last executing test programs: 36.079086367s ago: executing program 3 (id=9183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000", 0x53}], 0x1) 35.839280585s ago: executing program 3 (id=9188): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) r2 = socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0), 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r6 = syz_io_uring_setup(0x690a, &(0x7f0000000340), 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000240), 0x0) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900"], 0x50}}, 0x0) 12.971724265s ago: executing program 4 (id=9262): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000319078ac1e0001ac1414aa0c0090780600000000000000000000e0000002ac1414005123197a65846be20c345cdd3c4ef1e38ba458b931befe6f273177bdf9bbe7b72c361f86dac770c8911a2d69b266d99d5f7d886deec5030f9c4e277b5e53599a74033b9f382d4ee751469d1f"], 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8cb40, 0x0) 9.995198088s ago: executing program 4 (id=9269): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x4, 0x4, 0x4c0, 0xffffffff, 0x0, 0x0, 0x2b0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@dst={{0x48}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "a38455d67b0633c77377af818fbba939943755c0a07fac1300dd851e136c187e0ede7cd67fae8be8fa37e218176b320409724e92a42eca15a1f7477233a7974ff18e78958d575575ff706059fdde3db296fa871031b79105baeb7bc1912ef125b3cf84bec049d5d6f06c34f2e0e5a5a93f5b1e41e35a29b82424c2ac80f36689", 0x57}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7.622543256s ago: executing program 1 (id=9276): openat$pidfd(0xffffffffffffff9c, &(0x7f0000007cc0), 0x0, 0x0) 7.35941199s ago: executing program 1 (id=9279): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 6.917838915s ago: executing program 1 (id=9281): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18}, 0x90) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @dev}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) 6.151468457s ago: executing program 4 (id=9285): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001e00)=""/94, &(0x7f0000000680)=0x5e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="0212000007000000000000000000000005001700000000000a00000000000000fc0200000000000000000000000000000000000000000000a974bd49e6dc89143ee09e30e7acc853a5c051117319683d755a7f51482d7841b025598c8449d4b1a071ef46e62b"], 0x38}}, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x0, 0x0, 0x70, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a40000005304"], 0xa4}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001800190e00000000000000000a0000000000000000000000060015000000000054f4607204f8a92134829500c52c451fc6a772f3ef1bec585220306d4b40a59d2a38ff4a82e02971ce25139295bfa1a4cf910fa6ec81e3d85d08fdc708ed8547194eb2b7720a08e8bc7bdde707631fbf85e133ca51818506e8956e93f3b0d15007ae50e2653b7efc4a20abcfc0c3e8cfe5bfe29b056325ff5848515a70543736d50c710de67d88f36cd6dd7559f5c6d678a2cdc2"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc150000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000060006004e2100000800050000000000140002007767300000000000000000000000000060150880540000802400020088fd6f97906c485cf69deaf877478d6d2ca926bb478ae565edfb57696555bb7c08000a0001000000060005000000000006000500060000001400040002004e237f000001000000000000000048000080200004000a004e2400008001fc0100000000000000000000000000010500000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922a40300802400020095d1ab6b0f90567530c17a6f63836831798785b9988984fbce94dd5068a218fc24000100000000000000000000000000000000000000000000000000000000000000000024000200d7f8c69f2b4669478b04895c8cfefc88b0e9a50cee4a680e2543b5f6d2b85bff3403098064000080060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200640101020500030002000000400000800600010002000000080002000a0101010500030003000000060001000a00000014000200ff010000000000000000000000000001050003000000000058000080060001000200000008000200000000000500030002000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200e00000010500030000000000e8000080060001000a00000014000200fe8000000000000000000000000000aa05000300020000000600010002000000080002000a01010005000300020000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000020500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200640101020500030001000000060001000200000008000200ac1e00010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000000c010080060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a0000001400020020010000000000000000000000000002050003000100000040000080060001000a00000014000200fc0200000000000000000000000000000500030001000000060001000200000008000200ac1e01010500030001000000340f008090010980880000800600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030002000000060001000200000008000200ac1414bb05000300010000000600010002000000080002007f0000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030002000000c40000800600010002000000080002000a0101010500030000000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000200000008000200ac1e010105000300000000000600010002000000080002000a0101020500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414110500030001000000060001000200000008000200ac1414bb0500030001000000400000800600010002000000080002000a0101010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000380209801c000080060001000200000008000200ac1414bb050003000200000058000080060001000200000008000200640101010500030003000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa05000300030000004c0000800600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac14143a050003000100000028000080060001000a00000014000200ff020000000000000000000000000001050003000200000034000080060001000200000008000200ac1414270500030000000000060001000200000008000200e000000105000300000000001c000080060001000200000008000200ac1e0001050003000100000058000080060001000200000008000200e00000020500030002000000060001000200000008000200000000000500030002000000060001000a0000001400020000000000000000000000ffff0a01010005000300020000007c000080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030001000000060001000200000008000200ac14142f0500030002000000060001000a0000001400020020010000000000000000000000000002050003000100000028000080060001000a00000014000200fe800000000000000000000000000042050003000300000048040980e8000080060001000200000008000200ac1414360500030001000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003b0500030001000000060001000200000008000200ac1e00010500030003000000060001000200000008000200ac1414bb05000300020000000600010002000000080002000a0101020500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000b8000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200640101010500030002000000060001000200000008000200640101000500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414140500030001000000060001000a00000014000200fc020000000000000000000000000000050003000300000028000080060001000a00000014000200fc020000000000000000000000000000050003000000000018010080060001000a000000140002000000000000000000000000000000000105000300010000000600010002000000080002006401010105000300000000000600010002000000080002007f0000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200fe8000000000000000000000000000350500030002000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030001000000580000800600010002000000080002007f00000105000300030000000600010002000000080002000a0101000500030002000000060001000a000000140002002001000000000000000000000000000005000300020000000c0100800600010002000000080002007f0000010500030001000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffff7f0000010500030003000000060001000200000008000200ac1e00010500030003000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200e00000010500030001000000060001000200000008000200ac1414aa0500030001000000060001000a0000001400020000000000000000000000000000000000050003000000000024000200aaa7338571b26cb9ab20e7e28440bfaa6a2a578166d8c8da35ef7904d7152ccd1400040002004e20e0000002000000000000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c7404098058000080060001000200000008000200ac1414320500030001000000060001000200000008000200ac1414aa0500030003000000060001000a000000140002000000000000000000000000000000000105000300000000004c000080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200fe8800000000000000000000000000010500030003000000d0000080060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200ff02000000000000000000000000000105000300020000000600010002000000080002000a0101010500030001000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000a0000001400020000000000000000000000000000000000050003000000000028000080060001000a00000014000200fe8800000000000000000000000001010500030003000000d0000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000200000008000200ac1e000105000300000000000600010002000000080002007f00000105000300000000000600010002000000080002000a01010005000300020000004c0000800600010002000000080002000000000005000300010000000600010002000000080002000a0101010500030002000000060001000200000008000200ffffffff050003000000000024010080060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ac1414340500030002000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fe8000000000000000000000000000150500030000000000060001000200000008000200ffffffff0500030003000000060001000200000008000200e0000001050003000200000094000080060001000200000008000200640101000500030000000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000200000008000200ac14141c05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc02000000000000000000000000000105000300000000001400040002004e210a01010200000000000000003c02098040000080060001000200000008000200640101010500030002000000060001000a00000014000200fe88000000000000000000000000000105000300020000007c000080060001000200000008000200ac1414aa05000300010000000600010002000000080002000a0101020500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000a000000140002000000000000000000000000000000000005000300010000003c010080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000200000008000200ac1e01010500030000000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000200000008000200000000000500030001000000060001000a00000014000200ff02000000000000000000000000000105000300030000000600010002000000080002000a0101000500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000000050003000100000040000080060001000200000008000200e00000010500030000000000060001000a0000001400020000000000000000000000ffffac141427050003c8020000008000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e2300001000fe8800000000000000000000000001010121000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e2300000000000000000000000020010080200004000a004e2300000003fe80000000000000000000000000002aff010000200004000a004e240000000220010000000000000000000000000002fbffffff200004000a004e2300000004fe880000000000000000000000000001ffffffff200004000a004e2200000004fc0200000000000000000000000000000000000008000300010000006000098028000080060001000a00000014000200fc020000000000000000000000000000050003000300000034000080060001000200000008000200ac1414aa0500030001000000060001000200000008000200e00000020500030001000000080003000600000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b0800030006000000440000801400040002004e21640101020000000000000000080003000400000024000200fe51bcb46b089d8e57a19ccf8d3d0756afedd168cbdc8d1c08e4dac7d4ec32ba0400008008000700f8ffffff1400020077673100000000000000000000000000080007000000000a14000200776731000000000000000000000000000800070080a7000024000300"], 0x15fc}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x518, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20040000) r9 = socket(0x15, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) getsockname$netrom(r9, 0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRESOCT=r4], 0x45) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/920], 0x492) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x37, "56a07b68136ebb780605b8830e2a3de0c4383191423c01a6fa9ce2cb0c256e97f29e3db3d81d0417db74dd6a84d515d15056714e5efe1f"}, &(0x7f0000000540)=0x3f) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000001c0)={r10, 0x8, 0x5, [0xfd, 0x6, 0x7, 0xb, 0x5]}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={r11}, &(0x7f0000000380)=0x8) write(r2, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0xffffffffffffffb7) 4.620901922s ago: executing program 1 (id=9288): r0 = syz_io_uring_setup(0x65f9, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 4.605299554s ago: executing program 0 (id=9289): r0 = socket(0x0, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) 4.47976674s ago: executing program 2 (id=9290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000cd0b000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002100)={0x68, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x0, @void, @val={0x1, 0x3, [{}, {}, {0x6c}]}, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6}, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x6, "fd59cb84faea"}]}}]}, 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9004}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r10, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'nr0\x00'}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r12, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r13}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r13, &(0x7f0000000540)="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", 0x0}, 0x20) 4.418028093s ago: executing program 1 (id=9291): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 3.803307275s ago: executing program 4 (id=9292): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000540)}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) tkill(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, 0x464, 0x2, 0x70bd26, 0x25dfdbfe, "f315693443f0949e1f5a936fbfbefed32a59305ebe9924f1d2be590491c7fdcc31062d14f501b9aef22131d6038a0964b260f51a23e14140a625b548cb2ca75010192f6291a8209d5cc49b319df95adb14b5f10ec5ece974fffb3362366617ef5270bb0bd2f1c44b1fc49337525ccbb74f7e", ["", "", "", ""]}, 0x84}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4788, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x80}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x4c}}, 0x0) 3.770793261s ago: executing program 2 (id=9293): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'wlan1\x00', &(0x7f0000001080)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x3]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001500000427bd7000fcdbdf250238a2c8", @ANYRES32=r2, @ANYBLOB="08000200e000000208000a000200000008000100ac1414bb08000900040000000800090004ffe600"], 0x40}, 0x1, 0x0, 0x0, 0x4000009}, 0x8014) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_io_uring_setup(0x7e2b, &(0x7f0000000080), &(0x7f00000004c0), &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000d40)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 3.647854013s ago: executing program 1 (id=9294): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x4, 0x4, 0x4c0, 0xffffffff, 0x0, 0x0, 0x2b0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@dst={{0x48}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "a38455d67b0633c77377af818fbba939943755c0a07fac1300dd851e136c187e0ede7cd67fae8be8fa37e218176b320409724e92a42eca15a1f7477233a7974ff18e78958d575575ff706059fdde3db296fa871031b79105baeb7bc1912ef125b3cf84bec049d5d6f06c34f2e0e5a5a93f5b1e41e35a29b82424c2ac80f36689", 0x57}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3.301382217s ago: executing program 3 (id=9225): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x12062, 0x0) 3.233227156s ago: executing program 4 (id=9295): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 3.143938851s ago: executing program 0 (id=9296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) pipe(0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmdt(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x76) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) 3.069405318s ago: executing program 3 (id=9297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18}, 0x90) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@multicast, @dev}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) 1.912826845s ago: executing program 0 (id=9298): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0840) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000500)={0x18, 0xfffffffffffffffe, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0xffffff1a) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='xfrm0\x00', 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0205647, &(0x7f0000000940)={0xf010000}) sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00fb1f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="2f12c800dce78f5761410bab555ab45b18b270f0cac67b7d9abeae55184bada91b9764bb446d6a625d610ab9cdd54f607ae3fc6d3aa5889cdfde29e666"], 0x1c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.902162247s ago: executing program 2 (id=9299): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0), 0xffffffffffffff57, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.851854963s ago: executing program 4 (id=9300): pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2ca, 0x0, &(0x7f0000000140)="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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)=',\'!