last executing test programs: 10.337381156s ago: executing program 4 (id=3010): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800450000280000000000069078ac1414000a01010200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8", 0x71}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927", 0x9e9}], 0x2}}], 0x2, 0x240080e4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020d0300100000000000000000000000080012000200000000000000000000000600320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006"], 0x80}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 9.901586797s ago: executing program 4 (id=3014): mlockall(0x1) symlinkat(&(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) memfd_create(&(0x7f0000000100)='[\xd7\x00\xe4U\x9bi\f\x88ou\x96\x10\x11|\xc1\b\xdc\xae\x99\x0e;$\xc7\x17\xad\xe8\xc7\xb8\x88\xdejM\xc5w\xc4\xa7#\xe7\xd5\x13\xdbc\xdf\x11\xcf\xda\xb8\xd2A\x8f\x9f\xcd\xb8\xab\xe1c\xbb\xf2\x97\x90\x83\xb5\x11\xd5\xdf\x91\xfe\x88\xec\x1a\xf3\xa9~\xf8N\xc2\x97\xd2#1\xbd\x8c\xcf\xe1\xab\x1f\x8c]\x18\x90a\x85\x9d\xc1\x19\xb2}\x00\'\xc4\xcb\xea\xd2y\x8c4\xd60b\xec\x90\x8b:D\xc7[\x98\x81\xc8\f\xd4\x1au\x96MF\x80g\x900\xa2\x9c\xb1\x9fa\xc8W\fT\xc5\xd2\xc6I\x19\xd4\xd5\xdf\x9c\x9aY\x02\xb7\xf8\x00\xfb\xca98\xa03\xc9v\x89\xb2\x15\xcd@5\xd6]z\xcf\x87<6\x16\x93\xf1\xd2\xc7\xab\xf2y\x9cj\f\xbe\x95}\x81vr\xc5\xe9\x8f\x10W>>\xf0\x80\xba\xf6\r\xbdel7P\x99\xfd\x84JfY\xabQ\x00\x90', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30941, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) 8.989400772s ago: executing program 3 (id=3016): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000180), 0x8) 8.69359563s ago: executing program 3 (id=3019): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f3ffffff0000000000003900000008000300262f8dac34b6a575b3af38bef05fd71dd705d24d856d5caefba9c3a98c6a6809a328f9ec3ff0ce3aeaac0fbcc6aaf3c6afedd397fe00d01e32b25b4d6711e2f5900e910ccc475a3097e763a3530e1c913e45ee2e4f7ba9768907e886de37bfffcf23039eee84911e290b8707116e226321391eb314c0186838f9bbd8a0ce737ec10fddd6d4aafe4d5bd1b41046504692b25d776d61af2c13cc81be41fc20ed763c5b8874380967550899a299e4df24be87b46e184bfd277fbeb1df71f0f8a7f8f17a6da0168a7544a2e5c4d054ea15d6a6780b2a7a2c9b3e8bb7227c", @ANYRES32=r5, @ANYBLOB="14005a8010000180050007000000000004000100"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r0, r1, 0x36, 0x8, 0xffffffffffffffff, @link_id}, 0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff}, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockname$inet6(r9, 0x0, &(0x7f0000000600)) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r11, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) bind$can_raw(r10, &(0x7f0000000040)={0x1d, r12}, 0x10) 8.596225164s ago: executing program 0 (id=3020): r0 = fanotify_init(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) dup2(r0, r1) write$tun(0xffffffffffffffff, 0x0, 0x46) 8.41786593s ago: executing program 3 (id=3022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x6a) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r3, 0x407, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x4, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 8.365384508s ago: executing program 0 (id=3023): socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x80000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 7.869316063s ago: executing program 0 (id=3025): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000400)={0xa, {0xfffffff9, 0x0, 0x4, 0x7}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000680)=ANY=[], 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e657720757365723a73797a203022303030303030303030d40eeacf0b95f68d006916bc3030"], 0x2a, 0xfffffffffffffffc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef]}, {0x0, [0x61]}}, 0x0, 0x27}, 0x20) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) 6.70926652s ago: executing program 3 (id=3027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x44}}, 0x0) 6.667662712s ago: executing program 0 (id=3028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0409"], 0x14) 6.517153726s ago: executing program 3 (id=3031): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) 5.817538226s ago: executing program 0 (id=3032): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f3ffffff0000000000003900000008000300262f8dac34b6a575b3af38bef05fd71dd705d24d856d5caefba9c3a98c6a6809a328f9ec3ff0ce3aeaac0fbcc6aaf3c6afedd397fe00d01e32b25b4d6711e2f5900e910ccc475a3097e763a3530e1c913e45ee2e4f7ba9768907e886de37bfffcf23039eee84911e290b8707116e226321391eb314c0186838f9bbd8a0ce737ec10fddd6d4aafe4d5bd1b41046504692b25d776d61af2c13cc81be41fc20ed763c5b8874380967550899a299e4df24be87b46e184bfd277fbeb1df71f0f8a7f8f17a6da0168a7544a2e5c4d054ea15d6a6780b2a7a2c9b3e8bb7227c", @ANYRES32=r5, @ANYBLOB="14005a8010000180050007000000000004000100"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r0, r1, 0x36, 0x8, 0xffffffffffffffff, @link_id}, 0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff}, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r11, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) bind$can_raw(r10, &(0x7f0000000040)={0x1d, r12}, 0x10) 5.467517158s ago: executing program 3 (id=3035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.422898073s ago: executing program 2 (id=3036): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) 4.815311956s ago: executing program 4 (id=3038): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000400)={0xa, {0xfffffff9, 0x0, 0x4, 0x7}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000680)=ANY=[], 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e657720757365723a73797a203022303030303030303030d40eeacf0b95f68d006916bc3030"], 0x2a, 0xfffffffffffffffc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef]}, {0x0, [0x61]}}, 0x0, 0x27}, 0x20) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) 4.794026392s ago: executing program 0 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000009c0)=@newlink={0x50, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x50}}, 0x0) 4.269420032s ago: executing program 2 (id=3040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.143800364s ago: executing program 2 (id=3041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x44}}, 0x0) 3.942511777s ago: executing program 2 (id=3043): r0 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x4, 0x0, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0xb, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) 3.790916361s ago: executing program 2 (id=3045): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) 3.744545053s ago: executing program 4 (id=3046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x5e50, &(0x7f0000000140)) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904}) close_range(r0, 0xffffffffffffffff, 0x0) 3.596842175s ago: executing program 4 (id=3048): mlockall(0x1) symlinkat(&(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) memfd_create(&(0x7f0000000100)='[\xd7\x00\xe4U\x9bi\f\x88ou\x96\x10\x11|\xc1\b\xdc\xae\x99\x0e;$\xc7\x17\xad\xe8\xc7\xb8\x88\xdejM\xc5w\xc4\xa7#\xe7\xd5\x13\xdbc\xdf\x11\xcf\xda\xb8\xd2A\x8f\x9f\xcd\xb8\xab\xe1c\xbb\xf2\x97\x90\x83\xb5\x11\xd5\xdf\x91\xfe\x88\xec\x1a\xf3\xa9~\xf8N\xc2\x97\xd2#1\xbd\x8c\xcf\xe1\xab\x1f\x8c]\x18\x90a\x85\x9d\xc1\x19\xb2}\x00\'\xc4\xcb\xea\xd2y\x8c4\xd60b\xec\x90\x8b:D\xc7[\x98\x81\xc8\f\xd4\x1au\x96MF\x80g\x900\xa2\x9c\xb1\x9fa\xc8W\fT\xc5\xd2\xc6I\x19\xd4\xd5\xdf\x9c\x9aY\x02\xb7\xf8\x00\xfb\xca98\xa03\xc9v\x89\xb2\x15\xcd@5\xd6]z\xcf\x87<6\x16\x93\xf1\xd2\xc7\xab\xf2y\x9cj\f\xbe\x95}\x81vr\xc5\xe9\x8f\x10W>>\xf0\x80\xba\xf6\r\xbdel7P\x99\xfd\x84JfY\xabQ\x00\x90', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30941, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) 3.545968078s ago: executing program 2 (id=3049): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f3ffffff0000000000003900000008000300262f8dac34b6a575b3af38bef05fd71dd705d24d856d5caefba9c3a98c6a6809a328f9ec3ff0ce3aeaac0fbcc6aaf3c6afedd397fe00d01e32b25b4d6711e2f5900e910ccc475a3097e763a3530e1c913e45ee2e4f7ba9768907e886de37bfffcf23039eee84911e290b8707116e226321391eb314c0186838f9bbd8a0ce737ec10fddd6d4aafe4d5bd1b41046504692b25d776d61af2c13cc81be41fc20ed763c5b8874380967550899a299e4df24be87b46e184bfd277fbeb1df71f0f8a7f8f17a6da0168a7544a2e5c4d054ea15d6a6780b2a7a2c9b3e8bb7227c", @ANYRES32=r5, @ANYBLOB="14005a8010000180050007000000000004000100"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r0, r1, 0x36, 0x8, 0xffffffffffffffff, @link_id}, 0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff}, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r10, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) bind$can_raw(r9, &(0x7f0000000040)={0x1d, r11}, 0x10) 1.860552449s ago: executing program 1 (id=3054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0409"], 0x14) 1.684178764s ago: executing program 1 (id=3055): r0 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x4, 0x0, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0xb, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) 1.541656506s ago: executing program 1 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0x9}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_vhci(0x0, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003500)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000001c0)='6', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080), 0x8) 873.530635ms ago: executing program 4 (id=3057): pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c00)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @random="e3b017c45a9a", @broadcast, {0x1, 0x8}, "", @value={0x0, 0x0, 0x2, 0x0, 0x84}}, @a_msdu=[{@broadcast, @device_a, 0xb3, "a55f95cc9a6d5ae9081bc017a3fba6a4e994428088adb796a48cf730ea6fdd2392855b8c001632f5c66c4ad717f56ab3d6b98928c8894c658122f5a8e942758ab5aad8eb3ed01d468633a039e2ae413de7a193bef9c3b6e4e09aa4e8ebdd363cc719cf93f094a2bc9b8202278fb6d7dd56609db2cf7b0c323fcac2bb09b574f40e660f5671d973e68eb65a5b27830041cbd1cf9b3f22cc599ac43c2867a21d546e8e783d4d5f39605d5941dbf4331878a34b7b"}, {@device_b, @device_a, 0x1c, "7e14cbde8e69c700baff4c919e41030a5029c384de41abdcffc9a2a7"}, {@broadcast, @device_a, 0xa8, "39344b0496b3793a14a89aace4b7de2fed1fbff8315f1ec19f2e99e243cd892309bad109b12bac6f348960a73f9afdfe1ee9969dc95457c448ebfa3b4759e223f474c0603872db6674b097faa07570fc9a77e5d684215079955923db14fd6b6051048d38997160793d264f488d82d63acdad783983c401e6bba00c976663cd66a55ce1e74e10b0c0f295286c3daa62ed21b84df6daaf48e3c604e0402e3d77ba50575b44c7a89754"}, {@device_b, @broadcast, 0x1c, "f6027297e05fffd56ebc92f80d281b05395be37bb25932ace82a1e33"}, {@device_b, @device_b, 0xb9, "2db3f0f0062d81c9c1ec1f77a34ac2032f336dea3c4069c58bc173fe26d4e2c63b0a45de1a980854c7024ab707c693829d9a44bfd3ff7222f1bc1385b74f5f34bf656b338078ffb411c5dd599f50a406040ef4300d21ecd966b7517728915cd264fd174df648bfddcaa9e6594026a8537b8f19cd02131c463048fae82fc1b0d3b2d999997033db237a40600e139fc9bc6b9f86ae19cdc674fb854fe4105e078b2bc1c6fbee6b3582a8d9cf6fa305463c889c6346da2f45ccde"}, {@device_b, @device_b, 0x50, "6ca704c14dd582667385e3f5b599553415b019f541077a18e83865b8d2db682190e05660323d279b2e733a315c6e0d5718d22a685b84948d8849414af9723cd1f966ec227fe2161ceb3be0ee2512bfc6"}, {@device_b, @device_b, 0x70, "12938a95ef195efffdb43846373a56a5ebcef0ed64d01f9c6817d39bd9a45ed26e4910a1d6a1bdc9bc11b1c65e386df68429fb1a2e26f6223388e455538e810118ff3070a9dfa2d166346cd2dd9d0440646b4d72e9151ff1de5b9df204ce52efe312e22c84b186dd85a833ebdf68ab5e"}, {@device_b, @device_a, 0x51, "e154c7222f129c8f682f831e5b13cde575ca8e9cb55508a8bf83819b9b8da56e11fe2692bd257d7df2a1d4154fcb80cdf81d602f170d58d04b45e13987ba4ddc77f99a23a3c193408cb400e7e4424a42c6"}]}, 0x3f6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7], 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r10 = socket(0x2b, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000001) bind$unix(r10, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 348.749916ms ago: executing program 1 (id=3058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x5e50, &(0x7f0000000140)) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904}) close_range(r0, 0xffffffffffffffff, 0x0) 197.076489ms ago: executing program 1 (id=3059): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000004c0)='./bus\x00', r1, &(0x7f0000000500)='./file0\x00', 0x0) 0s ago: executing program 1 (id=3060): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x315, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x2df, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0x8, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x0, 0x7, "b8a3e10000a3e10300000009000000ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/54}, {0x0, 0x8, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2"}]}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000001d40)=ANY=[@ANYBLOB], 0x13) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8204500410001000cfb05000600feff080d7f080002000800000000010df8080009000f000a0008000f01040005f97a00110c020005000383080002000c00136a0700015b02000500bc8450367a5733138701040000a7baba924a51da32443981457815274966da9d8ae409ccbe06251665af057279c8bbe6c39c78cd82be424dc1e5ac31e7264b636ea70de0bbd5146d5de2a536cd6b35976e318a2dcbd45a2c372bf4938b4a7487bd414a06636776746aacff0eda4a78bf638fb16b040de85b8938f6"], 0x4a) sendmsg$kcm(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000280)}, {&(0x7f0000000600)="d88cad6033d331ba530a188f2f5700a94b88a17b8318b00092debe36f8284cbc1130305adb33251cc6145e439eaa0fb6bc79762aceea6de4d0449117cb3c4754da3e9d3aeaac65e71313000bac487cc67d169871d02676bcaf375ec848ddbee18b090b127bde42482b8ccff056a269fc7224282aade928153292520e85ff06219ae6e2aa208bc25bf348731c2d9d2b0c1b045e99f6d78d7da0ae633e8f6c308ee7", 0xa1}, {&(0x7f00000006c0)}, {&(0x7f0000000780)}, {&(0x7f0000000840)="600b951463ceac2d422d87b7e9243873a64b29108f3e341a68c86417667bc5a5b461ef53c24b4ee66672742679ad9b68eda9b94a72c730012ec437245b415cffd271319fe0abbc5f6dcf6f5e00e6d1bdf4e60237a1b17dc714b0b0fcb2755788d0812f976583250d2c6bbd5bf980d70d7458004aae71355870a2990ffd8958379d7e81febeb75634a313954bd75429a7dde982ad1494108d31fc9bcd522404bd807ba2c9d61f525ae61e3669ad", 0xad}, {&(0x7f00000001c0)="a5f3eece11eff9bd45bbb960c84be868ee77fea671a019fbee1aaf1c99695c", 0x1f}, {&(0x7f0000000940)="59e1d80aa9b24d05b70319a257a74549872be9333c61de22ce68d6453dd5d75ebfc9987ae4301f1cca9d4999e846ea4ce2b7013160981079913afdb60f4083ff95e78d9f2e96bef20a3b2f60fc119c9b3bd2e93090a0071223e6cc2ed3052220947f385d9c0adc0eda0ff89685fa83cf3c328b5156378e5fb93d83f6f7c6885c8d77fc8f3e4b64209ab10060126a3514fac12ec15f30b894bb68bcea9be4c0296a208da4ab214799e257af4484c36b5aacf1ce8b49de72819b7498b5b17f7d42dec3202b9e8515579d5de46ee6fdedb1ee1a359ef8", 0xd5}, {&(0x7f0000000400)="07d8dec84bf931bb75d91b70e1159c6792b6672b730c82387294b314f3d71158758c2daa30289d6866637efe2fe4730a63926857b20785d47f982af41f1be6ff3e44a35e8f32899f852ffe62d87ad381297ec117a8e8", 0x56}, {&(0x7f0000000a40)="4a12fe6a744bfd1a59ad46305076b97789a61c638263a2c02832bead139cfe18c8f81922317ededd2487d28cc815579271838ceaf58ace71ffd8893b1d3c7f4e6e1fbb42e37db562e676c2792105e80e5d414e0242d8ebe20097b20701237586", 0x60}], 0x9, &(0x7f0000000b40)=[{0x34, 0x115, 0x1ff, "1c283d91bf438bcc04f84f261ea284a93d18a1d7d1c3eb8fef49b02548b163f4d4cbaf454fc3"}, {0x5c, 