2c, 0x3, "7d717ea4e3b7d9495ff1a6a6b7cbb8533bf1cbe200e4b0c84a0000596dc89d8c04f500579fa3c5a6bf1b"}}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) 344.870047ms ago: executing program 1 (id=1609): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="81010000000000009200b0"], 0x10) read$sequencer(r0, &(0x7f0000000340)=""/85, 0x55) 0s ago: executing program 2 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 4323][ T5323] hid (null): unknown global tag 0xd [ 383.819158][ T5323] hid (null): report_id 40203 is invalid [ 383.847755][ T5323] hid (null): invalid report_size -1862471209 [ 383.861935][ T5323] hid (null): invalid report_size -1217885453 [ 383.868791][ T5323] hid (null): unknown global tag 0x36 [ 383.932761][ T8925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.991855][ T5323] usb 4-1: string descriptor 0 read error: -71 [ 384.038414][ T5323] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 384.067273][ T5323] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -32 [ 384.112867][ T8925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.123438][ T5323] usb 4-1: USB disconnect, device number 24 [ 384.189796][ T5237] Bluetooth: hci6: command tx timeout [ 384.692201][ T8925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.740252][ T8925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.919699][ T8925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.988747][ T8925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.207180][ T9040] ubi0: attaching mtd0 [ 386.216344][ T9040] ubi0: scanning is finished [ 386.221080][ T9040] ubi0: empty MTD device detected [ 386.290522][ T9041] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1258'. [ 386.471717][ T9040] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 386.519878][ T5229] Bluetooth: hci6: command tx timeout [ 386.966952][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.064038][ T8925] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.121782][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.129202][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.206847][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.214119][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.300291][ T30] kauditd_printk_skb: 3879 callbacks suppressed [ 387.300312][ T30] audit: type=1400 audit(1723037103.617:24443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 387.326588][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.339032][ T9054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.372281][ T5225] audit: audit_lost=2147 audit_rate_limit=0 audit_backlog_limit=64 [ 387.382096][ T9054] audit: audit_lost=2148 audit_rate_limit=0 audit_backlog_limit=64 [ 387.410175][ T5225] audit: backlog limit exceeded [ 387.415111][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.422353][ T30] audit: type=1400 audit(1723037103.617:24444): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 387.431612][ T5219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.442154][ T9054] audit: backlog limit exceeded [ 387.458801][ T8925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.925078][ T9070] netlink: 'syz.1.1268': attribute type 7 has an invalid length. [ 387.953632][ T9070] netlink: 'syz.1.1268': attribute type 39 has an invalid length. [ 387.989469][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 388.072605][ T9071] bridge2: port 1(gretap1) entered blocking state [ 388.082379][ T9071] bridge2: port 1(gretap1) entered disabled state [ 388.089149][ T9071] gretap1: entered allmulticast mode [ 388.121808][ T9071] gretap1: entered promiscuous mode [ 388.203108][ T8] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 388.239791][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.592225][ T5232] Bluetooth: hci6: command 0x0405 tx timeout [ 388.862096][ T9070] netlink: 'syz.1.1268': attribute type 7 has an invalid length. [ 388.890973][ T8] usb 4-1: config 0 descriptor?? [ 388.913282][ T9070] netlink: 'syz.1.1268': attribute type 39 has an invalid length. [ 389.187500][ T8] kaweth 4-1:0.0: Firmware present in device. [ 389.369602][ T8] kaweth 4-1:0.0: Statistics collection: 0 [ 389.375578][ T8] kaweth 4-1:0.0: Multicast filter limit: 0 [ 389.599673][ T8] kaweth 4-1:0.0: MTU: 0 [ 389.612035][ T8925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.620557][ T8] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 391.702083][ T8] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 391.714918][ T8925] veth0_vlan: entered promiscuous mode [ 391.722976][ T8] usb 4-1: USB disconnect, device number 25 [ 392.322308][ T30] kauditd_printk_skb: 3067 callbacks suppressed [ 392.322333][ T30] audit: type=1400 audit(1723037108.397:26794): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9086 comm="syz.2.1271" name="9087-4" dev="debugfs" ino=24323 [ 392.651160][ T8925] veth1_vlan: entered promiscuous mode [ 392.673001][ T30] audit: type=1400 audit(1723037108.737:26798): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9086 comm="syz.2.1271" name="9087-4" dev="debugfs" ino=24323 [ 392.681867][ T9093] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.699575][ T4652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.701085][ T5219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.730123][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.736698][ C0] audit: audit_lost=2388 audit_rate_limit=0 audit_backlog_limit=64 [ 392.744746][ C0] audit: backlog limit exceeded [ 392.750622][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.757174][ C0] audit: audit_lost=2389 audit_rate_limit=0 audit_backlog_limit=64 [ 392.901364][ T8925] veth0_macvtap: entered promiscuous mode [ 392.927592][ T8925] veth1_macvtap: entered promiscuous mode [ 393.166764][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.224883][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.275282][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.317760][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.366235][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.413035][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.463320][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.513244][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.556072][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.603818][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.696871][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.741744][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.802566][ T8925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.813706][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.870315][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.899381][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.924069][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.944381][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.972784][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.990483][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.001721][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.029378][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.047886][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.096938][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.130826][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.161368][ T8925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.226080][ T8925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.235516][ T8925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.246909][ T8925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.255926][ T8925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.490707][ T9122] overlayfs: failed to clone lowerpath [ 394.698062][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.718502][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.546379][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.600968][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.257100][ T9143] IPv6: addrconf: prefix option has invalid lifetime [ 397.169460][ T5273] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 397.338121][ T30] kauditd_printk_skb: 3913 callbacks suppressed [ 397.338139][ T30] audit: type=1400 audit(1723037113.637:29346): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5225 comm="syz-executor" name="265" dev="tmpfs" ino=1429 [ 397.380299][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.400487][ T30] audit: type=1400 audit(1723037113.687:29347): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5225 comm="syz-executor" path="/265/binderfs" dev="tmpfs" ino=1433 [ 397.406240][ T5218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.423100][ T9152] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.435673][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.442331][ C0] audit: audit_lost=2847 audit_rate_limit=0 audit_backlog_limit=64 [ 397.449369][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.450280][ C0] audit: backlog limit exceeded [ 397.466029][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.472621][ C0] audit: audit_lost=2848 audit_rate_limit=0 audit_backlog_limit=64 [ 397.479583][ T5273] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 397.480633][ C0] audit: backlog limit exceeded [ 397.519238][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.570381][ T5273] usb 4-1: config 0 descriptor?? [ 397.790962][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'. [ 397.819589][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 398.009420][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 398.025607][ T5273] waltop 0003:172F:0500.0018: item fetching failed at offset 5/7 [ 398.029736][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.043680][ T5279] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 398.044930][ T5273] waltop 0003:172F:0500.0018: probe with driver waltop failed with error -22 [ 398.068241][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 398.080677][ T5277] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 398.089614][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.109496][ T9] usb 5-1: Product: syz [ 398.113669][ T9] usb 5-1: Manufacturer: syz [ 398.118281][ T9] usb 5-1: SerialNumber: syz [ 398.126827][ T9] usb 5-1: config 0 descriptor?? [ 398.134582][ T9] usb 5-1: bad CDC descriptors [ 398.140542][ T9] usb 5-1: unsupported MDLM descriptors [ 398.242508][ T5279] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 398.259828][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.289805][ T5279] usb 2-1: config 0 has no interface number 0 [ 398.295981][ T5279] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 398.314558][ T5277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.322555][ T9] usb 4-1: USB disconnect, device number 26 [ 398.335974][ T5277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.359408][ T5279] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 398.359430][ T5277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.376116][ T5279] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.401278][ T5279] usb 2-1: config 0 interface 52 has no altsetting 0 [ 398.401477][ T5277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.423587][ T5279] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 398.440342][ T5277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 398.444257][ T5279] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 398.477868][ T5323] usb 5-1: USB disconnect, device number 22 [ 398.480865][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.490120][ T5279] usb 2-1: Product: syz [ 398.500784][ T5279] usb 2-1: Manufacturer: syz [ 398.505436][ T5279] usb 2-1: SerialNumber: syz [ 398.509084][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.517838][ T5279] usb 2-1: config 0 descriptor?? [ 398.527057][ T5277] usb 1-1: Product: syz [ 398.536503][ T5277] usb 1-1: Manufacturer: syz [ 398.546364][ T5277] usb 1-1: SerialNumber: syz [ 398.770367][ T5279] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 398.795757][ T5279] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 398.825178][ T5277] cdc_ncm 1-1:1.0: bind() failure [ 398.838581][ T5277] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 398.845766][ T5277] cdc_ncm 1-1:1.1: bind() failure [ 398.858267][ T5277] usb 1-1: USB disconnect, device number 13 [ 399.067360][ T5279] usb 2-1: USB disconnect, device number 16 [ 400.147326][ T9189] x_tables: duplicate underflow at hook 1 [ 400.295455][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 401.043794][ T9207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.159402][ T5273] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 401.513496][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 401.600742][ T5273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.611503][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.671279][ T5273] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.729523][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.870479][ T5273] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=2f.d8 [ 401.888417][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.896698][ T5273] usb 2-1: Product: syz [ 401.909382][ T5273] usb 2-1: Manufacturer: syz [ 401.914144][ T5273] usb 2-1: SerialNumber: syz [ 401.932655][ T5273] usb 2-1: config 0 descriptor?? [ 401.947765][ T5273] usbtest 2-1:0.0: couldn't get endpoints, -22 [ 401.959089][ T5273] usbtest 2-1:0.0: probe with driver usbtest failed with error -22 [ 402.176072][ T5273] usb 2-1: USB disconnect, device number 17 [ 402.340537][ T30] kauditd_printk_skb: 3599 callbacks suppressed [ 402.340555][ T30] audit: type=1400 audit(1723037118.657:32940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9216 comm="syz.0.1314" name="newroot" dev="tmpfs" ino=2 [ 402.393159][ T30] audit: type=1400 audit(1723037118.697:32941): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9216 comm="syz.0.1314" name="/" dev="proc" ino=1 [ 402.422084][ T30] audit: type=1400 audit(1723037118.697:32942): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9216 comm="syz.0.1314" name="/" dev="proc" ino=1 [ 402.446534][ T30] audit: type=1400 audit(1723037118.697:32943): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9216 