last executing test programs: 9.452882332s ago: executing program 4 (id=3038): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x0, 0xd, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x7, 0x1, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1070509}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000001400)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "18797792"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac0000001200000125bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="8080040085000000400018800c000180080001000900000018000180140005009011960698bb403a3f592783c265ef8404000180140001800500060001000000080801007f0000001d002200831a48bcdc0f24c679f6780d0ef333252269311b8f04ab3e13000000050021000d000000140003006c6f000000000000000000000000000008002c0004000000087a6c00ffffffff"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4008880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)={0x55, 0x10, 0xf4, 0x0, 0x7ff, 0xa, 0x8, 0x47, 0x1, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0x4, 0x7, 0x96, 0x21, '\x00', 0x9, 0xb2}) 6.859586311s ago: executing program 1 (id=3050): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.571679741s ago: executing program 4 (id=3053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}}, 0x0) 5.410347106s ago: executing program 4 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x58}}, 0x0) 5.302582021s ago: executing program 1 (id=3055): r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x0, 0xb, 0x0, "b8c76e8d129ee5a1c7fed9aa5b0f52288ad313020168d9f388f66ca809bdbb32"}) 5.170696397s ago: executing program 4 (id=3058): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="140004003a6f7365352ff62e00000000000000000800050004"], 0x38}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020108}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000004) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x158, r10, 0x10, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x21}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa4b2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24008021}, 0x4040080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000100)={0x3, 0x3, 0xe34}) sendfile(r5, r6, 0x0, 0x10ffff) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x90400) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_hsr\x00', {0x9}, 0x2}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x4, 0x6, 0x100, 0x2c, 0xfffb, 0x9, 0xb093]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0x2, 0x1, 0xa, 0x8, 0x9, 0x5]}]}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) 5.076537838s ago: executing program 1 (id=3059): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendto$packet(r2, &(0x7f00000002c0)="05030500d3fc020000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x51) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d1f000904010102020d0000090582"], 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000000c0)={0x3}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x3, 0x9b, 0xffffffff9a882897}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"/3236], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) r9 = eventfd2(0x0, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000140)="d1f7624a6b0e53c3", 0x8}]) writev(r9, &(0x7f00000010c0)=[{&(0x7f0000000000)="894a2fca7a0d8541", 0x8}], 0x1) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 3.610966366s ago: executing program 2 (id=3066): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{}, "43e47115b50762ce", "2068284d135a5b537036262c0ca5bb83", "996b7610", "3d977ce8128f0142"}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 3.392218322s ago: executing program 2 (id=3068): r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x0, 0xb, 0x0, "b8c76e8d129ee5a1c7fed9aa5b0f52288ad313020168d9f388f66ca809bdbb32"}) 3.174068892s ago: executing program 2 (id=3069): syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2201, &(0x7f0000000040)) 2.155482617s ago: executing program 2 (id=3071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002000010300fd0000000000000200000000000000000000001400110076"], 0x30}}, 0x0) 1.937720885s ago: executing program 2 (id=3074): socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/75, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.896041167s ago: executing program 3 (id=3075): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, 'memory.events\x00\x16:\r\xc1\xe7\xe5\x15v\x95\x9f#I9-sJ\xa0\xa2\xc4\xb6Z\x170\'\x17\x82\xed\x06\x01\xc2f\x9b\xbe\x9c\a?:\xe6\xdb\xde\x9f\xc8\xfb\xc5\x8ap\x1cz|\xe8\xb0\xc2\xea\xffz\xa0\xd6\x18\xec\x84\xf5`\xe7\x8bs\x95\xd0\x18-\xc4\x84\x92L\x13H\x13\x06\xbcrM\'\xfc\x8f\xf6\xd5\x18x\x1f\x19=\xac.\xf7oG\xd3\x89\x1e\x1f\x83\xdd \xf3\xb7\xc6\x00{\x80\x99v\xda!_\xc6\xb2O\xe5\xe4_\xf8\x9fB\x96\x1e,\xeaj\x01\xf0-U\x9a+#\xf2\xe8\x92aE\x16'}, {0x20, '$&.\xf3\xf46\xac\x9d4\x96\x87\xb1X)\x16\x85\xd1\xac8\xdb\x85-\x0f\xe6gI[\x81\xe7\xa4;:\x8b\xbbo\xb3\x80\x8cv\x9a\xa3\x88\xcd\r\xa7[\xd3\"\x9e\xfa\xa1\\\xa4\x0f\x99\x18\xf2\x937\xd4\xff6h\f\xac/\xca\xff\xdb\x95)\xe5 \x94\x8b\xa0\x0f\xbf\x87M)\xe5\xbbn\xab\xdf\xc6h\x82\xfe:\x17\x1a\xd4\x8d\xd7&\xdd\xe81\x8b\xed\xd4\xf8\x87\x1aC\xfe\x82\n\xcaq\xa2\xcf\x15L\xb1-\xdb6\x9d\\rLa\xf1j\x9c_\x95\x9d=P\xebN\v\xa1\x06yS\x8e\xe9\xbcW\xbd16\x8b\xc8\xe8\xe1\xb3\'N\xe8\x18\x899gm\\\x19\xbb\xab\xe2\xa6\x19\xb0NV\t\x84D'}]}, 0x14d) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/198, 0xc6) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfacf) 1.791018495s ago: executing program 3 (id=3076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000d00), 0x0}, 0x20) 1.738569729s ago: executing program 4 (id=3077): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0x8, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in, @in6={0xa, 0x0, 0x0, @mcast1}, @in6={0xa, 0x0, 0x0, @private2}], 0x48) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="80800000080211000001000211000001505050505050200000000000000000000000000064000000010401010101010101e8"], 0x7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/112, 0xfffffce3, 0x100, 0x0, 0x21c42fc4) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001400010000000000000000007f00000100000000000000000000000000000000000000000000ffffac141400"/64, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="b76b6e0059"], 0x5c}}, 0x0) 1.665673783s ago: executing program 3 (id=3078): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 1.460769128s ago: executing program 3 (id=3079): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.350760829s ago: executing program 3 (id=3080): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000002200), 0x10025) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) dup(r0) r3 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) splice(r2, 0x0, r3, &(0x7f0000000140), 0x9, 0x0) 947.847711ms ago: executing program 2 (id=3083): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 927.601487ms ago: executing program 1 (id=3084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002000010300fd0000000000000200000000000000000000001400110076"], 0x30}}, 0x0) 886.231751ms ago: executing program 0 (id=3085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 710.821674ms ago: executing program 0 (id=3086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{0x20, 'memory.events\x00\x16:\r\xc1\xe7\xe5\x15v\x95\x9f#I9-sJ\xa0\xa2\xc4\xb6Z\x170\'\x17\x82\xed\x06\x01\xc2f\x9b\xbe\x9c\a?:\xe6\xdb\xde\x9f\xc8\xfb\xc5\x8ap\x1cz|\xe8\xb0\xc2\xea\xffz\xa0\xd6\x18\xec\x84\xf5`\xe7\x8bs\x95\xd0\x18-\xc4\x84\x92L\x13H\x13\x06\xbcrM\'\xfc\x8f\xf6\xd5\x18x\x1f\x19=\xac.\xf7oG\xd3\x89\x1e\x1f\x83\xdd \xf3\xb7\xc6\x00{\x80\x99v\xda!_\xc6\xb2O\xe5\xe4_\xf8\x9fB\x96\x1e,\xeaj\x01\xf0-U\x9a+#\xf2\xe8\x92aE\x16'}, {0x20, '$&.\xf3\xf46\xac\x9d4\x96\x87\xb1X)\x16\x85\xd1\xac8\xdb\x85-\x0f\xe6gI[\x81\xe7\xa4;:\x8b\xbbo\xb3\x80\x8cv\x9a\xa3\x88\xcd\r\xa7[\xd3\"\x9e\xfa\xa1\\\xa4\x0f\x99\x18\xf2\x937\xd4\xff6h\f\xac/\xca\xff\xdb\x95)\xe5 \x94\x8b\xa0\x0f\xbf\x87M)\xe5\xbbn\xab\xdf\xc6h\x82\xfe:\x17\x1a\xd4\x8d\xd7&\xdd\xe81\x8b\xed\xd4\xf8\x87\x1aC\xfe\x82\n\xcaq\xa2\xcf\x15L\xb1-\xdb6\x9d\\rLa\xf1j\x9c_\x95\x9d=P\xebN\v\xa1\x06yS\x8e\xe9\xbcW\xbd16\x8b\xc8\xe8\xe1\xb3\'N\xe8\x18\x899gm\\\x19\xbb\xab\xe2\xa6\x19\xb0NV\t\x84D'}]}, 0x14d) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/198, 0xc6) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xfacf) 661.063412ms ago: executing program 1 (id=3087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) shutdown(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 629.722811ms ago: executing program 0 (id=3088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000d00), 0x0}, 0x20) 496.419937ms ago: executing program 0 (id=3089): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f00000008c0)={0x8}) 434.915128ms ago: executing program 3 (id=3090): prlimit64(0x0, 0x0, &(0x7f0000000140)={0xc, 0x8b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/110, 0x6e, 0x10001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x1c6, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x66) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='rdma']) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_smc={0x13, 0x6}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff010000000000000000000000000001060004000180"], 0x58}}, 0x0) 292.966757ms ago: executing program 0 (id=3091): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df00611166000000000085000000060000009500e400000000000313133bb9bfcc40e24cfa10c5df11b4c4b418de246f1ebed76df30c0011e1c3d19d86658dc73eaed31cec8f412698643d46fbd5f1c6890000f7fdc04a0ee1d7fdc3df546d7f94ff38e95f73c49e33011ed1354ee592f4ad150ae9c64d51c0b23699070200008e544a4daa7b2fc60f0fcc8ac10ad4676663153204ea7247df9b8d0c8eb698a115a6d42e371d9efdbe62b0e52153eb91c1a80f908e3dbcea695c06"], &(0x7f0000000000)='GPL\x00'}, 0x80) 143.310977ms ago: executing program 4 (id=3092): syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2201, &(0x7f0000000040)) 45.274763ms ago: executing program 0 (id=3093): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r1, r0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x10132) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x4144, 0x0) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3414040da0b8a81d8e200"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="01cc556ed5c79f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1}}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}}) syz_usb_connect(0x0, 0x26, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000db93f310d80483001d9a01020301090214000100000040090400000002020100"], 0x0) 0s ago: executing program 1 (id=3094): socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/75, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered blocking state [ 640.953845][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.964021][T13083] bridge_slave_1: entered allmulticast mode [ 640.975478][T13083] bridge_slave_1: entered promiscuous mode [ 640.994120][ T5089] Bluetooth: hci6: command tx timeout [ 641.062876][T13152] syz.2.2553[13152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.063258][T13152] syz.2.2553[13152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.081775][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.167282][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.263476][T13155] netlink: 'syz.3.2554': attribute type 6 has an invalid length. [ 641.272780][T13155] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 641.283545][T13155] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2554'. [ 641.336669][T13083] team0: Port device team_slave_0 added [ 641.350801][T13083] team0: Port device team_slave_1 added [ 641.405274][T12827] bridge_slave_1: left allmulticast mode [ 641.410964][T12827] bridge_slave_1: left promiscuous mode [ 641.430232][T12827] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.452586][T12827] bridge_slave_0: left allmulticast mode [ 641.470405][T12827] bridge_slave_0: left promiscuous mode [ 641.476403][T12827] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.424763][T12827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.438835][T12827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.450619][T12827] bond0 (unregistering): Released all slaves [ 643.565566][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2561'. [ 643.657451][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.684448][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.752811][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.778539][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.787938][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.875169][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.891728][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.935417][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.248928][T12827] hsr_slave_0: left promiscuous mode [ 644.258278][T12827] hsr_slave_1: left promiscuous mode [ 644.304502][T12827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.315446][T12827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.326527][T12827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.344259][T12827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.351606][ T29] kauditd_printk_skb: 3792 callbacks suppressed [ 644.351623][ T29] audit: type=1400 audit(1721716909.756:281546): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13207 comm="syz.0.2573" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 644.439489][T12827] veth1_macvtap: left promiscuous mode [ 644.461620][T12827] veth0_macvtap: left promiscuous mode [ 644.468141][T12827] veth1_vlan: left promiscuous mode [ 644.473462][ T29] audit: type=1400 audit(1721716909.886:281547): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 644.481396][T12827] veth0_vlan: left promiscuous mode [ 644.500668][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.508774][ T6416] audit: audit_lost=26877 audit_rate_limit=0 audit_backlog_limit=64 [ 644.514262][ T29] audit: type=1400 audit(1721716909.886:281548): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12827 comm="kworker/u8:0" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 644.526045][ T6416] audit: backlog limit exceeded [ 644.558873][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.574755][T13212] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.581363][T13212] audit: audit_lost=26878 audit_rate_limit=0 audit_backlog_limit=64 [ 644.589597][T13212] audit: backlog limit exceeded [ 646.836106][T12827] team0 (unregistering): Port device team_slave_1 removed [ 646.890401][T12827] team0 (unregistering): Port device team_slave_0 removed [ 649.357714][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 649.357734][ T29] audit: type=1400 audit(1721716914.776:282236): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13198 comm="syz.2.2570" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 649.387044][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.570635][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.571372][ T29] audit: type=1400 audit(1721716914.976:282237): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13083 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 649.577662][ T6416] audit: audit_lost=26886 audit_rate_limit=0 audit_backlog_limit=64 [ 649.577683][ T6416] audit: backlog limit exceeded [ 649.577937][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.577951][ T6416] audit: audit_lost=26887 audit_rate_limit=0 audit_backlog_limit=64 [ 649.577966][ T6416] audit: backlog limit exceeded [ 649.577982][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.577994][ T6416] audit: audit_lost=26888 audit_rate_limit=0 audit_backlog_limit=64 [ 649.600940][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.714874][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2578'. [ 649.768818][T13083] hsr_slave_0: entered promiscuous mode [ 649.788124][T13083] hsr_slave_1: entered promiscuous mode [ 649.805015][T13083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.812757][T13083] Cannot create hsr debugfs directory [ 649.853142][T13232] netlink: 'syz.2.2580': attribute type 6 has an invalid length. [ 649.861934][T13232] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2580'. [ 649.944968][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.958565][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.220579][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2583'. [ 650.422106][T13037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 650.473417][T13037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 650.571643][T13037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 650.614108][T13037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 650.756395][ T6916] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 651.129739][ T6916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.140036][ T6916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 651.190782][ T6916] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 651.277591][ T6916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.695377][ T6916] usb 4-1: config 0 descriptor?? [ 651.710158][ T6916] gspca_main: spca561-2.14.0 probing abcd:cdee [ 651.976267][T13037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.182778][T13037] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.225451][ T6916] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 652.271443][ T6916] usb 4-1: MIDIStreaming interface descriptor not found [ 652.304722][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.311895][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.409486][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.416726][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.434479][ T6916] usb 4-1: USB disconnect, device number 27 [ 652.462575][T13083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 652.607630][T13083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 652.685904][T13083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 652.738436][T13083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 655.102962][ T29] kauditd_printk_skb: 3387 callbacks suppressed [ 655.102984][ T29] audit: type=1400 audit(1721716918.226:285195): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=13272 comm="syz.2.2594" opid=13272 ocomm="syz.2.2594" [ 655.426009][ T29] audit: type=1400 audit(1721716918.266:285196): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13269 comm="syz.0.2593" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 655.487156][ T29] audit: type=1400 audit(1721716918.636:285197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13269 comm="syz.0.2593" name="newroot" dev="tmpfs" ino=2 [ 655.550870][ T29] audit: type=1400 audit(1721716918.636:285198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13269 comm="syz.0.2593" name="/" dev="devtmpfs" ino=1 [ 655.588495][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 655.588917][ T6993] audit: audit_backlog=65 > audit_backlog_limit=64 [ 655.595173][ C0] audit: audit_lost=27032 audit_rate_limit=0 audit_backlog_limit=64 [ 655.595190][ C0] audit: backlog limit exceeded [ 655.595331][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 655.595347][ C0] audit: audit_lost=27033 audit_rate_limit=0 audit_backlog_limit=64 [ 655.648289][ C0] eth0: bad gso: type: 1, size: 1408 [ 655.895527][T13083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.948662][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.004889][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.012059][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.061953][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.069194][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.149172][T13083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.391952][T13037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.407196][T13298] syz.3.2601[13298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.407341][T13298] syz.3.2601[13298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.476890][T13297] syz.3.2601[13297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.534473][T13297] syz.3.2601[13297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.825468][T13037] veth0_vlan: entered promiscuous mode [ 657.359121][T13037] veth1_vlan: entered promiscuous mode [ 657.475330][T13309] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2604'. [ 657.501666][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'. [ 657.588147][T13037] veth0_macvtap: entered promiscuous mode [ 657.848556][T13037] veth1_macvtap: entered promiscuous mode [ 657.875013][ T8346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.885826][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.914340][ T8346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.611009][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.670636][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.712707][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.769016][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.802162][T13037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.875891][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.900473][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.913264][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.028288][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.045186][T13037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.292935][T13037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.447935][T13037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.574488][T13037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.583216][T13037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.635019][ T5135] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 659.808317][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.840976][ T5135] usb 1-1: config index 0 descriptor too short (expected 3703, got 18) [ 659.856523][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.874385][ T5135] usb 1-1: config 0 has an invalid interface number: 104 but max is -1 [ 659.894792][ T5135] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 659.903694][ T5135] usb 1-1: config 0 has no interface number 0 [ 659.917654][ T5135] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 659.927667][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.939149][ T5135] usb 1-1: config 0 descriptor?? [ 659.947390][ T5135] cp210x 1-1:0.104: cp210x converter detected [ 660.013095][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.031443][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.031536][T13083] veth0_vlan: entered promiscuous mode [ 660.080199][T13083] veth1_vlan: entered promiscuous mode [ 660.109724][ T29] kauditd_printk_skb: 6171 callbacks suppressed [ 660.109741][ T29] audit: type=1400 audit(1721716925.516:289960): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13037 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 660.137989][ T2900] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.150944][T13037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.153948][ T2900] audit: audit_lost=27506 audit_rate_limit=0 audit_backlog_limit=64 [ 660.165622][T13037] audit: audit_lost=27507 audit_rate_limit=0 audit_backlog_limit=64 [ 660.165749][T13037] audit: backlog limit exceeded [ 660.165885][T13037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.165900][T13037] audit: audit_lost=27508 audit_rate_limit=0 audit_backlog_limit=64 [ 660.166302][T13037] audit: backlog limit exceeded [ 660.166780][T13037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.265669][T13083] veth0_macvtap: entered promiscuous mode [ 660.293049][T13083] veth1_macvtap: entered promiscuous mode [ 660.329204][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.340931][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.351623][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.363821][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.375980][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.386857][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.409498][ T5135] cp210x 1-1:0.104: failed to get vendor val 0x000e size 3: -32 [ 660.420853][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.458332][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.491009][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.506441][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.517238][T13342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 660.527715][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.735465][ T5135] cp210x 1-1:0.104: GPIO initialisation failed: -19 [ 660.744733][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.756862][ T5135] usb 1-1: cp210x converter now attached to ttyUSB0 [ 660.766935][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.778861][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.502791][T13083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.526007][ T7019] usb 1-1: USB disconnect, device number 33 [ 661.666893][T13083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.690135][ T7019] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 661.718984][T13083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.739913][ T7019] cp210x 1-1:0.104: device disconnected [ 661.767977][T13083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.998625][ T8346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.023609][ T8346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.126469][T12827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.135964][T12827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.281935][ C0] eth0: bad gso: type: 1, size: 1408 [ 663.222520][T13371] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 663.272384][T13371] kvm: pic: non byte write [ 665.375016][ C0] audit_log_start: 2937 callbacks suppressed [ 665.375041][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.387950][ C0] audit: audit_lost=27578 audit_rate_limit=0 audit_backlog_limit=64 [ 665.396213][ C0] audit: backlog limit exceeded [ 665.672225][ T29] audit: type=1400 audit(1721716930.366:292691): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13386 comm="syz.1.2624" name="13387-5" dev="debugfs" ino=49537 [ 665.757554][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.764409][ C0] audit: audit_lost=27579 audit_rate_limit=0 audit_backlog_limit=64 [ 665.772634][ C0] audit: backlog limit exceeded [ 665.778204][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.784994][ C0] audit: audit_lost=27580 audit_rate_limit=0 audit_backlog_limit=64 [ 665.793286][ C0] audit: backlog limit exceeded [ 666.040411][ T8348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.061400][ C0] eth0: bad gso: type: 1, size: 1408 [ 666.434349][ T8348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.217738][ T8348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.376194][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.389428][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.404178][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.418661][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.436150][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.443461][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.454273][ T7032] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 668.593139][T13431] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2636'. [ 668.676529][ T8348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.758719][ T7032] usb 2-1: not running at top speed; connect to a high speed hub [ 668.818157][ T7032] usb 2-1: config 4 has an invalid interface number: 3 but max is 1 [ 668.865351][ T7032] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 668.907485][ T7032] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 668.941714][ T7032] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 668.974736][ T7032] usb 2-1: config 4 has no interface number 0 [ 668.993870][ T7032] usb 2-1: config 4 interface 3 altsetting 127 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 669.050902][ T7032] usb 2-1: config 4 interface 3 altsetting 127 endpoint 0xF has invalid maxpacket 30277, setting to 64 [ 669.112751][ T7032] usb 2-1: config 4 interface 3 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 669.175275][ T7032] usb 2-1: config 4 interface 3 has no altsetting 0 [ 669.226666][ T7032] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=d5.94 [ 669.261813][ T7032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.271517][ T7032] usb 2-1: Product: 㖸畖뮄핽핇燲粭ꣅ襾Ꜹ䇸迤댟田笖ⅱ蓁㉛뗅혱䄄袞撎螣ﮙଚ凎䭶Ᏸꨰij꽟둑粥秸ꢐ禲轻꟦ᖈӮ토㟂〕㟃鑠鋈驘볠籓ވ캝ダ郛痣홶刟ቇ롾鷃鍎䱞Ջ꾓隗갭칞Ⴑ읢狜槅駶䲃悧枑ퟌ褄ῳጇ⩷뱊鴎ᖝ [ 669.312182][ T7032] usb 2-1: Manufacturer: Ѝ [ 669.317556][ T7032] usb 2-1: SerialNumber: 㰁 [ 669.330479][T13415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.343447][T13415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.377763][ T8348] bridge_slave_1: left allmulticast mode [ 669.383811][ T8348] bridge_slave_1: left promiscuous mode [ 669.389933][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 669.403342][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.417390][ T8348] bridge_slave_0: left allmulticast mode [ 669.423149][ T8348] bridge_slave_0: left promiscuous mode [ 669.430769][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.235240][ T8348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.265386][ T8348] bond0 (unregistering): Released all slaves [ 670.303046][T13447] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2639'. [ 670.410212][ T29] kauditd_printk_skb: 4631 callbacks suppressed [ 670.410254][ T29] audit: type=1400 audit(1721716935.816:296813): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13468 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 670.429130][T13466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.438438][ T29] audit: type=1400 audit(1721716935.816:296814): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13468 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 