Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. 1970/01/01 00:00:34 fuzzer started 1970/01/01 00:00:34 dialing manager at 10.128.0.163:30013 syzkaller login: [ 34.906304][ T4224] cgroup: Unknown subsys name 'net' [ 35.118270][ T4224] cgroup: Unknown subsys name 'rlimit' [ 35.450842][ T4224] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:35 syscalls: 3552 1970/01/01 00:00:35 code coverage: enabled 1970/01/01 00:00:35 comparison tracing: enabled 1970/01/01 00:00:35 extra coverage: enabled 1970/01/01 00:00:35 delay kcov mmap: enabled 1970/01/01 00:00:35 setuid sandbox: enabled 1970/01/01 00:00:35 namespace sandbox: enabled 1970/01/01 00:00:35 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:00:35 fault injection: enabled 1970/01/01 00:00:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:00:35 net packet injection: enabled 1970/01/01 00:00:35 net device setup: enabled 1970/01/01 00:00:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:00:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:00:35 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:00:35 USB emulation: enabled 1970/01/01 00:00:35 hci packet injection: enabled 1970/01/01 00:00:35 wifi device emulation: enabled 1970/01/01 00:00:35 802.15.4 emulation: enabled 1970/01/01 00:00:35 swap file: enabled 1970/01/01 00:00:35 starting 5 executor processes [ 36.175979][ T4249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.178928][ T4249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.181991][ T4247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.184265][ T4247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.186289][ T4247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.189779][ T4251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.191489][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.191696][ T4251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.193482][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.195319][ T4251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.197779][ T4255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.198358][ T4251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.199992][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.201387][ T4251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.203683][ T4256] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.204950][ T4251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.208581][ T4251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.209503][ T4256] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.210449][ T4251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.212020][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.214066][ T4251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.215198][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.216832][ T4251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.218156][ T4255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.219438][ T4251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.220895][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.222451][ T4251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.226148][ T4251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.231331][ T4251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.235464][ T4257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.459778][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 36.484286][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 36.514091][ T4240] chnl_net:caif_netlink_parms(): no params data found [ 36.547300][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 36.563926][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.565667][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.567907][ T4241] device bridge_slave_0 entered promiscuous mode [ 36.591355][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.593196][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.595383][ T4241] device bridge_slave_1 entered promiscuous mode [ 36.616569][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.618089][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.620279][ T4250] device bridge_slave_0 entered promiscuous mode [ 36.636812][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.651900][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.657005][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.659341][ T4250] device bridge_slave_1 entered promiscuous mode [ 36.669217][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.675815][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.677314][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.679465][ T4240] device bridge_slave_0 entered promiscuous mode [ 36.703399][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.704959][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.707174][ T4240] device bridge_slave_1 entered promiscuous mode [ 36.715204][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.735089][ T4240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.737868][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.739547][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.741752][ T4239] device bridge_slave_0 entered promiscuous mode [ 36.745157][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.746793][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.749191][ T4239] device bridge_slave_1 entered promiscuous mode [ 36.752237][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.756288][ T4241] team0: Port device team_slave_0 added [ 36.759809][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 36.764890][ T4240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.789040][ T4241] team0: Port device team_slave_1 added [ 36.802846][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.808824][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.822519][ T4240] team0: Port device team_slave_0 added [ 36.836628][ T4250] team0: Port device team_slave_0 added [ 36.844158][ T4240] team0: Port device team_slave_1 added [ 36.846120][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.847659][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.853532][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.859025][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.860477][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.866064][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.874562][ T4250] team0: Port device team_slave_1 added [ 36.896139][ T4239] team0: Port device team_slave_0 added [ 36.899327][ T4239] team0: Port device team_slave_1 added [ 36.908594][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.910169][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.916533][ T4240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.940340][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.941911][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.947821][ T4240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.950965][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.952697][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.960298][ T4248] device bridge_slave_0 entered promiscuous mode [ 36.972396][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.974041][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.979618][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.982766][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.984573][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.990305][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.996840][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.998478][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.000677][ T4248] device bridge_slave_1 entered promiscuous mode [ 37.034939][ T4241] device hsr_slave_0 entered promiscuous mode [ 37.073390][ T4241] device hsr_slave_1 entered promiscuous mode [ 37.119177][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.120759][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.126331][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.129465][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.131006][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.137293][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.196558][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.254933][ T4250] device hsr_slave_0 entered promiscuous mode [ 37.293365][ T4250] device hsr_slave_1 entered promiscuous mode [ 37.373352][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.375287][ T4250] Cannot create hsr debugfs directory [ 37.378012][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.434640][ T4240] device hsr_slave_0 entered promiscuous mode [ 37.473161][ T4240] device hsr_slave_1 entered promiscuous mode [ 37.523488][ T4240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.525176][ T4240] Cannot create hsr debugfs directory [ 37.564806][ T4239] device hsr_slave_0 entered promiscuous mode [ 37.603270][ T4239] device hsr_slave_1 entered promiscuous mode [ 37.643117][ T4239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.645080][ T4239] Cannot create hsr debugfs directory [ 37.688921][ T4248] team0: Port device team_slave_0 added [ 37.720246][ T4248] team0: Port device team_slave_1 added [ 37.760662][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.762275][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.768416][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.775847][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.777361][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.783529][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.864919][ T4248] device hsr_slave_0 entered promiscuous mode [ 37.903387][ T4248] device hsr_slave_1 entered promiscuous mode [ 37.943128][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.944958][ T4248] Cannot create hsr debugfs directory [ 37.966988][ T4241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.026335][ T4241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.085054][ T4241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.128822][ T4241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.243585][ T4246] Bluetooth: hci2: command tx timeout [ 38.243594][ T4256] Bluetooth: hci0: command tx timeout [ 38.243731][ T4256] Bluetooth: hci4: command tx timeout [ 38.248566][ T4250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.276979][ T4250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.323051][ T4256] Bluetooth: hci3: command tx timeout [ 38.324462][ T4256] Bluetooth: hci1: command tx timeout [ 38.335606][ T4250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.385282][ T4250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.464223][ T4240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.495482][ T4240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.536772][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.545610][ T4240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.584634][ T4240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.630545][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.646488][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.649195][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.651552][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.654155][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.656773][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.658542][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.672171][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.726088][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.728400][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.730741][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.736804][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.738474][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.740375][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.759951][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.794896][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.834522][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.855669][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.885766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.888345][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.901305][ T4241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.905004][ T4241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.918856][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.921031][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.923462][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.925769][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.927894][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.930816][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.933373][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.937552][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.974303][ T4248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.012218][ T4240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.017422][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.023967][ T4248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.064650][ T4248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.101236][ T4240] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.103729][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.105769][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.108931][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.111245][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.115721][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.126201][ T4248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.164209][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.166457][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.168550][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.170169][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.172103][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.175103][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.177345][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.178959][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.180847][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.182631][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.197596][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.208138][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.210222][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.212559][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.215660][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.217894][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.219414][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.221304][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.224546][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.226648][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.228680][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.230289][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.232268][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.234944][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.237215][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.239362][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.241690][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.244641][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.246737][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.264704][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.267039][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.282856][ T4250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.285888][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.301798][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.305153][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.307358][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.309538][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.311710][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.314669][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.317080][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.320217][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.322408][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.331409][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.333923][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.351987][ T4240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.355634][ T4240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.395936][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.397866][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.400161][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.402661][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.413687][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.424003][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.426234][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.429724][ T4241] device veth0_vlan entered promiscuous mode [ 39.439001][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.449289][ T4241] device veth1_vlan entered promiscuous mode [ 39.451472][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.454613][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.457523][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.463479][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.465756][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.467827][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.475996][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.497085][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.502157][ T4241] device veth0_macvtap entered promiscuous mode [ 39.509982][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.512266][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.515780][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.518003][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.519582][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.521525][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.530638][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.532720][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.534377][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.548639][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.550776][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.553575][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.564007][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.566365][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.568594][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.570627][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.572147][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.574161][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.576796][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.579596][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.581663][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.583883][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.588020][ T4241] device veth1_macvtap entered promiscuous mode [ 39.618394][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.620600][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.622807][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.625256][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.626876][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.628771][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.631264][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.634293][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.647955][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.651892][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.658985][ T4240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.664791][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.667421][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.669871][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.672183][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.675409][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.677668][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.680306][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.682505][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.685124][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.687503][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.689696][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.691902][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.694253][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.699761][ T4241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.701761][ T4241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.703802][ T4241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705714][ T4241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.715166][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.717380][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.719518][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.721397][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.726977][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.745117][ T4239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.747952][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.753890][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.756775][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.759186][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.761332][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.774332][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.776454][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.778642][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.780800][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.782861][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.785699][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.795935][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.801044][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.804185][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.820724][ T4250] device veth0_vlan entered promiscuous mode [ 39.825939][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.828277][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.841157][ T4240] device veth0_vlan entered promiscuous mode [ 39.851401][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.854535][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.856587][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.858835][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.863960][ T4250] device veth1_vlan entered promiscuous mode [ 39.899262][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.901392][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.904834][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.907041][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.910327][ T4240] device veth1_vlan entered promiscuous mode [ 39.919490][ T4250] device veth0_macvtap entered promiscuous mode [ 39.931649][ T4250] device veth1_macvtap entered promiscuous mode [ 39.936787][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.939184][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.941539][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.950643][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.984941][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.986989][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.992854][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.995986][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.999511][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.002707][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.005064][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.007175][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.009383][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.011675][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.029916][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.036462][ T4240] device veth0_macvtap entered promiscuous mode [ 40.040076][ T4240] device veth1_macvtap entered promiscuous mode [ 40.047795][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.050190][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.056187][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.060573][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.062504][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.064576][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.066862][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.069104][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.071156][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.077095][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.095663][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.097642][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.098233][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.101192][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.104316][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.106361][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.109483][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.111705][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.117498][ T4240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.119879][ T4240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.122059][ T4240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.125626][ T4240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.129036][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.141170][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.144029][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.146320][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.148038][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.149846][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.152009][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.168046][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.176649][ T4240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.178994][ T4240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.181087][ T4240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.193505][ T4240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.196956][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.210672][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.214598][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.217102][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.219797][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.222321][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:00:40 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty, @random="98241e02953f", @broadcast}}}}, 0x0) [ 40.229249][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.236194][ T4239] device veth0_vlan entered promiscuous mode [ 40.241860][ T4239] device veth1_vlan entered promiscuous mode [ 40.265652][ T4240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.267539][ T4240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.269524][ T4240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.271380][ T4240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:00:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r1, 0x0) syz_clone(0x40206000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 40.323280][ T4257] Bluetooth: hci4: command tx timeout [ 40.324517][ T4257] Bluetooth: hci2: command tx timeout [ 40.325768][ T4257] Bluetooth: hci0: command tx timeout [ 40.374649][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.376917][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.379253][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.381300][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.400185][ T4239] device veth0_macvtap entered promiscuous mode [ 40.413124][ T4256] Bluetooth: hci1: command tx timeout [ 40.414403][ T4256] Bluetooth: hci3: command tx timeout [ 