0x6, 0x0, "c4bf637335e8a72d83bb777a77d848838af313579d6e9fcdf29c35cafd774b61ace0507e36c2076b21e5a689c878824da126e7de21c70603c66549b19fc15f9ad7392be21e58b15498c8104314c9f2c8"}, {0x3c, 0x10b, 0x1, "eac1c7b6f3a55d1280440c65ba40bc46563b620e522d6ad0425582706ffe901ba32684b725c539bb01734415de"}, {0x100c, 0x0, 0x0, "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"}, {0x4c, 0x104, 0x8000, "902e6f1511fc50679cd08f859e1cd32cd74da98b569d24dc29e757330bd6dce035631f8dc0e8831ea33f72794c59b3e54823af7ec0773542cedcac2f2e"}], 0x1124}, 0x20000080) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) kernel console output (not intermixed with test programs): ve_0 [ 378.270347][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.286279][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.296958][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.307586][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.319845][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.329941][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.348009][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.349879][ T5276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.364116][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.422234][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.447008][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.485011][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.505706][ T5276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.522554][ T5276] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 378.531717][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.540513][ T5276] usb 1-1: SerialNumber: syz [ 378.541130][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.559039][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.569656][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.579752][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.607084][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.617336][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.638329][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.650545][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.661983][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.672182][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.707107][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.718535][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.730151][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.742678][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.807806][ T5276] usb 1-1: cannot find UAC_HEADER [ 378.819697][T10981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.878706][T10981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.886299][ T5276] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 378.902025][T10981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.922080][T10981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.973995][ T5276] usb 1-1: USB disconnect, device number 23 [ 379.145778][ T5279] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 379.201209][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.209105][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.221668][T10387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.241143][T10387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.296701][T10387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.312624][ T5279] usb 2-1: device descriptor read/64, error -71 [ 379.326640][T10387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.436888][ T5230] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 379.591687][ T5279] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 379.641098][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 379.676671][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.705263][ T5230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 379.728462][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.770849][ T5230] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 379.785467][ T5279] usb 2-1: device descriptor read/64, error -71 [ 379.790343][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.808254][ T5230] usb 3-1: Product: syz [ 379.840822][ T5230] usb 3-1: Manufacturer: syz [ 379.865500][ T5230] usb 3-1: SerialNumber: syz [ 379.883034][ T5230] usb 3-1: config 0 descriptor?? [ 379.920030][ T5230] option 3-1:0.0: GSM modem (1-port) converter detected [ 379.925324][ T5279] usb usb2-port1: attempt power cycle [ 380.179057][ T5280] usb 3-1: USB disconnect, device number 16 [ 380.198439][ T5280] option 3-1:0.0: device disconnected [ 380.385337][ T5279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 380.437665][ T5279] usb 2-1: device descriptor read/8, error -71 [ 380.718495][ T5279] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 380.778833][ T5279] usb 2-1: device descriptor read/8, error -71 [ 380.918906][ T5279] usb usb2-port1: unable to enumerate USB device [ 381.037445][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 381.573152][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 381.631184][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.641021][ T29] audit: type=1400 audit(1722388019.268:385): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 381.940256][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.006508][T11281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2087'. [ 382.141769][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.241960][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.521198][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 382.825403][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2099'. [ 384.265713][T11334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.896438][T11346] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2111'. [ 385.103174][T11349] xt_NFQUEUE: number of total queues is 0 [ 387.130888][T11394] ======================================================= [ 387.130888][T11394] WARNING: The mand mount option has been deprecated and [ 387.130888][T11394] and is ignored by this kernel. Remove the mand [ 387.130888][T11394] option from the mount to silence this warning. [ 387.130888][T11394] ======================================================= [ 387.165729][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.394916][T11399] xt_NFQUEUE: number of total queues is 0 [ 388.262887][T11432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.124143][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.141910][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.181478][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.194681][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.205239][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.212847][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.524785][T10383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.939689][T10383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.258529][T10383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.334421][T11484] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 392.605932][T10383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.740604][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2164'. [ 393.008204][ T29] audit: type=1400 audit(1722388030.648:386): avc: denied { shutdown } for pid=11499 comm="syz.0.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.194986][T11459] chnl_net:caif_netlink_parms(): no params data found [ 393.265689][ T5235] Bluetooth: hci0: command tx timeout [ 393.570347][T10383] bridge_slave_1: left allmulticast mode [ 393.601785][T10383] bridge_slave_1: left promiscuous mode [ 393.617415][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.666636][T10383] bridge_slave_0: left allmulticast mode [ 393.672322][T10383] bridge_slave_0: left promiscuous mode [ 393.705581][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.356794][ T5235] Bluetooth: hci0: command tx timeout [ 395.610299][T10383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.668512][T10383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.700574][T10383] bond0 (unregistering): Released all slaves [ 395.808853][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 396.303026][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.338504][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.381494][T11459] bridge_slave_0: entered allmulticast mode [ 396.397546][T11459] bridge_slave_0: entered promiscuous mode [ 396.464720][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.483844][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.494949][T11459] bridge_slave_1: entered allmulticast mode [ 396.516018][T11459] bridge_slave_1: entered promiscuous mode [ 396.832448][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.901956][T10383] hsr_slave_0: left promiscuous mode [ 396.986548][T10383] hsr_slave_1: left promiscuous mode [ 397.041002][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.055338][T10383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.098683][T10383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.126234][T10383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.189597][T10383] veth1_macvtap: left promiscuous mode [ 397.208633][T10383] veth0_macvtap: left promiscuous mode [ 397.214405][T10383] veth1_vlan: left promiscuous mode [ 397.245632][T10383] veth0_vlan: left promiscuous mode [ 397.303885][T11586] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 397.310457][T11586] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.351052][T11586] vhci_hcd vhci_hcd.0: Device attached [ 397.427079][ T5235] Bluetooth: hci0: command tx timeout [ 397.615349][ T8] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 397.665706][ T943] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 397.857792][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.889985][ T943] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.931594][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.959657][ T943] usb 3-1: config 0 descriptor?? [ 398.201657][ T943] usbhid 3-1:0.0: can't add hid device: -71 [ 398.210305][T11587] vhci_hcd: connection reset by peer [ 398.228726][ T943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 398.243329][T10387] vhci_hcd: stop threads [ 398.256300][T10387] vhci_hcd: release socket [ 398.271464][T10387] vhci_hcd: disconnect device [ 398.279377][ T943] usb 3-1: USB disconnect, device number 17 [ 398.429632][T11601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.750855][T11606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.798453][T11606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2200'. [ 399.015284][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.105496][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.437125][T10383] team0 (unregistering): Port device team_slave_1 removed [ 399.505995][ T5235] Bluetooth: hci0: command tx timeout [ 399.628755][T10383] team0 (unregistering): Port device team_slave_0 removed [ 399.980032][T11637] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 399.986708][T11637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 400.008779][T11637] vhci_hcd vhci_hcd.0: Device attached [ 400.023462][T11638] vhci_hcd: cannot find the pending unlink 5 [ 400.054807][T11638] vhci_hcd: connection closed [ 400.060108][T10380] vhci_hcd: stop threads [ 400.080531][T10380] vhci_hcd: release socket [ 400.094994][T10380] vhci_hcd: disconnect device [ 401.148234][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.234462][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'. [ 401.259806][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'. [ 401.350713][T11459] team0: Port device team_slave_0 added [ 401.401809][T11459] team0: Port device team_slave_1 added [ 401.601551][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.655209][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.765199][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.809580][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.839639][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.891138][T11672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 401.897697][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 401.923653][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.955639][T11672] vhci_hcd vhci_hcd.0: Device attached [ 401.976582][T11674] vhci_hcd: connection closed [ 401.978091][T10387] vhci_hcd: stop threads [ 401.987398][T10387] vhci_hcd: release socket [ 401.991808][T10387] vhci_hcd: disconnect device [ 402.274264][T11459] hsr_slave_0: entered promiscuous mode [ 402.302245][T11459] hsr_slave_1: entered promiscuous mode [ 402.334329][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.349252][T11459] Cannot create hsr debugfs directory [ 402.785557][ T8] vhci_hcd: vhci_device speed not set [ 404.774741][T11459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.806819][T11459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.831441][T11459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.873029][T11459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.144900][T11729] xt_NFQUEUE: number of total queues is 0 [ 405.321265][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.436529][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.502859][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.510285][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.546042][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.553371][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.723308][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.677444][T11459] veth0_vlan: entered promiscuous mode [ 407.718697][T11459] veth1_vlan: entered promiscuous mode [ 407.910750][T11459] veth0_macvtap: entered promiscuous mode [ 407.966738][T11459] veth1_macvtap: entered promiscuous mode [ 408.053073][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.100081][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.111580][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.135312][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.158057][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.183984][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.201045][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.227249][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.245956][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.257146][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.275252][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.305289][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.324374][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.349089][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 