comm="syz.0.1314" name="21" dev="proc" ino=25369 [ 402.467579][ T30] audit: type=1400 audit(1723037118.697:32944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9216 comm="syz.0.1314" name="ns" dev="proc" ino=25377 [ 402.487122][ T30] audit: type=1400 audit(1723037118.697:32945): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9216 comm="syz.0.1314" dev="nsfs" ino=4026534205 [ 402.516533][ T30] audit: type=1400 audit(1723037118.697:32946): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9216 comm="syz.0.1314" path="net:[4026534205]" dev="nsfs" ino=4026534205 [ 402.558434][ T8925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 402.566472][ T30] audit: type=1400 audit(1723037118.847:32947): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8925 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 402.586074][ T8925] audit: audit_lost=2852 audit_rate_limit=0 audit_backlog_limit=64 [ 402.812163][ T9225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1317'. [ 402.867473][ T9225] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.266880][ T9233] autofs: Unknown parameter '0x0000000000000000' [ 404.239446][ T5277] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 404.439717][ T5279] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 404.441017][ T5277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.469805][ T5277] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.493689][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 404.516078][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 404.528457][ T5277] usb 1-1: Manufacturer: syz [ 404.543403][ T5277] usb 1-1: bad CDC descriptors [ 404.629488][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 404.641917][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 404.659363][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.686629][ T5279] usb 5-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 404.709394][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.717433][ T5279] usb 5-1: Product: syz [ 404.723175][ T5279] usb 5-1: Manufacturer: syz [ 404.727805][ T5279] usb 5-1: SerialNumber: syz [ 404.736349][ T5279] usb 5-1: config 0 descriptor?? [ 404.792458][ T5277] usb 1-1: USB disconnect, device number 14 [ 405.020891][ T9] usb 5-1: USB disconnect, device number 23 [ 405.258804][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.276953][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.299623][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.315691][ T9244] netem: unknown loss type 5 [ 405.317921][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.329457][ T9244] netem: change failed [ 405.339962][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 405.347638][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.652297][ T9241] lo speed is unknown, defaulting to 1000 [ 405.699388][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 405.900711][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 405.917428][ T8] usb 2-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 405.927000][ T8] usb 2-1: config 0 has an invalid interface number: 153 but max is 97 [ 405.953917][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 405.995801][ T8] usb 2-1: config 0 has no interface number 0 [ 406.016606][ T5277] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 406.033504][ T8] usb 2-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 406.064444][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.094809][ T8] usb 2-1: Product: syz [ 406.099032][ T8] usb 2-1: Manufacturer: syz [ 406.124272][ T8] usb 2-1: SerialNumber: syz [ 406.160320][ T8] usb 2-1: config 0 descriptor?? [ 406.173792][ T9257] netlink: 'syz.0.1329': attribute type 13 has an invalid length. [ 406.174267][ T8] sierra 2-1:0.153: Sierra USB modem converter detected [ 406.182018][ T9257] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1329'. [ 406.229570][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 406.237802][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.259565][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.279391][ T5277] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 406.288965][ T9257] syz_tun: refused to change device tx_queue_len [ 406.295535][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.320301][ T5277] usb 5-1: config 0 descriptor?? [ 406.496574][ T9241] chnl_net:caif_netlink_parms(): no params data found [ 406.577713][ T8] usb 2-1: USB disconnect, device number 18 [ 406.589003][ T8] sierra 2-1:0.153: device disconnected [ 406.777879][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.789078][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.797430][ T9241] bridge_slave_0: entered allmulticast mode [ 406.805806][ T9241] bridge_slave_0: entered promiscuous mode [ 406.817123][ T5277] kye 0003:0458:5017.0019: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 406.836756][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.853183][ T5277] kye 0003:0458:5017.0019: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.4-1/input0 [ 406.877219][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.884618][ T9241] bridge_slave_1: entered allmulticast mode [ 406.892757][ T5277] kye 0003:0458:5017.0019: tablet-enabling feature report not found [ 406.902442][ T9241] bridge_slave_1: entered promiscuous mode [ 406.908544][ T5277] kye 0003:0458:5017.0019: tablet enabling failed [ 406.980117][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.011730][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.085998][ T5277] usb 5-1: USB disconnect, device number 24 [ 407.160932][ T9241] team0: Port device team_slave_0 added [ 407.178172][ T9241] team0: Port device team_slave_1 added [ 407.274400][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.286795][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.327569][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.351131][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.369763][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.396363][ T30] kauditd_printk_skb: 2644 callbacks suppressed [ 407.396375][ T30] audit: type=1400 audit(1723037123.687:35510): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 407.399609][ T5237] Bluetooth: hci5: command tx timeout [ 407.429521][ T30] audit: type=1400 audit(1723037123.687:35511): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 407.452141][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.503754][ T30] audit: type=1400 audit(1723037123.687:35512): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="300" dev="tmpfs" ino=1600 [ 407.540560][ T9241] hsr_slave_0: entered promiscuous mode [ 407.547411][ T9241] hsr_slave_1: entered promiscuous mode [ 407.554500][ T30] audit: type=1400 audit(1723037123.687:35513): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=9266 comm="syz-executor" opid=9266 ocomm="syz-executor" [ 407.578406][ T9241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.586285][ T30] audit: type=1400 audit(1723037123.687:35514): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="300" dev="tmpfs" ino=1600 [ 407.606038][ T9241] Cannot create hsr debugfs directory [ 407.612476][ T9268] serio: Serial port pts0 [ 407.629438][ T30] audit: type=1400 audit(1723037123.687:35515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="300" dev="tmpfs" ino=1600 [ 407.656985][ T30] audit: type=1400 audit(1723037123.687:35516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9266 comm="syz-executor" name="300" dev="tmpfs" ino=1600 [ 407.737202][ T30] audit: type=1400 audit(1723037123.687:35517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="300" dev="tmpfs" ino=1600 [ 407.754170][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 407.763391][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.051645][ T9241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.171965][ T9241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.333664][ T9241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.420703][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1335'. [ 408.468787][ T9280] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1335'. [ 408.714156][ T9241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.817773][ T9287] syz.1.1336: attempt to access beyond end of device [ 408.817773][ T9287] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 408.831563][ T9287] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 409.499525][ T5237] Bluetooth: hci5: command tx timeout [ 410.203374][ T9295] ALSA: seq fatal error: cannot create timer (-22) [ 410.266235][ T9241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.308134][ T9241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.332510][ T9241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.379475][ T9241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.458413][ T9241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.549862][ T5237] Bluetooth: hci5: command tx timeout [ 411.867674][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 412.564482][ T30] kauditd_printk_skb: 2203 callbacks suppressed [ 412.564502][ T30] audit: type=1400 audit(1723037128.877:37717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9312 comm="syz-executor" name="/" dev="sda1" ino=2 [ 412.634436][ T9241] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.692903][ T30] audit: type=1400 audit(1723037128.907:37718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9312 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 412.696720][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 412.711993][ T30] audit: type=1400 audit(1723037128.907:37719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9312 comm="syz-executor" name="kernel" dev="sysfs" ino=1361 [ 412.712047][ T30] audit: type=1400 audit(1723037128.907:37720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9312 comm="syz-executor" name="/" dev="debugfs" ino=1 [ 412.712094][ T30] audit: type=1400 audit(1723037128.907:37721): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9312 comm="syz-executor" name="kcov" dev="debugfs" ino=59 [ 412.712141][ T30] audit: type=1400 audit(1723037128.907:37722): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9312 comm="syz-executor" path="/sys/kernel/debug/kcov" dev="debugfs" ino=59 [ 412.712188][ T30] audit: type=1400 audit(1723037128.907:37723): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9312 comm="syz-executor" path="/sys/kernel/debug/kcov" dev="debugfs" ino=59 [ 412.712235][ T30] audit: type=1400 audit(1723037128.937:37724): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9317 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 412.712281][ T30] audit: type=1400 audit(1723037128.937:37725): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9317 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 412.897954][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.905331][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.970409][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.978053][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.090882][ T9319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.630318][ T5237] Bluetooth: hci5: command tx timeout [ 413.991898][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.996151][ T9334] atomic_op ffff888029db5198 conn xmit_atomic 0000000000000000 [ 414.016435][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 414.027828][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 414.040802][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 414.058754][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 414.066553][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.543213][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.803797][ T9241] veth0_vlan: entered promiscuous mode [ 415.201494][ T9241] veth1_vlan: entered promiscuous mode [ 415.666392][ T5278] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 415.812039][ T9241] veth0_macvtap: entered promiscuous mode [ 415.836516][ T9241] veth1_macvtap: entered promiscuous mode [ 415.860706][ T9337] lo speed is unknown, defaulting to 1000 [ 415.946592][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.968999][ T5278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.994042][ T5278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.004014][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.028500][ T5278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.039351][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.064359][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 416.076154][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.097031][ T5278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.107446][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.109654][ T5232] Bluetooth: hci7: command tx timeout [ 416.127569][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 416.137702][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.179170][ T5278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.195164][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.219477][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.248851][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.259202][ T5278] usb 5-1: Product: syz [ 416.271790][ T5278] usb 5-1: Manufacturer: syz [ 416.283385][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.298399][ T5278] usb 5-1: SerialNumber: syz [ 416.303232][ T5273] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 416.322576][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.354044][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.416004][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.493022][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.570467][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.570677][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 416.599828][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 416.611181][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.627662][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 