Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '[localhost]:12532' (ECDSA) to the list of known hosts. 2021/07/14 16:52:47 fuzzer started 2021/07/14 16:52:47 dialing manager at localhost:36223 2021/07/14 16:52:48 syscalls: 3639 2021/07/14 16:52:48 code coverage: enabled 2021/07/14 16:52:48 comparison tracing: enabled 2021/07/14 16:52:48 extra coverage: enabled 2021/07/14 16:52:48 setuid sandbox: enabled 2021/07/14 16:52:48 namespace sandbox: enabled 2021/07/14 16:52:48 Android sandbox: /sys/fs/selinux/policy does not exist 2021/07/14 16:52:48 fault injection: enabled 2021/07/14 16:52:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/07/14 16:52:48 net packet injection: enabled 2021/07/14 16:52:48 net device setup: enabled 2021/07/14 16:52:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/07/14 16:52:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/07/14 16:52:48 USB emulation: enabled 2021/07/14 16:52:48 hci packet injection: enabled 2021/07/14 16:52:48 wifi device emulation: enabled 2021/07/14 16:52:48 802.15.4 emulation: enabled 2021/07/14 16:52:48 fetching corpus: 0, signal 0/2000 (executing program) 2021/07/14 16:52:48 fetching corpus: 50, signal 42514/46311 (executing program) 2021/07/14 16:52:48 fetching corpus: 100, signal 64030/69536 (executing program) 2021/07/14 16:52:48 fetching corpus: 150, signal 78795/85964 (executing program) 2021/07/14 16:52:48 fetching corpus: 200, signal 92337/101049 (executing program) 2021/07/14 16:52:49 fetching corpus: 250, signal 103889/114137 (executing program) 2021/07/14 16:52:49 fetching corpus: 300, signal 114993/126743 (executing program) 2021/07/14 16:52:49 fetching corpus: 350, signal 124869/138076 (executing program) 2021/07/14 16:52:50 fetching corpus: 400, signal 133259/147897 (executing program) 2021/07/14 16:52:51 fetching corpus: 450, signal 139262/155384 (executing program) 2021/07/14 16:52:51 fetching corpus: 500, signal 145947/163486 (executing program) 2021/07/14 16:52:51 fetching corpus: 550, signal 153076/171948 (executing program) 2021/07/14 16:52:51 fetching corpus: 600, signal 159752/179982 (executing program) 2021/07/14 16:52:52 fetching corpus: 650, signal 166651/188133 (executing program) 2021/07/14 16:52:52 fetching corpus: 700, signal 172655/195436 (executing program) 2021/07/14 16:52:52 fetching corpus: 750, signal 178717/202748 (executing program) 2021/07/14 16:52:52 fetching corpus: 800, signal 186560/211730 (executing program) 2021/07/14 16:52:52 fetching corpus: 850, signal 190797/217219 (executing program) 2021/07/14 16:52:53 fetching corpus: 900, signal 194384/222076 (executing program) 2021/07/14 16:52:53 fetching corpus: 950, signal 202310/230997 (executing program) 2021/07/14 16:52:53 fetching corpus: 1000, signal 207080/236921 (executing program) 2021/07/14 16:52:53 fetching corpus: 1050, signal 212490/243436 (executing program) 2021/07/14 16:52:54 fetching corpus: 1100, signal 216662/248704 (executing program) 2021/07/14 16:52:54 fetching corpus: 1150, signal 220586/253803 (executing program) 2021/07/14 16:52:54 fetching corpus: 1200, signal 227257/261330 (executing program) 2021/07/14 16:52:54 fetching corpus: 1250, signal 229671/264929 (executing program) 2021/07/14 16:52:54 fetching corpus: 1300, signal 233781/270100 (executing program) 2021/07/14 16:52:55 fetching corpus: 1350, signal 236855/274267 (executing program) 2021/07/14 16:52:55 fetching corpus: 1400, signal 239189/277766 (executing program) 2021/07/14 16:52:55 fetching corpus: 1450, signal 242727/282309 (executing program) 2021/07/14 16:52:55 fetching corpus: 1500, signal 245903/286529 (executing program) 2021/07/14 16:52:55 fetching corpus: 1550, signal 249335/290978 (executing program) 2021/07/14 16:52:56 