670.465592][ T29] audit: type=1400 audit(1721716935.816:296815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13468 comm="syz-executor" name="496" dev="tmpfs" ino=2643 [ 670.466861][T13470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.488745][ T29] audit: type=1400 audit(1721716935.816:296816): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=13468 comm="syz-executor" opid=13468 ocomm="syz-executor" [ 670.507521][T13466] audit: audit_lost=27751 audit_rate_limit=0 audit_backlog_limit=64 [ 670.514953][ T29] audit: type=1400 audit(1721716935.816:296817): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13468 comm="syz-executor" name="496" dev="tmpfs" ino=2643 [ 670.544648][ T5098] Bluetooth: hci2: command tx timeout [ 670.569086][T13470] audit: audit_lost=27752 audit_rate_limit=0 audit_backlog_limit=64 [ 670.578182][T13470] audit: backlog limit exceeded [ 670.925620][T13420] chnl_net:caif_netlink_parms(): no params data found [ 672.413351][T13455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.539932][ T7032] usb 2-1: USB disconnect, device number 33 [ 672.604671][ T5098] Bluetooth: hci2: command tx timeout [ 672.881063][T13420] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.888876][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.896756][ T7028] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 672.896871][T13420] bridge_slave_0: entered allmulticast mode [ 672.913629][T13420] bridge_slave_0: entered promiscuous mode [ 672.966377][T13494] tc_dump_action: action bad kind [ 673.041738][T13498] devpts: called with bogus options [ 673.166773][ T7028] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 673.178725][ T7028] usb 4-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 673.191420][ T7028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.212044][T13420] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.227391][ T7028] usb 4-1: config 0 descriptor?? [ 673.243799][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.267574][T13420] bridge_slave_1: entered allmulticast mode [ 673.288850][T13420] bridge_slave_1: entered promiscuous mode [ 673.295480][ T7028] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 673.359692][ T8348] hsr_slave_0: left promiscuous mode [ 673.373290][ T8348] hsr_slave_1: left promiscuous mode [ 673.386630][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.404603][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.418390][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.426533][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.475366][ T8348] veth1_macvtap: left promiscuous mode [ 673.486122][ T8348] veth0_macvtap: left promiscuous mode [ 673.498063][ T8348] veth1_vlan: left promiscuous mode [ 673.505811][ T8348] veth0_vlan: left promiscuous mode [ 673.613039][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 674.017967][ T5140] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 674.214897][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 674.226647][ T5140] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 674.245935][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 674.270295][ T5140] usb 5-1: Product: syz [ 674.289596][ T5140] usb 5-1: config 0 descriptor?? [ 674.298592][ T5140] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 674.311927][ T5140] gspca_stv06xx: st6422 sensor detected [ 674.358291][ T8348] team0 (unregistering): Port device team_slave_1 removed [ 674.421404][ T8348] team0 (unregistering): Port device team_slave_0 removed [ 674.675101][ T5098] Bluetooth: hci2: command tx timeout [ 675.012814][T13420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.073053][T13516] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2651'. [ 675.111794][T13420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.164375][ T5140] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 675.184930][ T5140] usb 5-1: USB disconnect, device number 22 [ 675.209004][ T7032] usb 4-1: USB disconnect, device number 28 [ 675.237892][T13420] team0: Port device team_slave_0 added [ 675.251679][T13420] team0: Port device team_slave_1 added [ 675.291210][T13420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.298556][T13420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.327954][T13420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.344843][T13420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.355651][T13420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.436404][T13420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.452351][ T29] kauditd_printk_skb: 2185 callbacks suppressed [ 675.452367][ T29] audit: type=1400 audit(1721716940.856:298643): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13518 comm="syz.1.2652" path="/dev/ptmx" dev="devtmpfs" ino=617 [ 675.548314][ T29] audit: type=1400 audit(1721716940.896:298644): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13518 comm="syz.1.2652" path="/dev/ptmx" dev="devtmpfs" ino=617 [ 675.619907][ T29] audit: type=1400 audit(1721716940.896:298645): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13518 comm="syz.1.2652" name="newroot" dev="tmpfs" ino=2 [ 675.669489][ T29] audit: type=1400 audit(1721716940.896:298646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13518 comm="syz.1.2652" name="/" dev="devtmpfs" ino=1 [ 675.673174][T13420] hsr_slave_0: entered promiscuous mode [ 675.704985][T13420] hsr_slave_1: entered promiscuous mode [ 675.734184][T13420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.743980][ T29] audit: type=1400 audit(1721716940.896:298647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13518 comm="syz.1.2652" name="/" dev="devpts" ino=1 [ 675.757746][T13420] Cannot create hsr debugfs directory [ 675.779477][ T29] audit: type=1400 audit(1721716940.896:298648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=13518 comm="syz.1.2652" name="0" dev="devpts" ino=3 [ 675.803283][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 675.806353][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 675.810971][ T6416] audit: audit_lost=27874 audit_rate_limit=0 audit_backlog_limit=64 [ 675.816435][ C0] audit: audit_lost=27875 audit_rate_limit=0 audit_backlog_limit=64 [ 676.914467][ T5098] Bluetooth: hci2: command tx timeout [ 677.154119][ T5098] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 677.163132][ T5098] Bluetooth: hci1: Injecting HCI hardware error event [ 677.174272][ T5089] Bluetooth: hci1: hardware error 0x00 [ 679.075247][ T5142] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 679.234985][ T5089] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 679.322481][ T5142] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 679.374767][ T5140] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 679.397525][ T5142] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 679.422574][ T5142] usb 4-1: Manufacturer: syz [ 679.575379][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 679.583490][T13556] xt_CONNSECMARK: invalid mode: 0 [ 679.600027][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 679.967755][ T5142] usb 4-1: config 0 descriptor?? [ 679.975420][ T5142] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 679.985152][ T5142] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 679.997304][ T5140] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.047640][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.076001][ T5140] usb 1-1: string descriptor 0 read error: -22 [ 680.101886][ T5140] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 680.125185][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 680.146869][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.155211][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.179966][ T9] usb 5-1: config 0 descriptor?? [ 680.185666][ T5140] usb 1-1: config 0 descriptor?? [ 680.247354][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 680.251115][T13562] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 680.280146][T13420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 680.287128][T13561] IPVS: stopping backup sync thread 13562 ... [ 680.310699][T13420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 680.333749][T13420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 680.345659][T13420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.493662][ T29] kauditd_printk_skb: 2480 callbacks suppressed [ 680.493680][ T29] audit: type=1400 audit(1721716945.896:300407): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13037 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 680.540101][T13037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 680.547351][T13037] audit: audit_lost=28116 audit_rate_limit=0 audit_backlog_limit=64 [ 680.555574][T13037] audit: backlog limit exceeded [ 680.560683][ T29] audit: type=1400 audit(1721716945.936:300408): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 680.585464][T13037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 680.597615][T13037] audit: audit_lost=28117 audit_rate_limit=0 audit_backlog_limit=64 [ 680.599552][T13555] audit: audit_backlog=65 > audit_backlog_limit=64 [ 680.625206][T13037] audit: backlog limit exceeded [ 680.642245][T13555] audit: audit_lost=28118 audit_rate_limit=0 audit_backlog_limit=64 [ 680.757787][T13420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.811466][ T5140] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 680.838174][T13420] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.901357][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.908577][ T7028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.948546][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.955786][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.976561][ T5140] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 681.006285][ T5140] dib0700: firmware download failed at 7 with -22 [ 681.035331][ T5140] usb 1-1: USB disconnect, device number 34 [ 681.098875][ T9] usb 5-1: USB disconnect, device number 23 [ 681.411407][T13420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.481475][T13420] veth0_vlan: entered promiscuous mode [ 681.520163][T13420] veth1_vlan: entered promiscuous mode [ 681.575464][T13591] tc_dump_action: action bad kind [ 681.623643][T13420] veth0_macvtap: entered promiscuous mode [ 681.650219][T13420] veth1_macvtap: entered promiscuous mode [ 681.752671][ T7028] usb 4-1: USB disconnect, device number 29 [ 681.763236][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.776243][ T7028] ftdi_sio 4-1:0.0: device disconnected [ 681.804873][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.831413][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.854064][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.877546][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.889040][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.918696][T13420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.973760][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.015513][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.041466][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.074702][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.090495][T13607] random: crng reseeded on system resumption [ 682.096951][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.117491][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.166203][T13420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.193190][T13420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.234565][T13420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.253937][T13420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.283117][T13420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.511105][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 682.532225][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 682.720044][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.210371][T13606] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 683.292115][T13606] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 683.383743][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.396523][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.405584][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.414813][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.422886][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.449017][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.486958][T13606] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.518496][ T8348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.533465][ T8348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.606622][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.615729][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.724524][ T7028] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 683.929670][ T7028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.942288][ T7028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.952799][ T7028] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.966986][ T7028] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 683.977213][ T7028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.991503][ T7028] usb 4-1: config 0 descriptor?? [ 684.440168][ T7028] acrux 0003:1A34:0802.0017: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 684.453861][ T7028] acrux 0003:1A34:0802.0017: no inputs found [ 684.460401][ T7028] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 684.616605][ T6916] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 684.686542][ T7028] usb 4-1: USB disconnect, device number 30 [ 684.826831][ T6916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.839346][ T6916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.866298][ T6916] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.880541][ T6916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.913055][ T6916] usb 2-1: config 0 descriptor?? [ 685.497360][ T29] kauditd_printk_skb: 6617 callbacks suppressed [ 685.497378][ T29] audit: type=1400 audit(1721716950.906:306002): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13639 comm="syz.1.2685" path="/dev/vhost-vsock" dev="devtmpfs" ino=1085 [ 685.538149][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.538482][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.551370][ C0] audit: audit_lost=28460 audit_rate_limit=0 audit_backlog_limit=64 [ 685.555225][T13660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.559411][ C0] audit: backlog limit exceeded [ 685.568572][ T6416] audit: audit_lost=28461 audit_rate_limit=0 audit_backlog_limit=64 [ 685.574366][T13641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.586721][T13661] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.593599][ T29] audit: type=1400 audit(1721716950.906:306003): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13639 comm="syz.1.2685" path="/dev/vhost-vsock" dev="devtmpfs" ino=1085 [ 685.653739][ T6916] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 