408.360411][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.391524][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.411569][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.443725][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.506098][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.527193][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.545839][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.562479][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.574420][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.608710][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.629126][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.664461][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.684931][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.708822][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.729420][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.755994][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.794618][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.825272][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.849174][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.872946][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.896318][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.927705][T11459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.953006][T11459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.963368][T11459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.972789][T11459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.221861][T10387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.254139][T10387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.384328][T10380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.435780][T10380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.911599][T11866] Bluetooth: MGMT ver 1.23 [ 411.866168][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 412.085260][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 412.098655][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 412.116554][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 412.140998][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.180812][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.204929][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.237637][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 412.246476][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 412.296092][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.327214][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.344076][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.363582][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 412.380097][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 412.402344][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.434435][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.458914][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.512212][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 412.521587][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.565892][ T25] usb 5-1: Product: syz [ 412.594079][ T25] usb 5-1: Manufacturer: syz [ 412.616019][ T25] usb 5-1: SerialNumber: syz [ 412.909413][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 412.942175][ T25] usb 5-1: USB disconnect, device number 14 [ 413.505387][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 413.735213][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 413.743483][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 413.772229][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 413.815825][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 413.840760][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 413.869953][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 413.931356][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 413.948534][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 413.991176][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.056662][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 414.153210][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 414.250855][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 414.264646][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 414.295203][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.325259][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 414.375485][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 414.414709][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 414.435116][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.473767][ T25] usb 5-1: SerialNumber: syz [ 414.708420][ T25] usb 5-1: USB disconnect, device number 15 [ 415.848967][T11999] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2346'. [ 415.959639][T12002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.584660][T12074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.979801][ T29] audit: type=1400 audit(1722388060.618:387): avc: denied { mounton } for pid=12102 comm="syz.0.2382" path="/120/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 423.280987][T12110] xt_NFQUEUE: number of total queues is 0 [ 424.685862][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 424.692507][ T5235] Bluetooth: Wrong link type (-22) [ 424.698776][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 424.705882][ T5235] Bluetooth: Wrong link type (-22) [ 424.711817][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 424.718422][ T5235] Bluetooth: Wrong link type (-22) [ 424.723573][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 424.730150][ T5235] Bluetooth: Wrong link type (-22) [ 424.735348][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 424.741850][ T5235] Bluetooth: Wrong link type (-22) [ 424.747353][ T5235] Bluetooth: hci7: link tx timeout [ 424.752932][ T5235] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.951773][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'. [ 425.017014][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'. [ 425.818540][T12153] xt_NFQUEUE: number of total queues is 0 [ 425.884047][ T5223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.925409][ T5223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.936867][ T5223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.944697][ T5223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.953299][ T5223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 425.964918][ T5223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.326347][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.750656][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.785543][ T5223] Bluetooth: hci7: command 0x0406 tx timeout [ 426.941354][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.997944][ T29] audit: type=1400 audit(1722388064.618:388): avc: denied { write } for pid=12167 comm="syz.2.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 427.193920][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.586136][T12154] chnl_net:caif_netlink_parms(): no params data found [ 428.055773][ T12] bridge_slave_1: left allmulticast mode [ 428.061585][ T12] bridge_slave_1: left promiscuous mode [ 428.067417][ T5235] Bluetooth: hci6: command tx timeout [ 428.125656][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.191911][ T12] bridge_slave_0: left allmulticast mode [ 428.231436][ T12] bridge_slave_0: left promiscuous mode [ 428.259924][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.660061][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.715811][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.750299][ T12] bond0 (unregistering): Released all slaves [ 430.042682][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 430.094544][T12154] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.114886][T12154] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.143099][T12154] bridge_slave_0: entered allmulticast mode [ 430.149691][ T5235] Bluetooth: hci6: command tx timeout [ 430.172035][T12154] bridge_slave_0: entered promiscuous mode [ 430.337377][T12154] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.365023][T12154] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.372469][T12154] bridge_slave_1: entered allmulticast mode [ 430.421830][T12154] bridge_slave_1: entered promiscuous mode [ 430.618657][T12154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.667824][T12154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.059491][ T12] hsr_slave_0: left promiscuous mode [ 431.066208][ T12] hsr_slave_1: left promiscuous mode [ 431.072723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.088025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.129673][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.157604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.238156][ T12] veth1_macvtap: left promiscuous mode [ 431.243883][ T12] veth0_macvtap: left promiscuous mode [ 431.249752][ T12] veth1_vlan: left promiscuous mode [ 431.255470][ T12] veth0_vlan: left promiscuous mode [ 432.240785][ T5235] Bluetooth: hci6: command tx timeout [ 432.304841][ T12] team0 (unregistering): Port device team_slave_1 removed [ 432.364690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 432.938543][T12154] team0: Port device team_slave_0 added [ 432.974665][T12154] team0: Port device team_slave_1 added [ 433.197051][ T29] audit: type=1400 audit(1722388070.838:389): avc: denied { lock } for pid=12278 comm="syz.2.2449" path="socket:[36204]" dev="sockfs" ino=36204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 433.269816][T12154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.305478][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.400431][T12154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.439566][T12154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.481391][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.517416][T12154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.660532][T12154] hsr_slave_0: entered promiscuous mode [ 433.708700][T12154] hsr_slave_1: entered promiscuous mode [ 433.770095][T12154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.794112][T12154] Cannot create hsr debugfs directory [ 434.315780][ T5235] Bluetooth: hci6: command tx timeout [ 434.624888][T12320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2466'. [ 434.745272][ T5277] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 434.935967][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 434.973295][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.008533][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 435.038027][ T5277] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.059504][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.081422][ T5277] usb 5-1: config 0 descriptor?? [ 435.131480][T12154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.160640][T12154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.221666][T12154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.254144][T12154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.539754][ T5277] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 435.581754][ T5277] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 435.615169][ T5277] microsoft 0003:045E:07DA.000C: no inputs found [ 435.642144][ T5277] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 435.727318][T12154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.760449][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.786492][T12154] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.789750][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.829475][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.836756][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.976789][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.984030][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.049243][ T5279] usb 5-1: USB disconnect, device number 16 [ 436.916299][T12154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.132361][T12154] veth0_vlan: entered promiscuous mode [ 437.179114][T12154] veth1_vlan: entered promiscuous mode [ 437.304691][T12154] veth0_macvtap: entered promiscuous mode [ 437.368461][T12154] veth1_macvtap: entered promiscuous mode [ 437.447607][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.478920][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.501101][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.522040][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.543650][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.593497][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.615657][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.646051][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.688359][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.749168][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.781896][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.812953][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.860388][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.890754][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.913277][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.943083][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.018133][T12154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.098817][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.138209][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.164939][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.239852][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.273210][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.300672][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.336410][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.368438][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.435204][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.465521][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.495189][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.525198][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.568533][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.605335][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.625164][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.665516][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.716185][T12154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.780471][T12154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.805146][T12154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.813897][T12154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.835097][T12154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.975683][ T5277] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 439.099378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.122227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.173776][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.182745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.195249][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 439.215818][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.249752][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.262921][ T5277] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.295170][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.324989][ T5277] usb 2-1: config 0 descriptor?? [ 439.762959][ T5277] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 439.787930][ T5277] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 439.809055][ T5277] microsoft 0003:045E:07DA.000D: no inputs found [ 439.815849][ T5277] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 439.995913][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.049088][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.308734][ T5280] usb 2-1: USB disconnect, device number 18 [ 440.644969][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.651753][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.039739][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 442.105464][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 442.148062][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.167571][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.187134][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.195926][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.203978][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.211662][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.429660][T10400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.608150][T10400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.430712][T10400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.764382][T10400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.307897][ T5235] Bluetooth: hci0: command tx timeout [ 445.016178][T12459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.285192][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 445.468490][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 445.645301][T10400] bridge_slave_1: left allmulticast mode [ 445.659182][T10400] bridge_slave_1: left promiscuous mode [ 445.665073][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.729571][T10400] bridge_slave_0: left allmulticast mode [ 445.744605][T10400] bridge_slave_0: left promiscuous mode [ 445.768542][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.055298][ T5276] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 446.394266][ T5235] Bluetooth: hci0: command tx timeout [ 446.785500][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 446.809786][ T5276] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 446.823022][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 446.834499][ T5276] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.857028][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.879902][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.913883][ T5276] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 446.934445][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 446.976830][ T5276] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.028050][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.074418][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.157641][ T5276] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 447.175198][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 447.201477][ T5276] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.228311][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.251153][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.317558][ T5276] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 447.327687][T10400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.345555][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.374167][ T5276] usb 1-1: Product: syz [ 447.399817][T10400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.405930][ T5276] usb 1-1: Manufacturer: syz [ 447.413141][ T5276] usb 1-1: SerialNumber: syz [ 447.467882][T10400] bond0 (unregistering): Released all slaves [ 447.683140][ T5276] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 447.736889][ T5276] usb 1-1: USB disconnect, device number 24 [ 447.797837][T12419] chnl_net:caif_netlink_parms(): no params data found [ 448.285436][ T5276] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 448.465417][ T5223] Bluetooth: hci0: command tx timeout [ 448.495124][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 448.509707][ T5276] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 448.535194][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.568840][T12514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2524'. [ 448.585224][ T5276] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.608947][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.634320][T10400] hsr_slave_0: left promiscuous mode [ 448.639023][ T5276] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.658959][T10400] hsr_slave_1: left promiscuous mode [ 448.674106][ T5276] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 448.684209][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.703657][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.705183][T10400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.740447][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.774384][T10400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.847673][T10400] veth1_macvtap: left promiscuous mode [ 448.853280][T10400] veth0_macvtap: left promiscuous mode [ 448.859621][T10400] veth1_vlan: left promiscuous mode [ 449.076825][T10400] veth0_vlan: left promiscuous mode [ 449.093064][ T5276] usb 1-1: string descriptor 0 read error: -71 [ 449.552308][ T5276] usb 1-1: USB disconnect, device number 25 [ 450.275922][T10400] team0 (unregistering): Port device team_slave_1 removed [ 450.334985][T10400] team0 (unregistering): Port device team_slave_0 removed [ 450.547256][ T5223] Bluetooth: hci0: command tx timeout [ 450.821506][T12543] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2535'. [ 451.114553][ T29] audit: type=1400 audit(1722388088.748:390): avc: denied { setattr } for pid=12547 comm="syz.4.2537" name="tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 451.427507][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.441135][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.448819][T12419] bridge_slave_0: entered allmulticast mode [ 451.462394][T12419] bridge_slave_0: entered promiscuous mode [ 451.624905][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.642580][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.664465][T12419] bridge_slave_1: entered allmulticast mode [ 451.688208][T12419] bridge_slave_1: entered promiscuous mode [ 452.376852][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.452300][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.812585][T12419] team0: Port device team_slave_0 added [ 452.866181][T12419] team0: Port device team_slave_1 added [ 453.012450][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.036373][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.062712][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.079431][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.106126][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 453.120412][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.235162][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.444729][T12419] hsr_slave_0: entered promiscuous mode [ 453.500074][T12419] hsr_slave_1: entered promiscuous mode [ 453.511145][T12419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.519223][T12419] Cannot create hsr debugfs directory [ 453.557975][T12592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2551'. [ 453.725177][T12587] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2551'. [ 453.942871][T10400] bridge_slave_1: left allmulticast mode [ 453.962295][T10400] bridge_slave_1: left promiscuous mode [ 453.982216][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.026548][T10400] bridge_slave_0: left allmulticast mode [ 454.038218][T10400] bridge_slave_0: left promiscuous mode [ 454.044170][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.510539][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.520348][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.529379][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.538008][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.565369][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.578876][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.961677][T10400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.973463][T10400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.984103][T10400] bond0 (unregistering): Released all slaves [ 456.749182][T10400] hsr_slave_0: left promiscuous mode [ 456.789349][T10400] hsr_slave_1: left promiscuous mode [ 456.825190][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.832685][T10400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.899639][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.914603][T10400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.029748][T10400] veth1_macvtap: left promiscuous mode [ 457.041794][T10400] veth0_macvtap: left promiscuous mode [ 457.054302][T10400] veth1_vlan: left promiscuous mode [ 457.063152][T10400] veth0_vlan: left promiscuous mode [ 457.818858][ T5235] Bluetooth: hci3: command tx timeout [ 458.302933][T10400] team0 (unregistering): Port device team_slave_1 removed [ 458.380977][T10400] team0 (unregistering): Port device team_slave_0 removed [ 459.712893][T12628] chnl_net:caif_netlink_parms(): no params data found [ 459.868398][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 459.905598][ T5235] Bluetooth: hci3: command tx timeout [ 459.963932][T12419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.053668][T12419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.082135][T12419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.161047][T12419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.203565][T12628] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.222097][T12628] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.232361][T12628] bridge_slave_0: entered allmulticast mode [ 460.247398][T12628] bridge_slave_0: entered promiscuous mode [ 460.259349][T12628] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.275282][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.282566][T12628] bridge_slave_1: entered allmulticast mode [ 460.303805][T12628] bridge_slave_1: entered promiscuous mode [ 460.390426][T12628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.450734][T12628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.600728][T12628] team0: Port device team_slave_0 added [ 460.632569][T12628] team0: Port device team_slave_1 added [ 460.771825][T12628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.787491][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.828613][T12628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.946749][T10400] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.980360][T12628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.987806][T12628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.020234][T12628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.085867][T10400] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.192952][T12628] hsr_slave_0: entered promiscuous mode [ 461.216641][T12628] hsr_slave_1: entered promiscuous mode [ 461.241290][T12628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.250522][T12628] Cannot create hsr debugfs directory [ 461.287758][T10400] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.515806][T10400] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.940889][T10400] bridge_slave_1: left allmulticast mode [ 461.963154][T10400] bridge_slave_1: left promiscuous mode [ 461.970110][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.985511][ T5235] Bluetooth: hci3: command tx timeout [ 461.986697][T10400] bridge_slave_0: left allmulticast mode [ 461.997330][T10400] bridge_slave_0: left promiscuous mode [ 462.003155][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.953589][T10400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.969223][T10400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.988765][T10400] bond0 (unregistering): Released all slaves [ 463.092132][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.296401][T12419] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.592343][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.599500][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.694471][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.701615][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.970164][T10400] hsr_slave_0: left promiscuous mode [ 464.030622][T10400] hsr_slave_1: left promiscuous mode [ 464.058219][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.065948][ T5235] Bluetooth: hci3: command tx timeout [ 464.099701][T10400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.109518][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.128147][T10400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.182328][T10400] veth1_macvtap: left promiscuous mode [ 464.195143][T10400] veth0_macvtap: left promiscuous mode [ 464.207808][T10400] veth1_vlan: left promiscuous mode [ 464.226823][T10400] veth0_vlan: left promiscuous mode [ 465.924934][T10400] team0 (unregistering): Port device team_slave_1 removed [ 465.989554][T10400] team0 (unregistering): Port device team_slave_0 removed [ 466.887074][T12839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2648'. [ 466.954951][T12840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2648'. [ 467.316345][T12628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.372236][T12628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.445230][T12628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.480044][T12628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.857085][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.953112][T12628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.088536][T12628] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.189328][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.196578][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.244210][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.251464][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.318128][T12419] veth0_vlan: entered promiscuous mode [ 468.383708][T12419] veth1_vlan: entered promiscuous mode [ 468.573085][T12628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.613625][T12876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2660'. [ 468.651254][T12419] veth0_macvtap: entered promiscuous mode [ 468.691700][T12876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2660'. [ 468.756506][T12419] veth1_macvtap: entered promiscuous mode [ 