40.429319][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.431139][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.449181][ T4239] device veth1_macvtap entered promiscuous mode [ 40.452044][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.454323][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.456206][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.492031][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.495556][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.497758][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.499970][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.502051][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.504481][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.507806][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.519699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.521478][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.538450][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.540661][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.543811][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.546290][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.549492][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.550899][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.551308][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.554927][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.557220][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.559501][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.561751][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.568715][ T4239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.571004][ T4239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.576255][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.585472][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.587608][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.589830][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.603972][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.605959][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.608012][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.609918][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.632101][ T4248] device veth0_vlan entered promiscuous mode [ 40.635675][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.637835][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.640961][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.647996][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.655445][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.657813][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.682487][ T4248] device veth1_vlan entered promiscuous mode 00:00:40 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 40.693842][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.696478][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.769467][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 00:00:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x3) 00:00:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000017c0), 0x4) [ 40.825611][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.827439][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.841371][ T4248] device veth0_macvtap entered promiscuous mode [ 40.851229][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.853534][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.855681][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.861600][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 00:00:40 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000180)='M', 0x0}, 0x20) [ 40.880280][ T4248] device veth1_macvtap entered promiscuous mode [ 40.895657][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.897376][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.911468][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.913836][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:00:40 executing program 3: clock_settime(0xffffffffffffffff, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f00000003c0)) 00:00:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000008000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00', @dev, @private1}) [ 40.958798][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.961296][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.978506][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.980798][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.007505][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.009872][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.012115][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:00:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x40087602, 0x0) [ 41.039580][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.051531][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.104321][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.106897][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.111038][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 00:00:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) [ 41.123468][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.136075][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.140979][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.146900][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.163288][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.165553][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.167680][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.182031][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.204230][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.206689][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.211358][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.223709][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.233562][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.235530][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329717][ T1586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.331682][ T1586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.339991][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.359559][ T1586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.361370][ T1586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.368932][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:00:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$tun(r1, &(0x7f0000000340)={@val, @val, @ipv6=@icmpv6={0x0, 0x6, "41b0ca", 0xb0, 0x3a, 0x0, @rand_addr=' \x01\x00', @empty, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x0, 0x0, '\x00', [@generic]}, @fragment, @dstopts={0x0, 0x9, '\x00', [@pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo]}, @srh], @ni}}}, 0xe6) [ 41.488089][ T4349] input: syz1 as /devices/virtual/input/input2 00:00:41 executing program 0: r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmdt(r0) shmdt(r0) 00:00:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000b40)={0x0, 0x0, 0x2, "2101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:00:41 