last executing test programs: 13.47501909s ago: executing program 4 (id=7034): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c0c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140), 0x0) setitimer(0x3, &(0x7f0000001080)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2a04000, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000340)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x7fa) chdir(&(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000100000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 12.374110848s ago: executing program 1 (id=7038): socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000280)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x41009432, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x25, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x0, 0x0, 0x0) 10.767916662s ago: executing program 4 (id=7040): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c", 0xd, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@private2}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@dev, @in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@loopback, @in=@local, @in6=@private0, @in6=@remote}]}]}, 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292}}, 0x50) read$FUSE(r6, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, r8}, 0x50) 10.626929578s ago: executing program 2 (id=7042): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) 9.567746814s ago: executing program 4 (id=7043): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffc1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd533, 0x8, 0x4, 0x400, 0xbb0, 0x80900020}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private2}}}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, &(0x7f0000000740)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="080400000802110000010802110000005050505050500000"], 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xff, 0x80, 0x137}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={r6, 0xc7, "2c75cf5f320bd683c22a8ea06ab61be5a52a8b3ad8a68ee31a5923eb257322480279d5d1303e34af2fdc0b75bafcdf5e4844665a68a0fca4119d76212d5d7a6840cb8c44696dd27f4e149c19f1eb82ce41bda55be797aed43abf4b96585879e6a7a47b605c4810d0c49e5b3645e64fe47b036a456e30eb8836a8cf5ca3180a6d30b1d5fc55db04433289cdef8b7f0167027a5077ed01ffd856ccbe0e97f6ea4e2ae56b26c3719406129b06effa758fb2ba2acc4d1086361d156b0ef8a9a3ef4455161bacc2f15e"}, &(0x7f0000000080)=0xcf) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x0, 0x17, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x2, {0x2, 0x0, @loopback}, 'virt_wifi0\x00'}) 9.165467372s ago: executing program 1 (id=7045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}, {0x0}], 0x2, 0x4b6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb}) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) 8.900562933s ago: executing program 0 (id=7046): socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f38812166b98c0200000f32baf80c66b8c489b68466efbafc0cb8ccf4ef0f060f20e06635002000000f22e00f01c4f30fbd660a0f001d67260f350f2043", 0x3f}], 0x1, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) 7.879265707s ago: executing program 1 (id=7047): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153}, 0x15) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0) 6.900294813s ago: executing program 0 (id=7048): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x1}, 0x20) 6.852405977s ago: executing program 3 (id=7049): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f00000003c0)=ANY=[], 0xfe37, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x4, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x74, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x48005) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000040), &(0x7f0000000280)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@bridge_delneigh={0x5c, 0x1d, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_FDB_EXT_ATTRS={0x30, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7f}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}]}, @NDA_SRC_VNI={0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4841}, 0x44000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x1, 0x6, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) clock_getres(0x2, &(0x7f00000001c0)) 6.773948393s ago: executing program 4 (id=7050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002a00090000000000000000000400002c"], 0x30}, 0x1, 0x3000000}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_set_ext_adv_params}}, 0x8) 6.759315985s ago: executing program 0 (id=7051): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c0c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140), 0x0) setitimer(0x3, &(0x7f0000001080)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2a04000, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000340)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x7fa) chdir(&(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000100000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 6.668038999s ago: executing program 2 (id=7052): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r4, 0x3, r2, 0x6}) socket(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5.926580829s ago: executing program 4 (id=7053): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c", 0xd, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@private2}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@dev, @in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@loopback, @in=@local, @in6=@private0, @in6=@remote}]}]}, 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292}}, 0x50) read$FUSE(r6, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, r8}, 0x50) 5.836406868s ago: executing program 3 (id=7054): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) close(r0) ioperm(0x0, 0x1, 0x8) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x10080, 0x0) 5.585713596s ago: executing program 0 (id=7055): socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000280)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x41009432, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x25, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x0, 0x0, 0x0) 5.58493819s ago: executing program 2 (id=7056): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0711090800c8"], 0xa) socket$inet6_sctp(0xa, 0x0, 0x84) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x5, 0x6, 0x8, 0xff}, &(0x7f0000000040)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x7, 0x6}}}, 0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x1c, &(0x7f0000000340)}, &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000240)={r7, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x3f00, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) chdir(&(0x7f0000000100)='./file0\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) r11 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) 4.72341701s ago: executing program 4 (id=7057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}, {0x0}], 0x2, 0x4b6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb}) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) 4.595282631s ago: executing program 3 (id=7058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/50, 0x32}, 0xb5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/116, 0x74}}, {{&(0x7f0000002780)=@tipc=@name, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x13, 0x0, 0x669, 0x0, 0x0, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.389323729s ago: executing program 3 (id=7059): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1c, 0x1, 0x0, "57dfbb475097aa828c3f9cbee8bc90462c0b84e1762577a16c9db6db943500", 0x242e2f47}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/104, 0x68) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="85cfa32800000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000014000180100001006574683a67656e6576653100"], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x1a, 0x0, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000004c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x3) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x45}, {0x54}, {0x6}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) 3.219984676s ago: executing program 2 (id=7060): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffc1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd533, 0x8, 0x4, 0x400, 0xbb0, 0x80900020}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private2}}}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000700), 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="080400000802110000010802110000005050505050500000"], 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xff, 0x80, 0x137}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000180)={r6, 0xc7, "2c75cf5f320bd683c22a8ea06ab61be5a52a8b3ad8a68ee31a5923eb257322480279d5d1303e34af2fdc0b75bafcdf5e4844665a68a0fca4119d76212d5d7a6840cb8c44696dd27f4e149c19f1eb82ce41bda55be797aed43abf4b96585879e6a7a47b605c4810d0c49e5b3645e64fe47b036a456e30eb8836a8cf5ca3180a6d30b1d5fc55db04433289cdef8b7f0167027a5077ed01ffd856ccbe0e97f6ea4e2ae56b26c3719406129b06effa758fb2ba2acc4d1086361d156b0ef8a9a3ef4455161bacc2f15e"}, &(0x7f0000000080)=0xcf) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x0, 0x17, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x2, {0x2, 0x0, @loopback}, 'virt_wifi0\x00'}) 2.968898601s ago: executing program 1 (id=7061): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 1.971716407s ago: executing program 3 (id=7062): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) 1.588507445s ago: executing program 1 (id=7064): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000002200)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1000) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2c}, {0x6}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00c}, 0x10000810) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002"]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000030101040000000000000000020000002c000280140001800800010000080001080002001b1414aa0c00028005000100000000000600034000000000"], 0x40}}, 0x0) unlink(&(0x7f0000000000)='./file1\x00') r5 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) 1.587488883s ago: executing program 0 (id=7065): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c0c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140), 0x0) setitimer(0x3, &(0x7f0000001080)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2a04000, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000340)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x7fa) chdir(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 1.073981173s ago: executing program 2 (id=7066): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r4, 0x3, r2, 0x6}) socket(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 665.753289ms ago: executing program 1 (id=7067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c", 0xd, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@private2}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@dev, @in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@loopback, @in=@local, @in6=@private0, @in6=@remote}]}]}, 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292}}, 0x50) read$FUSE(r6, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, r8}, 0x50) 569.959588ms ago: executing program 0 (id=7068): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) close(r0) ioperm(0x0, 0x1, 0x8) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x10080, 0x0) 313.917163ms ago: executing program 3 (id=7069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) sendmmsg$inet(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='W', 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000e40)=ANY=[], 0x7f9e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=7070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/50, 0x32}, 0xb5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/116, 0x74}}, {{&(0x7f0000002780)=@tipc=@name, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x13, 0x0, 0x669, 0x0, 0x0, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.663496][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.693477][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.763407][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.781791][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.822577][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2018.869353][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2018.901059][T28433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.003799][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.038511][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.058896][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.086399][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.106850][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.130638][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.151257][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.172573][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.207462][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2019.265688][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.316037][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.083349][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.215302][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.233476][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.263465][T28433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2020.570399][T28433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.790230][T28433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.231114][T28433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.272786][T28433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.303430][T28433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.350802][T28433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.459636][T28578] veth0_vlan: entered promiscuous mode [ 2021.539344][T28578] veth1_vlan: entered promiscuous mode [ 2021.593115][T29010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2021.772905][T28578] veth0_macvtap: entered promiscuous mode [ 