fetching corpus: 1600, signal 251926/294632 (executing program) 2021/07/14 16:52:56 fetching corpus: 1650, signal 254599/298352 (executing program) 2021/07/14 16:52:56 fetching corpus: 1700, signal 258541/303199 (executing program) 2021/07/14 16:52:56 fetching corpus: 1750, signal 260726/306400 (executing program) 2021/07/14 16:52:56 fetching corpus: 1800, signal 263993/310568 (executing program) 2021/07/14 16:52:57 fetching corpus: 1850, signal 266795/314307 (executing program) 2021/07/14 16:52:57 fetching corpus: 1900, signal 269201/317670 (executing program) 2021/07/14 16:52:57 fetching corpus: 1950, signal 273456/322638 (executing program) 2021/07/14 16:52:57 fetching corpus: 2000, signal 276698/326728 (executing program) 2021/07/14 16:52:57 fetching corpus: 2050, signal 278062/329127 (executing program) 2021/07/14 16:52:57 fetching corpus: 2100, signal 280463/332476 (executing program) 2021/07/14 16:52:58 fetching corpus: 2150, signal 284018/336762 (executing program) 2021/07/14 16:52:58 fetching corpus: 2200, signal 285468/339245 (executing program) 2021/07/14 16:52:58 fetching corpus: 2250, signal 287436/342171 (executing program) 2021/07/14 16:52:58 fetching corpus: 2300, signal 288901/344678 (executing program) 2021/07/14 16:52:59 fetching corpus: 2350, signal 290582/347288 (executing program) 2021/07/14 16:52:59 fetching corpus: 2400, signal 294624/351871 (executing program) 2021/07/14 16:52:59 fetching corpus: 2450, signal 299778/357453 (executing program) 2021/07/14 16:52:59 fetching corpus: 2500, signal 301701/360255 (executing program) 2021/07/14 16:53:00 fetching corpus: 2550, signal 303398/362848 (executing program) 2021/07/14 16:53:00 fetching corpus: 2600, signal 305245/365574 (executing program) 2021/07/14 16:53:00 fetching corpus: 2650, signal 306462/367707 (executing program) 2021/07/14 16:53:00 fetching corpus: 2700, signal 308673/370722 (executing program) 2021/07/14 16:53:01 fetching corpus: 2750, signal 310759/373600 (executing program) 2021/07/14 16:53:01 fetching corpus: 2800, signal 312148/375863 (executing program) 2021/07/14 16:53:01 fetching corpus: 2850, signal 313654/378234 (executing program) 2021/07/14 16:53:01 fetching corpus: 2900, signal 314867/380372 (executing program) 2021/07/14 16:53:01 fetching corpus: 2950, signal 316954/383188 (executing program) 2021/07/14 16:53:02 fetching corpus: 3000, signal 318235/385340 (executing program) syzkaller login: [ 102.369776][ T3406] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.379942][ T3406] ieee802154 phy1 wpan1: encryption failed: -22 2021/07/14 16:53:02 fetching corpus: 3050, signal 321288/388947 (executing program) 2021/07/14 16:53:02 fetching corpus: 3100, signal 324248/392429 (executing program) 2021/07/14 16:53:02 fetching corpus: 3150, signal 327460/396185 (executing program) 2021/07/14 16:53:02 fetching corpus: 3200, signal 329543/398982 (executing program) 2021/07/14 16:53:03 fetching corpus: 3250, signal 331115/401297 (executing program) 2021/07/14 16:53:03 fetching corpus: 3300, signal 334966/405474 (executing program) 2021/07/14 16:53:03 fetching corpus: 3350, signal 336308/407636 (executing program) 2021/07/14 16:53:03 fetching corpus: 3400, signal 339018/410867 (executing program) 2021/07/14 16:53:03 fetching corpus: 3450, signal 342303/414556 (executing program) 2021/07/14 16:53:04 fetching corpus: 3500, signal 343546/416560 (executing program) 2021/07/14 16:53:04 fetching corpus: 3550, signal 346325/419800 (executing program) 2021/07/14 16:53:04 fetching corpus: 3600, signal 347638/421866 (executing program) 2021/07/14 16:53:04 fetching corpus: 3650, signal 349340/424231 (executing program) 2021/07/14 16:53:04 fetching corpus: 3700, signal 355429/430085 (executing