%^[(@\xb2-\x00', &(0x7f0000000480)='wlan1\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109027a0002010000090904000001020d000006240600013b052400feff0d240f0103000000000000008106241a00000008241c0300000200072414080009000905810300000000fc0904010000020d00000904010102020d0000090582020800000000090503020000000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=r6, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x1000000, 0x1, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) 1.386573027s ago: executing program 3 (id=9301): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001e00)=""/94, &(0x7f0000000680)=0x5e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="0212000007000000000000000000000005001700000000000a00000000000000fc0200000000000000000000000000000000000000000000a974bd49e6dc89143ee09e30e7acc853a5c051117319683d755a7f51482d7841b025598c8449d4b1a071ef46e62b"], 0x38}}, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0x0, 0x0, 0x70, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a40000005304"], 0xa4}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001800190e00000000000000000a0000000000000000000000060015000000000054f4607204f8a92134829500c52c451fc6a772f3ef1bec585220306d4b40a59d2a38ff4a82e02971ce25139295bfa1a4cf910fa6ec81e3d85d08fdc708ed8547194eb2b7720a08e8bc7bdde707631fbf85e133ca51818506e8956e93f3b0d15007ae50e2653b7efc4a20abcfc0c3e8cfe5bfe29b056325ff5848515a70543736d50c710de67d88f36cd6dd7559f5c6d678a2cdc2"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc150000", @ANYRES16=r8, @ANYBLOB="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"], 0x15fc}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x518, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20040000) r9 = socket(0x15, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) getsockname$netrom(r9, 0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRESOCT=r4], 0x45) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/920], 0x492) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x37, "56a07b68136ebb780605b8830e2a3de0c4383191423c01a6fa9ce2cb0c256e97f29e3db3d81d0417db74dd6a84d515d15056714e5efe1f"}, &(0x7f0000000540)=0x3f) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000001c0)={r10, 0x8, 0x5, [0xfd, 0x6, 0x7, 0xb, 0x5]}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={r11}, &(0x7f0000000380)=0x8) write(r2, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0xffffffffffffffb7) 1.322063739s ago: executing program 2 (id=9302): syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) fcntl$getown(r0, 0x9) statx(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x1000, 0x100, &(0x7f0000002100)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 783.152249ms ago: executing program 0 (id=9303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}}, 0x0) 647.116348ms ago: executing program 2 (id=9304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 434.756477ms ago: executing program 3 (id=9305): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7ef}, 0x9f) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r3, r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = socket$inet6(0xa, 0x2, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000540)={0x2c500, 0x22, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x4e, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe}, {0x0, 0x1}}, {{@in6=@private1}, 0x0, @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}}, 0xe8) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x340, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000085100000c27aef3a6cd306001db218000000fbd189d2f862bcb9d9d1874accb5797a61461712000db11c08543b18ff821ac83ce81b75ca22f52c6a903f58af097609cdeaa10bc374c401ad9cc5b6aa764949e9e085202a4515f4a19fd23ab392e779e459b50c7a33ea1f9aa851af8403c9cc60200b73f80d2e1e8c2e93802196df94c09ae474c190c922d5af9ff06c31faf84f5a1f417d8997de11e2c57a35ad1a510a5a6da76939fd8b8bd24f6aa91214043a18abba23b90b09", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x2}, 0x90) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000040)=[{0x9, 0x7, 0x29, 0x6}, {0x4, 0x3, 0x4, 0x1}, {0x37, 0x3, 0x8}, {0x9, 0x6, 0xef, 0x81}]}, 0x10) unshare(0x8000000) syz_emit_ethernet(0x4e, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600180000fc020000000000000000000000000000fe800000810a000000000000000000aa0002010600000000fc0200"/78], 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 413.105821ms ago: executing program 2 (id=9306): r0 = socket(0x0, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) 403.922242ms ago: executing program 0 (id=9307): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x12062, 0x0) 0s ago: executing program 0 (id=9308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) pipe(0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmdt(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x76) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) kernel console output (not intermixed with test programs): k: 112860 bytes leftover after parsing attributes in process `syz.1.8532'. [ 2276.433964][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 2276.433983][ T29] audit: type=1326 audit(1720164710.214:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2276.552856][ T29] audit: type=1326 audit(1720164710.214:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2276.665844][ T29] audit: type=1326 audit(1720164710.294:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2276.744330][ T29] audit: type=1326 audit(1720164710.294:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2276.832093][ T29] audit: type=1326 audit(1720164710.294:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2276.921934][ T29] audit: type=1326 audit(1720164710.304:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2277.001152][ T29] audit: type=1326 audit(1720164710.304:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2277.079749][ T29] audit: type=1326 audit(1720164710.314:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2277.218857][ T29] audit: type=1326 audit(1720164710.314:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2277.297986][T31879] openvswitch: netlink: Key type 527 is out of range max 32 [ 2277.331561][ T29] audit: type=1326 audit(1720164710.314:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31872 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2277.432848][T26558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2277.458119][T26558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2277.481103][T26558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2277.494790][T26558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2277.503265][T26558] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2277.514552][T26558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2277.774025][T31696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2277.822139][T31696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2277.864762][T31696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2278.133168][ T9965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.220285][T31696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2278.490951][ T9965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.769812][ T9965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.971643][ T9965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.608226][T21964] Bluetooth: hci0: command tx timeout [ 2279.744574][ T9965] bridge_slave_1: left allmulticast mode [ 2279.767933][ T9965] bridge_slave_1: left promiscuous mode [ 2279.773899][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.803552][ T9965] bridge_slave_0: left allmulticast mode [ 2279.820954][ T9965] bridge_slave_0: left promiscuous mode [ 2279.828239][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.981223][ T9965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.001514][ T9965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.015582][ T9965] bond0 (unregistering): Released all slaves [ 2281.046309][T31918] netlink: 'syz.1.8549': attribute type 21 has an invalid length. [ 2281.054485][T31918] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8549'. [ 2281.063789][T31918] netlink: 'syz.1.8549': attribute type 5 has an invalid length. [ 2281.088631][T31918] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8549'. [ 2281.203807][T31928] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8552'. [ 2281.510343][T31938] openvswitch: netlink: Key type 527 is out of range max 32 [ 2281.690456][T21964] Bluetooth: hci0: command tx timeout [ 2281.796549][T31696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2281.920972][T31696] 8021q: adding VLAN 0 to HW filter on device team0 [ 2282.001191][T25054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.008586][T25054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2282.156438][T25054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.163998][T25054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2282.217031][T31884] chnl_net:caif_netlink_parms(): no params data found [ 2282.859735][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 2282.859762][ T29] audit: type=1800 audit(1720164716.664:2570): pid=31948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8558" name="file1" dev="overlay" ino=948 res=0 errno=0 [ 2282.931906][ T9965] hsr_slave_0: left promiscuous mode [ 2282.982550][ T9965] hsr_slave_1: left promiscuous mode [ 2282.989390][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2282.989505][ T9965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2282.996245][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2282.996323][ T9965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2283.126744][ T9965] veth1_macvtap: left promiscuous mode [ 2283.126934][ T9965] veth0_macvtap: left promiscuous mode [ 2283.127423][ T9965] veth1_vlan: left promiscuous mode [ 2283.144062][ T9965] veth0_vlan: left promiscuous mode [ 2283.771726][T21964] Bluetooth: hci0: command tx timeout [ 2284.167997][T25054] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2284.424399][T25054] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2284.445520][T25054] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2284.487898][T25054] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2284.507957][T25054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2284.533573][T25054] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2284.555091][T25054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.593530][T25054] usb 2-1: Product: చ [ 2284.606435][T25054] usb 2-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2285.557044][ T9965] team0 (unregistering): Port device team_slave_1 removed [ 2285.655127][ T9965] team0 (unregistering): Port device team_slave_0 removed [ 2285.811721][T31967] syz.2.8563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2285.856100][T21964] Bluetooth: hci0: command tx timeout [ 2287.055602][T25054] usb 2-1: 0:2 : does not exist [ 2287.079951][T25054] usb 2-1: USB disconnect, device number 50 [ 2287.403096][T31977] openvswitch: netlink: Key type 527 is out of range max 32 [ 2287.502662][T31884] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.519248][T31884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.526748][T31884] bridge_slave_0: entered allmulticast mode [ 2287.567443][T31884] bridge_slave_0: entered promiscuous mode [ 2287.657502][T31884] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.676717][T31884] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.713271][T31884] bridge_slave_1: entered allmulticast mode [ 2287.753605][T31884] bridge_slave_1: entered promiscuous mode [ 2287.975426][T31884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2288.070559][T31884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2288.444614][T31884] team0: Port device team_slave_0 added [ 2288.530388][T31884] team0: Port device team_slave_1 added [ 2288.673143][T31986] syz2: rxe_newlink: already configured on team_slave_1 [ 2288.737248][T31986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8568'. [ 2288.798956][T31884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2288.809231][T31884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.839315][T31884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2288.857052][T31990] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 2288.884786][ T29] audit: type=1326 audit(1720164722.684:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31985 comm="syz.1.8568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2288.923555][T31884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2288.933327][T31884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.962077][T31884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.986564][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.994252][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.085654][T31696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2289.246267][T31884] hsr_slave_0: entered promiscuous mode [ 2289.267534][T31884] hsr_slave_1: entered promiscuous mode [ 2289.279398][T31884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2289.303299][T31884] Cannot create hsr debugfs directory [ 2289.942683][T31696] veth0_vlan: entered promiscuous mode [ 2290.068415][T31696] veth1_vlan: entered promiscuous mode [ 2290.865953][T31696] veth0_macvtap: entered promiscuous mode [ 2290.895492][T31696] veth1_macvtap: entered promiscuous mode [ 2291.013697][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.045485][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.056515][ T5140] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2291.077780][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.104491][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.132726][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.150028][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.170228][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.183225][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.193396][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.203965][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.236971][T31696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.274661][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.277131][ T5140] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2291.307246][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.318001][ T5140] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2291.330398][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.345362][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.347231][ T5140] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2291.355662][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.387984][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.390202][ T5140] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2291.402389][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.422738][ T5140] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2291.429921][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.432524][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.459715][T31696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.464469][ T5140] usb 1-1: Product: చ [ 2291.479145][T31696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.485146][ T5140] usb 1-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2291.502172][T31696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.672914][T31696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.702891][T31696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.714594][T31696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.724160][T31696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.911711][ T5140] usb 1-1: 0:2 : does not exist [ 2291.953974][ T5140] usb 1-1: USB disconnect, device number 41 [ 2292.278413][T17905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.328139][T17905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2293.119171][T17905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2293.180326][T17905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2293.491803][T31884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2293.550925][T31884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2293.733441][T31884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2294.118914][T31884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2294.595886][T32022] syz2: rxe_newlink: already configured on team_slave_1 [ 2294.639625][T32022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8578'. [ 2294.718763][T32024] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 2294.799447][ T29] audit: type=1326 audit(1720164728.604:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.1.8578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2295.083753][T31884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2297.776482][T31884] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.842673][T25054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.850044][T25054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.938546][T25054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.945897][T25054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.040461][T31884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2299.059266][T31884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2300.625756][T31884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2301.039107][ T29] audit: type=1400 audit(1720164734.844:2573): avc: denied { ioctl } for pid=32072 comm="syz.3.8591" path="socket:[135837]" dev="sockfs" ino=135837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2302.314096][T32089] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 2302.346320][T31884] veth0_vlan: entered promiscuous mode [ 2302.370358][T32089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8594'. [ 2302.420822][T32089] sch_tbf: burst 88 is lower than device bridge_slave_1 mtu (1514) ! [ 2302.531003][T31884] veth1_vlan: entered promiscuous mode [ 2302.601230][ T29] audit: type=1326 audit(1720164736.394:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.3.8594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x0 [ 2302.715174][T31884] veth0_macvtap: entered promiscuous mode [ 2302.762038][T31884] veth1_macvtap: entered promiscuous mode [ 2302.834700][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.861611][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.891351][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.917936][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.941146][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.967798][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.987826][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2303.010536][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.031533][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2303.065532][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.090577][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2303.112608][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.133492][T31884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2303.171500][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.209158][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.240562][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.301548][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.338345][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.361195][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.385422][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.411596][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.433959][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.455164][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.475976][T31884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2303.516840][T31884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2303.545950][T31884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2303.677396][T31884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.739553][T31884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.783175][T31884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.811253][T32105] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8600'. [ 2304.238683][T32105] netlink: 'syz.0.8600': attribute type 1 has an invalid length. [ 2304.268472][T31884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.551186][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.577845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.356501][T17905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.396394][T17905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.545868][T32133] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 2307.633429][T32133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8606'. [ 2307.652877][T32133] sch_tbf: burst 88 is lower than device xfrm0 mtu (1500) ! [ 2307.930831][ T29] audit: type=1326 audit(1720164741.694:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32132 comm="syz.3.8606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x0 [ 2308.257187][T32131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2309.545411][T32167] bond0: entered promiscuous mode [ 2309.572449][T32167] bond_slave_0: entered promiscuous mode [ 2309.589506][T32167] bond_slave_1: entered promiscuous mode [ 2309.885870][T32171] delete_channel: no stack [ 2309.993919][T32170] tipc: Failed to obtain node identity [ 2310.027873][T32170] tipc: Enabling of bearer rejected, failed to enable media [ 2310.354035][T32166] bond0: left promiscuous mode [ 2310.398795][T32166] bond_slave_0: left promiscuous mode [ 2310.461930][T32166] bond_slave_1: left promiscuous mode [ 2310.903301][T32178] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 2310.915538][T32178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8621'. [ 2314.107074][T32179] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 2315.472836][ T29] audit: type=1326 audit(1720164749.274:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2315.574960][ T29] audit: type=1326 audit(1720164749.274:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2315.674830][ T29] audit: type=1326 audit(1720164749.294:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2315.795848][ T29] audit: type=1326 audit(1720164749.304:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2315.903215][ T29] audit: type=1326 audit(1720164749.304:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2315.984213][ T29] audit: type=1326 audit(1720164749.314:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2316.037278][ T29] audit: type=1326 audit(1720164749.314:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2316.079809][ T29] audit: type=1326 audit(1720164749.314:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2316.112659][ T29] audit: type=1326 audit(1720164749.314:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2316.142767][ T29] audit: type=1326 audit(1720164749.314:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32211 comm="syz.3.8629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2320.924981][T32229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2324.196643][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 2324.196669][ T29] audit: type=1326 audit(1720164757.984:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.233641][ T29] audit: type=1326 audit(1720164757.984:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.318246][ T29] audit: type=1326 audit(1720164757.984:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.405131][ T29] audit: type=1326 audit(1720164757.984:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.569700][ T29] audit: type=1326 audit(1720164757.994:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.747994][ T29] audit: type=1326 audit(1720164757.994:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.880035][ T29] audit: type=1326 audit(1720164757.994:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2324.997774][ T29] audit: type=1326 audit(1720164757.994:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2325.264037][ T29] audit: type=1326 audit(1720164757.994:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2325.383893][ T29] audit: type=1326 audit(1720164757.994:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32260 comm="syz.2.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x7ffc0000 [ 2325.604660][T32277] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2327.455407][T32287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2328.795959][T21964] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 2328.819545][T21964] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 2329.747215][T32336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8665'. [ 2330.499060][T32334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2330.979177][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 2330.979202][ T29] audit: type=1800 audit(1720164764.784:2752): pid=32364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.8674" name="file1" dev="overlay" ino=4272 res=0 errno=0 [ 2331.768087][T16664] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2331.966190][T16664] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2332.059798][T16664] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2332.098314][T16664] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2332.154979][T16664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.342212][T21964] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 2332.377100][T21964] Bluetooth: hci6: SCO packet for unknown connection handle 1039 [ 2333.112774][T32383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8680'. [ 2333.130222][T21964] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2333.142189][T21964] Bluetooth: hci6: Injecting HCI hardware error event [ 2333.153406][T21964] Bluetooth: hci6: hardware error 0x00 [ 2333.735746][T16664] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 2333.774459][T16664] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input92 [ 2333.819879][T16664] input: failed to attach handler kbd to device input92, error: -5 [ 2333.902763][T16664] usb 3-1: USB disconnect, device number 29 [ 2334.093516][ T29] audit: type=1326 audit(1720164767.884:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.8682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9b575bd9 code=0x0 [ 2334.116557][ C1] vkms_vblank_simulate: vblank timer overrun [ 2334.337806][T25053] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2334.537939][T25053] usb 1-1: Using ep0 maxpacket: 32 [ 2334.553050][T25053] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2334.564451][T25053] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2334.574875][T25053] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2334.585200][T25053] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2334.601565][T25053] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2334.610908][T25053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.146322][T25053] ntrig 0003:1B96:000A.0023: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 2335.347056][T25053] usb 1-1: USB disconnect, device number 42 [ 2335.446891][ T29] audit: type=1326 audit(1720164769.244:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.3.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2335.472500][T21964] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2335.524214][ T29] audit: type=1326 audit(1720164769.274:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.3.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2335.567770][ T29] audit: type=1326 audit(1720164769.284:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.3.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2335.602018][ T29] audit: type=1326 audit(1720164769.284:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.3.