2021.967280][T27916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.027533][T27916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.087475][T28578] veth1_macvtap: entered promiscuous mode [ 2022.180906][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.273468][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.330185][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.384079][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.424248][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.451517][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.472822][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.618241][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.636871][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.655689][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.826501][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2022.879592][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2022.989380][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.114378][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.223914][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.496753][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.519138][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.530112][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.546868][T28578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2023.563947][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2023.572050][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2023.588172][T29025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2023.605768][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.622676][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.634584][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.645720][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.656168][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.667715][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.679220][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.693506][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.705551][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.716556][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.729234][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.740964][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.752249][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.772573][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.783862][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.797841][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.807907][T28578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.819589][T28578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.835756][T28578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2023.890649][T28578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.929603][T28578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.951024][T28578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.970222][T28578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.217839][T27916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.251735][T27916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.353183][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.381626][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.447982][T29052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2028.197675][T29089] netlink: 'syz.1.6192': attribute type 4 has an invalid length. [ 2028.254635][T29089] netlink: 'syz.1.6192': attribute type 4 has an invalid length. [ 2029.542379][T29104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2032.919914][T21120] syz_tun (unregistering): left allmulticast mode [ 2032.946122][T27166] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2032.957822][T27166] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2032.987882][T27166] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2033.036804][T27166] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2033.046998][T27166] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2033.054459][T27166] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2033.519730][T27916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.541947][T27916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.905446][T27916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2035.041243][T27916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.157806][T27166] Bluetooth: hci8: command tx timeout [ 2035.319959][T29165] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.328445][T29165] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.541574][ T29] audit: type=1326 audit(1719735406.730:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29175 comm="syz.1.6216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2036.510231][T27916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2036.551296][T27916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.234989][T27166] Bluetooth: hci8: command tx timeout [ 2037.717602][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.699554][T27916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2039.482114][T27166] Bluetooth: hci8: command tx timeout [ 2039.494504][T27916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.291798][T29215] tipc: Resetting bearer [ 2041.553592][T27166] Bluetooth: hci8: command tx timeout [ 2041.905923][T29142] chnl_net:caif_netlink_parms(): no params data found [ 2041.958511][ T29] audit: type=1800 audit(1719735413.150:1501): pid=29224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.6226" name="file0" dev="sda1" ino=2183 res=0 errno=0 [ 2042.073463][ T29] audit: type=1804 audit(1719735413.220:1502): pid=29224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.6226" name="/root/syzkaller.J4OFqb/6/file0" dev="sda1" ino=2183 res=1 errno=0 [ 2042.163607][ T29] audit: type=1326 audit(1719735413.250:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29220 comm="syz.4.6226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x0 [ 2042.220249][T27916] tipc: Resetting bearer [ 2042.339522][ T29] audit: type=1326 audit(1719735413.530:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29230 comm="syz.1.6227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2044.291437][T29258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2044.374049][T27916] tipc: Disabling bearer [ 2044.539179][ T29] audit: type=1326 audit(1719735415.730:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29261 comm="syz.4.6234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x0 [ 2044.741795][T27916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2044.781535][T27916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2044.818981][T27916] bond0 (unregistering): (slave team0): Releasing backup interface [ 2044.828803][T27916] bond0 (unregistering): Released all slaves [ 2044.851592][T27916] bond1 (unregistering): Released all slaves [ 2045.091637][T27916] tipc: Left network mode [ 2045.097450][T29142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.263481][T29142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.483865][T29142] bridge_slave_0: entered allmulticast mode [ 2045.509111][T29142] bridge_slave_0: entered promiscuous mode [ 2045.558247][T29272] tipc: Resetting bearer [ 2045.618438][T29142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.649663][T29142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.657613][T29142] bridge_slave_1: entered allmulticast mode [ 2045.666408][T29142] bridge_slave_1: entered promiscuous mode [ 2046.843157][ T29] audit: type=1326 audit(1719735418.010:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29288 comm="syz.0.6240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2046.874663][ T5191] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2046.938333][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 2046.950495][T29286] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2046.959426][T29286] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2046.969270][T29286] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2046.978039][T29286] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2046.986860][T29286] vxlan0: entered promiscuous mode [ 2046.991959][T29286] vxlan0: entered allmulticast mode [ 2047.092918][T29142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.126707][T29142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.133596][ T5191] usb 4-1: device descriptor read/64, error -71 [ 2047.423449][ T5191] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2048.433667][ T5191] usb 4-1: device descriptor read/64, error -71 [ 2048.517908][ T29] audit: type=1804 audit(1719735419.710:1507): pid=29307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.6246" name="bus" dev="sda1" ino=2175 res=1 errno=0 [ 2048.551633][T29142] team0: Port device team_slave_0 added [ 2048.573153][ T5191] usb usb4-port1: attempt power cycle [ 2048.630975][T29142] team0: Port device team_slave_1 added [ 2048.647555][ T29] audit: type=1804 audit(1719735419.760:1508): pid=29307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.6246" name="bus" dev="sda1" ino=2175 res=1 errno=0 [ 2048.756471][T27916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2048.768545][T27916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2048.784442][ T29] audit: type=1326 audit(1719735419.980:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29308 comm="syz.4.6245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x0 [ 2048.814302][T27916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2048.826104][T27916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2048.898821][T27916] veth1_macvtap: left promiscuous mode [ 2048.923670][T27916] veth0_macvtap: left promiscuous mode [ 2048.935775][T27916] veth1_vlan: left promiscuous mode [ 2048.949831][T27916] veth0_vlan: left promiscuous mode [ 2054.384265][ T29] audit: type=1326 audit(1719735425.570:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x7fc00000 [ 2054.479883][T27916] team0 (unregistering): Port device team_slave_1 removed [ 2054.579549][T27916] team0 (unregistering): Port device team_slave_0 removed [ 2055.126827][ T29] audit: type=1326 audit(1719735426.310:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29350 comm="syz.4.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd4b7b75b99 code=0x7fc00000 [ 2056.402061][T29142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.417102][T29142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.482705][T29142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.524681][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6252'. [ 2056.612415][T29142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.673437][T29142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.906997][T29142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2057.699924][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'. [ 2057.805966][T29373] pimreg: entered allmulticast mode [ 2058.356578][T29142] hsr_slave_0: entered promiscuous mode [ 2058.451786][T29142] hsr_slave_1: entered promiscuous mode [ 2058.793639][T29142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2058.831282][T29142] Cannot create hsr debugfs directory [ 2058.868654][T29385] tipc: Resetting bearer [ 2058.934456][T29359] pimreg: left allmulticast mode [ 2059.324429][ T29] audit: type=1326 audit(1719735430.520:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29397 comm="syz.1.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7fc00000 [ 2060.493983][ T29] audit: type=1326 audit(1719735431.690:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29397 comm="syz.1.6265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd813b75b99 code=0x7fc00000 [ 2060.782520][T29419] pimreg: entered allmulticast mode [ 2060.963524][ T5129] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2061.027160][T29419] pimreg: left allmulticast mode [ 2061.196718][ T5129] usb 4-1: Using ep0 maxpacket: 32 [ 2061.218673][ T5129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.276300][ T5129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.316855][ T5129] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2061.349487][ T5129] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2061.381721][ T5129] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2061.584693][ T5129] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2061.668619][T29440] tipc: Resetting bearer [ 2061.849491][ T5129] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2061.863597][ T5129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.877234][ T5129] usb 4-1: Product: syz [ 2061.887173][ T5129] usb 4-1: Manufacturer: syz [ 2061.895054][ T5129] usb 4-1: SerialNumber: syz [ 2062.169708][ T5129] cdc_ncm 4-1:1.0: bind() failure [ 2062.179780][ T5129] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2062.187916][ T5129] cdc_ncm 4-1:1.1: bind() failure [ 2062.200205][ T5129] usb 4-1: USB disconnect, device number 47 [ 2062.340587][T29142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2062.380095][T29142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2062.411546][T29142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2062.631259][T29142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2063.529169][T29452] pimreg: entered allmulticast mode [ 2064.686744][T29452] pimreg: left allmulticast mode [ 2064.906867][ T29] audit: type=1326 audit(1719735436.100:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29465 comm="syz.1.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7fc00000 [ 2065.099277][T29474] pimreg: entered allmulticast mode [ 2065.204583][T29474] pimreg: left allmulticast mode [ 2065.996076][ T29] audit: type=1326 audit(1719735437.180:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29465 comm="syz.1.