685.839274][ T6916] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 686.058141][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.091261][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.253972][T13681] netlink: 'syz.4.2696': attribute type 21 has an invalid length. [ 687.290852][T13681] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2696'. [ 690.627539][ T29] kauditd_printk_skb: 3736 callbacks suppressed [ 690.627584][ T29] audit: type=1400 audit(1721716955.816:309063): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13712 comm="syz.4.2704" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 690.769250][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 690.784690][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 690.791325][ C0] audit: audit_lost=28689 audit_rate_limit=0 audit_backlog_limit=64 [ 690.799481][ C0] audit: backlog limit exceeded [ 690.809211][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 690.816077][ C0] audit: audit_lost=28690 audit_rate_limit=0 audit_backlog_limit=64 [ 690.824178][ C0] audit: backlog limit exceeded [ 690.904323][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 690.910878][ C0] audit: audit_lost=28691 audit_rate_limit=0 audit_backlog_limit=64 [ 691.175680][T13724] netlink: 'syz.0.2707': attribute type 21 has an invalid length. [ 691.204473][T13724] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2707'. [ 691.887607][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 692.329356][T13750] random: crng reseeded on system resumption [ 693.189256][T13770] tc_dump_action: action bad kind [ 693.209287][T13771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 695.488896][ T5098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 695.505530][ T5098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 695.514862][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 695.532840][ T5098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 695.546043][ T5098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 695.570036][ T5098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 695.636627][ T29] kauditd_printk_skb: 6973 callbacks suppressed [ 695.636646][ T29] audit: type=1400 audit(1721716961.016:314041): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13420 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 695.666211][ T5085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.672744][ T5085] audit: audit_lost=29363 audit_rate_limit=0 audit_backlog_limit=64 [ 695.681550][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.694511][T13420] audit: audit_lost=29364 audit_rate_limit=0 audit_backlog_limit=64 [ 695.700100][T13791] ip6gretap0 speed is unknown, defaulting to 1000 [ 695.702657][ T29] audit: type=1400 audit(1721716961.026:314042): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13420 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 695.743088][ T5085] audit: backlog limit exceeded [ 695.750095][ T5085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.758586][T13420] audit: backlog limit exceeded [ 695.763677][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 696.304436][T13791] chnl_net:caif_netlink_parms(): no params data found [ 696.718751][T13791] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.749055][T13791] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.778608][T13791] bridge_slave_0: entered allmulticast mode [ 696.816602][T13791] bridge_slave_0: entered promiscuous mode [ 696.869274][T13791] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.896680][T13791] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.928460][T13791] bridge_slave_1: entered allmulticast mode [ 696.956683][T13791] bridge_slave_1: entered promiscuous mode [ 697.091736][T13807] netlink: 'syz.4.2737': attribute type 11 has an invalid length. [ 697.126894][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 697.136413][ T7032] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 697.161879][T13791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.243592][T13791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.350112][ T7032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.381373][ T7032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.417734][ T7032] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 697.445712][ T7032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.489990][ T7032] usb 3-1: config 0 descriptor?? [ 697.552353][T13791] team0: Port device team_slave_0 added [ 697.564350][T13641] plantronics 0003:047F:FFFF.0018: timeout initializing reports [ 697.798578][ T5098] Bluetooth: hci7: command tx timeout [ 698.612759][T13791] team0: Port device team_slave_1 added [ 698.641941][T13815] trusted_key: encrypted_key: insufficient parameters specified [ 698.661981][T13815] trusted_key: encrypted_key: insufficient parameters specified [ 698.679993][T13815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.786815][T13815] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 698.817082][ T7032] hid (null): invalid report_size -1837663976 [ 698.855079][ T7032] hid-led 0003:1D34:000A.0019: invalid report_size -1837663976 [ 698.855894][T13791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.893457][ T7032] hid-led 0003:1D34:000A.0019: item 0 4 1 7 parsing failed [ 698.898258][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.918732][ T7032] hid-led 0003:1D34:000A.0019: probe with driver hid-led failed with error -22 [ 699.034823][T13791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.092929][T13791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.131021][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.182354][T13791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.254521][ T6916] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 699.464013][ T6916] usb 4-1: Using ep0 maxpacket: 32 [ 699.487999][ T6916] usb 4-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice=28.2f [ 699.694177][ T6916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.715310][ T6916] usb 4-1: Product: syz [ 700.091989][T13791] hsr_slave_0: entered promiscuous mode [ 700.476405][T13791] hsr_slave_1: entered promiscuous mode [ 700.504521][ T6916] usb 4-1: Manufacturer: syz [ 700.509265][ T6916] usb 4-1: SerialNumber: syz [ 700.510003][T13791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.526558][ T5098] Bluetooth: hci7: command tx timeout [ 700.538889][ T6916] usb 4-1: config 0 descriptor?? [ 700.566746][ T6916] snd_usb_podhd 4-1:0.0: Line 6 POD HD500 found [ 700.568297][ T7032] usb 2-1: USB disconnect, device number 34 [ 700.585328][T13791] Cannot create hsr debugfs directory [ 700.595778][ T6916] usb 4-1: selecting invalid altsetting 1 [ 700.601710][ T6916] snd_usb_podhd 4-1:0.0: set_interface failed [ 700.615414][ T6916] snd_usb_podhd 4-1:0.0: Line 6 POD HD500 now disconnected [ 700.628132][ T6916] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 700.644340][ T29] kauditd_printk_skb: 10183 callbacks suppressed [ 700.644354][ T29] audit: type=1400 audit(1721716966.036:320219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5085 comm="syz-executor" name="syzcgroup" dev="tmpfs" ino=7 [ 700.679932][ T5085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.689833][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.704401][ T27] audit: audit_lost=30701 audit_rate_limit=0 audit_backlog_limit=64 [ 700.712481][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 700.719084][T13420] audit: audit_lost=30702 audit_rate_limit=0 audit_backlog_limit=64 [ 700.727176][T13420] audit: backlog limit exceeded [ 700.727203][ T5085] audit: audit_lost=30703 audit_rate_limit=0 audit_backlog_limit=64 [ 700.734937][ T27] audit: backlog limit exceeded [ 700.747407][ T29] audit: type=1400 audit(1721716966.036:320220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="*" requested=x pid=5085 comm="syz-executor" name="/" dev="cgroup2" ino=1 [ 700.779381][T13815] fuse: Bad value for 'rootmode' [ 700.794548][ T927] usb 4-1: USB disconnect, device number 31 [ 700.826323][T13826] bridge_slave_1: left allmulticast mode [ 700.831982][T13826] bridge_slave_1: left promiscuous mode [ 700.838398][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.960400][ T6916] usb 3-1: USB disconnect, device number 30 [ 701.143342][ T2900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.270188][ T2900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.460344][ T2900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.651283][ T2900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.712287][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2747'. [ 701.995044][T13839] netlink: 'syz.3.2748': attribute type 11 has an invalid length. [ 702.007322][ T2900] bridge_slave_1: left allmulticast mode [ 702.013010][ T2900] bridge_slave_1: left promiscuous mode [ 702.023484][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.055270][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 702.079176][ T2900] bridge_slave_0: left allmulticast mode [ 702.100892][ T2900] bridge_slave_0: left promiscuous mode [ 702.119258][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.594365][ T5098] Bluetooth: hci7: command tx timeout [ 702.899023][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.915904][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.948647][ T2900] bond0 (unregistering): Released all slaves [ 703.402206][T13848] bridge1: entered promiscuous mode [ 703.565751][ T5098] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 703.716302][ T2900] hsr_slave_0: left promiscuous mode [ 703.766023][ T2900] hsr_slave_1: left promiscuous mode [ 703.796391][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.814610][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.832427][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.832642][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.923061][ T2900] veth1_macvtap: left promiscuous mode [ 703.923113][ T2900] veth0_macvtap: left promiscuous mode [ 703.923214][ T2900] veth1_vlan: left promiscuous mode [ 703.923280][ T2900] veth0_vlan: left promiscuous mode [ 704.684072][ T5098] Bluetooth: hci7: command tx timeout [ 704.999707][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.010019][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.018960][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.028446][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.089601][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 705.097013][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.656469][ T29] kauditd_printk_skb: 23937 callbacks suppressed [ 705.656488][ T29] audit: type=1400 audit(1721716971.066:333207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13872 comm="syz.4.2760" name="38" dev="tmpfs" ino=217 [ 705.659163][T13873] syz.4.2760 (13873): attempted to duplicate a private mapping with mremap. This is not supported. [ 705.662869][ T29] audit: type=1400 audit(1721716971.066:333208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13872 comm="syz.4.2760" name="38" dev="tmpfs" ino=217 [ 705.662909][ T29] audit: type=1400 audit(1721716971.066:333209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13872 comm="syz.4.2760" name="38" dev="tmpfs" ino=217 [ 705.724054][ T29] audit: type=1400 audit(1721716971.066:333210): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=13420 comm="syz-executor" name="binderfs" dev="tmpfs" ino=125 [ 705.798818][ T29] audit: type=1400 audit(1721716971.066:333211): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=13420 comm="syz-executor" name="21" dev="tmpfs" ino=121 [ 705.839744][ T29] audit: type=1400 audit(1721716971.096:333212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13420 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 705.857130][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.866222][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.870890][ T29] audit: type=1400 audit(1721716971.096:333213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13420 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 705.872731][ C0] audit: audit_lost=34361 audit_rate_limit=0 audit_backlog_limit=64 [ 706.392803][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 706.565745][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 707.241370][ T5089] Bluetooth: hci1: command tx timeout [ 707.352935][T13867] ip6gretap0 speed is unknown, defaulting to 1000 [ 707.717867][ T5098] Bluetooth: hci6: command tx timeout [ 707.787215][T13791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.809424][T13791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.835318][T13791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.934716][T13791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.155025][ T5142] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 708.273077][T13916] bridge0: left promiscuous mode [ 708.361371][ T8348] Bluetooth: hci0: Frame reassembly failed (-84) [ 708.367625][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.379525][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.380531][T13867] chnl_net:caif_netlink_parms(): no params data found [ 708.394023][ T5142] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 708.414953][ T5099] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 708.422978][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.553268][T13916] bridge0: entered promiscuous mode [ 708.566820][ T5142] usb 3-1: config 0 descriptor?? [ 708.772211][T13927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 709.314332][ T5099] Bluetooth: hci1: command tx timeout [ 709.386186][T13867] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.393413][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.412468][T13867] bridge_slave_0: entered allmulticast mode [ 709.439650][T13867] bridge_slave_0: entered promiscuous mode [ 709.470407][ T5142] hid (null): invalid report_size -1837663976 [ 709.483706][ T5142] hid-led 0003:1D34:000A.001A: invalid report_size -1837663976 [ 709.492015][ T5142] hid-led 0003:1D34:000A.001A: item 0 4 1 7 parsing failed [ 709.512107][ T5142] hid-led 0003:1D34:000A.001A: probe with driver hid-led failed with error -22 [ 709.554719][T13867] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.561865][T13867] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.594683][T13867] bridge_slave_1: entered allmulticast mode [ 709.619907][T13867] bridge_slave_1: entered promiscuous mode [ 709.775096][T13867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.797289][ T5099] Bluetooth: hci6: command 0x0406 tx timeout [ 709.855766][ T2900] team0: Port device netdevsim0 removed [ 709.906591][T13867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.929644][T13791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.050564][T13867] team0: Port device team_slave_0 added [ 710.067851][T13867] team0: Port device team_slave_1 added [ 