468.852091][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.885195][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.944711][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.972825][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.997729][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.033202][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.062053][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.072967][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.083116][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.093637][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.108760][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.125091][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.148593][T12419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.259209][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.297174][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.335576][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.348952][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.365289][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.377844][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.413247][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.424020][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.443509][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.467943][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.486394][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.497090][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.524967][T12419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.554561][T12904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.612343][T12628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.656743][T12419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.703235][T12419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.715094][T12419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.741607][T12419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.928589][T10400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.942074][T10400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.014256][T12628] veth0_vlan: entered promiscuous mode [ 470.023528][T10400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.034199][T12628] veth1_vlan: entered promiscuous mode [ 470.055802][T10400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.100071][T12628] veth0_macvtap: entered promiscuous mode [ 470.149397][T12628] veth1_macvtap: entered promiscuous mode [ 470.211434][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.227646][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.240029][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.255688][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.268193][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.288579][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.303268][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.317704][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.338785][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.349851][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.362739][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.373996][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.384113][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.394816][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.427767][T12628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.471116][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.494819][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.515209][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.540037][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.559533][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.587600][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.625174][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.650613][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.675097][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.695071][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.704927][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.727650][ T29] audit: type=1400 audit(1722388108.368:391): avc: denied { remount } for pid=12926 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 470.756896][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.777559][T12628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.790026][T12628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.804321][T12628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.828530][T12628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.852198][T12628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.870469][T12628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.894625][T12628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.122429][T10380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.138303][T10380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.269274][T10383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.283289][T10383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.535396][T12957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2562'. [ 471.822069][ C0] eth0: bad gso: type: 1, size: 1408 [ 472.009861][ T29] audit: type=1326 audit(1722388109.648:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.1.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 472.055361][T12978] tipc: Enabling of bearer rejected, failed to enable media [ 472.101970][ T29] audit: type=1326 audit(1722388109.678:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.1.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 472.185267][ T29] audit: type=1326 audit(1722388109.688:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.1.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 472.297805][ T29] audit: type=1326 audit(1722388109.688:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.1.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 472.433350][ T29] audit: type=1326 audit(1722388110.068:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7177299 code=0x7ffc0000 [ 472.549310][T12992] xt_NFQUEUE: number of total queues is 0 [ 472.559518][ T29] audit: type=1326 audit(1722388110.078:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f1fa7177299 code=0x7ffc0000 [ 472.626971][ T29] audit: type=1326 audit(1722388110.078:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7177299 code=0x7ffc0000 [ 472.686254][ T29] audit: type=1326 audit(1722388110.138:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa7177299 code=0x7ffc0000 [ 472.801537][ T29] audit: type=1400 audit(1722388110.418:400): avc: denied { execute_no_trans } for pid=12999 comm="syz.4.2709" path="/173/file0" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 473.114927][T13011] Bluetooth: MGMT ver 1.23 [ 475.729443][T13050] xt_NFQUEUE: number of total queues is 0 [ 476.949592][T13083] team0: Port device team_slave_0 removed [ 479.255430][ T5280] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 479.460919][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 479.481851][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 479.501899][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.540018][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.604050][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.654229][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.706748][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 479.720548][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.770850][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.800877][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.824297][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.839508][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 479.851602][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.916187][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.953310][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.982875][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 480.037483][ T5280] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 480.094636][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.122227][ T5280] usb 4-1: Product: syz [ 480.137671][ T5280] usb 4-1: Manufacturer: syz [ 480.155675][ T5280] usb 4-1: SerialNumber: syz [ 480.434738][ T5280] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 480.500326][ T5280] usb 4-1: USB disconnect, device number 35 [ 481.086933][ T5280] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 481.170914][T13166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.198430][ T8] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 481.275164][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 481.315560][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.323053][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.355511][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.375248][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.405327][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.421773][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 481.435167][ T5280] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 481.444265][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.465217][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.476340][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 481.550571][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.560008][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.568392][ T8] usb 2-1: Product: syz [ 481.576270][ T8] usb 2-1: Manufacturer: syz [ 481.581112][ T8] usb 2-1: SerialNumber: syz [ 481.733180][ T5280] usb 4-1: string descriptor 0 read error: -71 [ 481.753805][ T5280] usb 4-1: USB disconnect, device number 36 [ 481.887182][ T8] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 481.904973][ T8] cdc_ncm 2-1:1.0: bind() failure [ 481.920924][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 481.930188][ T8] cdc_ncm 2-1:1.1: bind() failure [ 481.941780][ T8] usb 2-1: USB disconnect, device number 19 [ 482.725198][ T53] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 482.907746][ T53] usb 4-1: device descriptor read/64, error -71 [ 483.185685][ T53] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 483.360874][ T53] usb 4-1: device descriptor read/64, error -71 [ 483.492501][ T53] usb usb4-port1: attempt power cycle [ 483.920105][ T53] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 483.956951][ T53] usb 4-1: device descriptor read/8, error -71 [ 484.237828][ T53] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 484.308778][ T53] usb 4-1: device descriptor read/8, error -71 [ 484.435722][ T53] usb usb4-port1: unable to enumerate USB device [ 485.913109][ T29] audit: type=1400 audit(1722388123.518:401): avc: denied { write } for pid=13224 comm="syz.3.2787" name="task" dev="proc" ino=40905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 486.072625][ T29] audit: type=1400 audit(1722388123.518:402): avc: denied { add_name } for pid=13224 comm="syz.3.2787" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 486.152662][ T29] audit: type=1400 audit(1722388123.518:403): avc: denied { create } for pid=13224 comm="syz.3.2787" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 486.218188][ T29] audit: type=1400 audit(1722388123.518:404): avc: denied { associate } for pid=13224 comm="syz.3.2787" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 487.282529][T13250] xt_l2tp: invalid flags combination: 0 [ 488.165169][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 488.785156][ T5223] Bluetooth: hci7: command 0x0406 tx timeout [ 489.165834][ T8] usb 4-1: device descriptor read/64, error -71 [ 489.410687][T13266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.469680][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 489.557068][T13269] syzkaller1: entered promiscuous mode [ 489.562706][T13269] syzkaller1: entered allmulticast mode [ 489.593107][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.687137][ T8] usb 4-1: device descriptor read/64, error -71 [ 489.707382][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'. [ 489.732324][T13266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2799'. [ 489.847482][ T8] usb usb4-port1: attempt power cycle [ 489.855194][ T29] audit: type=1400 audit(1722388127.428:405): avc: denied { ioctl } for pid=13260 comm="syz.1.2802" path="socket:[42031]" dev="sockfs" ino=42031 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 490.013267][T13266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.129857][T13266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.511407][T13285] netlink: 'syz.0.2807': attribute type 10 has an invalid length. [ 490.665984][T13285] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 491.707007][ T29] audit: type=1400 audit(1722388129.338:406): avc: denied { ioctl } for pid=13310 comm="syz.0.2816" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 492.854811][T13335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2827'. [ 493.780774][T13363] xt_l2tp: invalid flags combination: 0 [ 495.240958][ T29] audit: type=1400 audit(1722388132.878:407): avc: denied { bind } for pid=13377 comm="syz.3.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 495.312631][ T29] audit: type=1400 audit(1722388132.898:408): avc: denied { setopt } for pid=13377 comm="syz.3.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 495.345876][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 495.913133][T13386] xt_l2tp: invalid flags combination: 0 [ 496.880911][ T29] audit: type=1400 audit(1722388134.518:409): avc: denied { ioctl } for pid=13396 comm="syz.4.2845" path="socket:[42250]" dev="sockfs" ino=42250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.916472][T13397] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 496.924320][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2845'. [ 497.705331][T12336] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 497.935176][T12336] usb 5-1: Using ep0 maxpacket: 8 [ 497.959947][T12336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.991033][T12336] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.026497][T12336] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8 [ 498.050318][T12336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.068718][T12336] usb 5-1: Product: syz [ 498.088066][T12336] usb 5-1: Manufacturer: syz [ 498.103374][T12336] usb 5-1: SerialNumber: syz [ 498.133760][T12336] usb 5-1: config 0 descriptor?? [ 498.728342][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.746072][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.819192][T12336] usb 5-1: USB disconnect, device number 17 [ 498.960143][T13429] syzkaller1: entered promiscuous mode [ 498.981564][T13429] syzkaller1: entered allmulticast mode [ 499.094670][T13429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2857'. [ 500.635745][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 501.665236][ T5223] Bluetooth: hci3: command tx timeout [ 502.221963][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.263116][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.130025][T13466] syzkaller0: entered promiscuous mode [ 503.160622][T13466] syzkaller0: entered allmulticast mode [ 504.669589][ T29] audit: type=1400 audit(1722388142.308:410): avc: denied { listen } for pid=13506 comm="syz.2.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 504.769317][ T5276] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 504.846841][T13513] usb usb7: usbfs: process 13513 (syz.2.2880) did not claim interface 0 before use [ 504.975414][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 504.983273][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.996973][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.020417][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.034921][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.062701][ T5276] usb 2-1: config 0 descriptor?? [ 505.080848][ T5276] hub 2-1:0.0: USB hub found [ 505.289239][ T5276] hub 2-1:0.0: 1 port detected [ 505.922732][ T5276] hub 2-1:0.0: activate --> -90 [ 506.329570][ T5276] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 506.337626][ T53] usb 2-1: USB disconnect, device number 20 [ 506.355571][ T5276] usb 2-1-port1: connect-debounce failed [ 508.914620][ T29] audit: type=1400 audit(1722388146.548:411): avc: denied { write } for pid=13532 comm="syz.2.