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd813b75b99 code=0x7fc00000 [ 2066.533815][T29142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.647653][T29490] tipc: Resetting bearer [ 2066.838916][T29142] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.907394][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.914694][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.981925][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.989075][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2067.326708][T29142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2068.395316][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6289'. [ 2068.719411][T29510] pimreg: entered allmulticast mode [ 2068.959328][T29142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2069.028304][T29510] pimreg: left allmulticast mode [ 2070.049918][T29142] veth0_vlan: entered promiscuous mode [ 2070.115583][T29142] veth1_vlan: entered promiscuous mode [ 2070.202827][T29142] veth0_macvtap: entered promiscuous mode [ 2070.269382][T29142] veth1_macvtap: entered promiscuous mode [ 2070.344591][T29531] pimreg: entered allmulticast mode [ 2070.358643][T29534] pimreg: left allmulticast mode [ 2070.370776][T29535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2071.537416][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.582451][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.623169][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.662328][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.686250][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.723769][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.744597][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.763393][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.798876][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.830086][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.880509][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.946064][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.005301][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.130517][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.212305][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.351078][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.492680][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.573488][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.620671][T29142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.656536][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.717681][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.751442][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.781061][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.813346][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.815051][T23094] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2072.870633][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.964369][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.006632][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.063031][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.078536][T23094] usb 4-1: Using ep0 maxpacket: 32 [ 2073.095233][T23094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.133437][T23094] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.158771][T23094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2073.169069][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.212114][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.226578][T23094] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2073.258101][T23094] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2073.268388][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.278990][T23094] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2073.290556][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.302820][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.314339][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.326986][T23094] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2073.338503][T23094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.339430][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.348379][T23094] usb 4-1: Product: syz [ 2073.363227][T23094] usb 4-1: Manufacturer: syz [ 2073.370389][T23094] usb 4-1: SerialNumber: syz [ 2073.404240][T29142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.434312][T29142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.472258][T29142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.532795][T29142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.542300][T29142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.551533][T29142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.566459][T29142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.626170][T23094] cdc_ncm 4-1:1.0: bind() failure [ 2073.649264][T23094] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2073.656407][T23094] cdc_ncm 4-1:1.1: bind() failure [ 2073.671756][T23094] usb 4-1: USB disconnect, device number 48 [ 2074.000258][ T2451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.061915][ T2451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.098871][ T29] audit: type=1326 audit(1719735445.290:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.4.6305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x0 [ 2074.236751][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.294398][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.621699][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6306'. [ 2074.636267][T29614] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.645066][T29614] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.653837][T29614] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.662554][T29614] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.671451][T29614] vxlan0: entered promiscuous mode [ 2074.676780][T29614] vxlan0: entered allmulticast mode [ 2075.730802][ T29] audit: type=1326 audit(1719735446.910:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29618 comm="syz.3.6307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2076.117811][T29628] pimreg: entered allmulticast mode [ 2076.545785][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6310'. [ 2077.209246][T29628] pimreg: left allmulticast mode [ 2077.311847][ T29] audit: type=1326 audit(1719735448.500:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29646 comm="syz.3.6313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2077.515127][T29654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.650017][ T29] audit: type=1326 audit(1719735450.840:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29672 comm="syz.3.6318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2079.695101][T29675] overlayfs: failed to clone upperpath [ 2080.025799][ T29] audit: type=1326 audit(1719735451.220:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29685 comm="syz.1.6323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2080.087698][ T29] audit: type=1326 audit(1719735451.250:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.4.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x7fc00000 [ 2080.993458][ T29] audit: type=1326 audit(1719735452.170:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.4.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd4b7b75b99 code=0x7fc00000 [ 2081.361239][ T29] audit: type=1326 audit(1719735452.550:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29695 comm="syz.3.6327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2084.333484][ T29] audit: type=1326 audit(1719735455.520:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29740 comm="syz.0.6339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2084.403262][ T29] audit: type=1326 audit(1719735455.520:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29739 comm="syz.4.6337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7b75b99 code=0x0 [ 2090.305499][ T29] audit: type=1326 audit(1719735461.500:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29794 comm="syz.3.6355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2090.384240][ T29] audit: type=1800 audit(1719735461.570:1527): pid=29793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6354" name="bus" dev="sda1" ino=2145 res=0 errno=0 [ 2090.507675][T29798] sctp: [Deprecated]: syz.0.6356 (pid 29798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2090.507675][T29798] Use struct sctp_sack_info instead [ 2091.913254][T29805] pimreg: entered allmulticast mode [ 2091.958658][T29807] sp0: Synchronizing with TNC [ 2092.020463][T29805] pimreg: left allmulticast mode [ 2092.183401][ T29] audit: type=1326 audit(1719735463.360:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29806 comm="syz.3.6359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2096.187080][T14589] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2097.997073][T29855] overlayfs: failed to clone upperpath [ 2098.017282][T27166] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2098.032541][T27166] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2098.051555][T27166] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2098.061626][T27166] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2098.074946][T27166] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2098.085362][T27166] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2098.666131][ T2441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2098.724165][ T2441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.826590][T29867] netlink: 'syz.0.6374': attribute type 4 has an invalid length. [ 2099.142767][ T2441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2099.155939][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.199830][ T2441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.113747][T14589] Bluetooth: hci9: command tx timeout [ 2102.203481][T14589] Bluetooth: hci9: command tx timeout [ 2102.295834][ T2441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2102.389841][ T2441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.001537][ T2441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2103.106430][ T2441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.546270][T29858] chnl_net:caif_netlink_parms(): no params data found [ 2103.618236][T29902] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.626844][T29902] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.681675][T29906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2103.690448][T14589] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2104.284289][T27166] Bluetooth: hci9: command tx timeout [ 2104.997332][ T2441] bridge_slave_1: left allmulticast mode [ 2105.003025][ T2441] bridge_slave_1: left promiscuous mode [ 2105.171350][ T2441] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.201440][ T2441] bridge_slave_0: left allmulticast mode [ 2105.203439][ T5180] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2105.232932][ T2441] bridge_slave_0: left promiscuous mode [ 2105.384060][ T2441] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.449107][ T5180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2105.830988][ T5180] usb 3-1: can't read configurations, error -61 [ 2106.930560][ T5180] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2106.938458][T27166] Bluetooth: hci5: command 0x0406 tx timeout [ 2106.944769][T27166] Bluetooth: hci9: command tx timeout [ 2107.145563][ T5180] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2107.166741][ T5180] usb 3-1: can't read configurations, error -61 [ 2107.196466][ T5180] usb usb3-port1: attempt power cycle [ 2107.713463][T29951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2108.906665][ T2441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2108.948632][ T2441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2108.994783][ T2441] bond0 (unregistering): Released all slaves [ 2109.042880][T29858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.073035][T29858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.103971][T29858] bridge_slave_0: entered allmulticast mode [ 2109.123817][T29858] bridge_slave_0: entered promiscuous mode [ 2109.156019][T29858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.163188][T29858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.222983][T29858] bridge_slave_1: entered allmulticast mode [ 2109.264922][T29858] bridge_slave_1: entered promiscuous mode [ 2109.330173][T29928] netlink: 'syz.3.6386': attribute type 4 has an invalid length. [ 2109.556024][T14589] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 2110.439164][T14589] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2110.485820][T29858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2110.640796][T29858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2110.831861][T29973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2112.171945][T29858] team0: Port device team_slave_0 added [ 2112.271064][T29858] team0: Port device team_slave_1 added [ 2112.274061][ T29] audit: type=1326 audit(1719735483.460:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29983 comm="syz.0.6398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2112.464164][ T2441] hsr_slave_0: left promiscuous mode [ 2112.484636][ T2441] hsr_slave_1: left promiscuous mode [ 2112.513578][ T29] audit: type=1326 audit(1719735483.660:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29990 comm="syz.1.6400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2113.355956][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2113.407506][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.442499][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2113.499395][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2113.678347][T30003] overlayfs: failed to clone upperpath [ 2114.203539][ T25] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2114.707814][ T2441] veth1_macvtap: left promiscuous mode [ 2114.772951][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2114.783524][ T2441] veth0_macvtap: left promiscuous mode [ 2114.789090][ T2441] veth1_vlan: left promiscuous mode [ 2114.829547][ T25] usb 4-1: can't read configurations, error -61 [ 2114.865951][ T2441] veth0_vlan: left promiscuous mode [ 2115.643637][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2116.242088][T14589] Bluetooth: hci8: unexpected event 0x01 length: 4 > 1 [ 2116.275610][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2116.322191][ T25] usb 4-1: can't read configurations, error -61 [ 2116.338471][ T25] usb usb4-port1: attempt power cycle [ 