710.130302][T13791] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.343437][T13867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.350630][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.381686][T13867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.424749][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.431882][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.440910][ T5098] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 710.444593][ T5089] Bluetooth: hci0: command 0x1003 tx timeout [ 710.489880][T13867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.535671][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.592673][T13867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.658412][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.665535][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.674902][ T29] kauditd_printk_skb: 3379 callbacks suppressed [ 710.674919][ T29] audit: type=1400 audit(1721716976.066:336140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2900 comm="kworker/u8:9" name="0" dev="debugfs" ino=52617 [ 710.754277][T13935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.769550][T13935] audit: audit_lost=34513 audit_rate_limit=0 audit_backlog_limit=64 [ 710.776093][ T2900] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.779762][ T29] audit: type=1400 audit(1721716976.066:336141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2900 comm="kworker/u8:9" name="0" dev="debugfs" ino=52617 [ 710.806077][T13935] audit: backlog limit exceeded [ 710.812763][T13935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 710.821761][T13935] audit: audit_lost=34514 audit_rate_limit=0 audit_backlog_limit=64 [ 710.824635][ T2900] audit: audit_lost=34515 audit_rate_limit=0 audit_backlog_limit=64 [ 710.837954][T13935] audit: backlog limit exceeded [ 710.958631][T13867] hsr_slave_0: entered promiscuous mode [ 710.976268][T13867] hsr_slave_1: entered promiscuous mode [ 711.003459][T13867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.011800][T13867] Cannot create hsr debugfs directory [ 711.093242][ T2900] bridge_slave_0: left allmulticast mode [ 711.110419][ T2900] bridge_slave_0: left promiscuous mode [ 711.148556][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.224666][ T7028] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 711.352834][ T5135] usb 3-1: USB disconnect, device number 31 [ 711.395084][ T5098] Bluetooth: hci1: command tx timeout [ 711.435118][ T7028] usb 5-1: Using ep0 maxpacket: 16 [ 711.462943][ T7028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.490219][ T7028] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 711.514552][ T7028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.548638][ T7028] usb 5-1: Product: syz [ 711.554508][ T7028] usb 5-1: Manufacturer: syz [ 711.562625][ T7028] usb 5-1: SerialNumber: syz [ 711.594425][ T7028] usb 5-1: config 0 descriptor?? [ 711.603266][ T7028] gspca_main: etoms-2.14.0 probing 102c:6151 [ 711.877666][ T7028] usb 5-1: USB disconnect, device number 24 [ 712.066841][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.078088][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.091016][ T2900] bond0 (unregistering): Released all slaves [ 712.101059][ T8348] Bluetooth: hci0: Frame reassembly failed (-84) [ 712.102090][ T5099] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 712.164405][T13955] bridge0: left promiscuous mode [ 712.176789][T13956] bridge0: entered promiscuous mode [ 713.476508][ T5099] Bluetooth: hci1: command tx timeout [ 713.597109][ T2900] hsr_slave_0: left promiscuous mode [ 713.623268][ T2900] hsr_slave_1: left promiscuous mode [ 713.636133][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.656063][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.121557][ T5098] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 714.124643][ T5099] Bluetooth: hci0: command 0x1003 tx timeout [ 715.349479][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 715.408350][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 715.932567][ T29] kauditd_printk_skb: 4468 callbacks suppressed [ 715.932581][ T29] audit: type=1400 audit(1721716981.336:340411): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=2900 comm="kworker/u8:9" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 716.024354][ T29] audit: type=1400 audit(1721716981.426:340412): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 716.094537][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.101254][T13083] audit: audit_backlog=66 > audit_backlog_limit=64 [ 716.110145][T13083] audit: audit_lost=34583 audit_rate_limit=0 audit_backlog_limit=64 [ 716.119591][ T6416] audit: audit_lost=34584 audit_rate_limit=0 audit_backlog_limit=64 [ 716.128059][ T29] audit: type=1400 audit(1721716981.426:340413): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 716.136497][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.151373][T13867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.153780][ C0] audit: audit_lost=34585 audit_rate_limit=0 audit_backlog_limit=64 [ 716.177290][T13791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.548309][T13791] veth0_vlan: entered promiscuous mode [ 716.689320][T13867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 716.745286][T13867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 716.816700][T13791] veth1_vlan: entered promiscuous mode [ 716.841949][T13867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 716.885174][T13867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 716.941093][ T2900] IPVS: stop unused estimator thread 0... [ 717.007839][T13791] veth0_macvtap: entered promiscuous mode [ 717.035602][T13791] veth1_macvtap: entered promiscuous mode [ 717.118897][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.146423][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.164851][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.191827][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.209067][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.233905][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.268465][T13791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.321396][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.358054][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.435198][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.497821][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.518373][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.539674][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.558805][T13791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.737185][T13867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.747851][T13791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.757057][ T5142] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 717.785249][T13791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.795655][T13791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.831943][T13791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.900343][T13867] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.936924][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.944073][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.983986][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 718.012441][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.076475][ T5142] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 718.108729][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.112933][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.115945][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.175706][ T5142] usb 3-1: config 0 descriptor?? [ 718.206523][ T5142] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 718.245168][ C0] eth0: bad gso: type: 1, size: 1408 [ 718.345806][T13867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 718.388818][T13867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.433402][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.443244][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.608454][ T6106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.627719][ T6106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.204300][ T7032] usb 3-1: USB disconnect, device number 32 [ 720.207436][T13867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.303391][T14063] binder: 14053:14063 ioctl c0306201 0 returned -14 [ 720.335871][T14062] netlink: 'syz.4.2820': attribute type 1 has an invalid length. [ 720.386861][T13867] veth0_vlan: entered promiscuous mode [ 720.421254][T13867] veth1_vlan: entered promiscuous mode [ 720.545786][T13867] veth0_macvtap: entered promiscuous mode [ 720.560603][T13867] veth1_macvtap: entered promiscuous mode [ 720.618589][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.618615][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.618629][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.618643][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.618654][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.618667][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.618679][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.618693][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.627537][T13867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.661714][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.661741][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.661755][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.661769][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.661780][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.661794][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.661806][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.661820][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.663393][T13867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.667575][T13867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.667599][T13867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.667616][T13867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.667632][T13867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.807848][ T5142] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 720.858928][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.858948][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.942042][ T29] kauditd_printk_skb: 6004 callbacks suppressed [ 720.942056][ T29] audit: type=1400 audit(1721716986.336:345369): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942083][ T29] audit: type=1400 audit(1721716986.336:345370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942104][ T29] audit: type=1400 audit(1721716986.336:345371): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942126][ T29] audit: type=1400 audit(1721716986.336:345372): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942146][ T29] audit: type=1400 audit(1721716986.336:345373): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942167][ T29] audit: type=1400 audit(1721716986.336:345374): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942187][ T29] audit: type=1400 audit(1721716986.336:345375): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942208][ T29] audit: type=1400 audit(1721716986.336:345376): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942228][ T29] audit: type=1400 audit(1721716986.336:345377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 720.942248][ T29] audit: type=1400 audit(1721716986.336:345378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="netdev:wlan1" dev="debugfs" ino=53209 [ 721.006518][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.006540][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 721.006564][ T5142] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.006577][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.008100][ T5142] usb 3-1: config 0 descriptor?? [ 721.045831][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.045849][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.168189][ T7019] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 721.382490][ T7019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.382525][ T7019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.382563][ T7019] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 721.382610][ T7019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.385627][ T7019] usb 5-1: config 0 descriptor?? [ 721.525190][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 721.635883][ T5142] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 721.795730][ T5142] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 721.840640][ T7019] hid (null): invalid report_size -1837663976 [ 721.842734][ T7019] hid-led 0003:1D34:000A.001C: invalid report_size -1837663976 [ 721.842751][ T7019] hid-led 0003:1D34:000A.001C: item 0 4 1 7 parsing failed [ 721.844508][ T7019] hid-led 0003:1D34:000A.001C: probe with driver hid-led failed with error -22 [ 723.526488][T14095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2828'. [ 723.534649][T14097] Invalid ELF section header size [ 723.852082][T14103] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 723.864704][T14102] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 723.937190][ C0] eth0: bad gso: type: 1, size: 1408 [ 725.024425][ T6916] usb 5-1: USB disconnect, device number 25 [ 725.964535][ T29] kauditd_printk_skb: 1864 callbacks suppressed [ 725.966498][ T29] audit: type=1400 audit(1721716990.946:347039): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14109 comm="syz.1.2833" name="4" dev="tmpfs" ino=32 [ 726.123201][ T29] audit: type=1400 audit(1721716990.946:347040): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=14109 comm="syz.1.2833" name="file0" dev="tmpfs" ino=37 [ 726.131018][T13791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.208510][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.215151][ C0] audit: audit_lost=35003 audit_rate_limit=0 audit_backlog_limit=64 [ 726.223184][ C0] audit: backlog limit exceeded [ 726.228470][ T29] audit: type=1400 audit(1721716990.946:347041): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=14109 comm="syz.1.2833" path="/4/file0" dev="tmpfs" ino=37 [ 726.234749][T14116] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.254272][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.254575][T14118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.500783][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2835'. [ 726.719528][T14131] bridge0: left promiscuous mode [ 726.810070][ T1046] Bluetooth: hci0: Frame reassembly failed (-84) [ 726.826513][T14131] bridge0: entered promiscuous mode [ 726.826794][ T5089] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 727.673270][T14138] ubi0: attaching mtd0 [ 727.680590][T14138] ubi0: scanning is finished [ 727.685289][T14138] ubi0: empty MTD device detected [ 727.783219][T14139] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2840'. [ 728.309615][T14138] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 728.537748][T14142] tipc: Started in network mode [ 