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2335.635371][ T29] audit: type=1326 audit(1720164769.284:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32416 comm="syz.3.8691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x7ffc0000 [ 2335.753085][T32419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8692'. [ 2337.689611][T32436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8699'. [ 2340.598897][T32467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8704'. [ 2341.279413][ T29] audit: type=1326 audit(1720164775.074:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.1.8707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2341.451742][ T29] audit: type=1326 audit(1720164775.184:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.1.8707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2341.532289][ T29] audit: type=1400 audit(1720164775.124:2760): avc: denied { ioctl } for pid=32479 comm="syz.2.8710" path="/213/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2342.045799][T32488] openvswitch: netlink: Key type 3087 is out of range max 32 [ 2343.271081][T32494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2343.822264][T32520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8718'. [ 2344.047093][ T29] audit: type=1326 audit(1720164777.844:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32521 comm="syz.3.8723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x0 [ 2344.151035][ T29] audit: type=1326 audit(1720164777.944:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32521 comm="syz.3.8723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f619cd75bd9 code=0x0 [ 2344.174166][ C0] vkms_vblank_simulate: vblank timer overrun [ 2347.358513][T32555] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 2348.630746][T32579] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2348.637342][T32579] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2348.725159][T32579] vhci_hcd vhci_hcd.0: Device attached [ 2348.988993][T25027] usb 9-1: new high-speed USB device number 16 using vhci_hcd [ 2350.270441][ T29] audit: type=1326 audit(1720164784.074:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.1.8738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2350.293619][ C0] vkms_vblank_simulate: vblank timer overrun [ 2350.365962][ T29] audit: type=1326 audit(1720164784.164:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32592 comm="syz.1.8738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1175bd9 code=0x0 [ 2350.438070][ T5140] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2350.439195][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.460408][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.659910][T32618] openvswitch: netlink: Key type 3087 is out of range max 32 [ 2350.974418][ T5140] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.984957][ T5140] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2350.994431][ T5140] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 2351.004598][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.759747][ T5140] usb 1-1: config 0 descriptor?? [ 2351.861485][ T5140] usb 1-1: can't set config #0, error -71 [ 2351.886653][T32580] vhci_hcd: connection reset by peer [ 2351.910249][T17905] vhci_hcd: stop threads [ 2351.914571][T17905] vhci_hcd: release socket [ 2351.926294][ T5140] usb 1-1: USB disconnect, device number 43 [ 2351.934059][T17905] vhci_hcd: disconnect device [ 2353.313445][T32651] openvswitch: netlink: Key type 3087 is out of range max 32 [ 2354.483348][T26558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2354.495851][T26558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2354.507273][T26558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2354.519677][T26558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2354.529262][T26558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2354.537161][T26558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2354.808210][T32667] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2354.814803][T32667] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2354.827881][T25027] vhci_hcd: vhci_device speed not set [ 2354.862955][T32667] vhci_hcd vhci_hcd.0: Device attached [ 2355.168235][ T46] usb 17-1: new high-speed USB device number 13 using vhci_hcd [ 2355.473127][ T9937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.977929][T30507] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2356.502149][T30507] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2356.526298][T30507] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2356.569683][T30507] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 2356.597975][T30507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.611483][ T9937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2356.631858][T30507] usb 5-1: config 0 descriptor?? [ 2356.654201][T26558] Bluetooth: hci1: command tx timeout [ 2358.139836][T32668] vhci_hcd: connection reset by peer [ 2358.150407][T25028] usb 5-1: USB disconnect, device number 27 [ 2358.157183][T17905] vhci_hcd: stop threads [ 2358.163774][T17905] vhci_hcd: release socket [ 2358.174012][T17905] vhci_hcd: disconnect device [ 2358.223489][ T9937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2358.729355][T26558] Bluetooth: hci1: command tx timeout [ 2359.597106][ T9937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2360.477907][ T46] vhci_hcd: vhci_device speed not set [ 2360.785713][ T9937] bridge_slave_1: left allmulticast mode [ 2360.871838][T26558] Bluetooth: hci1: command tx timeout [ 2360.997165][ T9937] bridge_slave_1: left promiscuous mode [ 2361.024634][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.099688][ T9937] bridge_slave_0: left allmulticast mode [ 2361.109072][ T9937] bridge_slave_0: left promiscuous mode [ 2361.138581][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2362.887977][T26558] Bluetooth: hci1: command tx timeout [ 2364.342656][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2364.370794][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2364.395104][ T9937] bond0 (unregistering): Released all slaves [ 2365.017719][T16664] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2365.248077][T16664] usb 2-1: Using ep0 maxpacket: 32 [ 2365.284294][T16664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2365.336803][T16664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.402692][T16664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2365.462760][T16664] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2365.563145][T16664] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2365.791667][T16664] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2365.823659][T16664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2365.918545][T16664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.926735][T16664] usb 2-1: Product: syz [ 2366.627622][T16664] usb 2-1: Manufacturer: syz [ 2366.632283][T16664] usb 2-1: SerialNumber: syz [ 2366.662246][T32663] chnl_net:caif_netlink_parms(): no params data found [ 2367.755553][T16664] cdc_ncm 2-1:1.0: bind() failure [ 2367.787347][T16664] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2367.807895][T16664] cdc_ncm 2-1:1.1: bind() failure [ 2367.898832][T16664] usb 2-1: USB disconnect, device number 51 [ 2368.354552][ T324] cgroup: No subsys list or none specified [ 2368.515195][ T9937] hsr_slave_0: left promiscuous mode [ 2368.540623][ T9937] hsr_slave_1: left promiscuous mode [ 2368.578663][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2368.589919][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2368.693967][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2368.708306][ T29] audit: type=1400 audit(1720164802.504:2766): avc: denied { lock } for pid=329 comm="syz.4.8800" path="socket:[139352]" dev="sockfs" ino=139352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2368.748090][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2368.978439][ T9937] veth1_macvtap: left promiscuous mode [ 2369.005135][ T9937] veth0_macvtap: left promiscuous mode [ 2369.019221][ T9937] veth1_vlan: left promiscuous mode [ 2369.034952][ T9937] veth0_vlan: left promiscuous mode [ 2373.221803][ T362] xt_NFQUEUE: number of total queues is 0 [ 2374.347953][ T370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8814'. [ 2374.367040][ T370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8814'. [ 2376.107213][ T9937] team0 (unregistering): Port device team_slave_1 removed [ 2376.646219][ T9937] team0 (unregistering): Port device team_slave_0 removed [ 2380.623395][T21964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2380.674171][T21964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2380.695862][T21964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2380.705671][T21964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2380.735480][T21964] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2380.748402][T21964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2381.290551][ T396] netlink: 'syz.4.8821': attribute type 1 has an invalid length. [ 2381.309057][T32663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2381.316513][T32663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.333343][T32663] bridge_slave_0: entered allmulticast mode [ 2381.366815][T32663] bridge_slave_0: entered promiscuous mode [ 2381.420587][T32663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2381.470119][T32663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2381.488493][T32663] bridge_slave_1: entered allmulticast mode [ 2381.522203][T32663] bridge_slave_1: entered promiscuous mode [ 2382.512821][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8826'. [ 2382.567291][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8826'. [ 2382.694714][T32663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2382.774887][T32663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2382.891337][T21964] Bluetooth: hci5: command tx timeout [ 2384.989045][T21964] Bluetooth: hci5: command tx timeout [ 2385.752104][T32663] team0: Port device team_slave_0 added [ 2385.839867][T32663] team0: Port device team_slave_1 added [ 2386.985808][T32663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2387.010128][T32663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2387.057732][T21964] Bluetooth: hci5: command tx timeout [ 2387.108589][T32663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2387.190307][T32663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2387.228751][T32663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2387.321378][T32663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2387.645389][ T9937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.875124][ T9937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2389.038426][ T29] audit: type=1107 audit(1720164822.844:2767): pid=450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2389.127937][T21964] Bluetooth: hci5: command tx timeout [ 2389.221892][ T457] openvswitch: netlink: Key type 527 is out of range max 32 [ 2389.260739][ T9937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2389.607382][ T456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2389.651174][T32663] hsr_slave_0: entered promiscuous mode [ 2389.681887][T32663] hsr_slave_1: entered promiscuous mode [ 2389.711547][T32663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2389.739975][T32663] Cannot create hsr debugfs directory [ 2389.877345][ T9937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.136036][ T393] chnl_net:caif_netlink_parms(): no params data found [ 2391.390479][ T9937] bridge_slave_1: left allmulticast mode [ 2391.396448][ T9937] bridge_slave_1: left promiscuous mode [ 2391.403256][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.439242][ T9937] bridge_slave_0: left allmulticast mode [ 2391.458762][ T9937] bridge_slave_0: left promiscuous mode [ 2391.464700][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.844723][ T494] 9pnet_fd: Insufficient options for proto=fd [ 2392.857873][ T29] audit: type=1107 audit(1720164826.654:2768): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2392.883119][ T494] 9pnet_fd: Insufficient options for proto=fd [ 2393.140992][ T9937] dvmrp1 (unregistering): left allmulticast mode [ 2393.703876][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2393.726131][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2393.742871][ T9937] bond0 (unregistering): Released all slaves [ 2394.088700][ T504] openvswitch: netlink: Key type 527 is out of range max 32 [ 2394.532737][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.547927][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 2394.568161][ T393] bridge_slave_0: entered allmulticast mode [ 2394.577446][ T393] bridge_slave_0: entered promiscuous mode [ 2394.601658][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.629446][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2394.636849][ T393] bridge_slave_1: entered allmulticast mode [ 2394.664925][ T393] bridge_slave_1: entered promiscuous mode [ 2395.000086][ T393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2395.051922][ T521] bond0: entered promiscuous mode [ 2395.082550][ T521] bond_slave_0: entered promiscuous mode [ 2395.115633][ T521] bond_slave_1: entered promiscuous mode [ 2395.180546][ T393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2395.508177][ T521] tipc: Failed to obtain node identity [ 2395.513791][ T521] tipc: Enabling of bearer rejected, failed to enable media [ 2396.015555][ T520] bond0: left promiscuous mode [ 2396.028647][ T520] bond_slave_0: left promiscuous mode [ 2396.034386][ T520] bond_slave_1: left promiscuous mode [ 2396.163097][ T9937] hsr_slave_0: left promiscuous mode [ 2396.189699][ T9937] hsr_slave_1: left promiscuous mode [ 2396.237216][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2396.270813][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2396.306808][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2396.541018][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2396.859591][ T9937] veth1_macvtap: left promiscuous mode [ 2396.865349][ T9937] veth0_macvtap: left promiscuous mode [ 2397.428263][ T9937] veth1_vlan: left promiscuous mode [ 2397.433556][ T9937] veth0_vlan: left promiscuous mode [ 2397.803166][ T9937] infiniband syz2: set down [ 2397.866681][ T29] audit: type=1107 audit(1720164831.664:2769): pid=543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2399.393980][ T9937] team0 (unregistering): Port device team_slave_1 removed [ 2399.437371][T29366] smc: removing ib device syz2 [ 2399.489505][ T9937] team0 (unregistering): Port device team_slave_0 removed [ 2400.286068][ T393] team0: Port device team_slave_0 added [ 2400.377464][ T393] team0: Port device team_slave_1 added [ 2400.731755][T32663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2400.844667][T32663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2400.933797][ T563] bond0: entered promiscuous mode [ 2400.956493][ T563] bond_slave_0: entered promiscuous mode [ 2401.008986][ T563] bond_slave_1: entered promiscuous mode [ 2401.182169][ T393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2401.191397][ T393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2401.217417][ C1] vkms_vblank_simulate: vblank timer overrun [ 2401.299928][ T393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2401.372298][T32663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2401.440698][T32663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2401.504324][ T393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2401.548944][ T393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2401.717107][ T393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2401.877629][ T561] bond0: left promiscuous mode [ 2401.979417][ T561] bond_slave_0: left promiscuous mode [ 2402.168190][ T561] bond_slave_1: left promiscuous mode [ 2403.702598][T26558] Bluetooth: hci0: command 0x0406 tx timeout [ 2405.214979][ T393] hsr_slave_0: entered promiscuous mode [ 2405.253184][ T393] hsr_slave_1: entered promiscuous mode [ 2405.384717][ T393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2405.395207][ T393] Cannot create hsr debugfs directory [ 2408.963361][T32663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2409.125968][T32663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2409.232806][T25029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2409.240225][T25029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2409.338098][ T624] batadv0: entered promiscuous mode [ 2409.344623][ T624] vlan2: entered promiscuous mode [ 2409.350421][ T624] vlan2: entered allmulticast mode [ 2409.355802][ T624] batadv0: entered allmulticast mode [ 2409.441945][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2409.449285][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2410.003152][T32663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2410.025317][ T393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2410.053360][ T393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2410.105680][ T393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2410.172086][ T393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2412.792331][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2412.798873][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2414.219903][ T654] fuse: Bad value for 'fd' [ 2414.455456][ T393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2414.616674][ T393] 8021q: adding VLAN 0 to HW filter on device team0 [ 