2116.832366][T30038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.384830][ T2441] team0 (unregistering): Port device team_slave_1 removed [ 2117.511927][ T2441] team0 (unregistering): Port device team_slave_0 removed [ 2118.965639][T30009] netlink: 'syz.1.6404': attribute type 4 has an invalid length. [ 2119.003701][T30025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6407'. [ 2119.218557][T29858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2119.253693][T29858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.301147][T29858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2119.380277][T29858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2119.553505][T29858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2120.168668][T29858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2120.217484][ T29] audit: type=1326 audit(1719735491.410:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30046 comm="syz.3.6412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2120.650673][T29858] hsr_slave_0: entered promiscuous mode [ 2121.549743][T29858] hsr_slave_1: entered promiscuous mode [ 2121.555729][ T29] audit: type=1326 audit(1719735491.630:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30050 comm="syz.0.6413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2121.803536][T29858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2122.111765][ T29] audit: type=1804 audit(1719735493.300:1533): pid=30065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.6417" name="bus" dev="sda1" ino=2183 res=1 errno=0 [ 2122.128123][T29858] Cannot create hsr debugfs directory [ 2122.181117][ T29] audit: type=1804 audit(1719735493.370:1534): pid=30065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.6417" name="bus" dev="sda1" ino=2183 res=1 errno=0 [ 2122.380599][ T29] audit: type=1326 audit(1719735493.570:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30068 comm="syz.3.6418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2122.476243][T30080] netlink: 'syz.0.6420': attribute type 4 has an invalid length. [ 2122.500838][ T29] audit: type=1800 audit(1719735493.650:1536): pid=30075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6419" name="bus" dev="sda1" ino=2175 res=0 errno=0 [ 2122.796694][T30090] hsr_slave_0: left promiscuous mode [ 2122.878429][T30090] hsr_slave_1: left promiscuous mode [ 2125.981608][ T29] audit: type=1326 audit(1719735497.170:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30110 comm="syz.1.6426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2126.661949][ T29] audit: type=1326 audit(1719735497.850:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30117 comm="syz.3.6427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6c775b99 code=0x0 [ 2129.183791][T30151] netlink: 'syz.3.6431': attribute type 4 has an invalid length. [ 2131.227160][ T29] audit: type=1326 audit(1719735502.420:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30176 comm="syz.1.6439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2131.329573][T30181] pimreg: entered allmulticast mode [ 2131.535253][T30181] pimreg: left allmulticast mode [ 2131.832987][T29858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2132.129119][T29858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2132.207117][T29858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2132.244432][T29858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2132.380166][T29858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2132.405645][ T29] audit: type=1326 audit(1719735503.600:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30196 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x7fc00000 [ 2132.414618][T29858] 8021q: adding VLAN 0 to HW filter on device team0 [ 2132.448487][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.455723][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.489822][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.497088][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2132.568651][ T29] audit: type=1326 audit(1719735503.720:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30196 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dbed75b99 code=0x7fc00000 [ 2132.755018][T29858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2133.068785][ T29] audit: type=1326 audit(1719735504.260:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30196 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x7fc00000 [ 2133.709361][T29858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.852166][T30229] netlink: 'syz.0.6447': attribute type 4 has an invalid length. [ 2135.556438][T29858] veth0_vlan: entered promiscuous mode [ 2135.664119][T29858] veth1_vlan: entered promiscuous mode [ 2135.840798][T29858] veth0_macvtap: entered promiscuous mode [ 2135.916717][T29858] veth1_macvtap: entered promiscuous mode [ 2135.986769][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.040678][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.081850][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.314489][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.168248][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2137.216313][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.310238][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2137.353363][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.363237][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2137.595462][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.615852][T30283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2137.654178][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2137.726236][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.788872][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2137.847469][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.200401][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2138.233444][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.291791][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2138.329462][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.355243][T29858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2138.467286][T30282] tipc: Resetting bearer [ 2138.549891][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2138.623453][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.655657][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2138.717088][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.751036][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2138.799579][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.863428][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2138.921626][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2138.987149][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.025534][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.081919][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.175833][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.219698][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.290103][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.323616][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.378697][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.463641][T29858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2139.523470][T29858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2139.590788][T29858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2139.673788][T30312] netlink: 'syz.1.6461': attribute type 4 has an invalid length. [ 2139.714597][T29858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.763496][T29858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.798805][T29858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.831499][T29858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.069897][ T29] audit: type=1326 audit(1719735511.250:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30331 comm="syz.0.6465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2140.164014][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.208361][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.299495][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.329131][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2142.659527][T30371] netlink: 'syz.4.6472': attribute type 4 has an invalid length. [ 2145.205894][T30420] tipc: Resetting bearer [ 2147.332368][ T5191] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2147.548257][ T5191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.570689][ T5191] usb 3-1: config 0 has no interfaces? [ 2147.573389][ T29] audit: type=1800 audit(1719735518.760:1544): pid=30455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6491" name="bus" dev="sda1" ino=2186 res=0 errno=0 [ 2147.649469][ T5191] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2147.692111][ T5191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.741418][ T5191] usb 3-1: config 0 descriptor?? [ 2148.711010][T23094] IPVS: starting estimator thread 0... [ 2148.824277][T30465] IPVS: using max 17 ests per chain, 40800 per kthread [ 2149.034095][T23094] usb 3-1: USB disconnect, device number 64 [ 2149.279727][T30472] vlan3: entered promiscuous mode [ 2149.286900][T30472] mac80211_hwsim hwsim87 wlan1: entered promiscuous mode [ 2149.295774][T30472] vlan3: entered allmulticast mode [ 2149.301127][T30472] mac80211_hwsim hwsim87 wlan1: entered allmulticast mode [ 2149.337904][ T5080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2149.353713][ T5080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2149.362238][ T5080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2149.386371][ T5080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2149.395455][ T5080] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2149.404102][ T5080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2149.886237][T30473] chnl_net:caif_netlink_parms(): no params data found [ 2150.266120][T30473] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.293870][T30473] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.301193][T30473] bridge_slave_0: entered allmulticast mode [ 2150.337400][T30473] bridge_slave_0: entered promiscuous mode [ 2150.371627][T30473] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.390220][T30473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.405404][T30473] bridge_slave_1: entered allmulticast mode [ 2150.412350][T30473] bridge_slave_1: entered promiscuous mode [ 2150.437207][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6501'. [ 2150.536487][T30473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2150.567381][T30473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2150.703919][T30473] team0: Port device team_slave_0 added [ 2150.727229][T30473] team0: Port device team_slave_1 added [ 2150.855106][T30473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2150.879977][T30473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2150.997240][T30473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2151.068383][T30473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2151.079510][T30473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2151.109505][T30473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2151.241676][T30473] hsr_slave_0: entered promiscuous mode [ 2151.426513][T30473] hsr_slave_1: entered promiscuous mode [ 2151.473580][T14589] Bluetooth: hci5: command tx timeout [ 2151.711081][T30473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2151.719070][T30473] Cannot create hsr debugfs directory [ 2152.173963][ T29] audit: type=1800 audit(1719735523.370:1545): pid=30527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6511" name="bus" dev="sda1" ino=2150 res=0 errno=0 [ 2152.291241][T30533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6514'. [ 2152.621544][T30473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2153.385476][T30473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.643594][T14589] Bluetooth: hci5: command tx timeout [ 2153.849871][T30473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2153.872480][T30473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.003210][T30473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2154.033649][T30473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.217342][T30473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2154.253525][T30473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.786569][T30473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2154.832878][T30473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2154.965893][T30473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2155.002207][T30473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2155.344934][T30473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.406523][T30473] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.448022][ T29] audit: type=1326 audit(1719735526.640:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30534 comm="syz.0.6516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x0 [ 2155.458837][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.476447][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.644909][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.652063][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.717574][T14589] Bluetooth: hci5: command tx timeout [ 2156.298139][T30473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2156.403820][ T5128] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2156.508810][T30473] veth0_vlan: entered promiscuous mode [ 2156.612164][T30473] veth1_vlan: entered promiscuous mode [ 2156.637779][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2156.671962][ T5128] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2156.719724][ T5128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2156.752138][ T5128] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2156.765508][T30473] veth0_macvtap: entered promiscuous mode [ 2156.801583][T30473] veth1_macvtap: entered promiscuous mode [ 2156.832481][ T5128] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 2157.035557][ T5128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.512328][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2157.543013][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.567439][T14589] Bluetooth: hci8: command 0x0406 tx timeout [ 2157.797580][T14589] Bluetooth: hci5: command tx timeout [ 2157.823862][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2157.869211][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.899700][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2157.937457][ T5128] usb 5-1: Product: syz [ 2157.941734][ T5128] usb 5-1: Manufacturer: syz [ 2157.959263][ T5128] usb 5-1: SerialNumber: syz [ 2157.969304][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.970281][ T5128] usb 5-1: config 0 descriptor?? [ 2158.029480][ T5128] ipaq 5-1:0.0: PocketPC PDA converter detected [ 2158.029558][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.058293][ T5128] usb 5-1: active config #0 != 1 ?? [ 2158.083568][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.103455][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.131284][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.213513][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.259941][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.307354][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.362784][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.450797][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.507037][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.558669][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.611610][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.663159][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.728229][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.801370][T30473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.843556][ C0] vxcan0: j1939_xtp_rx_dpo: no connection found [ 2158.852404][T30594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6533'. [ 2158.914023][T30570] vxcan1: entered allmulticast mode [ 2158.946084][T22488] usb 5-1: USB disconnect, device number 55 [ 2158.973648][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.050988][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.102618][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.123833][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.143356][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.173402][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.193817][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.224771][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.283030][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.339810][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.377477][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.424921][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.462376][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.520106][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.559759][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.583400][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.599948][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888063c8f400: rx timeout, send abort [ 2159.633713][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.671530][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.723659][T30473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2159.773401][T30473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2159.813201][T30473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2159.844554][T30606] tipc: Enabling of bearer rejected, failed to enable media [ 2159.884074][T30473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.892844][T30473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.954072][T30473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.962827][T30473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.108376][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888063c8f400: abort rx timeout. Force session deactivation [ 2160.141950][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'. [ 2160.598073][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.846430][T27916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.855029][T27916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.003476][T28224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.011408][T28224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.229117][T30643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6551'. [ 2163.537829][T30671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6558'. [ 2163.851972][T30670] pim6reg1: entered promiscuous mode [ 2163.891965][T30670] pim6reg1: entered allmulticast mode [ 2167.206096][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 2167.803870][T30705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6569'. [ 2167.834362][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6569'. [ 2167.922354][T30705] veth1_macvtap: left promiscuous mode [ 2167.962741][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022e88400: rx timeout, send abort [ 2168.020694][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6569'. [ 2168.129395][T30710] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6569'. [ 2168.211447][T30710] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2168.471213][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022e88400: abort rx timeout. Force session deactivation [ 2170.373937][T30757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6585'. [ 2170.420730][T30757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 2170.453728][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6585'. [ 2170.490890][T30755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6585'. [ 2170.513784][T30755] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2170.565170][T30770] 9pnet_fd: Insufficient options for proto=fd [ 2172.061702][T30799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6603'. [ 2172.093726][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6603'. [ 2172.274776][T30799] veth1_macvtap: left promiscuous mode [ 2172.872213][T30806] __nla_validate_parse: 1 callbacks suppressed [ 2172.872416][T30806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6603'. [ 2173.176022][T30806] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2176.431765][T30872] bridge0: port 3(vlan4) entered blocking state [ 2176.454727][T30872] bridge0: port 3(vlan4) entered disabled state [ 2176.482885][T30872] vlan4: entered allmulticast mode [ 2176.541019][T30872] vlan4: left allmulticast mode [ 2177.399538][T30885] overlayfs: failed to resolve './bus': -2 [ 2177.669041][T30894] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2177.713606][T30894] overlayfs: failed to set xattr on upper [ 2177.745495][T30894] overlayfs: ...falling back to redirect_dir=nofollow. [ 2177.752368][T30894] overlayfs: ...falling back to index=off. [ 2177.800461][T30894] overlayfs: ...falling back to uuid=null. [ 2178.835016][T30930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6648'. [ 2178.859194][T30930] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6648'. [ 2178.952593][T30924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2179.283486][T23094] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2179.479283][T23094] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.522172][T23094] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2179.548579][T23094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2179.580976][T23094] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2179.612576][T23094] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2179.655603][T23094] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2179.679181][T23094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2179.706852][T23094] usb 4-1: SerialNumber: syz [ 2179.730685][T23094] usb 4-1: config 0 descriptor?? [ 2179.755044][T23094] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2179.821397][T30946] syz.1.6654[30946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2179.821883][T30946] syz.1.6654[30946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2179.955986][T23094] usb 4-1: USB disconnect, device number 52 [ 2181.442751][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2183.156807][T31005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2183.223712][T22488] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2183.425193][T22488] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.657305][T31013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.667135][T31013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.321377][T22488] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2184.349784][T22488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2184.396566][T22488] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2184.413170][ T29] audit: type=1800 audit(1719735555.600:1547): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.6677" name="file1" dev="sda1" ino=2184 res=0 errno=0 [ 2184.470835][T22488] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2184.511467][T22488] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2184.537965][T22488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2184.703359][T22488] usb 3-1: SerialNumber: syz [ 2184.729220][T22488] usb 3-1: config 0 descriptor?? [ 2184.805291][T22488] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2185.349922][ T5129] usb 3-1: USB disconnect, device number 65 [ 2186.484267][ T29] audit: type=1326 audit(1719735557.680:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2186.552946][ T29] audit: type=1326 audit(1719735557.680:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2186.609300][ T29] audit: type=1326 audit(1719735557.680:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2186.759107][ T29] audit: type=1326 audit(1719735557.680:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2186.872536][ T29] audit: type=1326 audit(1719735557.680:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2187.003428][ T29] audit: type=1326 audit(1719735557.680:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2187.093949][ T29] audit: type=1326 audit(1719735557.680:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2187.180594][ T29] audit: type=1326 audit(1719735557.680:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2187.278905][ T29] audit: type=1326 audit(1719735557.680:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31042 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afd75b99 code=0x7ffc0000 [ 2187.512555][ T5126] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2187.702935][ T5126] usb 4-1: device descriptor read/64, error -71 [ 2188.063507][ T5126] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2188.335971][T31061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.383887][ T5126] usb 4-1: device descriptor read/64, error -71 [ 2188.513819][ T5126] usb usb4-port1: attempt power cycle [ 2188.938315][T31073] syz.2.6693[31073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2188.938468][T31073] syz.2.6693[31073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2188.943458][ T5126] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2189.016269][ T5126] usb 4-1: device descriptor read/8, error -71 [ 2189.294320][ T5126] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2189.348849][ T5126] usb 4-1: device descriptor read/8, error -71 [ 2189.484026][ T5126] usb usb4-port1: unable to enumerate USB device [ 2192.926527][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 2192.926547][ T29] audit: type=1800 audit(1719735564.100:1568): pid=31117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.6702" name="file1" dev="sda1" ino=2172 res=0 errno=0 [ 2193.525166][ T29] audit: type=1326 audit(1719735564.610:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31109 comm="syz.2.6701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2193.734609][T31123] netlink: 'syz.4.6703': attribute type 4 has an invalid length. [ 2194.004435][T31130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2194.017523][T31132] netlink: 'syz.4.6703': attribute type 4 has an invalid length. [ 2194.317823][T30538] syz_tun (unregistering): left allmulticast mode [ 2194.350177][T30538] syz_tun (unregistering): left promiscuous mode [ 2194.770962][T14589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2194.808397][T14589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2194.819752][T14589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2194.849435][T14589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2194.860398][T14589] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2194.872510][T14589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2197.664876][T14589] Bluetooth: hci6: command tx timeout [ 2198.557767][ T2485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2198.600956][ T2485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.803860][ T5126] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2198.880425][ T2485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2198.928869][ T2485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.044036][ T5126] usb 4-1: no configurations [ 2199.048843][ T5126] usb 4-1: can't read configurations, error -22 [ 2199.203696][ T5126] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2199.213650][T14589] Bluetooth: hci8: unexpected event for opcode 0x0809 [ 2199.280875][T14589] Bluetooth: hci8: unexpected event 0x01 length: 4 > 1 [ 2199.328005][ T2485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.428635][ T5126] usb 4-1: no configurations [ 2199.433257][ T5126] usb 4-1: can't read configurations, error -22 [ 2199.476340][ T2485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.507457][ T5126] usb usb4-port1: attempt power cycle [ 2199.702370][ T2485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.713958][ T2485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.724599][T14589] Bluetooth: hci6: command tx timeout [ 2199.870621][T31191] netlink: 'syz.2.6719': attribute type 4 has an invalid length. [ 2199.923436][ T5126] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2199.962189][T31192] netlink: 'syz.2.6719': attribute type 4 has an invalid length. [ 2200.008889][ T5126] usb 4-1: no configurations [ 2200.451109][ T5126] usb 4-1: can't read configurations, error -22 [ 2200.613578][ T5126] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2200.710181][ T5126] usb 4-1: no configurations [ 2200.721526][ T5126] usb 4-1: can't read configurations, error -22 [ 2200.762341][ T5126] usb usb4-port1: unable to enumerate USB device [ 2201.803465][T14589] Bluetooth: hci6: command tx timeout [ 2202.162959][T31140] chnl_net:caif_netlink_parms(): no params data found [ 2202.228845][ T2485] bridge_slave_1: left allmulticast mode [ 2202.253661][ T2485] bridge_slave_1: left promiscuous mode [ 2202.271987][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.290951][T31202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2202.311304][ T2485] bridge_slave_0: left allmulticast mode [ 2202.441568][ T2485] bridge_slave_0: left promiscuous mode [ 2202.468948][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.572672][ T2485] tipc: Resetting bearer [ 2204.323382][T14589] Bluetooth: hci6: command tx timeout [ 2205.017397][ T2485] tipc: Disabling bearer [ 2206.017273][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2206.064642][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2206.128208][ T2485] bond0 (unregistering): (slave team0): Releasing backup interface [ 2206.164588][ T2485] bond0 (unregistering): Released all slaves [ 2206.287487][T31249] netlink: 'syz.2.6730': attribute type 4 has an invalid length. [ 2206.413662][T31250] netlink: 'syz.2.6730': attribute type 4 has an invalid length. [ 2206.784706][T31263] fuse: Bad value for 'fd' [ 2207.572330][ T2485] tipc: Left network mode [ 2207.719840][ T29] audit: type=1326 audit(1719735578.910:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31258 comm="syz.3.6733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x0 [ 2207.976552][T31140] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.119575][T31140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.203469][T30274] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2208.258484][T31140] bridge_slave_0: entered allmulticast mode [ 2208.334174][T31140] bridge_slave_0: entered promiscuous mode [ 2208.500776][T30274] usb 3-1: no configurations [ 2208.507298][T31140] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.516171][T30274] usb 3-1: can't read configurations, error -22 [ 2208.539089][T31140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.563639][T31140] bridge_slave_1: entered allmulticast mode [ 2208.753455][T30274] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2209.566699][T31140] bridge_slave_1: entered promiscuous mode [ 2209.594475][T30274] usb 3-1: no configurations [ 2209.651409][T30274] usb 3-1: can't read configurations, error -22 [ 2209.711635][T30274] usb usb3-port1: attempt power cycle [ 2210.377058][ T2485] mac80211_hwsim hwsim87 wlan1: left allmulticast mode [ 2210.557688][T30274] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2210.596075][ T2485] mac80211_hwsim hwsim87 wlan1: left promiscuous mode [ 2210.643809][T30274] usb 3-1: device descriptor read/8, error -71 [ 2210.938970][T31290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6737'. [ 2211.160856][T31309] sctp: [Deprecated]: syz.1.6741 (pid 31309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2211.160856][T31309] Use struct sctp_sack_info instead [ 2211.292802][T31140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2211.568313][T31140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2212.626264][ T29] audit: type=1804 audit(1719735583.060:1571): pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6745" name="/root/syzkaller.P07TBn/87/file0" dev="sda1" ino=2195 res=1 errno=0 [ 2212.776255][T31140] team0: Port device team_slave_0 added [ 2212.790898][T31140] team0: Port device team_slave_1 added [ 2212.811938][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2212.819907][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2212.924772][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2212.984670][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.589643][ T2485] veth0_macvtap: left promiscuous mode [ 2213.705308][ T2485] veth1_vlan: left promiscuous mode [ 2213.717456][ T2485] veth0_vlan: left promiscuous mode [ 2215.397196][T23094] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2215.509598][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 2215.605157][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 2215.636602][T23094] usb 4-1: no configurations [ 2215.641294][T23094] usb 4-1: can't read configurations, error -22 [ 2215.825552][T23094] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2216.016856][T23094] usb 4-1: no configurations [ 2216.026655][T23094] usb 4-1: can't read configurations, error -22 [ 2216.064098][T23094] usb usb4-port1: attempt power cycle [ 2216.483536][T23094] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2216.550672][T23094] usb 4-1: no configurations [ 2216.556260][T23094] usb 4-1: can't read configurations, error -22 [ 2216.738735][T23094] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2216.780558][T23094] usb 4-1: no configurations [ 2216.786597][T23094] usb 4-1: can't read configurations, error -22 [ 2216.796741][T23094] usb usb4-port1: unable to enumerate USB device [ 2217.012503][T31322] netlink: 'syz.4.6744': attribute type 4 has an invalid length. [ 2217.096723][T31320] netlink: 'syz.4.6744': attribute type 4 has an invalid length. [ 2217.115737][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6747'. [ 2217.128588][T31332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2217.137493][T31332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2217.146256][T31332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2217.156976][T31332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2217.165881][T31332] vxlan0: entered promiscuous mode [ 2217.171010][T31332] vxlan0: entered allmulticast mode [ 2217.251593][T31336] pimreg: entered allmulticast mode [ 2217.263200][T31337] pimreg: left allmulticast mode [ 2221.235256][T31140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.242223][T31140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.424181][T31140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.450094][T31140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.465685][T31140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.492889][T31140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.725809][T31363] sctp: [Deprecated]: syz.1.6752 (pid 31363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2221.725809][T31363] Use struct sctp_sack_info instead [ 2222.073845][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.093274][T31140] hsr_slave_0: entered promiscuous mode [ 2222.161826][T31140] hsr_slave_1: entered promiscuous mode [ 2222.267204][T31140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.339737][T31140] Cannot create hsr debugfs directory [ 2223.104710][T31391] netlink: 'syz.3.6760': attribute type 4 has an invalid length. [ 2223.425239][T31391] netlink: 'syz.3.6760': attribute type 4 has an invalid length. [ 2224.206076][T14589] Bluetooth: hci9: command 0x0406 tx timeout [ 2228.268207][T31421] sctp: [Deprecated]: syz.3.6767 (pid 31421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2228.268207][T31421] Use struct sctp_sack_info instead [ 2228.827095][ T2485] bridge_slave_1: left allmulticast mode [ 2228.924080][ T2485] bridge_slave_1: left promiscuous mode [ 2228.944547][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.964887][ T2485] bridge_slave_0: left allmulticast mode [ 2228.970671][ T2485] bridge_slave_0: left promiscuous mode [ 2228.981662][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.468407][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2231.483152][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2231.514799][ T2485] bond0 (unregistering): Released all slaves [ 2231.796559][T31437] netlink: 'syz.2.6772': attribute type 4 has an invalid length. [ 2235.105727][ T2485] hsr_slave_0: left promiscuous mode [ 2235.208023][ T2485] hsr_slave_1: left promiscuous mode [ 2235.487004][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.503631][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2236.254220][T31484] sctp: [Deprecated]: syz.1.6785 (pid 31484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2236.254220][T31484] Use struct sctp_sack_info instead [ 2236.305527][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2236.313046][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2236.417411][ T2485] veth1_macvtap: left promiscuous mode [ 2236.423012][ T2485] veth0_macvtap: left promiscuous mode [ 2236.573674][ T2485] veth1_vlan: left promiscuous mode [ 2236.681273][ T2485] veth0_vlan: left promiscuous mode [ 2238.824967][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 2238.909053][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 2240.173774][T31495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.234176][T31503] netlink: 'syz.3.6791': attribute type 4 has an invalid length. [ 2241.954553][T31140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2242.181831][T31526] pimreg: entered allmulticast mode [ 2242.206373][T31140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2242.719648][T31140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2242.815438][T31520] pimreg: left allmulticast mode [ 2242.896617][ T29] audit: type=1326 audit(1719735614.070:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31532 comm="syz.2.6798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2242.953473][T31140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2243.224730][T31545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2243.774668][T31549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.790895][T31549] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.402315][T31557] sctp: [Deprecated]: syz.3.6802 (pid 31557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2244.402315][T31557] Use struct sctp_sack_info instead [ 2244.423756][T31140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2245.340965][T31140] 8021q: adding VLAN 0 to HW filter on device team0 [ 2247.544056][T31558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.578261][T22488] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.585507][T22488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2247.640512][T22488] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.647762][T22488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2247.806486][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6807'. [ 2248.155813][T31580] pimreg: entered allmulticast mode [ 2248.256793][T31580] pimreg: left allmulticast mode [ 2249.114272][T31604] tipc: Resetting bearer [ 2249.973876][ T29] audit: type=1326 audit(1719735621.150:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31602 comm="syz.2.6813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2250.153077][ T29] audit: type=1326 audit(1719735621.330:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.201200][T31140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2250.213732][ T29] audit: type=1326 audit(1719735621.340:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.313516][ T29] audit: type=1326 audit(1719735621.340:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.328631][T31140] veth0_vlan: entered promiscuous mode [ 2250.376056][T31140] veth1_vlan: entered promiscuous mode [ 2250.419163][T31618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.443652][ T29] audit: type=1326 audit(1719735621.340:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.499815][ T29] audit: type=1326 audit(1719735621.370:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.545164][T31140] veth0_macvtap: entered promiscuous mode [ 2250.590520][T31140] veth1_macvtap: entered promiscuous mode [ 2250.604131][ T29] audit: type=1326 audit(1719735621.380:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.667307][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2250.712996][ T29] audit: type=1326 audit(1719735621.380:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.753459][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2250.782649][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2250.821330][ T29] audit: type=1326 audit(1719735621.380:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.854042][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2250.888272][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2250.911678][ T29] audit: type=1326 audit(1719735621.380:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31611 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd813b75b99 code=0x7ffc0000 [ 2250.934302][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2250.971728][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.010175][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.039168][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.080386][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.104245][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.126243][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.144785][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.159777][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.199019][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.232382][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.279977][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2251.328982][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2251.363627][T22636] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2251.371280][T31140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2252.206128][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.259407][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.273397][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.319501][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2252.355604][T22636] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2252.493488][T22636] usb 4-1: can't read configurations, error -61 [ 