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000008c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 00:00:41 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) [ 41.625363][ T4354] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 00:00:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="fb4e000000000000000010"], 0x34}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400030007"], 0xd) [ 41.641475][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.648281][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.656083][ T4359] Bluetooth: MGMT ver 1.22 00:00:41 executing program 0: syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000140)={[{@uni_xlateno}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@fat=@usefree}, {@utf8no}, {@fat=@nocase}, {@utf8}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@gid}, {@shortname_lower}]}, 0x6, 0x2a0, &(0x7f0000001340)="$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") 00:00:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000003d40), 0x4) 00:00:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) 00:00:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) [ 41.747508][ T4364] loop0: detected capacity change from 0 to 256 [ 41.757261][ T4364] ======================================================= [ 41.757261][ T4364] WARNING: The mand mount option has been deprecated and [ 41.757261][ T4364] and is ignored by this kernel. Remove the mand [ 41.757261][ T4364] option from the mount to silence this warning. [ 41.757261][ T4364] ======================================================= 00:00:41 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0], 0xd, 0x635, &(0x7f0000000bc0)="$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") [ 41.809040][ T4364] FAT-fs (loop0): Directory bread(block 32767) failed [ 41.841522][ T4372] loop3: detected capacity change from 0 to 1024 00:00:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 00:00:41 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x2}, 0x1c) [ 41.959807][ T4372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) 00:00:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, "e6c97f31a49c55a07ffb365a56b1b9f17a2de96aaa0cae58026dd188aef144ff"}) [ 42.000544][ T4372] journal_init_common: Cannot get buffer for journal superblock [ 42.024215][ T4372] EXT4-fs (loop3): Could not load journal inode 00:00:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) 00:00:42 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x5}}, 0x50) 00:00:42 executing program 3: syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x1000090, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11dd, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000100)='./file2\x00', r0, &(0x7f0000000000)='./file0\x00', 0x2) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 00:00:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00ed"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=user,access=any']) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 00:00:42 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@mpls_delroute={0x1c}, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000001c0)) 00:00:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) 00:00:42 executing program 1: r0 = memfd_create(&(0x7f0000006e80)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\x950\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x01\x00\x00\x00\xa3\xb9\xff\xff\xebw\xdeM\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x00\x00v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\x00\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\x18\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x9d\x8e\x0f\x14Uc\x15n\xd5!}\x00+\xa5\xdcxUY3\x9b\xe7\xa1\x95\xc8\xf4G\xc3G\xf0\xed+\xa4\xec~7\xf3\"\x9c\x9e\xfaN\xc5\x8cM\xa7D\xb5\xe5\xfb\xda\xbc\x8a\xdc\x8adI\r\fO\xa7-\x98\xa3FM\xc2', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000001000)=[{0x0}], 0x1, &(0x7f0000001340)=[{0x0}], 0x1, 0x0) [ 42.395750][ T4388] loop3: detected capacity change from 0 to 8192 [ 42.407927][ T4257] Bluetooth: hci0: command tx timeout [ 42.409188][ T4257] Bluetooth: hci2: command tx timeout [ 42.410466][ T4257] Bluetooth: hci4: command tx timeout [ 42.496588][ T4256] Bluetooth: hci3: command tx timeout [ 42.497907][ T4256] Bluetooth: hci1: command tx timeout 00:00:42 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 00:00:42 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 00:00:42 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000000), 0x4) [ 42.705108][ T4406] device batadv_slave_1 entered promiscuous mode [ 42.707330][ T4405] device batadv_slave_1 left promiscuous mode 00:00:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 00:00:42 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000200), &(0x7f00000002c0)=0x90) 00:00:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00ed"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=user,access=any']) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 00:00:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000500), &(0x7f0000001640)=0x14) 00:00:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000600)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 00:00:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0xff) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000000c0)={@initdev, 0x0}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x25, r5}) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0xd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="0e", 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r6, 0x0) 00:00:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/135, 0x87}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 00:00:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@init={0x14, 0x84, 0x1, {0x7, 0x20, 0x401, 0x100}}, @init={0x14}], 0x28}, 0x100) 00:00:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00ed"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=user,access=any']) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 00:00:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280)=0x10) 00:00:43 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r2, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r1, r2, 0x0, 0x1000000000003) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=@known='user.syz\x00', 0x0, 0x0) 00:00:43 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10242, 0x0) pwrite64(r2, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r1, r2, 0x0, 0x1000000000006) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 00:00:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), 0x90) 00:00:43 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r2, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r1, r2, 0x0, 0x1000000000003) 00:00:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000004980)=ANY=[], 0x7dfbc4afeedf467b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x48064500, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendfile(r2, r0, 