program) 2021/07/14 16:53:05 fetching corpus: 3750, signal 356859/432201 (executing program) 2021/07/14 16:53:05 fetching corpus: 3800, signal 357847/434003 (executing program) 2021/07/14 16:53:05 fetching corpus: 3850, signal 360240/436865 (executing program) 2021/07/14 16:53:05 fetching corpus: 3900, signal 361460/438820 (executing program) 2021/07/14 16:53:05 fetching corpus: 3950, signal 362839/440848 (executing program) 2021/07/14 16:53:06 fetching corpus: 4000, signal 365638/443985 (executing program) 2021/07/14 16:53:06 fetching corpus: 4050, signal 368127/446877 (executing program) 2021/07/14 16:53:06 fetching corpus: 4100, signal 369607/448976 (executing program) 2021/07/14 16:53:06 fetching corpus: 4150, signal 371341/451323 (executing program) 2021/07/14 16:53:06 fetching corpus: 4200, signal 372992/453530 (executing program) 2021/07/14 16:53:07 fetching corpus: 4250, signal 374290/455480 (executing program) 2021/07/14 16:53:07 fetching corpus: 4300, signal 380541/461119 (executing program) 2021/07/14 16:53:07 fetching corpus: 4350, signal 382093/463254 (executing program) 2021/07/14 16:53:07 fetching corpus: 4400, signal 386012/467155 (executing program) 2021/07/14 16:53:07 fetching corpus: 4450, signal 387433/469175 (executing program) 2021/07/14 16:53:07 fetching corpus: 4500, signal 388684/471036 (executing program) 2021/07/14 16:53:08 fetching corpus: 4550, signal 390149/473063 (executing program) 2021/07/14 16:53:08 fetching corpus: 4600, signal 391865/475290 (executing program) 2021/07/14 16:53:08 fetching corpus: 4650, signal 394146/477855 (executing program) 2021/07/14 16:53:08 fetching corpus: 4700, signal 395963/480165 (executing program) 2021/07/14 16:53:08 fetching corpus: 4750, signal 398247/482717 (executing program) 2021/07/14 16:53:09 fetching corpus: 4800, signal 399652/484623 (executing program) 2021/07/14 16:53:09 fetching corpus: 4850, signal 400578/486137 (executing program) 2021/07/14 16:53:09 fetching corpus: 4900, signal 401616/487786 (executing program) 2021/07/14 16:53:09 fetching corpus: 4950, signal 403020/489733 (executing program) 2021/07/14 16:53:09 fetching corpus: 5000, signal 404418/491595 (executing program) 2021/07/14 16:53:10 fetching corpus: 5050, signal 405592/493313 (executing program) 2021/07/14 16:53:10 fetching corpus: 5100, signal 407001/495159 (executing program) 2021/07/14 16:53:10 fetching corpus: 5150, signal 408126/496874 (executing program) 2021/07/14 16:53:10 fetching corpus: 5200, signal 409873/498980 (executing program) 2021/07/14 16:53:10 fetching corpus: 5250, signal 413063/502100 (executing program) 2021/07/14 16:53:11 fetching corpus: 5300, signal 414622/504038 (executing program) 2021/07/14 16:53:11 fetching corpus: 5350, signal 417102/506578 (executing program) 2021/07/14 16:53:11 fetching corpus: 5400, signal 418718/508508 (executing program) 2021/07/14 16:53:11 fetching corpus: 5450, signal 419857/510125 (executing program) 2021/07/14 16:53:11 fetching corpus: 5500, signal 421027/511737 (executing program) 2021/07/14 16:53:12 fetching corpus: 5550, signal 422673/513689 (executing program) 2021/07/14 16:53:12 fetching corpus: 5600, signal 424019/515425 (executing program) 2021/07/14 16:53:12 fetching corpus: 5650, signal 425039/516940 (executing program) 2021/07/14 16:53:12 fetching corpus: 5700, signal 427044/519100 (executing program) 2021/07/14 16:53:13 fetching corpus: 5750, signal 428770/521056 (executing program) 2021/07/14 16:53:13 fetching corpus: 5800, signal 430566/523015 (executing program) 2021/07/14 16:53:13 fetching corpus: 5850, signal 431701/524589 (executing program) 2021/07/14 16:53:13 fetching corpus: 5900, signal 434945/527530 (executing program) 2021/07/14 16:53:14 fetching