2252.493666][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2252.522355][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.343492][T22636] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2253.374340][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.393925][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.413411][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.443438][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.471978][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.518807][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.566308][T31666] sctp: [Deprecated]: syz.2.6826 (pid 31666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2253.566308][T31666] Use struct sctp_sack_info instead [ 2253.582848][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.610588][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.621464][T22636] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2253.639354][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.649546][T22636] usb 4-1: can't read configurations, error -61 [ 2253.657081][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.680253][T22636] usb usb4-port1: attempt power cycle [ 2253.683608][T31140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.893386][T31140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.923044][T31140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2256.227088][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 2256.227105][ T29] audit: type=1326 audit(1719735627.420:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2256.404862][T14589] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2256.417473][T14589] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2256.460083][T14589] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2256.472497][ T29] audit: type=1326 audit(1719735627.420:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2256.517142][T14589] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2256.525093][T14589] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2256.532653][T14589] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2256.630305][ T29] audit: type=1326 audit(1719735627.480:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2256.750789][T31696] overlayfs: failed to resolve './file1': -2 [ 2256.817882][ T29] audit: type=1326 audit(1719735627.480:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2257.019626][ T29] audit: type=1326 audit(1719735627.480:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2257.323542][ T29] audit: type=1326 audit(1719735627.500:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2258.293602][ T29] audit: type=1326 audit(1719735627.510:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2258.363567][ T29] audit: type=1326 audit(1719735627.510:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2260.131605][ T5080] Bluetooth: hci10: command tx timeout [ 2260.643802][ T29] audit: type=1326 audit(1719735627.540:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2260.724605][ T29] audit: type=1326 audit(1719735627.540:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x7ffc0000 [ 2261.007037][T31728] sctp: [Deprecated]: syz.1.6839 (pid 31728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2261.007037][T31728] Use struct sctp_sack_info instead [ 2261.570766][T31690] chnl_net:caif_netlink_parms(): no params data found [ 2262.193559][ T5080] Bluetooth: hci10: command tx timeout [ 2262.779944][T31759] overlayfs: failed to resolve './file1': -2 [ 2262.835868][T31690] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.904646][T31690] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.940635][T31690] bridge_slave_0: entered allmulticast mode [ 2262.952552][T31766] overlayfs: failed to resolve './file0': -2 [ 2262.965700][T31690] bridge_slave_0: entered promiscuous mode [ 2262.991514][T31690] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.093631][T31690] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.113818][T31690] bridge_slave_1: entered allmulticast mode [ 2263.163711][T31690] bridge_slave_1: entered promiscuous mode [ 2263.322390][T31690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2263.412632][T31690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2263.597169][ T2485] bridge_slave_1: left allmulticast mode [ 2263.602884][ T2485] bridge_slave_1: left promiscuous mode [ 2263.611896][T31783] sctp: [Deprecated]: syz.3.6850 (pid 31783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2263.611896][T31783] Use struct sctp_sack_info instead [ 2263.690422][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.780355][ T2485] bridge_slave_0: left allmulticast mode [ 2263.813999][ T2485] bridge_slave_0: left promiscuous mode [ 2263.842800][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.275172][ T5080] Bluetooth: hci10: command tx timeout [ 2265.096544][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 2265.096648][ T29] audit: type=1326 audit(1719735636.100:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31795 comm="syz.2.6854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2266.353773][ T5080] Bluetooth: hci10: command tx timeout [ 2266.659818][ T29] audit: type=1326 audit(1719735637.850:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31802 comm="syz.4.6856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x0 [ 2266.755755][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2266.796865][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2266.844080][ T2485] bond0 (unregistering): Released all slaves [ 2266.965805][T31690] team0: Port device team_slave_0 added [ 2266.990412][T31690] team0: Port device team_slave_1 added [ 2267.146957][ T2485] hsr_slave_0: left promiscuous mode [ 2267.165260][ T2485] hsr_slave_1: left promiscuous mode [ 2267.211647][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2267.246108][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2267.299884][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2267.313880][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2267.395165][T31815] overlayfs: failed to resolve './file0': -2 [ 2267.502293][ T2485] veth1_macvtap: left promiscuous mode [ 2267.520985][ T2485] veth0_macvtap: left promiscuous mode [ 2267.553691][ T2485] veth1_vlan: left promiscuous mode [ 2267.576058][ T2485] veth0_vlan: left promiscuous mode [ 2268.387982][ T5080] Bluetooth: hci8: unexpected event for opcode 0x200b [ 2268.394952][ T29] audit: type=1804 audit(1719735639.580:1628): pid=31823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6863" name="file0" dev="sda1" ino=2183 res=1 errno=0 [ 2270.888548][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 2271.024673][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 2272.205404][T31828] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2272.214267][T31828] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2272.222941][T31828] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2272.231689][T31828] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2272.240475][T31828] vxlan0: entered promiscuous mode [ 2272.246796][T31828] vxlan0: entered allmulticast mode [ 2272.542785][T31690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2272.653507][T31690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.192818][T31690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2273.209990][T31845] sctp: [Deprecated]: syz.2.6869 (pid 31845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2273.209990][T31845] Use struct sctp_sack_info instead [ 2273.369516][T31690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2273.393638][T31690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.490225][T31690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2273.612529][T14589] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 2274.443503][T14589] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2274.754790][T31690] hsr_slave_0: entered promiscuous mode [ 2275.606465][T31690] hsr_slave_1: entered promiscuous mode [ 2275.636441][T31690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2275.667764][ T29] audit: type=1326 audit(1719735646.030:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31867 comm="syz.2.6873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2275.695016][T31690] Cannot create hsr debugfs directory [ 2275.823503][ T29] audit: type=1800 audit(1719735646.980:1630): pid=31883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6876" name="file0" dev="sda1" ino=2195 res=0 errno=0 [ 2275.892192][ T29] audit: type=1804 audit(1719735647.050:1631): pid=31883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6876" name="file0" dev="sda1" ino=2195 res=1 errno=0 [ 2275.983042][ T29] audit: type=1326 audit(1719735647.120:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31881 comm="syz.2.6876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2276.128011][ T29] audit: type=1326 audit(1719735647.310:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31875 comm="syz.4.6875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8567d75b99 code=0x0 [ 2276.685542][ T29] audit: type=1800 audit(1719735647.880:1634): pid=31903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6880" name="bus" dev="sda1" ino=2155 res=0 errno=0 [ 2276.906292][T31909] sctp: [Deprecated]: syz.2.6882 (pid 31909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2276.906292][T31909] Use struct sctp_sack_info instead [ 2278.525933][T31690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2278.588069][T31690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2278.661595][T31690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2278.735704][T31690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2280.022023][T31690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.147304][T31690] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.207828][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.214995][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.319381][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.326613][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.452414][ T29] audit: type=1800 audit(1719735651.640:1635): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6891" name="file0" dev="sda1" ino=2197 res=0 errno=0 [ 2280.581894][ T29] audit: type=1804 audit(1719735651.640:1636): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6891" name="file0" dev="sda1" ino=2197 res=1 errno=0 [ 2280.666204][ T29] audit: type=1326 audit(1719735651.640:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31957 comm="syz.2.6891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2280.992881][T31690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2281.109467][T31969] sctp: [Deprecated]: syz.1.6892 (pid 31969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2281.109467][T31969] Use struct sctp_sack_info instead [ 2281.210998][T31690] veth0_vlan: entered promiscuous mode [ 2281.330123][T31690] veth1_vlan: entered promiscuous mode [ 2281.608981][T31690] veth0_macvtap: entered promiscuous mode [ 2281.633073][T31690] veth1_macvtap: entered promiscuous mode [ 2282.651487][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.809804][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.931421][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.021449][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.032855][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.054242][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.073548][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.101327][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.113503][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.164695][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.175915][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.186833][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.200991][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.222693][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.234902][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.246970][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.257263][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2283.268738][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.287751][T31690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2283.328135][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.353947][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.369303][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.380060][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.390186][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.401881][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.413595][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.437117][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.447183][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.458813][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.473594][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.487466][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.489738][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.497421][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.528978][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.543077][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2283.554936][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2283.716038][T31690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.143372][T31690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.346009][T31690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.386145][T31690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.408089][T31690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.437667][T31690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.463602][T31690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.867530][ T29] audit: type=1326 audit(1719735656.060:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32018 comm="syz.3.6902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x0 [ 2284.891815][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2284.916000][T32033] sctp: [Deprecated]: syz.4.6903 (pid 32033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2284.916000][T32033] Use struct sctp_sack_info instead [ 2284.925851][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.110326][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.152467][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.227774][T32075] tipc: Resetting bearer [ 2293.405517][ T29] audit: type=1804 audit(1719735664.540:1639): pid=32093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.6915" name="/root/syzkaller.fb3PJx/66/bus" dev="sda1" ino=2166 res=1 errno=0 [ 2293.504026][T32100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2293.515859][ T29] audit: type=1804 audit(1719735664.680:1640): pid=32093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.6915" name="/root/syzkaller.fb3PJx/66/bus" dev="sda1" ino=2166 res=1 errno=0 [ 2293.884993][ T29] audit: type=1804 audit(1719735665.080:1641): pid=32108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6920" name="file0" dev="sda1" ino=2199 res=1 errno=0 [ 2298.194512][T32142] sctp: [Deprecated]: syz.0.6929 (pid 32142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2298.194512][T32142] Use struct sctp_sack_info instead [ 2299.429622][ T29] audit: type=1804 audit(1719735670.620:1642): pid=32148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.6932" name="file0" dev="sda1" ino=2184 res=1 errno=0 [ 2306.062381][T32187] tipc: Resetting bearer [ 2306.455165][ T29] audit: type=1804 audit(1719735677.640:1643): pid=32194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.6945" name="file0" dev="sda1" ino=2197 res=1 errno=0 [ 2306.752288][T32207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2307.853401][ T29] audit: type=1326 audit(1719735679.040:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32203 comm="syz.1.6949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2308.296600][T32225] sctp: [Deprecated]: syz.1.6953 (pid 32225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2308.296600][T32225] Use struct sctp_sack_info instead [ 2310.283009][ T5080] Bluetooth: hci8: unexpected event for opcode 0x200b [ 2310.295131][ T29] audit: type=1804 audit(1719735681.490:1645): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6959" name="file0" dev="sda1" ino=2201 res=1 errno=0 [ 2310.789057][T32265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.205924][T32273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.531277][T32276] sctp: [Deprecated]: syz.1.6967 (pid 32276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2311.531277][T32276] Use struct sctp_sack_info instead [ 2313.662088][ T5080] Bluetooth: hci8: unexpected event for opcode 0x200b [ 2313.672334][ T29] audit: type=1804 audit(1719735684.860:1646): pid=32296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.6972" name="file0" dev="sda1" ino=2190 res=1 errno=0 [ 2315.366127][T32316] netlink: 'syz.3.6978': attribute type 4 has an invalid length. [ 2315.497409][ T29] audit: type=1804 audit(1719735686.690:1647): pid=32318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.6977" name="/root/syzkaller.xZI8j5/11/bus" dev="sda1" ino=2199 res=1 errno=0 [ 2315.570416][ T29] audit: type=1804 audit(1719735686.760:1648): pid=32318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.6977" name="/root/syzkaller.xZI8j5/11/bus" dev="sda1" ino=2199 res=1 errno=0 [ 2316.974744][T32333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2317.016069][ T5080] Bluetooth: hci5: unexpected event for opcode 0x2043 [ 2317.147017][ T29] audit: type=1804 audit(1719735688.340:1649): pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.6984" name="file0" dev="sda1" ino=2200 res=1 errno=0 [ 2317.263827][T32344] hsr_slave_0: left promiscuous mode [ 2317.272063][T32344] hsr_slave_1: left promiscuous mode [ 2324.561975][T32396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6996'. [ 2324.632187][T32397] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.6996'. [ 2325.373269][ T5080] Bluetooth: hci5: unexpected event for opcode 0x200b [ 2325.375593][ T29] audit: type=1804 audit(1719735696.570:1650): pid=32400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.6997" name="/root/syzkaller.fb3PJx/83/file0" dev="sda1" ino=2167 res=1 errno=0 [ 2325.631157][ T29] audit: type=1326 audit(1719735696.820:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2325.713847][ T29] audit: type=1326 audit(1719735696.820:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2325.776507][ T29] audit: type=1326 audit(1719735696.820:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2325.820266][T32410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2325.882767][ T29] audit: type=1326 audit(1719735696.820:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2325.934511][T32414] tipc: Resetting bearer [ 2326.081336][ T29] audit: type=1326 audit(1719735696.820:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2326.979167][ T29] audit: type=1326 audit(1719735696.820:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2328.108334][ T29] audit: type=1326 audit(1719735696.820:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2328.250954][ T29] audit: type=1326 audit(1719735696.840:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2329.186212][ T29] audit: type=1326 audit(1719735696.840:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32404 comm="syz.3.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f82c2575b99 code=0x7ffc0000 [ 2329.409540][ T5080] Bluetooth: hci9: unexpected event for opcode 0x0809 [ 2329.759931][ T5080] Bluetooth: hci9: unexpected event 0x01 length: 4 > 1 [ 2331.919737][T32474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2332.302641][T32486] netlink: 'syz.0.7015': attribute type 4 has an invalid length. [ 2332.364224][T32487] netlink: 'syz.0.7015': attribute type 4 has an invalid length. [ 2335.004098][T32528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7025'. [ 2335.555844][ T5080] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 2335.949272][ T5080] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2336.686120][T32545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2337.235463][T32560] netlink: 'syz.0.7032': attribute type 4 has an invalid length. [ 2337.304363][T32560] netlink: 'syz.0.7032': attribute type 4 has an invalid length. [ 2339.683552][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 2339.683573][ T29] audit: type=1800 audit(1719735710.800:1681): pid=32576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.7034" name="file1" dev="sda1" ino=2198 res=0 errno=0 [ 2339.790709][ T29] audit: type=1326 audit(1719735710.930:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32571 comm="syz.0.7037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdac9d75b99 code=0x0 [ 2339.997093][T32594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7039'. [ 2340.639343][ T5080] Bluetooth: hci10: unexpected event 0x01 length: 4 > 1 [ 2342.086382][T32613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2344.211217][T32633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7050'. [ 2344.435653][ T29] audit: type=1326 audit(1719735715.630:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32639 comm="syz.2.7052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2344.465003][ T5080] Bluetooth: hci9: unexpected event for opcode 0x2036 [ 2344.527595][ T29] audit: type=1800 audit(1719735715.670:1684): pid=32641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.7051" name="file1" dev="sda1" ino=2201 res=0 errno=0 [ 2344.617146][ T29] audit: type=1326 audit(1719735715.770:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32635 comm="syz.3.7049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x0 [ 2344.918641][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2346.263864][ T5080] Bluetooth: hci8: unexpected event for opcode 0x0809 [ 2346.355731][ T5080] Bluetooth: hci8: unexpected event 0x01 length: 4 > 1 [ 2347.993469][ T29] audit: type=1326 audit(1719735719.180:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32681 comm="syz.3.7059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c2575b99 code=0x0 [ 2348.202238][T32690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2348.218051][T32691] netlink: 'syz.1.7061': attribute type 4 has an invalid length. [ 2348.923530][ T5080] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 2348.934493][ T5080] Bluetooth: hci9: Injecting HCI hardware error event [ 2348.944489][ T5080] Bluetooth: hci9: hardware error 0x00 [ 2349.453823][ T29] audit: type=1800 audit(1719735720.640:1687): pid=32700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.7064" name="file0" dev="sda1" ino=2190 res=0 errno=0 [ 2349.600951][ T29] audit: type=1804 audit(1719735720.730:1688): pid=32700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.7064" name="file0" dev="sda1" ino=2190 res=1 errno=0 [ 2349.694521][ T29] audit: type=1326 audit(1719735720.780:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32698 comm="syz.1.7064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd813b75b99 code=0x0 [ 2349.795104][ T29] audit: type=1800 audit(1719735720.870:1690): pid=32703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.7065" name="file1" dev="sda1" ino=2191 res=0 errno=0 [ 2350.232643][ T29] audit: type=1326 audit(1719735721.420:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32706 comm="syz.2.7066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbed75b99 code=0x0 [ 2350.315162][T31143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2350.344705][T31143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2350.362142][T31143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2350.373016][T31143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2350.424646][T31143] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2350.434112][T31143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2351.153699][ T5080] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 2351.173208][ T5080] [ 2351.175587][ T5080] ============================================ [ 2351.181738][ T5080] WARNING: possible recursive locking detected [ 2351.187889][ T5080] 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 Not tainted [ 2351.194995][ T5080] -------------------------------------------- [ 2351.201147][ T5080] kworker/u9:2/5080 is trying to acquire lock: [ 2351.207304][ T5080] ffff88804e37e148 ((wq_completion)hci9){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 2351.217169][ T5080] [ 2351.217169][ T5080] but task is already holding lock: [ 2351.224553][ T5080] ffff88804e37e148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2351.234927][ T5080] [ 2351.234927][ T5080] other info that might help us debug this: [ 2351.242994][ T5080] Possible unsafe locking scenario: [ 2351.242994][ T5080] [ 2351.250443][ T5080] CPU0 [ 2351.253712][ T5080] ---- [ 2351.256976][ T5080] lock((wq_completion)hci9); [ 2351.261728][ T5080] lock((wq_completion)hci9); [ 2351.266476][ T5080] [ 2351.266476][ T5080] *** DEADLOCK *** [ 2351.266476][ T5080] [ 2351.274601][ T5080] May be due to missing lock nesting notation [ 2351.274601][ T5080] [ 2351.282903][ T5080] 2 locks held by kworker/u9:2/5080: [ 2351.288169][ T5080] #0: ffff88804e37e148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2351.298952][ T5080] #1: ffffc900041a7d00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2351.311290][ T5080] [ 2351.311290][ T5080] stack backtrace: [ 2351.317172][ T5080] CPU: 0 PID: 5080 Comm: kworker/u9:2 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 2351.327412][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2351.337453][ T5080] Workqueue: hci9 hci_error_reset [ 2351.342481][ T5080] Call Trace: [ 2351.345745][ T5080] [ 2351.348663][ T5080] dump_stack_lvl+0x241/0x360 [ 2351.353338][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2351.358528][ T5080] ? print_deadlock_bug+0x479/0x620 [ 2351.363739][ T5080] validate_chain+0x15d3/0x5900 [ 2351.368585][ T5080] ? __pfx_validate_chain+0x10/0x10 [ 2351.373772][ T5080] ? __pfx_validate_chain+0x10/0x10 [ 2351.378958][ T5080] ? __pfx_validate_chain+0x10/0x10 [ 2351.384146][ T5080] ? __pfx_validate_chain+0x10/0x10 [ 2351.389342][ T5080] ? mark_lock+0x9a/0x350 [ 2351.393659][ T5080] __lock_acquire+0x1346/0x1fd0 [ 2351.398503][ T5080] lock_acquire+0x1ed/0x550 [ 2351.402993][ T5080] ? __flush_workqueue+0x1b0/0x1710 [ 2351.408183][ T5080] ? __pfx_lock_acquire+0x10/0x10 [ 2351.413194][ T5080] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2351.418992][ T5080] ? __init_swait_queue_head+0xae/0x150 [ 2351.424531][ T5080] ? __flush_workqueue+0x1b0/0x1710 [ 2351.429718][ T5080] __flush_workqueue+0x1c9/0x1710 [ 2351.434730][ T5080] ? __flush_workqueue+0x1b0/0x1710 [ 2351.439914][ T5080] ? rcu_is_watching+0x15/0xb0 [ 2351.444663][ T5080] ? trace_contention_end+0x3c/0x120 [ 2351.449938][ T5080] ? __pfx___flush_workqueue+0x10/0x10 [ 2351.455386][ T5080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2351.461352][ T5080] ? rcu_read_unlock_special+0x470/0x550 [ 2351.466974][ T5080] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2351.472958][ T5080] drain_workqueue+0xc9/0x3a0 [ 2351.477629][ T5080] destroy_workqueue+0xba/0xc40 [ 2351.482470][ T5080] ? __rcu_read_unlock+0xa1/0x110 [ 2351.487485][ T5080] hci_release_dev+0x169/0x16b0 [ 2351.492326][ T5080] ? devres_release_all+0x1eb/0x250 [ 2351.497512][ T5080] ? __pfx_hci_release_dev+0x10/0x10 [ 2351.502796][ T5080] ? rcu_is_watching+0x15/0xb0 [ 2351.507556][ T5080] ? device_release+0x66/0x1c0 [ 2351.512310][ T5080] bt_host_release+0x83/0x90 [ 2351.516888][ T5080] ? __pfx_bt_host_release+0x10/0x10 [ 2351.522162][ T5080] device_release+0x99/0x1c0 [ 2351.526829][ T5080] kobject_put+0x22f/0x480 [ 2351.531237][ T5080] ? process_scheduled_works+0x945/0x1830 [ 2351.536962][ T5080] process_scheduled_works+0xa2c/0x1830 [ 2351.542503][ T5080] ? __pfx_process_scheduled_works+0x10/0x10 [ 2351.548470][ T5080] ? assign_work+0x364/0x3d0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 2351.553046][ T5080] worker_thread+0x86d/0xd50 [ 2351.557800][ T5080] ? __kthread_parkme+0x169/0x1d0 [ 2351.562993][ T5080] ? __pfx_worker_thread+0x10/0x10 [ 2351.568090][ T5080] kthread+0x2f0/0x390 [ 2351.572147][ T5080] ? __pfx_worker_thread+0x10/0x10 [ 2351.577243][ T5080] ? __pfx_kthread+0x10/0x10 [ 2351.581818][ T5080] ret_from_fork+0x4b/0x80 [ 2351.586224][ T5080] ? __pfx_kthread+0x10/0x10 [ 2351.590800][ T5080] ret_from_fork_asm+0x1a/0x30 [ 2351.595556][ T5080]