0x0, 0x6) 00:00:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') sendfile(r0, r1, 0x0, 0x9) 00:00:43 executing program 4: io_setup(0x0, &(0x7f0000000080)) mlockall(0x3) 00:00:43 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10242, 0x0) pwrite64(r2, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r1, r2, 0x0, 0x1000000000006) lgetxattr(0x0, 0x0, 0x0, 0x0) 00:00:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00ed"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=user,access=any']) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 00:00:43 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = memfd_create(&(0x7f0000000600)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=','], 0x50}}], 0x1, 0x0) 00:00:44 executing program 2: socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000002700)={0x0, @in, 0x4, 0x6, 0x0, 0x0, 0x200}, 0x98) 00:00:44 executing program 0: socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000380)={0x0, 0x3}, 0x20) 00:00:44 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r2, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r1, r2, 0x0, 0x1000000000003) 00:00:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:00:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 00:00:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000004c0), &(0x7f0000000580)=0x90) 00:00:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000100)="1d06322d5964373db9c764414c456f48173b82a7d643e95e8c49590b111f65892f6e00dda6329378ef42480a52b61bf1de404dc073cefc7f306e11861f13318ac621f76bd941de2a450a799b556a67d06c4e3d25acd316014af302414a86a64071a48b94990090f74ecd08e96e07c2a53e70561d604d09f8f8121dde126770fc8dd38580844b8c49a36d4092820ed84843f0cb7521c7119a616dc163d80c63b5172cbd1df0662cd60c252bc39a9dcabe05da3502b6336f4c0f18e2f03adabe30", 0xfffffd1d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffff, 0x0, 0x0, 0x6, 0x0, "1a5a4c00"}) sendfile(r1, r0, 0x0, 0x1000000000006) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x4a) 00:00:44 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x0, 0x84) getsockname$inet6(r0, &(0x7f0000000000), 0x0) socket$inet6_sctp(0x1c, 0x0, 0x84) socket$inet6_sctp(0x1c, 0x0, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) [ 44.484022][ T4257] Bluetooth: hci4: command tx timeout [ 44.485382][ T4257] Bluetooth: hci2: command tx timeout [ 44.486580][ T4257] Bluetooth: hci0: command tx timeout [ 44.566505][ T4256] Bluetooth: hci1: command tx timeout [ 44.567888][ T4256] Bluetooth: hci3: command tx timeout 00:00:44 executing program 2: shmget$private(0x0, 0x1000, 0xddcea049b8b249cd, &(0x7f0000fff000/0x1000)=nil) r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x10, 0x2}, 0x10) 00:00:44 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x2}, 0x1c) 00:00:44 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 00:00:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) socket$inet6_sctp(0x1c, 0x0, 0x84) 00:00:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001b40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 00:00:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) 00:00:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000100)=ANY=[@ANYBLOB="01000025"], &(0x7f0000000900)=0x8) [ 45.075412][ T4518] Bluetooth: MGMT ver 1.22 00:00:45 executing program 4: lseek(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 00:00:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000440), &(0x7f0000000480)=0x8) 00:00:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x5a) 00:00:45 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@prinfo={0x14, 0x84, 0x7, {0x0, 0x4}}], 0x14}, 0x0) 00:00:45 executing program 4: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[], 0xfffffcdd) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[], 0xfffffcdd) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') sendfile(r2, r3, 0x0, 0x37) 00:00:45 executing program 2: socket$inet6_sctp(0x1c, 0x0, 0x84) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x2000, 0x292}, 0x98) connect$inet(r0, &(0x7f00000012c0)={0x10, 0x2}, 0x10) 00:00:45 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1204, &(0x7f00000001c0), &(0x7f0000000180)=0x4) 00:00:45 executing program 1: dup(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000940)={0x1, [0x0]}, &(0x7f0000000900)=0x8) 00:00:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 00:00:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) 00:00:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000180), 0x8) 00:00:45 executing program 1: memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:00:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x6, 0x4, 0x5, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) 00:00:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000008000000000000ed00"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x2714c2c18cde4efb, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x34}}, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400030007"], 0xd) 00:00:45 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60001d2800042f00fe8000000000000000000000000000a2fe8000000000000000000000000000aa24"], 0x0) 00:00:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 00:00:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @global=@item_012={0x2, 0x1, 0x0, "7d89"}, @local=@item_4={0x3, 0x2, 0x0, "9f020a0b"}, @local=@item_012={0x2, 0x2, 0x0, 'K#'}, @global=@item_012={0x2, 0x1, 0x6, "d39d"}]}}, 0x0}, 0x0) 00:00:46 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) fallocate(r0, 0x58, 0x0, 0x1000) 00:00:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) [ 46.998774][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.000991][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:00:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000084000000070000000000000004000012"], 0x14}, 0x0) 00:00:47 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c}, 0x1c) 00:00:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000100)="1f", 0x1, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 00:00:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000400)={0x0, @in, 0x0, 0x0, 0x7}, &(0x7f0000000340)=0x98) 00:00:47 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @empty, @val, {@ipv4}}, 0x0) 00:00:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1204, &(0x7f00000001c0), &(0x7f0000000180)=0x4) 00:00:47 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000300)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 00:00:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000180), 0x88) 00:00:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 00:00:47 executing program 0: socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001380), 0x88) sendmsg$inet_sctp(r0, &(0x7f0000002d00)={&(0x7f0000001440)=@in={0x10, 0x2}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001480)="ee", 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000002c00)=[@authinfo={0x10}, @init={0x14, 0x84, 0x1, {0x0, 0x20, 0x0, 0x1}}, @sndrcv={0x2c, 