728.561139][T14142] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 728.602093][T14144] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 728.632037][T14142] tipc: Enabling of bearer rejected, failed to enable media [ 728.834024][ T5098] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 730.791491][ T7028] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 730.918775][T14165] hub 9-0:1.0: USB hub found [ 730.923957][T14165] hub 9-0:1.0: 8 ports detected [ 731.323045][ T29] kauditd_printk_skb: 2314 callbacks suppressed [ 731.323067][ T29] audit: type=1400 audit(1721716996.306:348847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14159 comm="syz.1.2848" name="newroot" dev="tmpfs" ino=2 [ 731.427486][T14166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.441453][T14161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.448456][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.455015][ C0] audit: audit_lost=35175 audit_rate_limit=0 audit_backlog_limit=64 [ 731.463046][ C0] audit: backlog limit exceeded [ 731.472815][ T29] audit: type=1400 audit(1721716996.306:348848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14159 comm="syz.1.2848" name="/" dev="devtmpfs" ino=1 [ 731.511251][T14166] audit: audit_lost=35176 audit_rate_limit=0 audit_backlog_limit=64 [ 731.531861][T14161] audit: audit_lost=35177 audit_rate_limit=0 audit_backlog_limit=64 [ 731.542407][T14166] audit: backlog limit exceeded [ 731.684273][ T7028] usb 1-1: Using ep0 maxpacket: 8 [ 731.696493][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 731.700663][ T7028] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 731.718136][ T7028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.726219][ T7028] usb 1-1: Product: syz [ 731.730538][ T7028] usb 1-1: Manufacturer: syz [ 731.738973][ T7028] usb 1-1: SerialNumber: syz [ 731.750149][ T7028] usb 1-1: config 0 descriptor?? [ 731.761136][ T7028] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 731.981691][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.998117][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.010932][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.021445][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.030231][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 732.054231][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.142980][T14177] ip6gretap0 speed is unknown, defaulting to 1000 [ 732.500216][ T7028] gspca_m5602: Failed to find a sensor [ 732.521657][ T7028] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 732.548599][ T7028] usb 1-1: USB disconnect, device number 35 [ 732.614332][T14192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2859'. [ 732.654880][T14177] chnl_net:caif_netlink_parms(): no params data found [ 732.787839][T14069] plantronics 0003:047F:FFFF.001B: timeout initializing reports [ 733.926349][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.942259][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.986556][T14177] bridge_slave_0: entered allmulticast mode [ 734.010812][T14177] bridge_slave_0: entered promiscuous mode [ 734.027368][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.044008][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.056034][T14177] bridge_slave_1: entered allmulticast mode [ 734.071652][T14177] bridge_slave_1: entered promiscuous mode [ 734.118755][ T5089] Bluetooth: hci0: command tx timeout [ 734.408612][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.424127][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 734.436123][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 734.450634][T14217] bridge_slave_1: left allmulticast mode [ 734.456411][T14217] bridge_slave_1: left promiscuous mode [ 734.462536][T14217] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.516826][ T7032] usb 3-1: USB disconnect, device number 33 [ 734.657431][T14217] bridge_slave_0: left allmulticast mode [ 735.150346][ T8] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.445985][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.486467][T14217] bridge_slave_0: left promiscuous mode [ 735.503701][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.511159][ T8] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.563329][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2869'. [ 735.579572][ T8] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 735.593775][ T8] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 735.643520][ T8] usb 2-1: Manufacturer: syz [ 735.661556][ T8] usb 2-1: SerialNumber: syz [ 735.702162][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.728098][T14226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2870'. [ 735.933608][ T2813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.168250][T14207] sp0: Synchronizing with TNC [ 736.195246][ T5089] Bluetooth: hci0: command tx timeout [ 736.257811][ T2813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.320254][T14177] team0: Port device team_slave_0 added [ 736.330853][T14177] team0: Port device team_slave_1 added [ 736.337137][ T29] kauditd_printk_skb: 3866 callbacks suppressed [ 736.337152][ T29] audit: type=1400 audit(1721717001.746:351792): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14235 comm="syz.3.2873" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 736.427839][ T8] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 736.435275][ T6916] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 736.453176][ T29] audit: type=1400 audit(1721717001.856:351793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 736.485206][T13867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.492248][T14237] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.500731][ T8] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input19 [ 736.515972][T14237] audit: audit_lost=35489 audit_rate_limit=0 audit_backlog_limit=64 [ 736.524473][T13867] audit: audit_lost=35490 audit_rate_limit=0 audit_backlog_limit=64 [ 736.532478][T13867] audit: backlog limit exceeded [ 736.542056][ T29] audit: type=1400 audit(1721717001.856:351794): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13867 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 736.543435][T14237] audit: backlog limit exceeded [ 736.569965][T13867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.584852][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.591873][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.598888][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.605953][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.613016][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.620114][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.627187][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.634240][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 736.641036][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 736.688052][ T2813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.698968][ T6916] usb 4-1: Using ep0 maxpacket: 8 [ 736.715142][ T8] usb 2-1: USB disconnect, device number 35 [ 736.737015][ T6916] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 736.756607][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.760412][ T6916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.771254][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.787233][ T6916] usb 4-1: Product: syz [ 736.834196][ T6916] usb 4-1: Manufacturer: syz [ 736.838931][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.849921][ T6916] usb 4-1: SerialNumber: syz [ 736.866794][ T6916] usb 4-1: config 0 descriptor?? [ 736.882228][ T6916] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 736.918910][ T2813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.962593][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.969941][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.022005][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.374883][ T5089] Bluetooth: hci0: command tx timeout [ 738.846593][T14177] hsr_slave_0: entered promiscuous mode [ 738.917814][T14177] hsr_slave_1: entered promiscuous mode [ 739.159154][ T6916] gspca_m5602: Failed to find a sensor [ 739.185038][ T6916] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 739.214584][ T6916] usb 4-1: USB disconnect, device number 32 [ 739.373673][ T2813] bridge_slave_1: left allmulticast mode [ 739.383551][ T2813] bridge_slave_1: left promiscuous mode [ 739.404144][ T2813] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.422764][ T2813] bridge_slave_0: left allmulticast mode [ 739.435177][ T2813] bridge_slave_0: left promiscuous mode [ 739.440955][ T2813] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.360669][ T2813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.376559][ T2813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.390008][ T2813] bond0 (unregistering): Released all slaves [ 740.423817][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 740.435159][ T5089] Bluetooth: hci0: command tx timeout [ 740.472000][T14281] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.480956][T14281] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.490119][T14281] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.498905][T14281] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.582952][T14281] vxlan0: entered promiscuous mode [ 741.096917][ T7032] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 741.162156][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'. [ 741.181402][T14295] bridge_slave_1: left allmulticast mode [ 741.195783][T14295] bridge_slave_1: left promiscuous mode [ 741.212594][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.243606][T14295] bridge_slave_0: left allmulticast mode [ 741.252705][T14295] bridge_slave_0: left promiscuous mode [ 741.272303][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.324635][ T7032] usb 5-1: Using ep0 maxpacket: 16 [ 741.347204][ T7032] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.353395][ T29] kauditd_printk_skb: 3367 callbacks suppressed [ 741.353413][ T29] audit: type=1400 audit(1721717006.746:355013): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.374416][ T7032] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 741.412765][ T7032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.431336][ T7032] usb 5-1: Product: syz [ 741.435766][ T29] audit: type=1400 audit(1721717006.746:355014): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.441406][ T7032] usb 5-1: Manufacturer: syz [ 741.468667][ T29] audit: type=1400 audit(1721717006.746:355015): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.494343][ T7032] usb 5-1: SerialNumber: syz [ 741.508105][ T7032] usb 5-1: config 0 descriptor?? [ 741.516057][ T29] audit: type=1400 audit(1721717006.746:355016): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.536399][ T7032] gspca_main: etoms-2.14.0 probing 102c:6151 [ 741.582461][ T29] audit: type=1400 audit(1721717006.746:355017): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.634095][T13791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 741.650981][ T2813] hsr_slave_0: left promiscuous mode [ 741.665227][ T2813] hsr_slave_1: left promiscuous mode [ 741.671301][T13791] audit: audit_lost=35541 audit_rate_limit=0 audit_backlog_limit=64 [ 741.679961][ T29] audit: type=1400 audit(1721717006.776:355018): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=14284 comm="syz.4.2891" path="/dev/raw-gadget" dev="devtmpfs" ino=733 [ 741.703974][T13791] audit: backlog limit exceeded [ 741.709152][T13791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 741.717577][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.726061][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.754831][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.762302][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.868754][ T7032] usb 5-1: USB disconnect, device number 26 [ 741.877636][ T2813] veth1_macvtap: left promiscuous mode [ 741.889032][ T2813] veth0_macvtap: left promiscuous mode [ 741.904218][ T2813] veth1_vlan: left promiscuous mode [ 741.909742][ T2813] veth0_vlan: left promiscuous mode [ 742.349952][T14313] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 742.828665][ T5140] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 743.088515][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 743.157968][ T5140] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 743.334016][ T5140] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 743.353320][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.376346][ T5140] usb 2-1: config 0 descriptor?? [ 743.415890][ T5140] gspca_main: spca561-2.14.0 probing abcd:cdee [ 743.770950][ T2813] team0 (unregistering): Port device team_slave_1 removed [ 743.907199][ T2813] team0 (unregistering): Port device team_slave_0 removed [ 743.950731][ T5140] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 743.960225][ T5140] usb 2-1: MIDIStreaming interface descriptor not found [ 744.878861][T14306] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2897'. [ 744.913646][ T6916] usb 2-1: USB disconnect, device number 36 [ 745.463749][T14177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 745.492346][T14177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 745.515449][T14177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 745.538056][T14177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 745.671079][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 745.790622][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.900475][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.953347][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.960612][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.006750][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.013955][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.054370][ T5142] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 746.132185][T14177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.243957][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 746.252675][ T5142] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 746.279911][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.314384][ T5142] usb 5-1: Product: syz [ 746.330071][ T5142] usb 5-1: Manufacturer: syz [ 746.358201][ T29] kauditd_printk_skb: 2357 callbacks suppressed [ 746.358221][ T29] audit: type=1400 audit(1721717011.746:356882): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 746.363428][ T5142] usb 5-1: SerialNumber: syz [ 746.374412][ T29] audit: type=1400 audit(1721717011.746:356883): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 746.394441][T14341] audit: audit_backlog=65 > audit_backlog_limit=64 [ 746.441995][T14342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 746.463417][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 746.464183][T14341] audit: audit_lost=35707 audit_rate_limit=0 audit_backlog_limit=64 [ 746.469983][ C0] audit: audit_lost=35708 audit_rate_limit=0 audit_backlog_limit=64 [ 746.486005][ C0] audit: backlog limit exceeded [ 746.492138][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 746.495754][T13791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 746.506754][ T5142] usb 5-1: config 0 descriptor?? [ 746.836456][T14355] netlink: 'syz.1.2911': attribute type 1 has an invalid length. [ 746.939059][T14357] batman_adv: batadv0: Adding interface: wlan1 [ 746.965039][T14357] batman_adv: batadv0: The MTU of interface wlan1 is too small (256) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.046905][T14357] batman_adv: batadv0: Interface activated: wlan1 [ 747.083665][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.480368][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.493516][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.583369][T14356] batman_adv: batadv0: Interface deactivated: wlan1 [ 747.880278][ T5142] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:a0:b6:26:81:ff [ 747.921318][T14356] batman_adv: batadv0: Removing interface: wlan1 [ 748.091009][T14177] veth0_vlan: entered promiscuous mode [ 748.106235][ T5142] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 748.131629][T14177] veth1_vlan: entered promiscuous mode [ 748.135825][ T5142] usb 5-1: USB disconnect, device number 27 [ 748.303098][T14177] veth0_macvtap: entered promiscuous mode [ 748.323184][T14177] veth1_macvtap: entered promiscuous mode [ 748.376351][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.439758][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.465963][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.504893][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.564700][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.623333][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.659608][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.683417][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.720028][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.740472][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.781882][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.813792][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.855228][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.895489][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.924867][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.942346][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.954182][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.985895][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.047801][T14177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.106914][T14177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.143991][T14177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.152724][T14177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.390476][T12827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.395848][ T5141] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 749.421757][T12827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.436886][ T5140] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 749.593203][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.602835][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.624248][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 749.641231][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 749.655256][ T5141] usb 2-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=46.66 [ 749.665126][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.690164][ T5140] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 749.707228][ T5141] usb 2-1: config 0 descriptor?? [ 749.718032][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.734312][ T5141] usb 2-1: Found UVC 0.00 device (05a9:2641) [ 749.747468][ T5140] usb 5-1: Product: syz [ 749.754138][ T5141] usb 2-1: No valid video chain found. [ 749.761269][ T5140] usb 5-1: Manufacturer: syz [ 749.772813][ T5140] usb 5-1: SerialNumber: syz [ 749.785178][ T5140] usb 5-1: config 0 descriptor?? [ 749.804558][ T5140] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 749.999289][ T5142] usb 2-1: USB disconnect, device number 37 [ 750.191433][ T5140] gspca_m5602: Failed to find a sensor [ 750.215002][ T5140] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 750.238406][ T5140] usb 5-1: USB disconnect, device number 28 [ 751.367492][ T29] kauditd_printk_skb: 5288 callbacks suppressed [ 751.367508][ T29] audit: type=1400 audit(1721717016.776:360632): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14429 comm="syz-executor" name="30" dev="tmpfs" ino=178 [ 751.407768][T13867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 751.414571][T14428] audit: audit_backlog=65 > audit_backlog_limit=64 [ 751.421112][T14428] audit: audit_lost=36227 audit_rate_limit=0 audit_backlog_limit=64 [ 751.428369][T13867] audit: audit_lost=36228 audit_rate_limit=0 audit_backlog_limit=64 [ 751.433494][ T6416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 751.437627][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 751.450386][ C0] audit: audit_lost=36229 audit_rate_limit=0 audit_backlog_limit=64 [ 751.458464][ C0] audit: backlog limit exceeded [ 751.463433][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.956349][T14493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 753.963312][T14493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.050200][T14493] vhci_hcd vhci_hcd.0: Device attached [ 754.113200][T14501] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 754.124457][ T5141] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 754.145898][T14497] usbip_core: unknown command [ 754.150632][T14497] vhci_hcd: unknown pdu 3020988904 [ 754.196889][T14497] usbip_core: unknown command [ 754.217119][ T52] vhci_hcd: stop threads [ 754.238023][ T52] vhci_hcd: release socket [ 754.281319][ T52] vhci_hcd: disconnect device [ 754.314015][ T5142] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 754.324856][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 754.348481][ T5142] usb 9-1: enqueue for inactive port 0 [ 754.350851][ T5141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.391392][ T5141] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 754.448621][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.473980][ T5141] usb 2-1: Product: syz [ 754.484055][ T5142] vhci_hcd: vhci_device speed not set [ 754.501642][ T5141] usb 2-1: Manufacturer: syz [ 754.520157][ T5141] usb 2-1: SerialNumber: syz [ 754.555898][ T5141] usb 2-1: config 0 descriptor?? [ 754.992931][ T5141] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 755.020928][ T5141] usb 2-1: No valid video chain found. [ 755.196446][ T5141] usb 2-1: USB disconnect, device number 38 [ 755.530079][T14533] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2967'. [ 755.805185][ C0] eth0: bad gso: type: 1, size: 1408 [ 755.897511][T14540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2968'. [ 756.430401][ T29] kauditd_printk_skb: 5875 callbacks suppressed [ 756.430441][ T29] audit: type=1400 audit(1721717021.836:365185): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6416 comm="syz-executor" path="/575/binderfs" dev="tmpfs" ino=3056 [ 756.541808][T14536] delete_channel: no stack [ 756.636240][T14539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.654189][T13083] audit: audit_backlog=66 > audit_backlog_limit=64 [ 756.655200][ T29] audit: type=1400 audit(1721717021.866:365186): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 756.676459][T14541] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.691848][T14539] audit: audit_lost=36674 audit_rate_limit=0 audit_backlog_limit=64 [ 756.691874][T13083] audit: audit_lost=36675 audit_rate_limit=0 audit_backlog_limit=64 [ 756.714334][T14541] audit: audit_lost=36676 audit_rate_limit=0 audit_backlog_limit=64 [ 756.730443][T13083] audit: backlog limit exceeded [ 756.737635][ T29] audit: type=1400 audit(1721717021.866:365187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6416 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 757.428133][T14548] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 758.549957][ T1046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.754574][T14575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2980'. [ 758.764663][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.778320][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.786637][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.802970][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.820885][ T1046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.583195][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 759.592197][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 759.867790][ T1046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.905959][T14571] ip6gretap0 speed is unknown, defaulting to 1000 [ 759.954037][ T5098] Bluetooth: hci6: command 0x0406 tx timeout [ 760.050079][T14591] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 760.711336][ T1046] batman_adv: batadv3: Removing interface: netdevsim0 [ 760.794704][ T1046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.173675][T14610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2993'. [ 761.447465][ T29] kauditd_printk_skb: 5140 callbacks suppressed [ 761.447506][ T29] audit: type=1400 audit(1721717026.836:368749): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=14605 comm="syz.4.2991" opid=14605 ocomm="syz.4.2991" [ 761.655701][ T5089] Bluetooth: hci2: command tx timeout [ 761.962461][T14622] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.969310][T14621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.976561][T14621] audit: audit_lost=37206 audit_rate_limit=0 audit_backlog_limit=64 [ 761.984554][T14621] audit: backlog limit exceeded [ 761.989956][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.996549][ C0] audit: audit_lost=37207 audit_rate_limit=0 audit_backlog_limit=64 [ 762.004607][ C0] audit: backlog limit exceeded [ 762.023574][ T29] audit: type=1400 audit(1721717026.886:368750): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=2831 comm="kworker/u8:8" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 762.051657][ T1046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.130624][ T1046] bridge_slave_1: left allmulticast mode [ 762.140921][ T1046] bridge_slave_1: left promiscuous mode [ 762.149961][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.260266][ T1046] bridge_slave_0: left allmulticast mode [ 762.284671][T14629] Invalid ELF section name index: 32768 || e_shstrndx (32768) >= e_shnum (0) [ 762.294627][ T1046] bridge_slave_0: left promiscuous mode [ 762.294838][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.715333][ T5089] Bluetooth: hci2: command tx timeout [ 764.584283][T14647] netlink: 'syz.4.3001': attribute type 12 has an invalid length. [ 764.592205][T14647] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3001'. [ 764.921639][T14649] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 765.694293][ T5142] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 765.864683][ T5089] Bluetooth: hci2: command tx timeout [ 765.937483][ T5142] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 766.017188][ T5142] usb 2-1: config 0 has no interface number 0 [ 766.071978][ T5142] usb 2-1: config 0 interface 156 has no altsetting 0 [ 766.166022][ T5142] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 766.266315][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.422994][ T5142] usb 2-1: config 0 descriptor?? [ 766.430751][ T5142] hub 2-1:0.156: bad descriptor, ignoring hub [ 766.437586][ T5142] hub 2-1:0.156: probe with driver hub failed with error -5 [ 766.446389][ T5142] option 2-1:0.156: GSM modem (1-port) converter detected [ 766.464912][ T29] kauditd_printk_skb: 3244 callbacks suppressed [ 766.464928][ T29] audit: type=1400 audit(1721717031.876:370527): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14670 comm="syz.0.3009" name="newroot" dev="tmpfs" ino=2 [ 766.496120][T14671] input: syz1 as /devices/virtual/input/input20 [ 766.541891][ T29] audit: type=1400 audit(1721717031.876:370528): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14670 comm="syz.0.3009" name="/" dev="devtmpfs" ino=1 [ 766.554448][T14177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.561336][ T4528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.573896][T14177] audit: audit_lost=37699 audit_rate_limit=0 audit_backlog_limit=64 [ 766.574229][ T4528] audit: audit_lost=37700 audit_rate_limit=0 audit_backlog_limit=64 [ 766.585595][T14177] audit: backlog limit exceeded [ 766.590112][ T29] audit: type=1400 audit(1721717031.876:370529): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=14670 comm="syz.0.3009" name="vcsu" dev="devtmpfs" ino=15 [ 766.614055][T14177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.614080][T14177] audit: audit_lost=37701 audit_rate_limit=0 audit_backlog_limit=64 [ 766.760885][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.789073][ T1046] bond0 (unregistering): Released all slaves [ 766.833335][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'. [ 767.577245][T14571] chnl_net:caif_netlink_parms(): no params data found [ 767.692011][ T1046] tipc: Disabling bearer [ 767.708741][ T1046] tipc: Disabling bearer [ 767.735470][ T1046] tipc: Left network mode [ 767.837384][ T1046] IPVS: stopping backup sync thread 12246 ... [ 767.874295][ T5089] Bluetooth: hci2: command tx timeout [ 767.884429][ T6916] usb 2-1: USB disconnect, device number 39 [ 767.925384][ T6916] option 2-1:0.156: device disconnected [ 767.926301][ T1046] IPVS: stopping backup sync thread 12244 ... [ 767.971645][ T1046] IPVS: stopping backup sync thread 12243 ... [ 767.991794][ T1046] IPVS: stopping backup sync thread 12242 ... [ 768.002594][T14571] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.025773][T14571] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.034735][T14571] bridge_slave_0: entered allmulticast mode [ 768.052641][T14571] bridge_slave_0: entered promiscuous mode [ 768.096236][T14571] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.135478][T14571] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.149572][T14571] bridge_slave_1: entered allmulticast mode [ 768.195789][T14571] bridge_slave_1: entered promiscuous mode [ 768.318393][T14571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.367629][T14571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.450570][ T1046] hsr_slave_0: left promiscuous mode [ 768.457569][ T1046] hsr_slave_1: left promiscuous mode [ 768.478904][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.509869][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.859490][T14709] x_tables: duplicate entry at hook 2 [ 770.089680][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 770.146805][ T5142] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 770.179644][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 770.369828][ T5142] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 