416.639602][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.643532][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.672612][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 416.716324][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 416.824238][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.878835][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 416.898529][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.971477][ T5273] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 417.025549][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 417.072090][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.084926][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 417.100257][ T5273] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 417.305740][ T5273] usb 2-1: string descriptor 0 read error: -22 [ 417.327002][ T5273] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.341962][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.406551][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.426628][ T5273] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 417.438473][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.469112][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.506846][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.537123][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.547977][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.579098][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.594072][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.635827][ T30] kauditd_printk_skb: 2620 callbacks suppressed [ 417.635848][ T30] audit: type=1400 audit(1723037133.947:40172): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9345 comm="syz.4.1358" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 417.660177][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.699315][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.725399][ T30] audit: type=1400 audit(1723037133.947:40173): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=9345 comm="syz.4.1358" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 417.731596][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.760430][ T8925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 417.767054][ T8925] audit: audit_lost=2942 audit_rate_limit=0 audit_backlog_limit=64 [ 417.818652][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 417.825299][ C0] audit: audit_lost=2943 audit_rate_limit=0 audit_backlog_limit=64 [ 417.829406][ T30] audit: type=1400 audit(1723037133.947:40174): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9345 comm="syz.4.1358" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 417.833319][ C0] audit: backlog limit exceeded [ 417.859347][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.860734][ T8925] audit: backlog limit exceeded [ 417.869215][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.869238][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.919521][ T5278] cdc_ncm 5-1:1.0: bind() failure [ 417.929011][ T5278] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 417.938407][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.969433][ T5278] cdc_ncm 5-1:1.1: bind() failure [ 417.978867][ T30] audit: type=1400 audit(1723037134.027:40175): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8925 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 418.021683][ T9241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.035235][ T5278] usb 5-1: USB disconnect, device number 25 [ 418.052136][ T9241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.077549][ T9241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.086885][ T9241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.130196][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 418.139145][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 418.174229][ T5279] usb 2-1: USB disconnect, device number 19 [ 418.189866][ T5232] Bluetooth: hci7: command tx timeout [ 418.609439][ T5323] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 418.736728][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.781602][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.843144][ T5323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.919140][ T5323] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 418.955665][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.981000][ T5323] usb 1-1: Product: syz [ 418.999364][ T5323] usb 1-1: Manufacturer: syz [ 419.004031][ T5323] usb 1-1: SerialNumber: syz [ 419.011365][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.024833][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 419.038297][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.052798][ T5323] usb 1-1: config 0 descriptor?? [ 419.312779][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.360250][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.376194][ T9337] bridge_slave_0: entered allmulticast mode [ 419.398542][ T9337] bridge_slave_0: entered promiscuous mode [ 419.416600][ T9] usb 1-1: USB disconnect, device number 15 [ 419.436981][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.444601][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.471236][ T9337] bridge_slave_1: entered allmulticast mode [ 419.493416][ T9337] bridge_slave_1: entered promiscuous mode [ 419.741793][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.794763][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.254652][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 420.271906][ T5232] Bluetooth: hci7: command tx timeout [ 421.146069][ T9337] team0: Port device team_slave_0 added [ 421.284899][ T9337] team0: Port device team_slave_1 added [ 421.578604][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.602383][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.779566][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.489530][ T9396] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 422.640170][ T9396] batman_adv: batadv0: Adding interface: team0 [ 422.646370][ T9396] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.692057][ T30] kauditd_printk_skb: 1851 callbacks suppressed [ 422.692082][ T30] audit: type=1400 audit(1723037138.957:41859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9390 comm="syz.0.1366" name="25" dev="tmpfs" ino=144 [ 422.744682][ T9396] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 422.803407][ T9398] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 422.905414][ T30] audit: type=1400 audit(1723037138.957:41860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9390 comm="syz.0.1366" name="25" dev="tmpfs" ino=144 [ 422.910118][ T5232] Bluetooth: hci7: command tx timeout [ 422.934470][ T9398] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1368'. [ 422.949575][ T9398] team0: entered promiscuous mode [ 422.954900][ T9398] team_slave_0: entered promiscuous mode [ 422.961131][ T9398] team_slave_1: entered promiscuous mode [ 422.984982][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.993117][ T9398] batman_adv: batadv0: Interface activated: team0 [ 423.004604][ T9398] batman_adv: batadv0: Interface deactivated: team0 [ 423.013321][ T9398] batman_adv: batadv0: Removing interface: team0 [ 423.021090][ T30] audit: type=1400 audit(1723037138.957:41861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9390 comm="syz.0.1366" name="25" dev="tmpfs" ino=144 [ 423.043173][ T9398] bridge0: port 3(team0) entered blocking state [ 423.056908][ T9398] bridge0: port 3(team0) entered disabled state [ 423.063738][ T9398] team0: entered allmulticast mode [ 423.069012][ T30] audit: type=1400 audit(1723037138.957:41862): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9390 comm="syz.0.1366" path="/25/bus" dev="tmpfs" ino=149 [ 423.096735][ T9398] team_slave_0: entered allmulticast mode [ 423.103996][ T9398] team_slave_1: entered allmulticast mode [ 423.116893][ T30] audit: type=1400 audit(1723037139.057:41863): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 423.149616][ T9398] bridge0: port 3(team0) entered blocking state [ 423.155990][ T9398] bridge0: port 3(team0) entered forwarding state [ 423.174500][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.185012][ T30] audit: type=1400 audit(1723037139.057:41864): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 423.209410][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.267601][ T30] audit: type=1400 audit(1723037139.067:41865): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 423.282947][ T5218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 423.286805][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 423.299449][ C0] audit: audit_lost=3000 audit_rate_limit=0 audit_backlog_limit=64 [ 423.319496][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.607554][ T9337] hsr_slave_0: entered promiscuous mode [ 423.670453][ T9337] hsr_slave_1: entered promiscuous mode [ 423.804630][ T9337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.839427][ T9337] Cannot create hsr debugfs directory [ 424.280017][ T9417] pim6reg1: entered promiscuous mode [ 424.285393][ T9417] pim6reg1: entered allmulticast mode [ 424.876420][ T9429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.000439][ T9337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.366831][ T9337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.542677][ T9337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.892812][ T9441] mmap: syz.2.1383 (9441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 426.958542][ T9443] nbd: must specify a size in bytes for the device [ 427.463588][ T9337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.533454][ T5232] Bluetooth: hci5: Malformed Event: 0x02 [ 427.699449][ T30] kauditd_printk_skb: 2321 callbacks suppressed [ 427.699471][ T30] audit: type=1400 audit(1723037144.007:44163): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9451 comm="syz-executor" name="319" dev="tmpfs" ino=1698 [ 427.758464][ T30] audit: type=1400 audit(1723037144.007:44164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9451 comm="syz-executor" name="319" dev="tmpfs" ino=1698 [ 427.763275][ T9337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.799020][ T4883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.806294][ T4883] audit: audit_lost=3009 audit_rate_limit=0 audit_backlog_limit=64 [ 427.814690][ T4883] audit: backlog limit exceeded [ 427.831290][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.837917][ C0] audit: audit_lost=3010 audit_rate_limit=0 audit_backlog_limit=64 [ 427.845971][ C0] audit: backlog limit exceeded [ 427.853407][ T9450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.931843][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 428.133834][ T9337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.163133][ T9337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.213937][ T9337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.309547][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 428.322049][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.329996][ T9337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.142635][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 429.170124][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.202639][ T9] usb 5-1: config 0 descriptor?? [ 429.232697][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 429.565592][ T8] usb 5-1: USB disconnect, device number 26 [ 429.603555][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.676829][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.689495][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 429.750144][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.757347][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.806857][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.814109][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.911073][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.931890][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.966422][ T9] usb 3-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=78.fb [ 429.996439][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.029836][ T9] usb 3-1: Product: syz [ 430.034226][ T9] usb 3-1: Manufacturer: syz [ 430.038870][ T9] usb 3-1: SerialNumber: syz [ 430.083750][ T9] usb 3-1: config 0 descriptor?? [ 430.134937][ T9] usb 3-1: Could not find all expected endpoints [ 430.415940][ T5278] usb 3-1: USB disconnect, device number 20 [ 430.728948][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.943416][ T9337] veth0_vlan: entered promiscuous mode [ 430.996575][ T9337] veth1_vlan: entered promiscuous mode [ 431.286034][ T9337] veth0_macvtap: entered promiscuous mode [ 431.341766][ T9337] veth1_macvtap: entered promiscuous mode [ 431.703346][ T5277] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 431.705620][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.736888][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.809379][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.891584][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.901762][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 431.907716][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.918919][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.929967][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.947288][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.958223][ T5277] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 432.219532][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.231077][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.241623][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.287751][ T5277] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 432.289464][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.325375][ T5277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.375776][ T5277] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.382068][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.405737][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.430025][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.432648][ T5277] usb 3-1: Product: syz [ 432.475622][ T5277] usb 3-1: Manufacturer: 䙡 [ 432.479539][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.491530][ T5277] usb 3-1: SerialNumber: syz [ 432.518965][ T9503] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 432.526665][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.549418][ T9503] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.1402'. [ 432.563302][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.578287][ T9503] netlink: 'syz.4.1402': attribute type 2 has an invalid length. [ 432.596960][ T9503] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 432.624274][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.661261][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.689412][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.710282][ T30] kauditd_printk_skb: 2842 callbacks suppressed [ 432.710329][ T30] audit: type=1400 audit(1723037149.017:46919): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 432.729667][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.799224][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.800001][ T30] audit: type=1400 audit(1723037149.017:46920): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 432.821016][ T5225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 432.836788][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 432.843399][ C0] audit: audit_lost=3041 audit_rate_limit=0 audit_backlog_limit=64 [ 432.851420][ C0] audit: backlog limit exceeded [ 432.859822][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.873332][ T9504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 432.879520][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.890661][ T5225] audit: audit_lost=3042 audit_rate_limit=0 audit_backlog_limit=64 [ 432.898579][ T5225] audit: backlog limit exceeded [ 432.900398][ T30] audit: type=1400 audit(1723037149.017:46921): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 432.903663][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.992873][ T5277] usb 3-1: 0:2 : does not exist [ 433.019116][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.039378][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.054456][ T5277] usb 3-1: USB disconnect, device number 21 [ 433.062952][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.129551][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.169498][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.201882][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.238520][ T9337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.261460][ T9337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.299592][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.343058][ T9337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.425155][ T9337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.469920][ T9337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.491057][ T9337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.854024][ T2554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.880026][ T2554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.033955][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.079774][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.597606][ T9517] binder: 9516:9517 ioctl c018620c 200013c0 returned -22 [ 435.413383][ T9527] kernel read not supported for file /#! [ 435.413383][ T9527] ë•#êwÛ¶×mü\§è3e§ô (pid: 9527 comm: syz.3.1412) [ 437.739114][ T30] kauditd_printk_skb: 3417 callbacks suppressed [ 437.739134][ T30] audit: type=1400 audit(1723037154.047:49675): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9543 comm="syz-executor" name="/" dev="sda1" ino=2 [ 437.828948][ T30] audit: type=1400 audit(1723037154.047:49676): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9551 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 437.980857][ T9543] audit: audit_backlog=65 > audit_backlog_limit=64 [ 437.991154][ T9543] audit: audit_lost=3268 audit_rate_limit=0 audit_backlog_limit=64 [ 437.999113][ T9543] audit: backlog limit exceeded [ 437.999882][ T5218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 438.004377][ T9543] audit: audit_backlog=65 > audit_backlog_limit=64 [ 438.018710][ T9543] audit: audit_lost=3269 audit_rate_limit=0 audit_backlog_limit=64 [ 438.199626][ T30] audit: type=1400 audit(1723037154.047:49677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9551 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 438.210669][ T8925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 438.347243][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 438.380486][ T9557] netlink: 'syz.1.1422': attribute type 7 has an invalid length. [ 438.388281][ T9557] netlink: 'syz.1.1422': attribute type 8 has an invalid length. [ 438.434238][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 438.520490][ T9557] gretap0: entered promiscuous mode [ 438.552684][ T9557] batadv_slave_1: entered promiscuous mode [ 438.799536][ T5307] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 438.869127][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.884773][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.910104][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.930144][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.938317][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.947413][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.019512][ T5307] usb 4-1: Using ep0 maxpacket: 16 [ 439.031989][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 439.042178][ T5307] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 439.052941][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.062839][ T5307] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 439.081406][ T5307] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 439.096940][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.106128][ T5307] usb 4-1: Product: syz [ 439.112839][ T5307] usb 4-1: Manufacturer: syz [ 439.117500][ T5307] usb 4-1: SerialNumber: syz [ 439.129021][ T5307] usb 4-1: config 0 descriptor?? [ 439.205045][ T5307] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 439.237107][ T5307] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 439.442136][ T5307] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 439.569744][ T5307] usb 4-1: USB disconnect, device number 27 [ 439.780516][ T5237] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 439.889514][ T5323] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 439.899908][ T5237] Bluetooth: hci6: unexpected event for opcode 0x0c6d [ 439.955354][ T9567] lo speed is unknown, defaulting to 1000 [ 440.116903][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.130096][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.131336][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.242179][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.282057][ T5323] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 440.328352][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.370902][ T5323] usb 3-1: config 0 descriptor?? [ 440.848822][ T9585] Unknown options in mask 5 [ 441.090092][ T5237] Bluetooth: hci2: command tx timeout [ 441.819135][ T5323] lenovo 0003:04B3:3100.001A: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.2-1/input0 [ 442.062719][ T5323] usb 3-1: USB disconnect, device number 22 [ 442.769675][ T9592] tipc: Started in network mode [ 442.783269][ T30] kauditd_printk_skb: 1806 callbacks suppressed [ 442.783291][ T30] audit: type=1400 audit(1723037159.087:51251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9337 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 442.786986][ T9241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 442.810222][ T4652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 442.816778][ T9592] tipc: Node identity id-name-, cluster identity 4711 [ 442.849748][ T9337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 442.850153][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 442.856292][ T9337] audit: audit_lost=3348 audit_rate_limit=0 audit_backlog_limit=64 [ 442.862839][ C0] audit: audit_lost=3349 audit_rate_limit=0 audit_backlog_limit=64 [ 442.862861][ C0] audit: backlog limit exceeded [ 442.875252][ T9241] audit: audit_lost=3350 audit_rate_limit=0 audit_backlog_limit=64 [ 442.898527][ T9592] tipc: Enabling of bearer rejected, failed to enable media [ 442.919012][ T30] audit: type=1400 audit(1723037159.087:51252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9337 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 443.164539][ T5237] Bluetooth: hci2: command tx timeout [ 443.458881][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1436'. [ 443.951117][ T5237] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 443.960455][ T5237] Bluetooth: hci6: Injecting HCI hardware error event [ 443.969168][ T5237] Bluetooth: hci6: hardware error 0x00 [ 443.986887][ T9567] chnl_net:caif_netlink_parms(): no params data found [ 444.162826][ T9606] trusted_key: encrypted_key: insufficient parameters specified [ 444.178715][ T9606] trusted_key: encrypted_key: insufficient parameters specified [ 444.203228][ T9606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.394106][ T9606] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 444.569752][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.576980][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.644158][ T9567] bridge_slave_0: entered allmulticast mode [ 444.652696][ T9567] bridge_slave_0: entered promiscuous mode [ 444.662389][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.671744][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.679058][ T9567] bridge_slave_1: entered allmulticast mode [ 444.693106][ T9567] bridge_slave_1: entered promiscuous mode [ 444.878063][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.951924][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.069989][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 445.177272][ T9567] team0: Port device team_slave_0 added [ 445.230890][ T5232] Bluetooth: hci2: command tx timeout [ 445.289418][ T9567] team0: Port device team_slave_1 added [ 445.309944][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 445.341026][ T25] usb 1-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice=28.2f [ 445.380093][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.408624][ T25] usb 1-1: Product: syz [ 445.416796][ T25] usb 1-1: Manufacturer: syz [ 445.421961][ T25] usb 1-1: SerialNumber: syz [ 445.440473][ T25] usb 1-1: config 0 descriptor?? [ 445.473717][ T25] snd_usb_podhd 1-1:0.0: Line 6 POD HD500 found [ 445.497865][ T25] usb 1-1: selecting invalid altsetting 1 [ 445.518200][ T25] snd_usb_podhd 1-1:0.0: set_interface failed [ 445.525571][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.543461][ T25] snd_usb_podhd 1-1:0.0: Line 6 POD HD500 now disconnected [ 445.554934][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.609726][ T25] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 445.651899][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.705014][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.749312][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.829360][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.006350][ T9606] fuse: Bad value for 'rootmode' [ 446.141369][ T9567] hsr_slave_0: entered promiscuous mode [ 446.189832][ T25] usb 1-1: USB disconnect, device number 16 [ 446.209867][ T9567] hsr_slave_1: entered promiscuous mode [ 446.251931][ T9567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.272022][ T5237] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 446.301694][ T9567] Cannot create hsr debugfs directory [ 446.918628][ T9567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.238192][ T9567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.316020][ T5237] Bluetooth: hci2: command tx timeout [ 447.608658][ T9567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.796772][ T30] kauditd_printk_skb: 2839 callbacks suppressed [ 447.796799][ T30] audit: type=1400 audit(1723037164.107:53050): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=9241 comm="syz-executor" opid=9619 ocomm="syz.2.1440" [ 447.880945][ T9567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.899544][ T30] audit: type=1400 audit(1723037164.107:53051): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=9241 comm="syz-executor" opid=9619 ocomm="syz.2.1440" [ 447.946232][ T30] audit: type=1400 audit(1723037164.107:53052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9640 comm="syz-executor" name="42" dev="tmpfs" ino=233 [ 448.038493][ T30] audit: type=1400 audit(1723037164.107:53053): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9640 comm="syz-executor" name="42" dev="tmpfs" ino=233 [ 448.108894][ T9241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.126058][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.132890][ C0] audit: audit_lost=3698 audit_rate_limit=0 audit_backlog_limit=64 [ 448.140886][ C0] audit: backlog limit exceeded [ 448.146186][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 448.152886][ C0] audit: audit_lost=3699 audit_rate_limit=0 audit_backlog_limit=64 [ 448.567491][ T9647] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 448.883929][ T9567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.983404][ T9567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.254977][ T9650] netlink: 'syz.2.1447': attribute type 3 has an invalid length. [ 449.280665][ T9567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.325467][ T9567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.755587][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.876360][ T9567] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.920846][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.928083][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.973219][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.980457][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.927878][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.069592][ T5278] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 452.308172][ T5278] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 452.363949][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=0 [ 452.405372][ T5278] usb 4-1: Product: syz [ 452.441017][ T5278] usb 4-1: config 0 descriptor?? [ 452.472931][ T5278] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 452.511223][ T5278] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 452.800003][ T30] kauditd_printk_skb: 3375 callbacks suppressed [ 452.800022][ T30] audit: type=1400 audit(1723037169.117:56297): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9695 comm="modprobe" name="/" dev="sda1" ino=2 [ 452.909135][ T9695] audit: audit_backlog=66 > audit_backlog_limit=64 [ 452.909148][ T9696] audit: audit_backlog=66 > audit_backlog_limit=64 [ 452.909165][ T9696] audit: audit_lost=3744 audit_rate_limit=0 audit_backlog_limit=64 [ 452.945179][ T25] usb 4-1: USB disconnect, device number 28 [ 452.964455][ T25] ftdi_sio 4-1:0.0: device disconnected [ 452.982118][ T30] audit: type=1400 audit(1723037169.137:56298): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9695 comm="modprobe" name="/" dev="sda1" ino=2 [ 453.001303][ T9695] audit: audit_lost=3745 audit_rate_limit=0 audit_backlog_limit=64 [ 453.028456][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 453.033793][ T9695] audit: backlog limit exceeded [ 453.049430][ T9696] audit: backlog limit exceeded [ 453.064995][ T27] audit: audit_lost=3747 audit_rate_limit=0 audit_backlog_limit=64 [ 453.228393][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 453.289583][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 453.298522][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'. [ 454.376203][ T47] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 454.844025][ T47] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 454.933427][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.987518][ T47] usb 2-1: Product: syz [ 455.039141][ T47] usb 2-1: Manufacturer: syz [ 455.082991][ T47] usb 2-1: SerialNumber: syz [ 455.132475][ T47] usb 2-1: config 0 descriptor?? [ 455.184547][ T47] ch341 2-1:0.0: ch341-uart converter detected [ 455.218319][ T9567] veth0_vlan: entered promiscuous mode [ 455.272494][ T9567] veth1_vlan: entered promiscuous mode [ 455.417605][ T9567] veth0_macvtap: entered promiscuous mode [ 455.483013][ T9567] veth1_macvtap: entered promiscuous mode [ 455.592375][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.667543][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.693985][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.739300][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.778605][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.794329][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 455.819390][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.846376][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.879370][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.937631][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.950782][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.964272][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.978860][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.998647][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.046147][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.093595][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.196739][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.227487][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.254625][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.298128][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.324111][ T47] ch341-uart ttyUSB0: break control not supported, using simulated break [ 456.367432][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.370239][ T47] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 456.414360][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.449587][ T47] usb 2-1: USB disconnect, device number 20 [ 456.477874][ T47] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 456.505100][ T47] ch341 2-1:0.0: device disconnected [ 456.530626][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.589437][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.630649][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.656037][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.682232][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.707522][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.740769][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.019366][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.865344][ T30] kauditd_printk_skb: 2814 callbacks suppressed [ 457.865366][ T30] audit: type=1400 audit(1723037174.177:58732): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.104 dest=55372 netif=eth0 [ 457.880025][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.939903][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.961293][ T30] audit: type=1400 audit(1723037174.217:58733): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 457.962242][ T5218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.986229][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.986255][ C0] audit: audit_lost=3877 audit_rate_limit=0 audit_backlog_limit=64 [ 457.986274][ C0] audit: backlog limit exceeded [ 457.986637][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.986663][ C0] audit: audit_lost=3878 audit_rate_limit=0 audit_backlog_limit=64 [ 457.986681][ C0] audit: backlog limit exceeded [ 457.987153][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.998907][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.238626][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.272826][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.283666][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.695389][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.724250][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.745892][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.371324][ T9742] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 459.418041][ T9567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.429606][ T9742] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 459.438816][ T9567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.453364][ T9567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.464134][ T9742] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 459.474909][ T9567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.715510][ T9745] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 459.818335][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.869713][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.015776][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.025377][ T9753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 460.025540][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.086412][ T5323] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 460.301285][ T5323] usb 1-1: Using ep0 maxpacket: 32 [ 460.825049][ T9753] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1479'. [ 460.968576][ T5323] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 460.990500][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.009413][ T5323] usb 1-1: Product: syz [ 461.013731][ T5323] usb 1-1: Manufacturer: syz [ 461.018373][ T5323] usb 1-1: SerialNumber: syz [ 461.076759][ T5323] usb 1-1: config 0 descriptor?? [ 461.449887][ T5307] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 461.684426][ T5307] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 461.719938][ T5307] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 461.728228][ T5307] usb 4-1: Manufacturer: syz [ 461.786386][ T5323] airspy 1-1:0.0: Board ID: 00 [ 461.808870][ T5307] usb 4-1: config 0 descriptor?? [ 461.824342][ T5323] airspy 1-1:0.0: Firmware version: [ 461.988836][ T5323] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 462.024401][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.037273][ T5323] airspy 1-1:0.0: Registered as swradio16 [ 462.063835][ T5323] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 462.140776][ T5323] usb 1-1: USB disconnect, device number 17 [ 462.334035][ T5307] gs_usb 4-1:0.0: Configuring for 58 interfaces [ 462.352112][ T5307] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 462.385347][ T5307] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 462.403387][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.604197][ T5278] usb 4-1: USB disconnect, device number 29 [ 462.844971][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.872591][ T30] kauditd_printk_skb: 2276 callbacks suppressed [ 462.872613][ T30] audit: type=1400 audit(1723037179.177:60736): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9773 comm="syz-executor" name="347" dev="tmpfs" ino=1846 [ 463.364693][ T8925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.372363][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.378917][ C0] audit: audit_lost=3971 audit_rate_limit=0 audit_backlog_limit=64 [ 463.387002][ C0] audit: backlog limit exceeded [ 463.421743][ T9776] tipc: Started in network mode [ 463.426739][ T9776] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 463.434433][ T9776] tipc: Enabled bearer , priority 0 [ 463.443345][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.449964][ C0] audit: audit_lost=3972 audit_rate_limit=0 audit_backlog_limit=64 [ 463.457926][ C0] audit: backlog limit exceeded [ 463.463220][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.469808][ C0] audit: audit_lost=3973 audit_rate_limit=0 audit_backlog_limit=64 [ 463.738894][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.259017][ T53] bridge_slave_1: left allmulticast mode [ 464.303259][ T53] bridge_slave_1: left promiscuous mode [ 464.309214][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.458922][ T53] bridge_slave_0: left allmulticast mode [ 464.470336][ T53] bridge_slave_0: left promiscuous mode [ 464.476187][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.538166][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.605893][ T5323] tipc: Node number set to 10136234 [ 465.056865][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.066379][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.078588][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.087464][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 465.095417][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.238190][ T5232] Bluetooth: hci2: command tx timeout [ 467.933496][ T30] kauditd_printk_skb: 1721 callbacks suppressed [ 467.933519][ T30] audit: type=1400 audit(1723037184.247:62230): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=9802 comm="syz.1.1493" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30413 [ 467.999437][ T30] audit: type=1400 audit(1723037184.277:62231): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9802 comm="syz.1.1493" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30413 [ 468.059364][ T30] audit: type=1400 audit(1723037184.277:62232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 468.114659][ T30] audit: type=1400 audit(1723037184.277:62233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 468.197354][ T30] audit: type=1400 audit(1723037184.277:62234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 468.247513][ T30] audit: type=1400 audit(1723037184.277:62235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 468.285223][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.323377][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.351056][ T53] bond0 (unregistering): Released all slaves [ 468.351811][ T30] audit: type=1400 audit(1723037184.277:62236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 468.461478][ T30] audit: type=1400 audit(1723037184.277:62237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=8 [ 468.529551][ T30] audit: type=1400 audit(1723037184.277:62238): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4652 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 [ 468.578136][ T9241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 469.081862][ T9813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1494'. [ 469.202058][ T9814] misc userio: No port type given on /dev/userio [ 469.270339][ T9814] misc userio: Begin command sent, but we're already running [ 469.315434][ T5232] Bluetooth: hci2: command tx timeout [ 469.794036][ T9791] lo speed is unknown, defaulting to 1000 [ 469.794172][ T9823] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 470.070420][ T9832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.261236][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 470.271919][ T9832] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 470.643024][ T9836] vivid-000: disconnect [ 471.047895][ T9834] vivid-000: reconnect [ 471.389898][ T5232] Bluetooth: hci2: command tx timeout [ 471.819647][ T53] hsr_slave_0: left promiscuous mode [ 471.862551][ T53] hsr_slave_1: left promiscuous mode [ 471.900684][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.908560][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.957978][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.984233][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.015721][ T9850] 9p: Unknown uid 00000000004294967295 [ 472.095671][ T53] veth1_macvtap: left promiscuous mode [ 472.122854][ T53] veth0_macvtap: left promiscuous mode [ 472.141898][ T53] veth1_vlan: left promiscuous mode [ 472.159574][ T53] veth0_vlan: left promiscuous mode [ 472.956465][ T30] kauditd_printk_skb: 2949 callbacks suppressed [ 472.956486][ T30] audit: type=1400 audit(1723037189.267:64676): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9862 comm="syz.3.1516" opid=9862 ocomm="syz.3.1516" [ 473.019429][ T30] audit: type=1400 audit(1723037189.297:64677): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9862 comm="syz.3.1516" opid=9862 ocomm="syz.3.1516" [ 473.192030][ T30] audit: type=1400 audit(1723037189.307:64678): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9862 comm="syz.3.1516" opid=9862 ocomm="syz.3.1516" [ 473.321325][ T30] audit: type=1400 audit(1723037189.407:64679): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 473.379602][ T30] audit: type=1400 audit(1723037189.407:64680): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 