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 508.986829][ T29] audit: type=1400 audit(1722388146.578:412): avc: denied { ioctl } for pid=13532 comm="syz.2.2886" path="socket:[42469]" dev="sockfs" ino=42469 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 509.068081][ T29] audit: type=1400 audit(1722388146.598:413): avc: denied { shutdown } for pid=13532 comm="syz.2.2886" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 509.680702][ T29] audit: type=1400 audit(1722388147.318:414): avc: denied { write } for pid=13538 comm="syz.2.2888" path="socket:[42482]" dev="sockfs" ino=42482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 511.131310][T13544] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 512.560649][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 512.936371][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 512.946449][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 512.959242][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 512.970764][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 512.979822][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 514.611095][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 514.620695][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 514.718288][T13584] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 514.727596][T13584] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 514.737807][T13584] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 514.765375][ T5237] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 514.776811][T13585] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 514.778268][ T5237] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 514.793363][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 514.801757][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 514.803316][T13585] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 514.825722][T13585] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 515.185167][ T5237] Bluetooth: hci8: command tx timeout [ 515.268431][T13593] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2902'. [ 515.358394][T13565] chnl_net:caif_netlink_parms(): no params data found [ 516.443996][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.865919][ T5237] Bluetooth: hci9: command tx timeout [ 516.917607][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.948308][ T5237] Bluetooth: hci10: command tx timeout [ 517.144033][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.245599][ T5276] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 517.265336][ T5237] Bluetooth: hci8: command tx timeout [ 517.387891][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.485248][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 517.512641][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.525204][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.532583][T13565] bridge_slave_0: entered allmulticast mode [ 517.547435][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.570928][T13565] bridge_slave_0: entered promiscuous mode [ 517.576999][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.595963][ T5276] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.611053][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.625138][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.633487][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.647080][ T5276] usb 3-1: config 0 descriptor?? [ 517.652400][T13565] bridge_slave_1: entered allmulticast mode [ 517.667261][ T5276] hub 3-1:0.0: USB hub found [ 517.680134][T13565] bridge_slave_1: entered promiscuous mode [ 517.903632][ T5276] hub 3-1:0.0: 1 port detected [ 517.919206][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.108775][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.955268][ T5237] Bluetooth: hci9: command tx timeout [ 519.001398][T13565] team0: Port device team_slave_0 added [ 519.025542][ T5237] Bluetooth: hci10: command tx timeout [ 519.044824][ T5276] hub 3-1:0.0: activate --> -90 [ 519.073755][T13629] netem: change failed [ 519.154812][ T12] bridge_slave_1: left allmulticast mode [ 519.171162][ T12] bridge_slave_1: left promiscuous mode [ 519.203514][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.246538][ T12] bridge_slave_0: left allmulticast mode [ 519.252223][ T12] bridge_slave_0: left promiscuous mode [ 519.284473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.346045][ T5237] Bluetooth: hci8: command tx timeout [ 519.480873][ T5276] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 519.491408][ T5277] usb 3-1: USB disconnect, device number 18 [ 520.975756][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.016053][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.025654][ T5237] Bluetooth: hci9: command tx timeout [ 521.068388][ T12] bond0 (unregistering): Released all slaves [ 521.106186][ T5237] Bluetooth: hci10: command tx timeout [ 521.113251][T13578] chnl_net:caif_netlink_parms(): no params data found [ 521.257275][T13565] team0: Port device team_slave_1 added [ 521.425363][ T5237] Bluetooth: hci8: command tx timeout [ 521.475369][T13581] chnl_net:caif_netlink_parms(): no params data found [ 521.500742][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.508631][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.536475][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.613156][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.620224][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.648397][T12336] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 521.650009][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.711239][ T12] hsr_slave_0: left promiscuous mode [ 521.720736][ T12] hsr_slave_1: left promiscuous mode [ 521.727409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.739448][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.750712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.758444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.784520][ T12] veth1_macvtap: left promiscuous mode [ 521.790337][ T12] veth0_macvtap: left promiscuous mode [ 521.796246][ T12] veth1_vlan: left promiscuous mode [ 521.801646][ T12] veth0_vlan: left promiscuous mode [ 521.847213][T12336] usb 3-1: Using ep0 maxpacket: 8 [ 521.869207][T12336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.880398][T12336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.901796][T12336] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 521.914235][T12336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.936333][T12336] usb 3-1: config 0 descriptor?? [ 522.383799][T12336] logitech 0003:046D:C20E.000E: rdesc size test failed for formula gp [ 522.395122][T12336] logitech 0003:046D:C20E.000E: unexpected long global item [ 522.404123][T12336] logitech 0003:046D:C20E.000E: parse failed [ 522.413608][T12336] logitech 0003:046D:C20E.000E: probe with driver logitech failed with error -22 [ 522.561632][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.598109][ T5280] usb 3-1: USB disconnect, device number 19 [ 523.121450][ T5237] Bluetooth: hci9: command tx timeout [ 523.199195][ T5235] Bluetooth: hci10: command tx timeout [ 523.396816][T13565] hsr_slave_0: entered promiscuous mode [ 523.456343][T13565] hsr_slave_1: entered promiscuous mode [ 523.525679][ T5235] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 523.821596][T13663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 523.897261][T13578] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.019364][T13578] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.134232][T13578] bridge_slave_0: entered allmulticast mode [ 524.186956][T13578] bridge_slave_0: entered promiscuous mode [ 524.215930][T13578] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.243625][T13578] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.275634][T13578] bridge_slave_1: entered allmulticast mode [ 524.300106][T13578] bridge_slave_1: entered promiscuous mode [ 524.429550][T13578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.443491][T13578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.607360][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.624801][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.643308][T13581] bridge_slave_0: entered allmulticast mode [ 524.660880][T13581] bridge_slave_0: entered promiscuous mode [ 524.692326][T13578] team0: Port device team_slave_0 added [ 524.703381][T13578] team0: Port device team_slave_1 added [ 525.161472][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.225332][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.232658][T13581] bridge_slave_1: entered allmulticast mode [ 525.264757][T13581] bridge_slave_1: entered promiscuous mode [ 525.489066][T13578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.496209][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.522664][T13578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.538664][T13578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.549223][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.583568][T13578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.705884][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.828579][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.944104][T13578] hsr_slave_0: entered promiscuous mode [ 525.952708][T13578] hsr_slave_1: entered promiscuous mode [ 525.960438][T13578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.970548][T13578] Cannot create hsr debugfs directory [ 526.108022][T13581] team0: Port device team_slave_0 added [ 526.182514][T13581] team0: Port device team_slave_1 added [ 526.361978][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.369213][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.405190][ T53] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 526.418288][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.496754][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.503723][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.541523][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.607237][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.620144][ T53] usb 2-1: config 0 has no interfaces? [ 526.629301][ T53] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 526.640717][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.648938][ T53] usb 2-1: Product: syz [ 526.650197][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.655521][ T53] usb 2-1: Manufacturer: syz [ 526.670217][ T53] usb 2-1: SerialNumber: syz [ 526.678342][ T53] usb 2-1: config 0 descriptor?? [ 526.815419][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.135344][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.927165][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.086446][T13581] hsr_slave_0: entered promiscuous mode [ 529.101578][T13581] hsr_slave_1: entered promiscuous mode [ 529.121258][T13581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.131250][T13581] Cannot create hsr debugfs directory [ 529.340078][T12336] usb 2-1: USB disconnect, device number 21 [ 529.543442][T13565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.616433][T13578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.624762][ T29] audit: type=1400 audit(1722388167.258:415): avc: denied { map } for pid=13704 comm="syz.2.2933" path="socket:[43469]" dev="sockfs" ino=43469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 529.650779][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.684452][T13565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.704898][T13565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.800706][T13578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.837206][T13565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.962696][T13578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.088958][T13578] bond0: (slave netdevsim0): Releasing backup interface [ 530.114656][T13578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.314220][ T12] bridge_slave_1: left allmulticast mode [ 530.345630][ T12] bridge_slave_1: left promiscuous mode [ 530.351568][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.400066][ T12] bridge_slave_0: left allmulticast mode [ 530.415637][ T12] bridge_slave_0: left promiscuous mode [ 530.421511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.457313][ T12] bridge_slave_1: left allmulticast mode [ 530.463028][ T12] bridge_slave_1: left promiscuous mode [ 530.487360][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.512719][ T12] bridge_slave_0: left allmulticast mode [ 530.525320][ T12] bridge_slave_0: left promiscuous mode [ 530.531291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.065503][ T5230] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 531.257288][ T5230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.292610][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.338296][ T5230] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 531.347465][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.367196][ T5230] usb 3-1: Product: syz [ 531.371404][ T5230] usb 3-1: Manufacturer: syz [ 531.386344][ T5230] usb 3-1: SerialNumber: syz [ 531.398338][ T5230] usb 3-1: config 0 descriptor?? [ 531.418378][ T5230] usb 3-1: Found UVC 0.00 device syz (468c:90ea) [ 531.424937][ T5230] usb 3-1: No valid video chain found. [ 532.773555][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.847666][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.883671][ T12] bond0 (unregistering): Released all slaves [ 533.257220][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.273357][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.292861][ T12] bond0 (unregistering): Released all slaves [ 533.660164][T13565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.908209][T13565] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.001298][T12336] usb 3-1: USB disconnect, device number 20 [ 534.141565][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.148817][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.168343][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.175582][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.338216][T13744] netlink: 'syz.2.2944': attribute type 10 has an invalid length. [ 534.368716][ T29] audit: type=1400 audit(1722388172.008:416): avc: denied { setopt } for pid=13743 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.408256][T13744] bond0: (slave bond_slave_0): Releasing backup interface [ 534.697901][T13581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.759169][T13581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.815870][ T12] hsr_slave_0: left promiscuous mode [ 534.832506][ T12] hsr_slave_1: left promiscuous mode [ 534.843458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.864009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.882981][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.901580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.933407][ T12] hsr_slave_0: left promiscuous mode [ 534.952953][ T12] hsr_slave_1: left promiscuous mode [ 