770.378463][ T5142] usb 2-1: config 0 has no interface number 0 [ 770.399714][ T5142] usb 2-1: config 0 interface 156 has no altsetting 0 [ 770.408477][ T5142] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 770.427914][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.444396][ T5142] usb 2-1: config 0 descriptor?? [ 770.452065][ T5142] hub 2-1:0.156: bad descriptor, ignoring hub [ 770.458299][ T5142] hub 2-1:0.156: probe with driver hub failed with error -5 [ 770.466983][ T5142] option 2-1:0.156: GSM modem (1-port) converter detected [ 770.840768][T14571] team0: Port device team_slave_0 added [ 770.871631][T14571] team0: Port device team_slave_1 added [ 770.892999][T14718] ip6gretap0 speed is unknown, defaulting to 1000 [ 770.964549][ T7019] usb 2-1: USB disconnect, device number 40 [ 770.971939][ T7019] option 2-1:0.156: device disconnected [ 771.036434][T14571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.047601][T14571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.111116][T14571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.171379][T14746] misc userio: The device must be registered before sending interrupts [ 771.198913][T14571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.211836][T14571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.240624][T14571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.474084][ T29] kauditd_printk_skb: 4262 callbacks suppressed [ 771.474100][ T29] audit: type=1400 audit(1721717036.893:374259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14177 comm="syz-executor" name="28" dev="tmpfs" ino=156 [ 771.524862][T13083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.531417][T13083] audit: audit_lost=37879 audit_rate_limit=0 audit_backlog_limit=64 [ 771.549348][ T29] audit: type=1400 audit(1721717036.903:374260): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.194 dest=48276 netif=eth0 [ 771.559835][T14753] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.578944][T13083] audit: backlog limit exceeded [ 771.591557][T13083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.598347][T13083] audit: audit_lost=37880 audit_rate_limit=0 audit_backlog_limit=64 [ 771.606768][T14753] audit: audit_lost=37881 audit_rate_limit=0 audit_backlog_limit=64 [ 771.614920][T13083] audit: backlog limit exceeded [ 771.616404][T14571] hsr_slave_0: entered promiscuous mode [ 771.663272][T14571] hsr_slave_1: entered promiscuous mode [ 771.670187][T14571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.703999][T14571] Cannot create hsr debugfs directory [ 772.184001][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 772.425627][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.461658][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.497043][ T46] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 772.514427][T14762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.534420][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.565515][ T46] usb 5-1: config 0 descriptor?? [ 772.672354][T14762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.724928][T14762] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 772.775633][T14766] Invalid ELF section name index: 32768 || e_shstrndx (32768) >= e_shnum (0) [ 772.902860][T14571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.934969][T14571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.958126][T14571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.986324][T14571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 773.088514][ T46] hid (null): invalid report_size -1837663976 [ 773.112816][ T46] hid-led 0003:1D34:000A.001D: invalid report_size -1837663976 [ 773.134607][ T46] hid-led 0003:1D34:000A.001D: item 0 4 1 7 parsing failed [ 773.153964][ T46] hid-led 0003:1D34:000A.001D: probe with driver hid-led failed with error -22 [ 773.292332][T14571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.364931][T14571] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.389199][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.396432][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.463654][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.470974][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.748553][T14783] Process accounting resumed [ 774.004397][T14790] ip6gretap0 speed is unknown, defaulting to 1000 [ 774.067042][ C0] eth0: bad gso: type: 1, size: 1408 [ 774.540743][T14571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.587819][T14571] veth0_vlan: entered promiscuous mode [ 774.612888][T14571] veth1_vlan: entered promiscuous mode [ 774.664917][T14571] veth0_macvtap: entered promiscuous mode [ 774.685847][T14571] veth1_macvtap: entered promiscuous mode [ 774.721544][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.737585][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.753420][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.778671][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.791545][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.804013][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.820359][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.849230][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.892974][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.926272][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.972140][T14571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.037838][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.060357][ T8] usb 5-1: USB disconnect, device number 29 [ 775.103883][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.121405][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.144437][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.163943][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.204076][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.232781][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.268723][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.302376][T14571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.323636][T14571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.340964][T14571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.376731][T14571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.394671][T14571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.429914][T14571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.443931][T14571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.611948][T14810] netlink: 'syz.4.3054': attribute type 2 has an invalid length. [ 775.642866][T14810] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 775.864706][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.899957][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.043643][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.077719][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.381646][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 776.454454][ T46] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 776.671350][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.759303][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.775769][T14177] audit_log_start: 5050 callbacks suppressed [ 776.775966][T14177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.803564][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.810126][ C0] audit: audit_lost=38100 audit_rate_limit=0 audit_backlog_limit=64 [ 776.818182][ C0] audit: backlog limit exceeded [ 776.825458][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.832010][ C0] audit: audit_lost=38101 audit_rate_limit=0 audit_backlog_limit=64 [ 776.840155][ C0] audit: backlog limit exceeded [ 776.851388][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.863738][T14177] audit: audit_lost=38102 audit_rate_limit=0 audit_backlog_limit=64 [ 776.872195][ T8] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.886108][T14177] audit: backlog limit exceeded [ 776.891489][T14177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.980971][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.060668][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.151114][ T8] usb 2-1: Product: syz [ 777.186924][ T8] usb 2-1: Manufacturer: syz [ 777.191562][ T8] usb 2-1: SerialNumber: syz [ 777.432848][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.463992][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.494064][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.513437][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.522894][ T46] usb 5-1: SerialNumber: syz [ 778.031847][T14847] hub 9-0:1.0: USB hub found [ 778.037794][T14847] hub 9-0:1.0: 8 ports detected [ 778.612296][ T46] usb 5-1: skipping empty audio interface (v1) [ 778.726882][ T46] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 778.757119][ T46] usb 5-1: USB disconnect, device number 30 [ 778.763276][T14853] netlink: 'syz.3.3070': attribute type 15 has an invalid length. [ 778.806492][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 779.271559][T14871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.282423][T14821] 9pnet_fd: Insufficient options for proto=fd [ 779.319083][ T8] cdc_ncm 2-1:1.0: bind() failure [ 779.335477][ T8] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 779.352747][ T8] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 779.369047][ T8] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 779.372538][ T8] usb 2-1: USB disconnect, device number 41 [ 779.961037][T14885] netlink: 'syz.0.3082': attribute type 15 has an invalid length. [ 779.974047][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'. [ 780.129690][ T6916] IPVS: starting estimator thread 0... [ 780.234010][T14892] IPVS: using max 21 ests per chain, 50400 per kthread [ 780.766514][T14911] IPVS: Error joining to the multicast group [ 781.023136][T14917] BUG: unable to handle page fault for address: 0000003804000206 [ 781.030888][T14917] #PF: supervisor instruction fetch in kernel mode [ 781.037387][T14917] #PF: error_code(0x0010) - not-present page [ 781.043353][T14917] PGD 80000000518a2067 P4D 80000000518a2067 PUD 0 [ 781.049860][T14917] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN PTI [ 781.055924][T14917] CPU: 0 UID: 0 PID: 14917 Comm: syz.4.3092 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 781.066342][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 781.076389][T14917] RIP: 0010:0x3804000206 [ 781.080636][T14917] Code: Unable to access opcode bytes at 0x38040001dc. [ 781.087462][T14917] RSP: 0018:ffffc90010ebf8f8 EFLAGS: 00010206 [ 781.093520][T14917] RAX: 1ffff11004578d96 RBX: ffff888022bc6cb0 RCX: dffffc0000000000 [ 781.101482][T14917] RDX: ffff88802229a600 RSI: 0000000000000002 RDI: ffff888022bc6ca0 [ 781.109458][T14917] RBP: ffffc90010ebfa30 R08: ffff88802c22b8c7 R09: 1ffff11005845718 [ 781.117424][T14917] R10: dffffc0000000000 R11: 0000003804000206 R12: ffff88802229a600 [ 781.125468][T14917] R13: ffff888022bc6ca0 R14: ffff88802c22b950 R15: ffff88802c22b8b8 [ 781.133433][T14917] FS: 00007f77dcbff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 781.142351][T14917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.148922][T14917] CR2: 0000003804000206 CR3: 000000007dc7c000 CR4: 00000000003506f0 [ 781.156895][T14917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 781.164860][T14917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 781.172813][T14917] Call Trace: [ 781.176087][T14917] [ 781.179006][T14917] ? __die_body+0x88/0xe0 [ 781.183329][T14917] ? page_fault_oops+0x8e4/0xcc0 [ 781.188262][T14917] ? __pfx_page_fault_oops+0x10/0x10 [ 781.193534][T14917] ? __might_sleep+0xd1/0xe0 [ 781.198140][T14917] ? rcu_is_watching+0x15/0xb0 [ 781.202902][T14917] ? is_errata93+0xbe/0x260 [ 781.207410][T14917] ? exc_page_fault+0x5ed/0x8c0 [ 781.212246][T14917] ? asm_exc_page_fault+0x26/0x30 [ 781.217350][T14917] ? uprobe_mmap+0xbb0/0x11a0 [ 781.222014][T14917] ? __pfx_uprobe_mmap+0x10/0x10 [ 781.227022][T14917] mmap_region+0x1891/0x2090 [ 781.231681][T14917] ? mark_lock+0x9a/0x350 [ 781.236000][T14917] ? __pfx_mmap_region+0x10/0x10 [ 781.240915][T14917] ? mm_get_unmapped_area+0xa5/0xd0 [ 781.246118][T14917] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 781.251736][T14917] ? cap_mmap_addr+0x163/0x2c0 [ 781.256494][T14917] ? __get_unmapped_area+0x2f0/0x360 [ 781.261764][T14917] do_mmap+0x8ad/0xfa0 [ 781.265819][T14917] ? __pfx_do_mmap+0x10/0x10 [ 781.270401][T14917] ? __pfx_down_write_killable+0x10/0x10 [ 781.276030][T14917] ? __pfx_ima_file_mmap+0x10/0x10 [ 781.281122][T14917] ? security_mmap_file+0x178/0x1a0 [ 781.286305][T14917] vm_mmap_pgoff+0x1dd/0x3d0 [ 781.290882][T14917] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 781.295974][T14917] ? __fget_files+0x29/0x470 [ 781.300548][T14917] ? __fget_files+0x3f6/0x470 [ 781.305210][T14917] ksys_mmap_pgoff+0x4f1/0x720 [ 781.309990][T14917] ? __x64_sys_mmap+0x7f/0x140 [ 781.314741][T14917] do_syscall_64+0xf3/0x230 [ 781.319229][T14917] ? clear_bhb_loop+0x35/0x90 [ 781.323900][T14917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.329794][T14917] RIP: 0033:0x7f77dd175f19 [ 781.334279][T14917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.353886][T14917] RSP: 002b:00007f77dcbff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 781.362404][T14917] RAX: ffffffffffffffda RBX: 00007f77dd305f60 RCX: 00007f77dd175f19 [ 781.370424][T14917] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 781.378412][T14917] RBP: 00007f77dd1e4e68 R08: 0000000000000003 R09: 0000000000000000 [ 781.386994][T14917] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 781.395041][T14917] R13: 000000000000000b R14: 00007f77dd305f60 R15: 00007ffc05f4c6a8 [ 781.403006][T14917] [ 781.406008][T14917] Modules linked in: [ 781.409892][T14917] CR2: 0000003804000206 [ 781.414027][T14917] ---[ end trace 0000000000000000 ]--- [ 781.419465][T14917] RIP: 0010:0x3804000206 [ 781.423691][T14917] Code: Unable to access opcode bytes at 0x38040001dc. [ 781.430520][T14917] RSP: 0018:ffffc90010ebf8f8 EFLAGS: 00010206 [ 781.436611][T14917] RAX: 1ffff11004578d96 RBX: ffff888022bc6cb0 RCX: dffffc0000000000 [ 781.444572][T14917] RDX: ffff88802229a600 RSI: 0000000000000002 RDI: ffff888022bc6ca0 [ 781.452530][T14917] RBP: ffffc90010ebfa30 R08: ffff88802c22b8c7 R09: 1ffff11005845718 [ 781.460575][T14917] R10: dffffc0000000000 R11: 0000003804000206 R12: ffff88802229a600 [ 781.468537][T14917] R13: ffff888022bc6ca0 R14: ffff88802c22b950 R15: ffff88802c22b8b8 [ 781.476500][T14917] FS: 00007f77dcbff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 781.485421][T14917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.491986][T14917] CR2: 0000003804000206 CR3: 000000007dc7c000 CR4: 00000000003506f0 [ 781.499945][T14917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 781.507908][T14917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 781.515870][T14917] Kernel panic - not syncing: Fatal exception [ 781.522114][T14917] Kernel Offset: disabled [ 781.526422][T14917] Rebooting in 86400 seconds..