473.469442][ T5232] Bluetooth: hci2: command tx timeout [ 473.521490][ T30] audit: type=1400 audit(1723037189.407:64681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 473.568183][ T8925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.629632][ T30] audit: type=1400 audit(1723037189.407:64682): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 473.683158][ T8925] audit: audit_lost=4221 audit_rate_limit=0 audit_backlog_limit=64 [ 473.692011][ T4652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.156873][ T53] team0 (unregistering): Port device team_slave_1 removed [ 476.597009][ T53] team0 (unregistering): Port device team_slave_0 removed [ 477.959335][ T30] kauditd_printk_skb: 2032 callbacks suppressed [ 477.959356][ T30] audit: type=1400 audit(1723037194.267:66435): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 478.026884][ T30] audit: type=1400 audit(1723037194.267:66436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 478.078111][ T30] audit: type=1400 audit(1723037194.267:66437): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.106914][ T30] audit: type=1400 audit(1723037194.267:66438): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=9893 comm="syz-executor" opid=9893 ocomm="syz-executor" [ 478.139447][ T30] audit: type=1400 audit(1723037194.267:66439): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.158672][ T30] audit: type=1400 audit(1723037194.267:66440): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.178001][ T9885] Falling back ldisc for ptm0. [ 478.190714][ T9878] syz.0.1518 (9878) used greatest stack depth: 18000 bytes left [ 478.198683][ T30] audit: type=1400 audit(1723037194.267:66441): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.245593][ T30] audit: type=1400 audit(1723037194.297:66442): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.290700][ T30] audit: type=1400 audit(1723037194.297:66443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 478.337680][ T30] audit: type=1400 audit(1723037194.297:66444): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9893 comm="syz-executor" name="36" dev="tmpfs" ino=208 [ 480.495402][ T9791] chnl_net:caif_netlink_parms(): no params data found [ 480.579565][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 480.802227][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.811888][ T9] usb 3-1: config 1 has no interface number 0 [ 480.834763][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.871481][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 480.940155][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 481.014675][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.030544][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 481.033059][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.088799][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.091299][ T9791] bridge_slave_0: entered allmulticast mode [ 481.142451][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.160978][ T9791] bridge_slave_0: entered promiscuous mode [ 481.170423][ T9] usb 3-1: Product: syz [ 481.185918][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.193601][ T9] usb 3-1: Manufacturer: syz [ 481.204054][ T9] usb 3-1: SerialNumber: syz [ 481.224649][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.253607][ T9791] bridge_slave_1: entered allmulticast mode [ 481.287391][ T9791] bridge_slave_1: entered promiscuous mode [ 481.297591][ T9908] random: crng reseeded on system resumption [ 481.533497][ T9791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.599053][ T9791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.743858][ T9901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.853517][ T9791] team0: Port device team_slave_0 added [ 481.923045][ T9791] team0: Port device team_slave_1 added [ 482.146412][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.156358][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.247733][ T9791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.297654][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.327528][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.405610][ T9901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 482.455142][ T9] cdc_ncm 3-1:1.1: bind() failure [ 482.460297][ T9791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.715026][ T9791] hsr_slave_0: entered promiscuous mode [ 482.777578][ T9791] hsr_slave_1: entered promiscuous mode [ 482.833489][ T9791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.866719][ T9791] Cannot create hsr debugfs directory [ 482.896721][ T9] usb 3-1: USB disconnect, device number 23 [ 483.081479][ T30] kauditd_printk_skb: 1136 callbacks suppressed [ 483.081530][ T30] audit: type=1400 audit(1723037199.397:67452): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 483.114333][ T30] audit: type=1400 audit(1723037199.427:67453): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 483.160685][ T30] audit: type=1400 audit(1723037199.427:67454): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="357" dev="tmpfs" ino=1899 [ 483.188855][ T30] audit: type=1400 audit(1723037199.427:67455): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=9913 comm="syz-executor" opid=9913 ocomm="syz-executor" [ 483.296056][ T30] audit: type=1400 audit(1723037199.497:67456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="357" dev="tmpfs" ino=1899 [ 483.393684][ T30] audit: type=1400 audit(1723037199.497:67457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="357" dev="tmpfs" ino=1899 [ 483.469206][ T30] audit: type=1400 audit(1723037199.497:67458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9913 comm="syz-executor" name="357" dev="tmpfs" ino=1899 [ 483.555185][ T30] audit: type=1400 audit(1723037199.497:67459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9913 comm="syz-executor" name="357" dev="tmpfs" ino=1899 [ 483.593984][ T9241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 483.621426][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 485.308072][ T9791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.360384][ T9791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.401421][ T9791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.476155][ T9791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.047317][ T9791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.096815][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 486.217584][ T9791] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.348460][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.355777][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.497538][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.504997][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.209101][ T9952] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 488.121214][ T30] kauditd_printk_skb: 2211 callbacks suppressed [ 488.121233][ T30] audit: type=1400 audit(1723037204.437:69595): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9948 comm="modprobe" name="/" dev="sda1" ino=2 [ 488.287569][ T30] audit: type=1400 audit(1723037204.477:69596): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9948 comm="modprobe" name="/" dev="sysfs" ino=1 [ 488.323331][ T9956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.361580][ T9955] audit: audit_backlog=66 > audit_backlog_limit=64 [ 488.379726][ T9957] audit: audit_backlog=66 > audit_backlog_limit=64 [ 488.387892][ T9957] audit: audit_lost=4385 audit_rate_limit=0 audit_backlog_limit=64 [ 488.395828][ T9957] audit: backlog limit exceeded [ 488.401111][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 488.407656][ C0] audit: audit_lost=4386 audit_rate_limit=0 audit_backlog_limit=64 [ 488.415626][ C0] audit: backlog limit exceeded [ 488.742817][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 488.834428][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 490.727517][ C1] vcan0: j1939_tp_rxtimer: 0xffff888167291800: rx timeout, send abort [ 490.883050][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.236013][ C1] vcan0: j1939_tp_rxtimer: 0xffff888167291800: abort rx timeout. Force session deactivation [ 491.737208][ T9982] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.748975][ T9982] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.760419][ T9982] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.769132][ T9982] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.779576][ T5278] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 492.149574][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 492.624592][ T9982] vxlan0: entered promiscuous mode [ 492.639359][ T5278] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.679702][ T5278] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.693306][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.710402][ T5278] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.713435][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 492.730871][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 492.749759][ T5278] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.760614][ T9982] vxlan0: entered allmulticast mode [ 492.771309][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 492.779602][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 492.787163][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 492.827983][ T5278] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 492.900037][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.041626][ T9982] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.050912][ T9982] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.060103][ T9982] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.069055][ T9982] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.202502][ T30] kauditd_printk_skb: 3128 callbacks suppressed [ 493.202522][ T30] audit: type=1400 audit(1723037209.517:72142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9991 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 493.297565][ T30] audit: type=1400 audit(1723037209.517:72143): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9977 comm="syz.2.1551" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 493.365088][ T30] audit: type=1400 audit(1723037209.517:72144): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=9977 comm="syz.2.1551" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 493.428326][ T9993] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.435559][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.457240][ T30] audit: type=1400 audit(1723037209.517:72145): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9977 comm="syz.2.1551" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 493.482675][ T5278] audit: audit_lost=4582 audit_rate_limit=0 audit_backlog_limit=64 [ 493.506481][ T9993] audit: audit_lost=4583 audit_rate_limit=0 audit_backlog_limit=64 [ 493.526374][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.533061][ T5278] audit: backlog limit exceeded [ 493.546656][ T5278] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 493.580084][ T5278] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 493.587155][ T5278] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 493.654657][ T5278] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 493.719407][ T5278] ntrig 0003:1B96:000A.001B: unknown main item tag 0x0 [ 493.759688][ T5278] ntrig 0003:1B96:000A.001B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 493.836007][ T5278] usb 3-1: USB disconnect, device number 24 [ 493.959933][ T9994] ======================================================= [ 493.959933][ T9994] WARNING: The mand mount option has been deprecated and [ 493.959933][ T9994] and is ignored by this kernel. Remove the mand [ 493.959933][ T9994] option from the mount to silence this warning. [ 493.959933][ T9994] ======================================================= [ 494.292182][ T9984] lo speed is unknown, defaulting to 1000 [ 494.470271][ T9791] veth0_vlan: entered promiscuous mode [ 494.547739][ T9791] veth1_vlan: entered promiscuous mode [ 494.718574][ T9791] veth0_macvtap: entered promiscuous mode [ 494.789118][ T9791] veth1_macvtap: entered promiscuous mode [ 494.911926][ T5237] Bluetooth: hci8: command tx timeout [ 494.916182][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.934351][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 494.976040][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.989805][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.027380][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.050398][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.078611][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.104271][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.141349][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.169660][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.262121][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.297466][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.309492][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.321351][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.337942][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.348839][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.369397][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.389425][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.409379][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.462497][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.493291][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 495.645413][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.671386][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.755657][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.786994][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.888013][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.959478][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.982930][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.019576][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.030558][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.903743][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.919650][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.941755][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.973822][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.993090][ T5237] Bluetooth: hci8: command tx timeout [ 497.019340][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.083798][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.146961][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.181686][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.212727][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.261379][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.541353][ T9791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.625282][ T9791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.681376][ T9791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.794209][ T9791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.039546][ T5307] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 498.192159][T10019] vivid-000: disconnect [ 498.229899][T10019] vivid-000: reconnect [ 498.289705][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 498.324037][ T30] kauditd_printk_skb: 2007 callbacks suppressed [ 498.324057][ T30] audit: type=1400 audit(1723037214.637:73640): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=10020 comm="syz.1.1560" path="/dev/raw-gadget" dev="devtmpfs" ino=734 [ 498.370847][ T5307] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.383954][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.399364][ T5307] usb 2-1: Product: syz [ 498.413366][ T5307] usb 2-1: Manufacturer: syz [ 498.480019][ T5307] usb 2-1: SerialNumber: syz [ 498.491079][ T30] audit: type=1400 audit(1723037214.667:73641): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10025 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 498.538584][T10028] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.571570][ T9791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.600539][ T5307] usb 2-1: config 0 descriptor?? [ 498.609088][T10021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.620294][T10028] audit: audit_lost=4755 audit_rate_limit=0 audit_backlog_limit=64 [ 498.620321][T10028] audit: backlog limit exceeded [ 498.620351][T10028] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.620366][T10028] audit: audit_lost=4756 audit_rate_limit=0 audit_backlog_limit=64 [ 498.620383][T10028] audit: backlog limit exceeded [ 498.893822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.923765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.946147][ T5307] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 499.069649][ T5237] Bluetooth: hci8: command tx timeout [ 499.127561][ T9984] chnl_net:caif_netlink_parms(): no params data found [ 499.172865][T10021] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1560'. [ 499.187420][T10021] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1560'. [ 499.254518][ T2554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.296774][ T2554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.987150][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.050012][ T5307] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 500.088690][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.138645][ T9984] bridge_slave_0: entered allmulticast mode [ 500.180555][ T9984] bridge_slave_0: entered promiscuous mode [ 500.474780][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.489722][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.514747][ T9984] bridge_slave_1: entered allmulticast mode [ 500.541289][ T9984] bridge_slave_1: entered promiscuous mode [ 500.764169][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.836453][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.058407][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 501.149577][ T5237] Bluetooth: hci8: command tx timeout [ 501.466126][ T5323] usb 2-1: USB disconnect, device number 21 [ 501.467693][ T2512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.578405][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592260][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.976662][ T2512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.218012][T10064] sch_tbf: peakrate 64 is lower than or equals to rate 13732705828943179357 ! [ 502.421051][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.433690][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.443027][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.460982][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.474015][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 502.484150][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.486528][ T2512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.720136][ T9984] team0: Port device team_slave_0 added [ 502.775111][ T9984] team0: Port device team_slave_1 added [ 502.911586][ T2512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.675539][ T30] kauditd_printk_skb: 2987 callbacks suppressed [ 503.675558][ T30] audit: type=1400 audit(1723037219.727:76271): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10079 comm="syz.1.1578" saddr=10.128.0.169 src=30008 daddr=10.128.0.104 dest=55372 netif=eth0 [ 503.759629][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.766651][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.844234][T10085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.853598][T10086] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.860231][ T30] audit: type=1400 audit(1723037219.997:76272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10080 comm="modprobe" name="/" dev="sysfs" ino=1 [ 503.870118][T10081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.885358][T10081] audit: audit_lost=4877 audit_rate_limit=0 audit_backlog_limit=64 [ 503.893308][T10081] audit: backlog limit exceeded [ 503.898181][T10081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.904839][T10081] audit: audit_lost=4878 audit_rate_limit=0 audit_backlog_limit=64 [ 503.912799][T10081] audit: backlog limit exceeded [ 503.943717][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.100796][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.128381][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.267400][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.589958][ T5237] Bluetooth: hci2: command tx timeout [ 504.635387][ T9984] hsr_slave_0: entered promiscuous mode [ 504.744715][ T9984] hsr_slave_1: entered promiscuous mode [ 504.792521][ T9984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.813652][ T9984] Cannot create hsr debugfs directory [ 504.819696][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 504.869550][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 505.282658][T10068] lo speed is unknown, defaulting to 1000 [ 505.831821][ T2512] bridge_slave_1: left allmulticast mode [ 505.870011][ T2512] bridge_slave_1: left promiscuous mode [ 505.883576][ T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 505.907762][ T2512] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.993776][ T2512] bridge_slave_0: left allmulticast mode [ 506.056983][ T2512] bridge_slave_0: left promiscuous mode [ 506.074366][ T2512] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.159401][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 506.171561][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.200327][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.229905][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 506.259569][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.273515][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.298536][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.648681][ T47] usb 2-1: usb_control_msg returned -32 [ 506.673578][ T5237] Bluetooth: hci2: command tx timeout [ 506.683190][ T47] usbtmc 2-1:16.0: can't read capabilities [ 508.095927][ T2512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.120526][ T2512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.175909][ T2512] bond0 (unregistering): Released all slaves [ 508.633786][ T9] usb 2-1: USB disconnect, device number 22 [ 508.681597][ T30] kauditd_printk_skb: 2395 callbacks suppressed [ 508.681617][ T30] audit: type=1400 audit(1723037224.987:78340): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5218 comm="syz-executor" name="377" dev="tmpfs" ino=2013 [ 508.737058][ T30] audit: type=1400 audit(1723037224.997:78341): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5218 comm="syz-executor" path="/377/cgroup" dev="tmpfs" ino=2014 [ 508.752066][T10111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.762950][ T5237] Bluetooth: hci2: command tx timeout [ 508.800153][ T4652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.806716][ T4652] audit: audit_lost=4989 audit_rate_limit=0 audit_backlog_limit=64 [ 508.814876][ T4652] audit: backlog limit exceeded [ 508.820606][ T4652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.827475][ T4652] audit: audit_lost=4990 audit_rate_limit=0 audit_backlog_limit=64 [ 508.829711][T10111] audit: audit_lost=4991 audit_rate_limit=0 audit_backlog_limit=64 [ 508.848788][ T4652] audit: backlog limit exceeded [ 509.584260][ T9984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.359035][ T9984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.456804][T10119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 510.830310][ T5237] Bluetooth: hci2: command tx timeout [ 511.071652][ T9984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.430320][ T2512] hsr_slave_0: left promiscuous mode [ 511.518994][ T2512] hsr_slave_1: left promiscuous mode [ 511.533184][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.559710][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.597486][ T2512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.645337][ T2512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.771094][ T5307] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 511.860719][ T2512] veth1_macvtap: left promiscuous mode [ 511.878143][ T2512] veth0_macvtap: left promiscuous mode [ 511.905927][ T2512] veth1_vlan: left promiscuous mode [ 511.925161][ T2512] veth0_vlan: left promiscuous mode [ 512.002870][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 512.160254][ T5307] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 512.203865][ T5307] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 512.255665][ T5307] usb 3-1: Product: syz [ 512.368345][ T5307] usb 3-1: Manufacturer: syz [ 512.393271][ T5307] usb 3-1: SerialNumber: syz [ 512.763056][T10138] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 512.897297][ T5307] usb 3-1: config 0 descriptor?? [ 513.093277][ T5307] usb 3-1: can't set config #0, error -71 [ 513.175913][ T5307] usb 3-1: USB disconnect, device number 25 [ 513.709044][ T30] kauditd_printk_skb: 1808 callbacks suppressed [ 513.709083][ T30] audit: type=1400 audit(1723037230.017:79739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10141 comm="syz-executor" name="54" dev="tmpfs" ino=296 [ 513.781118][ T30] audit: type=1400 audit(1723037230.017:79740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10141 comm="syz-executor" name="54" dev="tmpfs" ino=296 [ 514.005057][ T30] audit: type=1400 audit(1723037230.017:79741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10141 comm="syz-executor" name="54" dev="tmpfs" ino=296 [ 514.027020][ T30] audit: type=1400 audit(1723037230.017:79742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10140 comm="syz-executor" name="382" dev="tmpfs" ino=2039 [ 514.047219][ T30] audit: type=1400 audit(1723037230.017:79743): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10140 comm="syz-executor" name="382" dev="tmpfs" ino=2039 [ 514.330922][ T30] audit: type=1400 audit(1723037230.017:79744): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10140 comm="syz-executor" name="382" dev="tmpfs" ino=2039 [ 514.730835][ T30] audit: type=1400 audit(1723037230.057:79745): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10140 comm="syz.1.1596" name="newroot" dev="tmpfs" ino=2 [ 514.815287][ T30] audit: type=1400 audit(1723037230.057:79746): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10140 comm="syz.1.1596" name="/" dev="devtmpfs" ino=1 [ 514.903327][ T30] audit: type=1400 audit(1723037230.137:79747): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 514.973247][ T5218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.108546][ T5273] IPVS: starting estimator thread 0... [ 515.199738][T10147] IPVS: using max 24 ests per chain, 57600 per kthread [ 517.721505][ T2512] team0 (unregistering): Port device team_slave_1 removed [ 517.931863][ T2512] team0 (unregistering): Port device team_slave_0 removed [ 518.936004][ T30] kauditd_printk_skb: 1273 callbacks suppressed [ 518.936027][ T30] audit: type=1400 audit(1723037235.247:80953): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8360 comm="syz.0.1023" saddr=10.128.0.169 src=30008 daddr=10.128.0.104 dest=55372 netif=eth0 [ 518.977214][ T30] audit: type=1400 audit(1723037235.287:80954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 519.016366][ T30] audit: type=1400 audit(1723037235.287:80955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 519.065807][ T30] audit: type=1400 audit(1723037235.287:80956): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="var" dev="sda1" ino=1906 [ 519.103669][ T30] audit: type=1400 audit(1723037235.287:80957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="sda1" ino=2 [ 519.126265][ T30] audit: type=1400 audit(1723037235.287:80958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 [ 519.158059][ T30] audit: type=1400 audit(1723037235.287:80959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wa pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=8 [ 519.196139][ T30] audit: type=1400 audit(1723037235.287:80960): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4652 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 [ 519.221487][ T30] audit: type=1400 audit(1723037235.287:80961): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4652 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 [ 519.399692][ T30] audit: type=1400 audit(1723037235.707:80962): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5218 comm="syz-executor" opid=10163 ocomm="syz.1.1604" [ 519.753895][ T9984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.073915][T10167] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 520.149724][T10167] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 522.029133][ T5277] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 523.785645][ T31] INFO: task syz.0.1190:8845 blocked for more than 145 seconds. [ 526.579771][ T30] kauditd_printk_skb: 789 callbacks suppressed [ 526.579795][ T30] audit: type=1400 audit(1723037242.887:81701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9241 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 526.709411][ T30] audit: type=1400 audit(1723037242.887:81702): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9241 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 526.780857][ T31] Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 526.833298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.858165][T10068] chnl_net:caif_netlink_parms(): no params data found [ 526.889522][ T9957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.897415][ T9957] audit: audit_lost=5174 audit_rate_limit=0 audit_backlog_limit=64 [ 526.905361][ T9957] audit: backlog limit exceeded [ 526.909546][ T31] task:syz.0.1190 state:D stack:24432 pid:8845 tgid:8842 ppid:8450 flags:0x00004004 [ 526.920385][T10186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.920415][T10186] audit: audit_lost=5175 audit_rate_limit=0 audit_backlog_limit=64 [ 526.920431][T10186] audit: backlog limit exceeded [ 526.920447][T10186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.920460][T10186] audit: audit_lost=5176 audit_rate_limit=0 audit_backlog_limit=64 [ 527.047660][ T31] Call Trace: [ 527.067261][ T31] [ 527.078489][ T31] __schedule+0x17ae/0x4a10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 527.107316][ T31] ? __pfx___schedule+0x10/0x10 [ 527.115166][ T31] ? __pfx_lock_release+0x10/0x10 [ 527.129573][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 527.168636][ T31] ? schedule+0x90/0x320 [ 527.182188][ T31] schedule+0x14b/0x320 [ 527.186514][ T31] schedule_preempt_disabled+0x13/0x30 [ 527.193711][ T31] __ww_mutex_lock+0xec2/0x2790 [ 527.198648][ T31] ? __ww_mutex_lock+0xb08/0x2790 [ 527.289624][ T31] ? drm_modeset_lock+0x6f/0x90 [ 527.294646][ T31] ? __pfx___ww_mutex_lock+0x10/0x10 [ 527.339451][ T31] ? __drm_mode_object_find+0x448/0x5d0 [ 527.345132][ T31] ? __pfx___drm_mode_object_find+0x10/0x10 [ 527.372150][ T31] ww_mutex_lock+0x40/0x1f0 [ 527.381268][ T31] ? drm_modeset_lock+0x65/0x90 [ 527.386266][ T31] drm_modeset_lock+0x6f/0x90 [ 527.405611][ T31] drm_mode_getcrtc+0x152/0x770 [ 527.429650][ T31] drm_ioctl_kernel+0x33a/0x440 [ 527.434769][ T31] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 527.449632][ T31] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 527.455258][ T31] ? __might_fault+0xc6/0x120 [ 527.461128][ T31] drm_ioctl+0x611/0xad0 [ 527.465564][ T31] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 527.472373][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 527.499427][ T31] ? bpf_lsm_file_ioctl+0x9/0x10 [ 527.504511][ T31] ? security_file_ioctl+0x87/0xb0 [ 527.510698][ T31] ? __pfx_drm_ioctl+0x10/0x10 [ 527.515691][ T31] __se_sys_ioctl+0xfc/0x170 [ 527.529419][ T31] do_syscall_64+0xf3/0x230 [ 527.534082][ T31] ? clear_bhb_loop+0x35/0x90 [ 527.538833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.547688][ T31] RIP: 0033:0x7fd723d779f9 [ 527.553029][ T31] RSP: 002b:00007fd724b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.569594][ T31] RAX: ffffffffffffffda RBX: 00007fd723f06058 RCX: 00007fd723d779f9 [ 527.577824][ T31] RDX: 00000000200002c0 RSI: 00000000c06864a1 RDI: 0000000000000006 [ 527.619761][ T31] RBP: 00007fd723de58ee R08: 0000000000000000 R09: 0000000000000000 [ 527.627961][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.659034][ T31] R13: 0000000000000000 R14: 00007fd723f06058 R15: 00007ffd6ddfe608 [ 527.675315][ T31] [ 527.749339][ T31] [ 527.749339][ T31] Showing all locks held in the system: [ 527.759525][ T31] 1 lock held by khungtaskd/31: [ 527.805375][ T31] #0: ffffffff8e7382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 527.875621][ T31] 3 locks held by kworker/u8:8/2512: [ 527.914400][ T31] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 528.019527][ T31] #1: ffffc90009507d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 528.089550][ T31] #2: ffffffff8e73d540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 528.169474][ T31] 3 locks held by kworker/u8:9/2554: [ 528.237311][ T31] 2 locks held by getty/4978: [ 528.242992][ T31] #0: ffff88802fd680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 528.279462][ T31] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 528.380833][ T31] 3 locks held by kworker/u9:7/5237: [ 528.399801][ T31] #0: ffff88807e3ae948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 528.469332][ T31] #1: ffffc9000385fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 528.589351][ T31] #2: ffff888033ce8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 528.670603][ T31] 3 locks held by kworker/1:3/5273: [ 528.679758][ T31] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 528.759379][ T31] #1: ffffc9000381fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 528.799606][ T31] #2: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 528.886815][ T31] 5 locks held by kworker/1:6/5277: [ 528.914243][ T31] #0: ffff88801caf2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 528.941962][ T31] #1: ffffc90003f57d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 528.970992][ T31] #2: ffff8880239c6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 528.990014][ T31] #3: ffff888023a31518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150 [ 529.019474][ T31] #4: ffff8880228f0668 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150 [ 529.049396][ T31] 3 locks held by kworker/1:7/5278: [ 529.070192][ T31] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 529.110374][ T31] #1: ffffc90003f67d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 529.123980][ T31] #2: ffffffff8e73d540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 529.137439][ T31] 4 locks held by syz.0.1023/8364: [ 529.144054][ T31] 1 lock held by syz.0.1190/8845: [ 529.158927][ T31] #0: ffff88802015c0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 529.189426][ T31] 2 locks held by syz.2.1285/9130: [ 529.203292][ T31] #0: ffffc90004087b30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_get_properties_ioctl+0x1d3/0x610 [ 529.231807][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 529.249573][ T31] #1: ffff88801fe00518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x2bf/0x650 [ 529.280589][ T31] 1 lock held by syz.3.1312/9212: [ 529.293966][ T31] #0: ffff88801fe00518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 529.315373][ T31] 3 locks held by syz-executor/9984: [ 529.349392][ T31] #0: ffff88801f700d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 529.374527][ T31] #1: ffff88801f700078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 529.397259][ T31] #2: ffffffff8fbdaae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 529.422445][ T31] 3 locks held by syz-executor/10068: [ 529.451463][ T31] #0: ffff88806e918d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 529.479590][ T31] #1: ffff88806e918078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 529.511852][ T31] #2: ffffffff8fbdaae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 529.550953][ T31] 1 lock held by syz.0.1608/10178: [ 529.556123][ T31] #0: ffffffff8fa6f1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 529.599628][ T31] 1 lock held by syz.1.1609/10179: [ 529.606578][ T31] #0: ffffffff8fa6f1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 529.653859][ T31] [ 529.656236][ T31] ============================================= [ 529.656236][ T31] [ 529.727903][ T31] NMI backtrace for cpu 0 [ 529.732302][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 529.742843][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 529.752937][ T31] Call Trace: [ 529.756245][ T31] [ 529.759201][ T31] dump_stack_lvl+0x241/0x360 [ 529.763926][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.769164][ T31] ? __pfx__printk+0x10/0x10 [ 529.773787][ T31] ? vprintk_emit+0x631/0x770 [ 529.778499][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 529.783565][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 529.788544][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 529.794029][ T31] ? _printk+0xd5/0x120 [ 529.798237][ T31] ? __pfx__printk+0x10/0x10 [ 529.802870][ T31] ? __wake_up_klogd+0xcc/0x110 [ 529.807757][ T31] ? __pfx__printk+0x10/0x10 [ 529.812396][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 529.817464][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 529.823486][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 529.829509][ T31] watchdog+0xfee/0x1030 [ 529.833804][ T31] ? watchdog+0x1ea/0x1030 [ 529.838279][ T31] ? __pfx_watchdog+0x10/0x10 [ 529.843017][ T31] kthread+0x2f0/0x390 [ 529.847141][ T31] ? __pfx_watchdog+0x10/0x10 [ 529.851870][ T31] ? __pfx_kthread+0x10/0x10 [ 529.856508][ T31] ret_from_fork+0x4b/0x80 [ 529.860959][ T31] ? __pfx_kthread+0x10/0x10 [ 529.865578][ T31] ret_from_fork_asm+0x1a/0x30 [ 529.870377][ T31] [ 529.875063][ T31] Sending NMI from CPU 0 to CPUs 1: [ 529.881317][ C1] NMI backtrace for cpu 1 [ 529.881334][ C1] CPU: 1 UID: 0 PID: 5273 Comm: kworker/1:3 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 529.881355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 529.881367][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 529.881401][ C1] RIP: 0010:kasan_check_range+0x7/0x290 [ 529.881426][ C1] Code: 5f 9b e3 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 <41> 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 [ 529.881441][ C1] RSP: 0018:ffffc9000381fae0 EFLAGS: 00000246 [ 529.881455][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff817124c8 [ 529.881468][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8f1e21e0 [ 529.881479][ C1] RBP: ffffc9000381fdc0 R08: ffffffff8ff6956f R09: 1ffffffff1fed2ad [ 529.881492][ C1] R10: dffffc0000000000 R11: fffffbfff1fed2ae R12: 0000000000000000 [ 529.881504][ C1] R13: dffffc0000000000 R14: 0000007b5ccc6a84 R15: ffffffff8f1e21e0 [ 529.881517][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 529.881532][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.881544][ C1] CR2: 000000002018e000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 529.881558][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 529.881568][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 529.881579][ C1] Call Trace: [ 529.881586][ C1] [ 529.881594][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 529.881615][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 529.881642][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 529.881661][ C1] ? nmi_handle+0x2a/0x5a0 [ 529.881688][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 529.881709][ C1] ? nmi_handle+0x14f/0x5a0 [ 529.881725][ C1] ? nmi_handle+0x2a/0x5a0 [ 529.881742][ C1] ? kasan_check_range+0x7/0x290 [ 529.881762][ C1] ? default_do_nmi+0x63/0x160 [ 529.881783][ C1] ? exc_nmi+0x123/0x1f0 [ 529.881820][ C1] ? end_repeat_nmi+0xf/0x53 [ 529.881844][ C1] ? do_raw_spin_unlock+0x58/0x8b0 [ 529.881867][ C1] ? kasan_check_range+0x7/0x290 [ 529.881889][ C1] ? kasan_check_range+0x7/0x290 [ 529.881912][ C1] ? kasan_check_range+0x7/0x290 [ 529.881934][ C1] [ 529.881939][ C1] [ 529.881946][ C1] do_raw_spin_unlock+0x58/0x8b0 [ 529.881972][ C1] _raw_spin_unlock+0x1e/0x50 [ 529.881993][ C1] wg_ratelimiter_gc_entries+0x3ab/0x470 [ 529.882025][ C1] ? process_scheduled_works+0x945/0x1830 [ 529.882049][ C1] process_scheduled_works+0xa2c/0x1830 [ 529.882090][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.882137][ C1] ? assign_work+0x364/0x3d0 [ 529.882162][ C1] worker_thread+0x86d/0xd40 [ 529.882191][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 529.882214][ C1] ? __kthread_parkme+0x169/0x1d0 [ 529.882241][ C1] ? __pfx_worker_thread+0x10/0x10 [ 529.882264][ C1] kthread+0x2f0/0x390 [ 529.882289][ C1] ? __pfx_worker_thread+0x10/0x10 [ 529.882311][ C1] ? __pfx_kthread+0x10/0x10 [ 529.882337][ C1] ret_from_fork+0x4b/0x80 [ 529.882360][ C1] ? __pfx_kthread+0x10/0x10 [ 529.882386][ C1] ret_from_fork_asm+0x1a/0x30 [ 529.882420][ C1] [ 530.271556][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 530.278480][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 530.289027][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 530.299140][ T31] Call Trace: [ 530.302450][ T31] [ 530.305441][ T31] dump_stack_lvl+0x241/0x360 [ 530.310183][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.315439][ T31] ? __pfx__printk+0x10/0x10 [ 530.320073][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 530.326205][ T31] ? vscnprintf+0x5d/0x90 [ 530.330648][ T31] panic+0x349/0x860 [ 530.334602][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 530.340798][ T31] ? __pfx_panic+0x10/0x10 [ 530.345255][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 530.350665][ T31] ? __irq_work_queue_local+0x137/0x410 [ 530.356344][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 530.361753][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 530.367945][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 530.374142][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 530.380338][ T31] watchdog+0x102d/0x1030 [ 530.384709][ T31] ? watchdog+0x1ea/0x1030 [ 530.389172][ T31] ? __pfx_watchdog+0x10/0x10 [ 530.393886][ T31] kthread+0x2f0/0x390 [ 530.398005][ T31] ? __pfx_watchdog+0x10/0x10 [ 530.402720][ T31] ? __pfx_kthread+0x10/0x10 [ 530.407354][ T31] ret_from_fork+0x4b/0x80 [ 530.411807][ T31] ? __pfx_kthread+0x10/0x10 [ 530.416435][ T31] ret_from_fork_asm+0x1a/0x30 [ 530.421254][ T31] [ 530.424620][ T31] Kernel Offset: disabled [ 530.428952][ T31] Rebooting in 86400 seconds..