534.960225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.976236][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.987009][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.004756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.136540][ T12] veth1_macvtap: left promiscuous mode [ 535.142137][ T12] veth0_macvtap: left promiscuous mode [ 535.148418][ T12] veth1_vlan: left promiscuous mode [ 535.157578][ T12] veth0_vlan: left promiscuous mode [ 535.175630][ T12] veth1_macvtap: left promiscuous mode [ 535.181231][ T12] veth0_macvtap: left promiscuous mode [ 535.199051][ T12] veth1_vlan: left promiscuous mode [ 535.204470][ T12] veth0_vlan: left promiscuous mode [ 535.685099][ T943] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 535.895429][ T943] usb 3-1: Using ep0 maxpacket: 16 [ 535.923810][ T943] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 535.935153][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.953499][ T943] usb 3-1: Product: syz [ 535.958025][ T943] usb 3-1: Manufacturer: syz [ 535.962701][ T943] usb 3-1: SerialNumber: syz [ 535.979989][ T943] r8152-cfgselector 3-1: Unknown version 0x0000 [ 535.998213][ T943] r8152-cfgselector 3-1: config 0 descriptor?? [ 536.065753][ T29] audit: type=1400 audit(1722388173.708:417): avc: denied { write } for pid=13763 comm="syz.1.2950" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 536.292528][ T12] team0 (unregistering): Port device team_slave_1 removed [ 536.352425][ T12] team0 (unregistering): Port device team_slave_0 removed [ 536.630851][ T5279] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 538.232909][ T12] team0 (unregistering): Port device team_slave_1 removed [ 538.289173][ T12] team0 (unregistering): Port device team_slave_0 removed [ 538.786413][T13581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.818814][T13581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.196332][T13578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.232843][T13578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.331569][T13565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.346840][T13578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.388462][T13578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.623946][T13581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.638484][T13565] veth0_vlan: entered promiscuous mode [ 539.649264][T13789] usb usb7: usbfs: process 13789 (syz.1.2958) did not claim interface 0 before use [ 539.733040][T13565] veth1_vlan: entered promiscuous mode [ 539.870018][T13581] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.883635][ T5235] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 539.947069][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.961186][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.980808][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.988014][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.032371][T13565] veth0_macvtap: entered promiscuous mode [ 540.091511][T13565] veth1_macvtap: entered promiscuous mode [ 540.141443][T13578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.260230][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.277662][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.292344][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.303403][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.313743][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.324410][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.350400][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.372541][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.400569][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.441850][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.469715][T13565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.494805][T13581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.554872][T13581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.593819][T13578] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.609721][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.622520][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.632916][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.644114][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.653983][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.671976][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.691258][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.727649][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.745290][ T5230] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 540.763141][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.780123][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.797063][T13565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.849733][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.856984][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.935810][ T5230] usb 3-1: Using ep0 maxpacket: 8 [ 540.939918][T13565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.968178][T13565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.976836][ T5230] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 540.990735][T13565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.001039][ T5230] usb 3-1: config 179 has no interface number 0 [ 541.006489][T13565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.015063][ T5230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 541.034074][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.041234][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.074419][ T5230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 541.113904][ T5230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 541.145124][ T5230] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 541.163243][ T5230] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 541.210569][ T5230] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 541.240152][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.263301][T13578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.296644][T13803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 541.591896][T13581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.771884][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.816253][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 541.846487][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.072194][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.104879][ T943] usb 3-1: USB disconnect, device number 22 [ 542.104941][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 542.118215][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.119123][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 542.223543][ T943] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 542.366282][T13578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.574550][T13578] veth0_vlan: entered promiscuous mode [ 542.602877][T13578] veth1_vlan: entered promiscuous mode [ 542.814188][T13578] veth0_macvtap: entered promiscuous mode [ 542.860069][T13578] veth1_macvtap: entered promiscuous mode [ 542.880373][T13581] veth0_vlan: entered promiscuous mode [ 542.958596][T13581] veth1_vlan: entered promiscuous mode [ 543.092615][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.144837][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.170145][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.212400][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.248425][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.275106][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.294158][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.320781][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.338493][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.367454][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.399012][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.423938][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.449680][T13578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.486819][T13834] netlink: 'syz.3.2968': attribute type 10 has an invalid length. [ 543.629696][T13834] bond0: (slave bond_slave_0): Releasing backup interface [ 543.728382][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.739381][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.750622][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.763489][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.777381][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.787928][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.804649][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.821676][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.844483][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.864788][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.874826][T13578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.891619][T13578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.917892][T13578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.956542][T13578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.006079][T13578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.022687][T13578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.032347][T13578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.160955][T13581] veth0_macvtap: entered promiscuous mode [ 544.199988][T13581] veth1_macvtap: entered promiscuous mode [ 544.410304][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.422702][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.434430][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.445866][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.458855][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.488652][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.508234][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.523862][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.549767][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.576477][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.599585][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.640366][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.673238][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.715655][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.760424][T13581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.237496][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.269809][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.299279][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.333624][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.575161][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.642411][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.676400][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.037947][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.181828][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.193563][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.934244][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.050923][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.170580][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.260579][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.357340][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.375016][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.389877][T13581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.450093][T13581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.465461][T13581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.474379][T13581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.483218][T13581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.565615][T13876] netlink: 'syz.1.2979': attribute type 10 has an invalid length. [ 547.671861][T13876] bond0: (slave bond_slave_0): Releasing backup interface [ 548.709927][T10383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.746637][T10383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.913314][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.966846][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.169060][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.217532][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.442021][T13915] netlink: 'syz.2.2991': attribute type 10 has an invalid length. [ 550.969348][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 550.975961][ T5235] Bluetooth: Wrong link type (-22) [ 550.981172][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 550.987844][ T5235] Bluetooth: Wrong link type (-22) [ 550.993084][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 550.999726][ T5235] Bluetooth: Wrong link type (-22) [ 551.004865][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 551.055173][ T5235] Bluetooth: Wrong link type (-22) [ 552.555082][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 552.563990][ T5235] Bluetooth: Wrong link type (-22) [ 553.707339][ T29] audit: type=1326 audit(1722388191.338:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 553.868453][ T29] audit: type=1326 audit(1722388191.368:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.040645][ T29] audit: type=1326 audit(1722388191.398:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.116258][ T29] audit: type=1326 audit(1722388191.398:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.139843][ T29] audit: type=1326 audit(1722388191.398:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.186514][ T29] audit: type=1326 audit(1722388191.398:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.223405][T13938] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2997'. [ 554.254934][ T29] audit: type=1326 audit(1722388191.398:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13939 comm="syz.1.