2415.755931][T25054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.763415][T25054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2415.899709][T25055] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.907065][T25055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2416.201108][ T393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2416.228092][T26558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2416.243591][T26558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2416.253126][T26558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2416.258807][ T393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2416.285342][T26558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2416.299867][T26558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2416.308485][T26558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2416.515696][ T29] audit: type=1800 audit(1720164850.314:2770): pid=680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8901" name="file1" dev="overlay" ino=1459 res=0 errno=0 [ 2420.451739][T26558] Bluetooth: hci2: command tx timeout [ 2421.129168][ T695] fuse: Bad value for 'fd' [ 2422.488247][T26558] Bluetooth: hci2: command tx timeout [ 2422.688168][ T29] audit: type=1800 audit(1720164856.484:2771): pid=716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8911" name="file1" dev="overlay" ino=436 res=0 errno=0 [ 2423.334886][ T393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2423.777747][T25053] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2423.846972][ T672] chnl_net:caif_netlink_parms(): no params data found [ 2424.008314][T25053] usb 3-1: Using ep0 maxpacket: 32 [ 2424.060469][T25053] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2424.195249][T25053] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2424.260015][T25053] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2424.287800][T25053] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2424.317740][T25053] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2424.336616][T25053] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2424.491971][T25053] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2424.563813][T25053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.578811][T26558] Bluetooth: hci2: command tx timeout [ 2424.618261][T25053] usb 3-1: Product: syz [ 2424.632040][T25053] usb 3-1: Manufacturer: syz [ 2424.644941][T25053] usb 3-1: SerialNumber: syz [ 2424.725298][T17905] bridge_slave_1: left allmulticast mode [ 2424.858940][T17905] bridge_slave_1: left promiscuous mode [ 2424.877158][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2424.970946][T17905] bridge_slave_0: left allmulticast mode [ 2425.008881][T17905] bridge_slave_0: left promiscuous mode [ 2425.044264][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2425.131892][ T737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2425.212820][ T737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2425.973504][ T29] audit: type=1400 audit(1720164859.774:2772): avc: denied { setopt } for pid=743 comm="syz.4.8919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2426.648100][T26558] Bluetooth: hci2: command tx timeout [ 2429.727845][T25053] cdc_ncm 3-1:1.0: bind() failure [ 2429.749708][T25053] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2429.756725][T25053] cdc_ncm 3-1:1.1: bind() failure [ 2429.874873][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2429.968497][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2430.041723][T17905] bond0 (unregistering): Released all slaves [ 2430.228734][T21964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2430.245162][T21964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2430.255675][T21964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2430.271120][T21964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2430.317723][T21964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2430.330335][T21964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2430.448220][T25054] usb 3-1: USB disconnect, device number 30 [ 2430.455269][ T763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8923'. [ 2430.528000][ T763] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8923'. [ 2430.717225][ T767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2430.768257][ T767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2430.816775][ T767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2430.827766][T17905] hsr_slave_0: left promiscuous mode [ 2430.869699][T17905] hsr_slave_1: left promiscuous mode [ 2430.878207][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2430.886532][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2431.479111][ T773] 9pnet_fd: Insufficient options for proto=fd [ 2431.502253][ T773] 9pnet_fd: Insufficient options for proto=fd [ 2431.644825][T17905] team0 (unregistering): Port device team_slave_1 removed [ 2431.763051][T17905] team0 (unregistering): Port device team_slave_0 removed [ 2432.410999][T21964] Bluetooth: hci1: command tx timeout [ 2433.036824][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.059539][ T672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.073541][ T672] bridge_slave_0: entered allmulticast mode [ 2433.105806][ T672] bridge_slave_0: entered promiscuous mode [ 2433.174451][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.195274][ T672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.210609][ T672] bridge_slave_1: entered allmulticast mode [ 2433.219662][ T672] bridge_slave_1: entered promiscuous mode [ 2433.259884][ T393] veth0_vlan: entered promiscuous mode [ 2433.461452][ T672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.510515][ T393] veth1_vlan: entered promiscuous mode [ 2433.540279][ T672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.939408][ T672] team0: Port device team_slave_0 added [ 2435.172452][T21964] Bluetooth: hci1: command tx timeout [ 2435.559601][ T672] team0: Port device team_slave_1 added [ 2437.507874][T21964] Bluetooth: hci1: command tx timeout [ 2437.573964][T17905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2437.586645][ T1087] kworker/u8:6 (1087) used greatest stack depth: 20560 bytes left [ 2437.976636][T17905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.026045][ T672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2438.051270][ T672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.133132][ T672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2438.165220][ T672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2438.184274][ T672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.242657][ T672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2438.492283][T17905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.821246][T17905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.024197][ T757] chnl_net:caif_netlink_parms(): no params data found [ 2439.102602][ T672] hsr_slave_0: entered promiscuous mode [ 2439.142351][ T672] hsr_slave_1: entered promiscuous mode [ 2439.167881][ T672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2439.176137][ T672] Cannot create hsr debugfs directory [ 2439.212592][T26558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2439.229299][T26558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2439.238589][T26558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2439.250590][T26558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2439.259510][T26558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2439.270580][T26558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2439.555848][T21964] Bluetooth: hci1: command tx timeout [ 2441.396085][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.450449][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.484015][ T757] bridge_slave_0: entered allmulticast mode [ 2441.490284][T21964] Bluetooth: hci5: command tx timeout [ 2441.517817][ T757] bridge_slave_0: entered promiscuous mode [ 2441.536123][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.552656][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.572576][ T757] bridge_slave_1: entered allmulticast mode [ 2441.590509][ T757] bridge_slave_1: entered promiscuous mode [ 2441.922906][ T757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2441.953918][ T757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2441.977889][T17905] bridge_slave_1: left allmulticast mode [ 2441.983609][T17905] bridge_slave_1: left promiscuous mode [ 2441.997984][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.022537][T17905] bridge_slave_0: left allmulticast mode [ 2442.037599][T17905] bridge_slave_0: left promiscuous mode [ 2442.043462][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.982093][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2443.004421][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2443.021107][T17905] bond0 (unregistering): Released all slaves [ 2443.257045][ T757] team0: Port device team_slave_0 added [ 2443.390451][ T757] team0: Port device team_slave_1 added [ 2443.527993][T21964] Bluetooth: hci5: command tx timeout [ 2443.702514][ T757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2443.724744][ T757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.763509][ T757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2443.832546][ T757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2443.848208][ T757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.878182][ T757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2444.479065][T17905] hsr_slave_0: left promiscuous mode [ 2444.491234][T17905] hsr_slave_1: left promiscuous mode [ 2444.513398][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2444.528307][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2444.547391][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2444.566113][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2444.649960][T17905] veth1_macvtap: left promiscuous mode [ 2444.655615][T17905] veth0_macvtap: left promiscuous mode [ 2444.676162][T17905] veth1_vlan: left promiscuous mode [ 2444.682080][T17905] veth0_vlan: left promiscuous mode [ 2445.607678][T21964] Bluetooth: hci5: command tx timeout [ 2447.226135][T17905] team0 (unregistering): Port device team_slave_1 removed [ 2447.301939][T17905] team0 (unregistering): Port device team_slave_0 removed [ 2447.695177][T21964] Bluetooth: hci5: command tx timeout [ 2448.448987][ T899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.545857][ T896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.624935][ T896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.709303][ T757] hsr_slave_0: entered promiscuous mode [ 2448.728454][ T757] hsr_slave_1: entered promiscuous mode [ 2448.740461][ T757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2448.757355][ T757] Cannot create hsr debugfs directory [ 2449.576886][ T817] chnl_net:caif_netlink_parms(): no params data found [ 2450.292354][ T914] vlan3: entered promiscuous mode [ 2450.323393][ T914] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2450.367635][ T914] vlan3: entered allmulticast mode [ 2450.397469][ T914] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2451.044324][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.060616][ T817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2451.074204][ T817] bridge_slave_0: entered allmulticast mode [ 2451.085370][ T817] bridge_slave_0: entered promiscuous mode [ 2451.118057][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2451.125317][ T817] bridge0: port 2(bridge_slave_1) entered disabled state [ 2451.158133][ T817] bridge_slave_1: entered allmulticast mode [ 2451.178579][ T817] bridge_slave_1: entered promiscuous mode [ 2451.514376][ T817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2451.705576][ T672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2451.743989][ T672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2451.776453][ T817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2452.218419][ T672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2452.269536][ T672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2452.635334][ T29] audit: type=1800 audit(1720164886.434:2773): pid=939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8965" name="file1" dev="overlay" ino=1609 res=0 errno=0 [ 2454.002934][ T817] team0: Port device team_slave_0 added [ 2454.063905][ T817] team0: Port device team_slave_1 added [ 2454.260051][ T817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2454.277734][ T817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2454.324849][ T817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2454.387170][ T817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2454.409250][ T817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2454.448527][ T817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2454.903091][ T817] hsr_slave_0: entered promiscuous mode [ 2454.929896][ T817] hsr_slave_1: entered promiscuous mode [ 2454.971651][ T817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2454.981038][ T817] Cannot create hsr debugfs directory [ 2455.014706][T17905] bridge_slave_1: left allmulticast mode [ 2455.021190][T17905] bridge_slave_1: left promiscuous mode [ 2455.033367][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2455.057300][T17905] bridge_slave_0: left allmulticast mode [ 2455.063394][T17905] bridge_slave_0: left promiscuous mode [ 2455.081309][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.893048][ T29] audit: type=1800 audit(1720164893.684:2774): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8977" name="file1" dev="overlay" ino=1648 res=0 errno=0 [ 2460.351322][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2460.356343][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2460.373016][T17905] bond0 (unregistering): Released all slaves [ 2461.682559][T17905] hsr_slave_0: left promiscuous mode [ 2461.710141][T17905] hsr_slave_1: left promiscuous mode [ 2461.716881][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2461.742653][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2461.800661][T17905] veth1_vlan: left promiscuous mode [ 2461.806189][T17905] veth0_vlan: left promiscuous mode [ 2463.488139][T17905] team0 (unregistering): Port device team_slave_1 removed [ 2463.572996][T17905] team0 (unregistering): Port device team_slave_0 removed [ 2464.552511][ T757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2464.665114][ T757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2464.689495][ T757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2465.391588][ T757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2466.901698][ T29] audit: type=1800 audit(1720164900.704:2775): pid=1043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8990" name="file1" dev="overlay" ino=1677 res=0 errno=0 [ 2466.946973][ T672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2467.016450][ T757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2467.256102][ T757] 8021q: adding VLAN 0 to HW filter on device team0 [ 2467.293099][ T672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2467.412790][T25029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.420102][T25029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.473270][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.480604][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2467.516050][T25029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.523401][T25029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.673523][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.680844][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2467.993612][ T817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2468.012325][ T817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2468.045704][ T817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2468.059569][ T817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2469.572930][ T817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2469.614828][ T817] 8021q: adding VLAN 0 to HW filter on device team0 [ 2469.643750][T25054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.651117][T25054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2469.880426][T16664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2469.887743][T16664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2471.182357][ T757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2471.216551][ T672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2471.645512][ T672] veth0_vlan: entered promiscuous mode [ 2471.709567][ T672] veth1_vlan: entered promiscuous mode [ 2471.742648][ T757] veth0_vlan: entered promiscuous mode [ 2471.782483][ T757] veth1_vlan: entered promiscuous mode [ 2471.864890][ T672] veth0_macvtap: entered promiscuous mode [ 2471.907447][ T672] veth1_macvtap: entered promiscuous mode [ 2472.143237][ T757] veth0_macvtap: entered promiscuous mode [ 2472.206392][ T757] veth1_macvtap: entered promiscuous mode [ 2472.241083][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.241117][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.241136][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.241154][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.241168][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.241185][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.241199][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.241217][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.243329][ T672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2472.293081][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.293107][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.293122][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.293140][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.293154][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.293172][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.293186][ T672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.293204][ T672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.295815][ T672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2472.304302][ T672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.304364][ T672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.304417][ T672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.304471][ T672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.324448][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.324472][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.324486][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.324504][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.324519][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.324536][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.324550][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.324567][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.324581][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2472.324599][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.326681][ T757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2472.404712][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.404761][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.404781][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.404807][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.404826][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.404851][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.404871][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.404896][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.404916][ T757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2472.404941][ T757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2472.407441][ T757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2472.464624][ T757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.464671][ T757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.464709][ T757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.464748][ T757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2472.781993][ T817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2473.007841][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.007873][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.203062][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.203094][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.314700][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.314801][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2473.508681][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.508713][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.712507][ T29] audit: type=1326 audit(1720164907.514:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1104 comm="syz.0.8754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370ab75bd9 code=0x0 [ 2473.760631][ T817] veth0_vlan: entered promiscuous mode [ 2473.767212][ T9937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2473.767244][ T9937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2473.805432][ T29] audit: type=1326 audit(1720164907.604:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1104 comm="syz.0.8754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370ab75bd9 code=0x0 [ 2473.824513][ T817] veth1_vlan: entered promiscuous mode [ 2474.034710][ T817] veth0_macvtap: entered promiscuous mode [ 2474.066893][ T817] veth1_macvtap: entered promiscuous mode [ 2474.200379][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200413][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.200432][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200455][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.200473][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200496][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.200513][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200536][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.200554][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200577][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.200595][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2474.200619][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.203825][ T817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2474.229548][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.229602][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.229630][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.229680][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.229707][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.229761][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.229788][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.229854][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.229882][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.229937][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.229964][ T817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2474.230013][ T817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2474.237352][ T817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2475.157446][ T817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.158977][ T817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.159034][ T817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.159087][ T817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.971938][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2476.971969][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2477.220218][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2477.220249][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2478.327195][T26558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2478.343252][T26558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2478.344700][T26558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2478.347217][T26558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2478.353582][T26558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2478.354402][T26558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2478.455577][ T1147] fuse: Bad value for 'fd' [ 2478.544363][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.849880][T26558] Bluetooth: hci2: command tx timeout [ 2480.900574][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.174931][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.585421][ T29] audit: type=1400 audit(1720164915.384:2778): avc: denied { setopt } for pid=1176 comm="syz.1.9023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2481.744367][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.070891][ T1179] syzkaller1: entered promiscuous mode [ 2482.109646][ T1179] syzkaller1: entered allmulticast mode [ 2482.198223][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9024'. [ 2482.434317][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9024'. [ 2482.909830][T26558] Bluetooth: hci2: command tx timeout [ 2483.031751][ T29] audit: type=1800 audit(1720164916.784:2779): pid=1197 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.9027" name="file1" dev="overlay" ino=1762 res=0 errno=0 [ 2484.286174][ T1141] chnl_net:caif_netlink_parms(): no params data found [ 2484.967762][T26558] Bluetooth: hci2: command tx timeout [ 2484.991515][ T32] bridge_slave_1: left allmulticast mode [ 2484.997305][ T32] bridge_slave_1: left promiscuous mode [ 2485.038945][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.077467][ T32] bridge_slave_0: left allmulticast mode [ 2485.097667][ T32] bridge_slave_0: left promiscuous mode [ 2485.103624][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 2486.275449][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2486.295407][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2486.320395][ T32] bond0 (unregistering): Released all slaves [ 2486.385302][ T1221] syzkaller1: entered promiscuous mode [ 2486.417619][ T1221] syzkaller1: entered allmulticast mode [ 2486.673495][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 2486.682414][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 2486.704121][ T1141] bridge_slave_0: entered allmulticast mode [ 2486.721081][ T1141] bridge_slave_0: entered promiscuous mode [ 2487.068975][T26558] Bluetooth: hci2: command tx timeout [ 2487.727033][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 2487.736874][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 2487.777932][ T1141] bridge_slave_1: entered allmulticast mode [ 2487.794834][ T1141] bridge_slave_1: entered promiscuous mode [ 2487.884543][ T1242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9040'. [ 2488.027141][ T1141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2488.060622][ T1245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9040'. [ 2489.323151][ T1141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2489.539343][ T32] hsr_slave_0: left promiscuous mode [ 2489.619054][ T32] hsr_slave_1: left promiscuous mode [ 2489.642387][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2489.665424][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.700018][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2489.728159][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2490.411477][ T32] veth1_macvtap: left promiscuous mode [ 2490.432375][ T32] veth0_macvtap: left promiscuous mode [ 2490.450743][ T32] veth1_vlan: left promiscuous mode [ 2490.478336][ T32] veth0_vlan: left promiscuous mode [ 2491.318750][ T1286] openvswitch: netlink: Key type 3087 is out of range max 32 [ 2491.658404][T21964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2491.668933][T21964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2491.699405][T21964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2491.745752][T21964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2491.756270][T21964] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2491.764626][T21964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2492.466754][ T32] team0 (unregistering): Port device team_slave_1 removed [ 2492.575076][ T32] team0 (unregistering): Port device team_slave_0 removed [ 2493.586877][ T1141] team0: Port device team_slave_0 added [ 2493.607338][ T1266] syzkaller1: entered promiscuous mode [ 2493.627794][ T1266] syzkaller1: entered allmulticast mode [ 2493.772985][ T1141] team0: Port device team_slave_1 added [ 2493.868032][T26558] Bluetooth: hci6: command tx timeout [ 2493.902192][ T1293] netlink: 'syz.4.9057': attribute type 12 has an invalid length. [ 2494.022302][ T1141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2494.045266][ T1141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2494.127682][ T1141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2494.164024][ T1141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2494.179115][ T1141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2494.239516][ T1141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2495.435010][ T1141] hsr_slave_0: entered promiscuous mode [ 2495.444929][ T1141] hsr_slave_1: entered promiscuous mode [ 2495.471839][ T1141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2495.488659][ T1141] Cannot create hsr debugfs directory [ 2495.928489][T26558] Bluetooth: hci6: command tx timeout [ 2496.758862][ T29] audit: type=1400 audit(1720164930.554:2780): avc: denied { listen } for pid=1326 comm="syz.2.9069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2497.535547][ T1290] chnl_net:caif_netlink_parms(): no params data found [ 2497.588375][ T29] audit: type=1800 audit(1720164931.384:2781): pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.9071" name="file1" dev="overlay" ino=112 res=0 errno=0 [ 2498.121745][T26558] Bluetooth: hci6: command tx timeout [ 2499.756448][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 2499.781181][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.802800][ T1290] bridge_slave_0: entered allmulticast mode [ 2499.824782][ T1290] bridge_slave_0: entered promiscuous mode [ 2499.868290][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2499.907232][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.925255][ T1290] bridge_slave_1: entered allmulticast mode [ 2499.942079][ T1290] bridge_slave_1: entered promiscuous mode [ 2500.188441][ T1290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2500.267249][T26558] Bluetooth: hci6: command tx timeout [ 2500.430951][ T1290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2500.626144][ T1290] team0: Port device team_slave_0 added [ 2500.676462][ T1290] team0: Port device team_slave_1 added [ 2500.713335][ T1141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2500.795789][ T1290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2500.819599][ T1290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2500.847821][ T29] audit: type=1400 audit(1720164934.644:2782): avc: denied { read } for pid=1367 comm="syz.4.9080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2500.876269][ T1290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2500.900696][ T1141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2500.929589][ T1290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2500.936603][ T1290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2500.988576][ T1290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2501.017342][ T1141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2501.037816][ T1141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2501.276752][ T1290] hsr_slave_0: entered promiscuous mode [ 2501.290180][ T1290] hsr_slave_1: entered promiscuous mode [ 2501.309090][ T1290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2501.327635][ T1290] Cannot create hsr debugfs directory [ 2502.542080][ T29] audit: type=1800 audit(1720164936.344:2783): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.9083" name="file1" dev="overlay" ino=833 res=0 errno=0 [ 2502.958817][ T1141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2503.010330][ T1395] bond0: entered promiscuous mode [ 2503.025696][ T1395] bond_slave_0: entered promiscuous mode [ 2503.040131][ T1395] bond_slave_1: entered promiscuous mode [ 2503.244813][ T1290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2503.337464][ T1398] tipc: Failed to obtain node identity [ 2503.347772][ T1398] tipc: Enabling of bearer rejected, failed to enable media [ 2503.414595][ T1141] 8021q: adding VLAN 0 to HW filter on device team0 [ 2503.484894][T26558] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 2503.524401][T26558] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 2503.543625][ T1290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2503.625223][T25027] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.632511][T25027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2503.772871][ T1290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2503.825116][T30507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2503.832467][T30507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2503.919893][ T1393] bond0: left promiscuous mode [ 2503.928903][ T1393] bond_slave_0: left promiscuous mode [ 2503.934623][ T1393] bond_slave_1: left promiscuous mode [ 2504.099664][ T1290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.506520][ T1428] fuse: Unknown parameter 'group_i00000000000000000000' [ 2505.709465][ T1290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2505.832379][ T1290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2505.881241][ T1290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2505.973042][ T1290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2506.085140][ T1141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2506.457547][ T1141] veth0_vlan: entered promiscuous mode [ 2506.611552][ T1442] openvswitch: netlink: Key type 10511 is out of range max 32 [ 2506.640441][ T1290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2506.661416][ T1141] veth1_vlan: entered promiscuous mode [ 2506.773058][ T1290] 8021q: adding VLAN 0 to HW filter on device team0 [ 2506.879625][ T1141] veth0_macvtap: entered promiscuous mode [ 2506.908839][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.916158][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2506.964549][ T1141] veth1_macvtap: entered promiscuous mode [ 2506.999936][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 2507.007264][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2507.604788][T26558] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 2507.632565][T26558] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 2508.188777][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.248825][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.277676][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.299081][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.320602][ T1457] openvswitch: netlink: Key type 3087 is out of range max 32 [ 2508.338029][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.363879][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.385802][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.396573][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.418475][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.444275][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.458642][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2508.482952][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.522621][ T1141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2508.550037][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.561754][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.573011][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.607600][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.617677][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.657628][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.662433][ T29] audit: type=1400 audit(1720164942.464:2784): avc: denied { bind } for pid=1462 comm="syz.1.9110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2508.667481][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.700901][ T1466] fuse: Unknown parameter 'group_i00000000000000000000' [ 2508.737352][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.756109][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.785892][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.795992][ T1141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2508.806652][ T1141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2508.824592][ T1141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2508.902955][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.929363][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.950078][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.958963][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2509.345357][ T1476] openvswitch: netlink: Key type 10511 is out of range max 32 [ 2509.933170][T12268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2509.933222][T12268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.116414][ T29] audit: type=1326 audit(1720164943.894:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.4.9114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9b575bd9 code=0x0 [ 2510.420451][T30510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2510.440097][T30510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.632211][ T1290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2511.101380][ T1499] netlink: 'syz.4.9118': attribute type 13 has an invalid length. [ 2511.143848][ T1290] veth0_vlan: entered promiscuous mode [ 2511.363467][ T1502] fuse: Unknown parameter 'group_i00000000000000000000' [ 2511.419039][ T1290] veth1_vlan: entered promiscuous mode [ 2511.653199][ T1290] veth0_macvtap: entered promiscuous mode [ 2511.684461][T26558] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 2511.698581][T26558] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 2511.743202][ T1290] veth1_macvtap: entered promiscuous mode [ 2511.943284][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2511.987990][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.170555][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2512.237656][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.285241][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2512.357748][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.377759][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2512.410771][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.443478][ T1515] 9pnet_fd: Insufficient options for proto=fd [ 2512.460698][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2512.471503][ T1515] 9pnet_fd: Insufficient options for proto=fd [ 2512.497705][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.521684][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2512.547641][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2512.568865][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2513.117868][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.146216][ T1290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2513.534591][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.594071][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.634663][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.660721][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.677826][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.699293][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.712082][ T1527] netlink: 580 bytes leftover after parsing attributes in process `syz.4.9128'. [ 2513.744592][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.766957][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.787225][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.809418][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.831443][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.888921][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.910794][ T1290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2513.943169][ T1290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2513.985626][ T1290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2513.999510][ T1533] fuse: Unknown parameter 'group_id00000000000000000000' [ 2514.056929][ T1290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2514.139532][ T1290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2514.167186][ T1290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2514.212037][ T1290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2514.668122][T30510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2514.677195][T30510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2514.846155][ T9937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2514.878363][ T9937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2516.326573][ T1556] netlink: 580 bytes leftover after parsing attributes in process `syz.0.9139'. [ 2516.975899][ T1567] 9pnet_fd: Insufficient options for proto=fd [ 2517.001792][ T1567] 9pnet_fd: Insufficient options for proto=fd [ 2518.947763][T25053] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 2518.962480][ T1596] netlink: 580 bytes leftover after parsing attributes in process `syz.2.9152'. [ 2519.189780][T25053] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 2519.210421][T25053] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2519.231912][T25053] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2519.282234][T25053] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2519.319268][T25053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2519.360732][T25053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2519.419091][T25053] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2519.495899][T25053] usb 4-1: string descriptor 0 read error: -22 [ 2519.518383][T25053] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2519.556568][T25053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.611257][T25053] usb 4-1: config 0 descriptor?? [ 2519.635738][T25053] hub 4-1:0.0: bad descriptor, ignoring hub [ 2519.664727][T25053] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2519.728777][T25053] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input93 [ 2521.001006][ T1627] netlink: 580 bytes leftover after parsing attributes in process `syz.1.9165'. [ 2521.900713][T25027] usb 4-1: USB disconnect, device number 30 [ 2523.455571][ T29] audit: type=1400 audit(1720164957.254:2786): avc: denied { create } for pid=1649 comm="syz.0.9174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2523.525107][ T29] audit: type=1400 audit(1720164957.254:2787): avc: denied { bind } for pid=1649 comm="syz.0.9174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2523.900553][ T1660] netlink: 576 bytes leftover after parsing attributes in process `syz.3.9178'. [ 2524.670599][ T1677] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9184'. [ 2526.618751][ T1693] netlink: 576 bytes leftover after parsing attributes in process `syz.2.9190'. [ 2527.308372][ T1717] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9197'. [ 2529.958191][ T1740] netlink: 576 bytes leftover after parsing attributes in process `syz.1.9203'. [ 2530.235285][ T1750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9208'. [ 2532.015744][T26558] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 2532.097962][T25053] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 2532.341132][T25053] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 2532.375644][T25053] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 2532.391235][T25053] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2532.417300][T25053] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2532.442644][T25053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2532.453400][T25053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2532.465986][T25053] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2532.521612][T25053] usb 2-1: string descriptor 0 read error: -22 [ 2532.542001][T25053] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2532.571825][T25053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.637984][T25053] usb 2-1: config 0 descriptor?? [ 2532.657474][T25053] hub 2-1:0.0: bad descriptor, ignoring hub [ 2532.669606][T25053] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2532.710193][T25053] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input94 [ 2533.230536][T25053] libceph: connect (1)[c::]:6789 error -101 [ 2533.262671][T25053] libceph: mon0 (1)[c::]:6789 connect error [ 2533.549377][ T749] libceph: connect (1)[c::]:6789 error -101 [ 2533.565399][ T749] libceph: mon0 (1)[c::]:6789 connect error [ 2533.576132][ T1783] ceph: No mds server is up or the cluster is laggy [ 2534.197250][ T1795] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9221'. [ 2534.737678][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.753292][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.528664][T25054] usb 2-1: USB disconnect, device number 52 [ 2535.813515][ T1810] netlink: 'syz.1.9228': attribute type 1 has an invalid length. [ 2535.837722][ T1810] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9228'. [ 2536.734410][T21964] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2536.749894][T21964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2536.758611][T21964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2536.781204][T21964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2536.792673][T21964] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2536.819985][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9233'. [ 2536.829297][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9233'. [ 2536.907863][T21964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2539.049074][T21964] Bluetooth: hci7: command tx timeout [ 2539.508107][ T749] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2539.697878][ T749] usb 2-1: Using ep0 maxpacket: 32 [ 2539.713672][ T749] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2539.741425][ T749] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2539.761435][ T749] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2539.774601][ T749] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2539.790827][ T749] usb 2-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2539.794815][ T1821] chnl_net:caif_netlink_parms(): no params data found [ 2539.814063][ T749] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2539.823926][ T749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.279348][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.329585][ T1821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2540.337012][ T1821] bridge_slave_0: entered allmulticast mode [ 2540.390783][ T1821] bridge_slave_0: entered promiscuous mode [ 2540.448031][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2540.485661][ T749] ntrig 0003:1B96:000A.0024: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 2540.496545][ T1821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2540.522811][ T1821] bridge_slave_1: entered allmulticast mode [ 2540.566719][ T749] usb 2-1: USB disconnect, device number 53 [ 2540.567106][ T1821] bridge_slave_1: entered promiscuous mode [ 2540.664161][T16664] libceph: connect (1)[c::]:6789 error -101 [ 2540.702214][T16664] libceph: mon0 (1)[c::]:6789 connect error [ 2540.916199][ T1821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2540.957053][ T1861] ceph: No mds server is up or the cluster is laggy [ 2540.978995][ T1821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2540.998212][T25028] libceph: connect (1)[c::]:6789 error -101 [ 2541.004429][T25028] libceph: mon0 (1)[c::]:6789 connect error [ 2541.130677][T21964] Bluetooth: hci7: command tx timeout [ 2541.414682][ T1821] team0: Port device team_slave_0 added [ 2541.455705][ T1821] team0: Port device team_slave_1 added [ 2541.666098][ T1821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2541.698043][ T1821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2541.755174][ T1821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2542.202263][ T1821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2542.224780][ T1821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2543.209255][ T1821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2543.246564][T26558] Bluetooth: hci7: command tx timeout [ 2544.033414][ T1821] hsr_slave_0: entered promiscuous mode [ 2544.128637][ T1821] hsr_slave_1: entered promiscuous mode [ 2544.168376][ T1821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2544.176008][ T1821] Cannot create hsr debugfs directory [ 2544.537981][ T749] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2544.738043][ T749] usb 5-1: Using ep0 maxpacket: 32 [ 2544.749483][ T749] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.760613][ T5140] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 2544.790466][ T749] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.859608][ T749] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2544.895877][ T749] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2544.917246][ T749] usb 5-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2544.956685][ T749] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2544.988827][ T5140] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 2545.007907][ T749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.026215][ T5140] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 2545.057658][ T5140] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2545.086951][ T5140] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2545.118892][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2545.153328][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2545.163724][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2545.301914][T26558] Bluetooth: hci7: command tx timeout [ 2545.302691][ T5140] usb 2-1: string descriptor 0 read error: -22 [ 2545.387196][ T5140] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2545.406560][ T1821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.455743][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.526076][ T749] ntrig 0003:1B96:000A.0025: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 2545.538507][ T5140] usb 2-1: config 0 descriptor?? [ 2545.561209][ T5140] hub 2-1:0.0: bad descriptor, ignoring hub [ 2545.576090][ T5140] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2545.603019][ T5140] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input95 [ 2545.694330][ T749] usb 5-1: USB disconnect, device number 28 [ 2545.722415][ T1821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.974463][ T1821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2546.183977][ T1821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2546.338100][ T749] usb 2-1: USB disconnect, device number 54 [ 2546.815422][ T1821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2546.862235][ T1821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2546.900461][ T1821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2546.936873][ T1821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2548.719948][ T1821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2548.834545][ T29] audit: type=1400 audit(1720164982.624:2788): avc: denied { map } for pid=1926 comm="syz.2.9264" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2550.727773][ T29] audit: type=1400 audit(1720164982.634:2789): avc: denied { execute } for pid=1926 comm="syz.2.9264" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2550.842164][ T1821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.972701][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.980013][T16664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.347087][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.354450][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.402299][ T1950] xt_NFQUEUE: number of total queues is 0 [ 2553.402172][ T1821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2553.664354][ T29] audit: type=1326 audit(1720164987.464:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.2.9280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa779575bd9 code=0x0 [ 2553.665141][ T1821] veth0_vlan: entered promiscuous mode [ 2553.771076][ T1821] veth1_vlan: entered promiscuous mode [ 2553.940114][ T1821] veth0_macvtap: entered promiscuous mode [ 2553.987803][ T1821] veth1_macvtap: entered promiscuous mode [ 2554.041985][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.053972][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.064089][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.075166][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.106202][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.130155][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.158475][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.200029][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.260757][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.328788][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.373247][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.442667][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.487206][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.573247][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.601413][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.652653][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.696816][ T1821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2555.008213][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2555.021793][ T29] audit: type=1107 audit(1720164988.814:2791): pid=1998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2555.291342][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.811685][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2555.814886][ T2002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2555.858098][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.886766][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2555.930649][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2555.972922][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2556.031165][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2556.083057][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2556.114485][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2556.127684][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2556.167637][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2556.187842][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2556.203664][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2556.223818][ T1821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2556.235795][ T1821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2556.281991][ T1821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2556.312498][ T1821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.347340][ T1821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.383481][ T1821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.401329][ T1821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.801835][T17905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2556.827795][T17905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2556.952927][T29366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2556.976304][T29366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.528689][T26558] Bluetooth: hci1: command 0x0406 tx timeout [ 2557.566315][ T2041] xt_NFQUEUE: number of total queues is 0 [ 2557.588534][ T2040] netlink: 'syz.4.9295': attribute type 4 has an invalid length. [ 2559.400539][ T749] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2559.508593][ T29] audit: type=1107 audit(1720164993.314:2792): pid=2066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2559.555829][ T2067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2559.637733][ T749] usb 5-1: Using ep0 maxpacket: 32 [ 2559.679846][ T749] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2559.706656][ T749] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2559.738490][ T749] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2559.761735][ T749] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2559.786169][ T749] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2559.838033][ T749] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2559.879493][ T749] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2559.907651][ T749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.926133][ T749] usb 5-1: Product: syz [ 2559.950892][ T749] usb 5-1: Manufacturer: syz [ 2559.961041][ T749] usb 5-1: SerialNumber: syz [ 2560.110198][ T2073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2073 comm=syz.0.9303 [ 2560.259710][ T2064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.318082][ T2064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.734479][ T9954] ------------[ cut here ]------------ [ 2560.740948][ T9954] WARNING: CPU: 0 PID: 9954 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x60b/0x7d0 [ 2560.754821][ T9954] Modules linked in: [ 2560.760964][ T9954] CPU: 0 PID: 9954 Comm: kworker/u8:14 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2560.771468][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2560.781627][ T9954] Workqueue: phy110 ieee80211_color_collision_detection_work [ 2560.789147][ T9954] RIP: 0010:cfg80211_bss_color_notify+0x60b/0x7d0 [ 2560.795626][ T9954] Code: d9 52 f7 49 8d 7f 68 be ff ff ff ff e8 2e 4e ac 00 31 ff 89 c3 89 c6 e8 c3 d4 52 f7 85 db 0f 85 16 fb ff ff e8 b6 d9 52 f7 90 <0f> 0b 90 e9 08 fb ff ff e8 a8 d9 52 f7 0f b6 44 24 1c ba 01 00 00 [ 2560.815666][ T9954] RSP: 0018:ffffc90003707bf0 EFLAGS: 00010293 [ 2560.821844][ T9954] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a3b0acd [ 2560.829899][ T9954] RDX: ffff88805f425a00 RSI: ffffffff8a3b0ada RDI: 0000000000000005 [ 2560.838005][ T9954] RBP: 000000000000008d R08: 0000000000000005 R09: 0000000000000000 [ 2560.846007][ T9954] R10: 0000000000000000 R11: 1ffffffff272b9ad R12: ffff88804ac20000 [ 2560.857067][ T9954] R13: 000000000003d90c R14: ffff88804ac20cb0 R15: ffff88807c9b0700 [ 2560.867346][ T9954] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2560.876508][ T9954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2560.883233][ T9954] CR2: 000000002005a000 CR3: 0000000068ed8000 CR4: 00000000003506f0 [ 2560.891419][ T9954] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2560.899545][ T9954] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2560.907615][ T9954] Call Trace: [ 2560.910919][ T9954] [ 2560.913886][ T9954] ? show_regs+0x8c/0xa0 [ 2560.918263][ T9954] ? __warn+0xe5/0x3c0 [ 2560.922418][ T9954] ? cfg80211_bss_color_notify+0x60b/0x7d0 [ 2560.928343][ T9954] ? report_bug+0x3c0/0x580 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 2560.932888][ T9954] ? handle_bug+0x3d/0x70 [ 2560.937265][ T9954] ? exc_invalid_op+0x17/0x50 [ 2560.942039][ T9954] ? asm_exc_invalid_op+0x1a/0x20 [ 2560.947136][ T9954] ? cfg80211_bss_color_notify+0x5fd/0x7d0 [ 2560.953089][ T9954] ? cfg80211_bss_color_notify+0x60a/0x7d0 [ 2560.962584][ T9954] ? cfg80211_bss_color_notify+0x60b/0x7d0 [ 2560.971638][ T9954] ? __pfx_lock_acquire+0x10/0x10 [ 2560.976754][ T9954] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 2560.983531][ T9954] process_one_work+0x9c5/0x1b40 [ 2560.989238][ T9954] ? __pfx_lock_acquire+0x10/0x10 [ 2560.994339][ T9954] ? __pfx_process_one_work+0x10/0x10 [ 2561.000232][ T9954] ? assign_work+0x1a0/0x250 [ 2561.004894][ T9954] worker_thread+0x6c8/0xf30 [ 2561.009882][ T9954] ? __pfx_worker_thread+0x10/0x10 [ 2561.015049][ T9954] kthread+0x2c1/0x3a0 [ 2561.019275][ T9954] ? _raw_spin_unlock_irq+0x23/0x50 [ 2561.024527][ T9954] ? __pfx_kthread+0x10/0x10 [ 2561.029235][ T9954] ret_from_fork+0x45/0x80 [ 2561.033722][ T9954] ? __pfx_kthread+0x10/0x10 [ 2561.038479][ T9954] ret_from_fork_asm+0x1a/0x30 [ 2561.043319][ T9954] [ 2561.046373][ T9954] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2561.053687][ T9954] CPU: 0 PID: 9954 Comm: kworker/u8:14 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 2561.064062][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2561.074171][ T9954] Workqueue: phy110 ieee80211_color_collision_detection_work [ 2561.081636][ T9954] Call Trace: [ 2561.084953][ T9954] [ 2561.087920][ T9954] dump_stack_lvl+0x3d/0x1f0 [ 2561.092570][ T9954] panic+0x6f5/0x7a0 [ 2561.096578][ T9954] ? __pfx_panic+0x10/0x10 [ 2561.101068][ T9954] ? show_trace_log_lvl+0x363/0x500 [ 2561.106353][ T9954] ? check_panic_on_warn+0x1f/0xb0 [ 2561.111538][ T9954] ? cfg80211_bss_color_notify+0x60b/0x7d0 [ 2561.117413][ T9954] check_panic_on_warn+0xab/0xb0 [ 2561.122429][ T9954] __warn+0xf1/0x3c0 [ 2561.126391][ T9954] ? cfg80211_bss_color_notify+0x60b/0x7d0 [ 2561.132255][ T9954] report_bug+0x3c0/0x580 [ 2561.136648][ T9954] handle_bug+0x3d/0x70 [ 2561.140871][ T9954] exc_invalid_op+0x17/0x50 [ 2561.145446][ T9954] asm_exc_invalid_op+0x1a/0x20 [ 2561.150371][ T9954] RIP: 0010:cfg80211_bss_color_notify+0x60b/0x7d0 [ 2561.156834][ T9954] Code: d9 52 f7 49 8d 7f 68 be ff ff ff ff e8 2e 4e ac 00 31 ff 89 c3 89 c6 e8 c3 d4 52 f7 85 db 0f 85 16 fb ff ff e8 b6 d9 52 f7 90 <0f> 0b 90 e9 08 fb ff ff e8 a8 d9 52 f7 0f b6 44 24 1c ba 01 00 00 [ 2561.176544][ T9954] RSP: 0018:ffffc90003707bf0 EFLAGS: 00010293 [ 2561.182666][ T9954] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a3b0acd [ 2561.190677][ T9954] RDX: ffff88805f425a00 RSI: ffffffff8a3b0ada RDI: 0000000000000005 [ 2561.198691][ T9954] RBP: 000000000000008d R08: 0000000000000005 R09: 0000000000000000 [ 2561.206702][ T9954] R10: 0000000000000000 R11: 1ffffffff272b9ad R12: ffff88804ac20000 [ 2561.214721][ T9954] R13: 000000000003d90c R14: ffff88804ac20cb0 R15: ffff88807c9b0700 [ 2561.222741][ T9954] ? cfg80211_bss_color_notify+0x5fd/0x7d0 [ 2561.228610][ T9954] ? cfg80211_bss_color_notify+0x60a/0x7d0 [ 2561.234564][ T9954] ? __pfx_lock_acquire+0x10/0x10 [ 2561.239656][ T9954] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 2561.245883][ T9954] process_one_work+0x9c5/0x1b40 [ 2561.250880][ T9954] ? __pfx_lock_acquire+0x10/0x10 [ 2561.255966][ T9954] ? __pfx_process_one_work+0x10/0x10 [ 2561.261385][ T9954] ? assign_work+0x1a0/0x250 [ 2561.266038][ T9954] worker_thread+0x6c8/0xf30 [ 2561.270684][ T9954] ? __pfx_worker_thread+0x10/0x10 [ 2561.275841][ T9954] kthread+0x2c1/0x3a0 [ 2561.279970][ T9954] ? _raw_spin_unlock_irq+0x23/0x50 [ 2561.285257][ T9954] ? __pfx_kthread+0x10/0x10 [ 2561.289901][ T9954] ret_from_fork+0x45/0x80 [ 2561.294375][ T9954] ? __pfx_kthread+0x10/0x10 [ 2561.299015][ T9954] ret_from_fork_asm+0x1a/0x30 [ 2561.303841][ T9954] [ 2561.307376][ T9954] Kernel Offset: disabled [ 2561.311892][ T9954] Rebooting in 86400 seconds..