0x84, 0x2, {0x2, 0x80, 0x1200, 0x8, 0x4}}, @sndinfo={0x1c, 0x84, 0x4, {0x0, 0x800}}, @prinfo={0x14, 0x84, 0x7, {0x0, 0x6279}}, @dstaddrv4={0x10}, @dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @dstaddrv4={0x10, 0x84, 0x9, @rand_addr=0x6}, @init={0x14, 0x84, 0x1, {0x0, 0xff, 0x0, 0x400}}], 0xc4}, 0x0) 00:00:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x9, 0x0, 0x8, 0x0, 0x2}, 0x98) 00:00:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)="19", 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) sendfile(r1, r1, &(0x7f0000000080), 0xe0000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r3 = dup(r2) sendmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="38f5", 0x2}], 0x1}, 0x0) 00:00:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0xc) 00:00:47 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000080), 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:00:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)) 00:00:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 47.607714][ T4604] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 00:00:47 executing program 2: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) 00:00:48 executing program 4: r0 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="90030ee7ff072d2200000e2108060001080006040002c6b572da3e9647000000ae515669487147"], 0x120) [ 48.662720][ T4644] mqueue: Unknown parameter 'fd' 00:00:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x200fffffffd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000580)={0x10, 0x1, 0x0, "9e7d7700b1c31a5bfe34b46e9d03b13098296b73c9b87f45889c838dbf00"}) 00:00:48 executing program 1: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 00:00:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK={0x8}]}, 0x1c}}, 0x0) 00:00:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}}, 0x0) 00:00:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf, 0x1, 0x0, "41ff2c2d17a25827e0303ed58cbae2850211ea0000002f4b353a7c93227400"}) 00:00:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b2a58aa0d9ae74938e4b02fd496a8cbe0cbb53e23dfb2e7d103313bde8", 0x1d) 00:00:48 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) close(r0) 00:00:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 00:00:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x200fffffffd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000580)={0x10, 0x1, 0x0, "9e7d7700b1c31a5bfe34b46e9d03b13098296b73c9b87f45889c838dbf00"}) 00:00:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) pipe2$9p(0x0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002140)=""/162, 0xa2}], 0x1, 0x5, 0x0) 00:00:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0xf, 0xd, 0xffffffffffffffff) [ 49.101089][ T27] audit: type=1326 audit(49.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84c5ce68 code=0x0 00:00:49 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 00:00:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x70}}, 0x0) 00:00:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x40, 0x0, 0x3}}) 00:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="a5", 0x1}], 0x1}}], 0x1, 0x0) 00:00:49 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff0300002fd167e2171ef9582248fda90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d0000d57ef9b7bf852c8986626691b01b5f44f4ce28"], 0xe0}], 0x1}, 0x0) 00:00:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 00:00:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1000) [ 49.427226][ T4256] Bluetooth: hci5: sending frame failed (-49) [ 49.430165][ T4256] Bluetooth: hci5: sending frame failed (-49) [ 49.431605][ T4257] Unable to handle kernel paging request at virtual address dfff80000000000e [ 49.433754][ T4257] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 49.435593][ T4257] Mem abort info: [ 49.436358][ T4257] ESR = 0x0000000096000006 [ 49.437423][ T4257] EC = 0x25: DABT (current EL), IL = 32 bits [ 49.438844][ T4257] SET = 0, FnV = 0 [ 49.439747][ T4257] EA = 0, S1PTW = 0 [ 49.440696][ T4257] FSC = 0x06: level 2 translation fault [ 49.441942][ T4257] Data abort info: [ 49.442802][ T4257] ISV = 0, ISS = 0x00000006 [ 49.444579][ T4257] CM = 0, WnR = 0 [ 49.445417][ T4257] [dfff80000000000e] address between user and kernel address ranges [ 49.447255][ T4257] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 49.448845][ T4257] Modules linked in: [ 49.449704][ T4257] CPU: 1 PID: 4257 Comm: kworker/u5:9 Not tainted 6.1.83-syzkaller #0 [ 49.451459][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 49.453732][ T4257] Workqueue: hci5 hci_power_on [ 49.454851][ T4257] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.456620][ T4257] pc : btintel_read_version+0x90/0x194 [ 49.457849][ T4257] lr : btintel_read_version+0x3c/0x194 [ 49.459152][ T4257] sp : ffff80001e577420 [ 49.460084][ T4257] x29: ffff80001e577420 x28: ffff80001e5774c0 x27: ffff80001e577640 [ 49.461896][ T4257] x26: 0000000000000000 x25: ffff700003caee98 x24: ffff0000c74e5fb8 [ 49.463703][ T4257] x23: dfff800000000000 x22: ffff80001e577620 x21: ffff0000c74e4000 [ 49.465504][ T4257] x20: ffff80001e577620 x19: 0000000000000000 x18: ffff80001e567480 [ 49.466201][ T4698] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.467224][ T4257] x17: ffff8000188cc000 x16: ffff8000084f9258 x15: 0000000000000000 [ 49.467246][ T4257] x14: 0000000000000002 x13: ffff0000d8425340 x12: 0000000000ff0100 [ 49.472360][ T4257] x11: 0000000000ff0100 x10: 0000000000000003 x9 : 000000000000000e [ 49.474202][ T4257] x8 : 0000000000000070 x7 : ffff8000082db800 x6 : 0000000000000000 [ 49.476040][ T4257] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 49.477854][ T4257] x2 : 0000000000000006 x1 : 0000000000000031 x0 : 0000000000000000 [ 49.479787][ T4257] Call trace: [ 49.480565][ T4257] btintel_read_version+0x90/0x194 [ 49.481682][ T4257] ag6xx_setup+0x1a4/0xd0c [ 49.482738][ T4257] hci_uart_setup+0x330/0x7d8 [ 49.483811][ T4257] hci_dev_open_sync+0x35c/0x3078 [ 49.484965][ T4257] hci_power_on+0x150/0x68c [ 49.485965][ T4257] process_one_work+0x7ac/0x1404 [ 49.487108][ T4257] worker_thread+0x8e4/0xfec [ 49.488100][ T4257] kthread+0x250/0x2d8 [ 49.488946][ T4257] ret_from_fork+0x10/0x20 [ 49.490028][ T4257] Code: f2fbfff7 d343fd09 1200090a 11000d4a (38f76929) [ 49.491593][ T4257] ---[ end trace 0000000000000000 ]--- 00:00:49 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="040000000000000005"]}) 00:00:49 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffd9d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000002b) 00:00:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffdc) [ 49.642830][ T4706] mkiss: ax0: crc mode is auto. 00:00:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 49.937004][ T4257] Kernel panic - not syncing: Oops: Fatal exception [ 49.938648][ T4257] SMP: stopping secondary CPUs [ 49.939738][ T4257] Kernel Offset: disabled [ 49.940693][ T4257] CPU features: 0x00000,02070084,26017203 [ 49.941987][ T4257] Memory Limit: none [ 50.384369][ T4257] Rebooting in 86400 seconds..