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7053977299 code=0x7ffc0000 [ 554.291106][T13948] netlink: 'syz.4.3002': attribute type 10 has an invalid length. [ 554.499150][T13948] bond0: (slave bond_slave_0): Releasing backup interface [ 554.636494][T13960] overlayfs: missing 'lowerdir' [ 554.853226][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 554.860894][ T5235] Bluetooth: Wrong link type (-22) [ 554.869083][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 554.875992][ T5235] Bluetooth: Wrong link type (-22) [ 554.881158][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 554.887909][ T5235] Bluetooth: Wrong link type (-22) [ 554.893093][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 554.899756][ T5235] Bluetooth: Wrong link type (-22) [ 554.904925][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 554.911775][ T5235] Bluetooth: Wrong link type (-22) [ 555.101835][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 556.730014][T13993] overlayfs: missing 'lowerdir' [ 556.785921][T13994] netlink: 'syz.3.3019': attribute type 10 has an invalid length. [ 557.153584][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 557.160384][ T5235] Bluetooth: Wrong link type (-22) [ 557.169458][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 557.176244][ T5235] Bluetooth: Wrong link type (-22) [ 557.182246][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 557.189193][ T5235] Bluetooth: Wrong link type (-22) [ 557.194400][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 557.202378][ T5235] Bluetooth: Wrong link type (-22) [ 557.207853][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 557.214393][ T5235] Bluetooth: Wrong link type (-22) [ 557.220034][ T5235] Bluetooth: hci0: link tx timeout [ 557.225941][ T5235] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 558.126517][ T29] audit: type=1400 audit(1722388195.708:425): avc: denied { accept } for pid=14011 comm="syz.1.3024" lport=56793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 558.839449][ T5235] Bluetooth: hci9: unexpected event 0x09 length: 17 > 3 [ 558.965769][ T29] audit: type=1400 audit(1722388196.558:426): avc: denied { write } for pid=14025 comm="syz.1.3029" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 559.295201][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 559.566084][T14033] overlayfs: missing 'lowerdir' [ 559.844665][T14036] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 560.058607][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 560.066344][ T5237] Bluetooth: Wrong link type (-22) [ 560.071546][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 560.078309][ T5237] Bluetooth: Wrong link type (-22) [ 560.083473][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 560.090112][ T5237] Bluetooth: Wrong link type (-22) [ 560.095418][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 560.101966][ T5237] Bluetooth: Wrong link type (-22) [ 560.107154][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 560.113672][ T5237] Bluetooth: Wrong link type (-22) [ 560.131798][T14036] bond0: (slave bond_slave_0): Releasing backup interface [ 561.442539][ T5237] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 561.533892][ T29] audit: type=1400 audit(1722388199.179:427): avc: denied { write } for pid=14072 comm="syz.1.3044" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.632331][ T29] audit: type=1400 audit(1722388199.229:428): avc: denied { open } for pid=14072 comm="syz.1.3044" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.692380][T14077] overlayfs: missing 'workdir' [ 561.926806][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 561.933357][ T5237] Bluetooth: Wrong link type (-22) [ 561.938668][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 561.946729][ T5237] Bluetooth: Wrong link type (-22) [ 561.951874][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 561.959959][ T5237] Bluetooth: Wrong link type (-22) [ 561.965258][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 561.971815][ T5237] Bluetooth: Wrong link type (-22) [ 561.977145][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 561.989199][ T5237] Bluetooth: Wrong link type (-22) [ 563.526954][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.533388][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.575339][ T5237] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 564.727879][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.768628][T14109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.115994][T14113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.170101][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3057'. [ 565.220970][T14115] overlayfs: missing 'workdir' [ 565.390969][T14118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.503867][T14121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.555571][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 565.562290][ T5237] Bluetooth: Wrong link type (-22) [ 565.575918][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 565.582642][ T5237] Bluetooth: Wrong link type (-22) [ 565.592653][ T5237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 565.599876][ T5237] Bluetooth: Wrong link type (-22) [ 565.612775][ T5237] ================================================================== [ 565.620860][ T5237] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x788/0x920 [ 565.628530][ T5237] Read of size 4 at addr ffff888048e7d010 by task kworker/u9:8/5237 [ 565.636508][ T5237] [ 565.638839][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: kworker/u9:8 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 565.649691][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 565.659757][ T5237] Workqueue: hci0 hci_rx_work [ 565.664465][ T5237] Call Trace: [ 565.667833][ T5237] [ 565.670763][ T5237] dump_stack_lvl+0x116/0x1f0 [ 565.675465][ T5237] print_report+0xc3/0x620 [ 565.679904][ T5237] ? __virt_addr_valid+0x5e/0x590 [ 565.684936][ T5237] ? __phys_addr+0xc6/0x150 [ 565.689543][ T5237] kasan_report+0xd9/0x110 [ 565.693967][ T5237] ? l2cap_send_cmd+0x788/0x920 [ 565.698827][ T5237] ? l2cap_send_cmd+0x788/0x920 [ 565.703687][ T5237] l2cap_send_cmd+0x788/0x920 [ 565.708387][ T5237] l2cap_recv_frame+0x2358/0x8eb0 [ 565.713417][ T5237] ? hci_rx_work+0xa87/0x1610 [ 565.718114][ T5237] ? __pfx_lock_release+0x10/0x10 [ 565.723146][ T5237] ? __pfx___lock_acquire+0x10/0x10 [ 565.728346][ T5237] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 565.733719][ T5237] ? trace_contention_end+0xea/0x140 [ 565.739014][ T5237] ? __mutex_unlock_slowpath+0x164/0x650 [ 565.744646][ T5237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.750633][ T5237] ? hci_rx_work+0xa73/0x1610 [ 565.755336][ T5237] ? hci_conn_enter_active_mode+0x219/0x360 [ 565.761250][ T5237] ? __pfx_lock_release+0x10/0x10 [ 565.766277][ T5237] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 565.772526][ T5237] l2cap_recv_acldata+0x9b4/0xb70 [ 565.777561][ T5237] hci_rx_work+0xaab/0x1610 [ 565.782074][ T5237] process_one_work+0x9c5/0x1b40 [ 565.787022][ T5237] ? __pfx_lock_acquire+0x10/0x10 [ 565.792048][ T5237] ? __pfx_process_one_work+0x10/0x10 [ 565.797426][ T5237] ? assign_work+0x1a0/0x250 [ 565.802019][ T5237] worker_thread+0x6c8/0xf20 [ 565.806621][ T5237] ? __pfx_worker_thread+0x10/0x10 [ 565.811736][ T5237] kthread+0x2c1/0x3a0 [ 565.815893][ T5237] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.821099][ T5237] ? __pfx_kthread+0x10/0x10 [ 565.825689][ T5237] ret_from_fork+0x45/0x80 [ 565.830117][ T5237] ? __pfx_kthread+0x10/0x10 [ 565.834707][ T5237] ret_from_fork_asm+0x1a/0x30 [ 565.839521][ T5237] [ 565.842534][ T5237] [ 565.844846][ T5237] Allocated by task 5235: [ 565.849161][ T5237] kasan_save_stack+0x33/0x60 [ 565.853844][ T5237] kasan_save_track+0x14/0x30 [ 565.858868][ T5237] __kasan_kmalloc+0xaa/0xb0 [ 565.863459][ T5237] l2cap_conn_add.part.0+0x60/0xa60 [ 565.868663][ T5237] l2cap_connect_cfm+0x428/0xf80 [ 565.873694][ T5237] hci_remote_features_evt+0x548/0x9e0 [ 565.879156][ T5237] hci_event_packet+0x9eb/0x1180 [ 565.884096][ T5237] hci_rx_work+0x2c6/0x1610 [ 565.888600][ T5237] process_one_work+0x9c5/0x1b40 [ 565.893543][ T5237] worker_thread+0x6c8/0xf20 [ 565.898137][ T5237] kthread+0x2c1/0x3a0 [ 565.902199][ T5237] ret_from_fork+0x45/0x80 [ 565.906713][ T5237] ret_from_fork_asm+0x1a/0x30 [ 565.911487][ T5237] [ 565.913800][ T5237] Freed by task 5235: [ 565.917770][ T5237] kasan_save_stack+0x33/0x60 [ 565.922448][ T5237] kasan_save_track+0x14/0x30 [ 565.927123][ T5237] kasan_save_free_info+0x3b/0x60 [ 565.932157][ T5237] poison_slab_object+0xf7/0x160 [ 565.937117][ T5237] __kasan_slab_free+0x32/0x50 [ 565.942059][ T5237] kfree+0x12a/0x3b0 [ 565.945957][ T5237] l2cap_conn_del+0x59f/0x740 [ 565.950648][ T5237] l2cap_connect_cfm+0x9e6/0xf80 [ 565.955588][ T5237] hci_conn_failed+0x1c3/0x370 [ 565.960361][ T5237] hci_abort_conn_sync+0x75a/0xb50 [ 565.965475][ T5237] abort_conn_sync+0x197/0x360 [ 565.970238][ T5237] hci_cmd_sync_work+0x1a4/0x410 [ 565.975191][ T5237] process_one_work+0x9c5/0x1b40 [ 565.980153][ T5237] worker_thread+0x6c8/0xf20 [ 565.984751][ T5237] kthread+0x2c1/0x3a0 [ 565.988825][ T5237] ret_from_fork+0x45/0x80 [ 565.993251][ T5237] ret_from_fork_asm+0x1a/0x30 [ 565.998024][ T5237] [ 566.000340][ T5237] Last potentially related work creation: [ 566.006043][ T5237] kasan_save_stack+0x33/0x60 [ 566.010724][ T5237] __kasan_record_aux_stack+0xba/0xd0 [ 566.016107][ T5237] insert_work+0x36/0x230 [ 566.020441][ T5237] __queue_work+0x97e/0x1070 [ 566.025035][ T5237] call_timer_fn+0x1a0/0x610 [ 566.029624][ T5237] __run_timers+0x567/0xaf0 [ 566.034131][ T5237] run_timer_base+0x111/0x190 [ 566.038808][ T5237] run_timer_softirq+0x1a/0x40 [ 566.043572][ T5237] handle_softirqs+0x216/0x8f0 [ 566.048344][ T5237] irq_exit_rcu+0xbb/0x120 [ 566.052764][ T5237] sysvec_apic_timer_interrupt+0x95/0xb0 [ 566.058408][ T5237] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.064395][ T5237] [ 566.066711][ T5237] Second to last potentially related work creation: [ 566.073281][ T5237] kasan_save_stack+0x33/0x60 [ 566.077967][ T5237] __kasan_record_aux_stack+0xba/0xd0 [ 566.083363][ T5237] insert_work+0x36/0x230 [ 566.087698][ T5237] __queue_work+0x3f8/0x1070 [ 566.092293][ T5237] queue_work_on+0x11a/0x140 [ 566.096888][ T5237] l2cap_connect_cfm+0x9c9/0xf80 [ 566.101829][ T5237] hci_remote_features_evt+0x548/0x9e0 [ 566.107286][ T5237] hci_event_packet+0x9eb/0x1180 [ 566.112231][ T5237] hci_rx_work+0x2c6/0x1610 [ 566.116738][ T5237] process_one_work+0x9c5/0x1b40 [ 566.121686][ T5237] worker_thread+0x6c8/0xf20 [ 566.126278][ T5237] kthread+0x2c1/0x3a0 [ 566.130343][ T5237] ret_from_fork+0x45/0x80 [ 566.134770][ T5237] ret_from_fork_asm+0x1a/0x30 [ 566.139542][ T5237] [ 566.141854][ T5237] The buggy address belongs to the object at ffff888048e7d000 [ 566.141854][ T5237] which belongs to the cache kmalloc-1k of size 1024 [ 566.156343][ T5237] The buggy address is located 16 bytes inside of [ 566.156343][ T5237] freed 1024-byte region [ffff888048e7d000, ffff888048e7d400) [ 566.170153][ T5237] [ 566.172470][ T5237] The buggy address belongs to the physical page: [ 566.178886][ T5237] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48e78 [ 566.187645][ T5237] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 566.196137][ T5237] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 566.203681][ T5237] page_type: 0xfdffffff(slab) [ 566.208357][ T5237] raw: 00fff00000000040 ffff888015841dc0 ffffea00011be600 dead000000000002 [ 566.216940][ T5237] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 566.225519][ T5237] head: 00fff00000000040 ffff888015841dc0 ffffea00011be600 dead000000000002 [ 566.234184][ T5237] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 566.242851][ T5237] head: 00fff00000000003 ffffea0001239e01 ffffffffffffffff 0000000000000000 [ 566.251523][ T5237] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 566.260194][ T5237] page dumped because: kasan: bad access detected [ 566.266602][ T5237] page_owner tracks the page as allocated [ 566.272304][ T5237] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10987, tgid 10980 (syz.2.1999), ts 358409714681, free_ts 23668721618 [ 566.293062][ T5237] post_alloc_hook+0x2d1/0x350 [ 566.297833][ T5237] get_page_from_freelist+0x1351/0x2e50 [ 566.303394][ T5237] __alloc_pages_noprof+0x22b/0x2460 [ 566.308688][ T5237] alloc_slab_page+0x4e/0xf0 [ 566.313288][ T5237] new_slab+0x84/0x260 [ 566.317355][ T5237] ___slab_alloc+0xdac/0x1870 [ 566.322029][ T5237] __slab_alloc.constprop.0+0x56/0xb0 [ 566.327401][ T5237] __kmalloc_noprof+0x367/0x400 [ 566.332256][ T5237] ieee802_11_parse_elems_full+0xea/0x1680 [ 566.338073][ T5237] ieee80211_inform_bss+0xfd/0x1100 [ 566.343297][ T5237] cfg80211_inform_single_bss_data+0x8e2/0x1dc0 [ 566.349590][ T5237] cfg80211_inform_bss_data+0x205/0x39c0 [ 566.355244][ T5237] cfg80211_inform_bss_frame_data+0x271/0x7b0 [ 566.361318][ T5237] ieee80211_bss_info_update+0x311/0xab0 [ 566.366963][ T5237] ieee80211_scan_rx+0x474/0xac0 [ 566.371909][ T5237] ieee80211_rx_list+0x1be3/0x2e90 [ 566.377040][ T5237] page last free pid 1 tgid 1 stack trace: [ 566.382845][ T5237] free_unref_page+0x64a/0xe40 [ 566.387624][ T5237] free_contig_range+0xb6/0x1a0 [ 566.392481][ T5237] destroy_args+0xa42/0xe10 [ 566.396989][ T5237] debug_vm_pgtable+0x1705/0x3280 [ 566.402018][ T5237] do_one_initcall+0x128/0x700 [ 566.406792][ T5237] kernel_init_freeable+0x69d/0xca0 [ 566.411996][ T5237] kernel_init+0x1c/0x2b0 [ 566.416352][ T5237] ret_from_fork+0x45/0x80 [ 566.420795][ T5237] ret_from_fork_asm+0x1a/0x30 [ 566.425578][ T5237] [ 566.427899][ T5237] Memory state around the buggy address: [ 566.433560][ T5237] ffff888048e7cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 566.441621][ T5237] ffff888048e7cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 566.449751][ T5237] >ffff888048e7d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.457804][ T5237] ^ [ 566.462398][ T5237] ffff888048e7d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.470539][ T5237] ffff888048e7d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.478594][ T5237] ================================================================== [ 566.571789][ T5237] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 566.579034][ T5237] CPU: 0 UID: 0 PID: 5237 Comm: kworker/u9:8 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 566.589910][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 566.599972][ T5237] Workqueue: hci0 hci_rx_work [ 566.604664][ T5237] Call Trace: [ 566.607944][ T5237] [ 566.610878][ T5237] dump_stack_lvl+0x3d/0x1f0 [ 566.615485][ T5237] panic+0x6f5/0x7a0 [ 566.619385][ T5237] ? __pfx_panic+0x10/0x10 [ 566.623810][ T5237] ? preempt_schedule_thunk+0x1a/0x30 [ 566.629183][ T5237] ? preempt_schedule_common+0x44/0xc0 [ 566.634661][ T5237] check_panic_on_warn+0xab/0xb0 [ 566.639605][ T5237] end_report+0x117/0x180 [ 566.643948][ T5237] kasan_report+0xe9/0x110 [ 566.648378][ T5237] ? l2cap_send_cmd+0x788/0x920 [ 566.653239][ T5237] ? l2cap_send_cmd+0x788/0x920 [ 566.658106][ T5237] l2cap_send_cmd+0x788/0x920 [ 566.662797][ T5237] l2cap_recv_frame+0x2358/0x8eb0 [ 566.667829][ T5237] ? hci_rx_work+0xa87/0x1610 [ 566.672509][ T5237] ? __pfx_lock_release+0x10/0x10 [ 566.677537][ T5237] ? __pfx___lock_acquire+0x10/0x10 [ 566.682739][ T5237] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 566.688112][ T5237] ? trace_contention_end+0xea/0x140 [ 566.693417][ T5237] ? __mutex_unlock_slowpath+0x164/0x650 [ 566.699066][ T5237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 566.705054][ T5237] ? hci_rx_work+0xa73/0x1610 [ 566.709750][ T5237] ? hci_conn_enter_active_mode+0x219/0x360 [ 566.715659][ T5237] ? __pfx_lock_release+0x10/0x10 [ 566.720693][ T5237] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 566.726943][ T5237] l2cap_recv_acldata+0x9b4/0xb70 [ 566.731973][ T5237] hci_rx_work+0xaab/0x1610 [ 566.736484][ T5237] process_one_work+0x9c5/0x1b40 [ 566.741433][ T5237] ? __pfx_lock_acquire+0x10/0x10 [ 566.746463][ T5237] ? __pfx_process_one_work+0x10/0x10 [ 566.751881][ T5237] ? assign_work+0x1a0/0x250 [ 566.756477][ T5237] worker_thread+0x6c8/0xf20 [ 566.761078][ T5237] ? __pfx_worker_thread+0x10/0x10 [ 566.766195][ T5237] kthread+0x2c1/0x3a0 [ 566.770265][ T5237] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.775481][ T5237] ? __pfx_kthread+0x10/0x10 [ 566.780070][ T5237] ret_from_fork+0x45/0x80 [ 566.784496][ T5237] ? __pfx_kthread+0x10/0x10 [ 566.789086][ T5237] ret_from_fork_asm+0x1a/0x30 [ 566.793873][ T5237] [ 566.797158][ T5237] Kernel Offset: disabled [ 566.801474][ T5237] Rebooting in 86400 seconds..