corpus: 5950, signal 435818/528830 (executing program) 2021/07/14 16:53:14 fetching corpus: 6000, signal 436664/530188 (executing program) 2021/07/14 16:53:14 fetching corpus: 6050, signal 437480/531484 (executing program) 2021/07/14 16:53:14 fetching corpus: 6100, signal 438268/532769 (executing program) 2021/07/14 16:53:15 fetching corpus: 6150, signal 440240/534783 (executing program) 2021/07/14 16:53:15 fetching corpus: 6200, signal 441753/536510 (executing program) 2021/07/14 16:53:15 fetching corpus: 6250, signal 442620/537823 (executing program) 2021/07/14 16:53:15 fetching corpus: 6300, signal 444004/539487 (executing program) 2021/07/14 16:53:16 fetching corpus: 6350, signal 444938/540819 (executing program) 2021/07/14 16:53:16 fetching corpus: 6400, signal 447032/542931 (executing program) 2021/07/14 16:53:16 fetching corpus: 6450, signal 447972/544241 (executing program) 2021/07/14 16:53:16 fetching corpus: 6500, signal 448868/545537 (executing program) 2021/07/14 16:53:16 fetching corpus: 6550, signal 449845/546884 (executing program) 2021/07/14 16:53:17 fetching corpus: 6600, signal 451505/548633 (executing program) 2021/07/14 16:53:17 fetching corpus: 6650, signal 452778/550160 (executing program) 2021/07/14 16:53:17 fetching corpus: 6700, signal 453913/551624 (executing program) 2021/07/14 16:53:17 fetching corpus: 6750, signal 454721/552851 (executing program) 2021/07/14 16:53:18 fetching corpus: 6800, signal 455836/554241 (executing program) 2021/07/14 16:53:18 fetching corpus: 6850, signal 457345/555883 (executing program) 2021/07/14 16:53:18 fetching corpus: 6900, signal 458378/557213 (executing program) 2021/07/14 16:53:18 fetching corpus: 6950, signal 459289/558452 (executing program) 2021/07/14 16:53:19 fetching corpus: 7000, signal 460531/559897 (executing program) 2021/07/14 16:53:19 fetching corpus: 7050, signal 461633/561279 (executing program) 2021/07/14 16:53:19 fetching corpus: 7100, signal 462370/562379 (executing program) 2021/07/14 16:53:19 fetching corpus: 7150, signal 463882/563992 (executing program) 2021/07/14 16:53:20 fetching corpus: 7200, signal 465009/565290 (executing program) 2021/07/14 16:53:20 fetching corpus: 7250, signal 465723/566381 (executing program) 2021/07/14 16:53:20 fetching corpus: 7300, signal 466514/567484 (executing program) 2021/07/14 16:53:20 fetching corpus: 7350, signal 467568/568762 (executing program) 2021/07/14 16:53:21 fetching corpus: 7400, signal 468735/570134 (executing program) 2021/07/14 16:53:21 fetching corpus: 7450, signal 469957/571495 (executing program) 2021/07/14 16:53:21 fetching corpus: 7500, signal 471078/572848 (executing program) 2021/07/14 16:53:21 fetching corpus: 7550, signal 471846/573920 (executing program) 2021/07/14 16:53:22 fetching corpus: 7600, signal 472321/574846 (executing program) 2021/07/14 16:53:22 fetching corpus: 7650, signal 473396/576099 (executing program) 2021/07/14 16:53:22 fetching corpus: 7700, signal 474170/577244 (executing program) 2021/07/14 16:53:22 fetching corpus: 7750, signal 475014/578390 (executing program) 2021/07/14 16:53:22 fetching corpus: 7800, signal 475542/579346 (executing program) 2021/07/14 16:53:23 fetching corpus: 7850, signal 476196/580374 (executing program) 2021/07/14 16:53:23 fetching corpus: 7900, signal 477429/581703 (executing program) 2021/07/14 16:53:23 fetching corpus: 7950, signal 478146/582753 (executing program) 2021/07/14 16:53:23 fetching corpus: 8000, signal 479277/583987 (executing program) 2021/07/14 16:53:23 fetching corpus: 8050, signal 479954/584970 (executing program) 2021/07/14 16:53:24 fetching corpus: 8100, signal 480909/586143 (executing program) 2021/07/14 16:53:24 fetching corpus: 8150, signal 482095/587383 (executing program) 2021/07/14 16:53:24 fetching corpus: 8200, signal 482832/588427 (executing program) 2021/07/14 16:53:24 fetching corpus: 8250, signal 484870/590155 (executing program) 2021/07/14 16:53:24 fetching corpus: 8300, signal 486212/591515 (executing program) 2021/07/14 16:53:25 fetching corpus: 8350, signal 487124/592601 (executing program) 2021/07/14 16:53:25 fetching corpus: 8400, signal 488460/593914 (executing program) 2021/07/14 16:53:25 fetching corpus: 8450, signal 489467/595055 (executing program) 2021/07/14 16:53:25 fetching corpus: 8500, signal 490887/596383 (executing program) 2021/07/14 16:53:25 fetching corpus: 8550, signal 491645/597376 (executing program) 2021/07/14 16:53:25 fetching corpus: 8600, signal 492694/598511 (executing program) 2021/07/14 16:53:26 fetching corpus: 8650, signal 493671/599632 (executing program) 2021/07/14 16:53:26 fetching corpus: 8700, signal 494349/600532 (executing program) 2021/07/14 16:53:26 fetching corpus: 8750, signal 495119/601514 (executing program) 2021/07/14 16:53:26 fetching corpus: 8800, signal 496691/602957 (executing program) 2021/07/14 16:53:27 fetching corpus: 8850, signal 497434/603914 (executing program) 2021/07/14 16:53:27 fetching corpus: 8900, signal 499613/605596 (executing program) 2021/07/14 16:53:27 fetching corpus: 8950, signal 500415/606574 (executing program) 2021/07/14 16:53:27 fetching corpus: 9000, signal 500858/607389 (executing program) 2021/07/14 16:53:27 fetching corpus: 9050, signal 501634/608374 (executing program) 2021/07/14 16:53:27 fetching corpus: 9100, signal 502089/609202 (executing program) 2021/07/14 16:53:28 fetching corpus: 9150, signal 503441/610456 (executing program) 2021/07/14 16:53:28 fetching corpus: 9200, signal 505178/611914 (executing program) 2021/07/14 16:53:28 fetching corpus: 9250, signal 505837/612799 (executing program) 2021/07/14 16:53:28 fetching corpus: 9300, signal 506758/613777 (executing program) 2021/07/14 16:53:29 fetching corpus: 9350, signal 507692/614790 (executing program) 2021/07/14 16:53:29 fetching corpus: 9400, signal 508934/615971 (executing program) 2021/07/14 16:53:29 fetching corpus: 9450, signal 510240/617147 (executing program) 2021/07/14 16:53:29 fetching corpus: 9500, signal 511166/618174 (executing program) 2021/07/14 16:53:30 fetching corpus: 9550, signal 512347/619316 (executing program) 2021/07/14 16:53:30 fetching corpus: 9600, signal 513216/620244 (executing program) 2021/07/14 16:53:30 fetching corpus: 9650, signal 513916/621164 (executing program) 2021/07/14 16:53:30 fetching corpus: 9700, signal 514948/622172 (executing program) 2021/07/14 16:53:30 fetching corpus: 9750, signal 515713/623104 (executing program) 2021/07/14 16:53:30 fetching corpus: 9800, signal 517786/624609 (executing program) 2021/07/14 16:53:31 fetching corpus: 9850, signal 518563/625519 (executing program) 2021/07/14 16:53:31 fetching corpus: 9900, signal 519289/626379 (executing program) 2021/07/14 16:53:31 fetching corpus: 9950, signal 520269/627337 (executing program) 2021/07/14 16:53:31 fetching corpus: 10000, signal 520761/628079 (executing program) 2021/07/14 16:53:31 fetching corpus: 10050, signal 521435/628923 (executing program) 2021/07/14 16:53:32 fetching corpus: 10100, signal 522659/629955 (executing program) 2021/07/14 16:53:32 fetching corpus: 10150, signal 523419/630783 (executing program) 2021/07/14 16:53:32 fetching corpus: 10200, signal 523934/631536 (executing program) 2021/07/14 16:53:32 fetching corpus: 10250, signal 524896/632504 (executing program) 2021/07/14 16:53:32 fetching corpus: 10300, signal 525742/633372 (executing program) 2021/07/14 16:53:32 fetching corpus: 10350, signal 526462/634183 (executing program) 2021/07/14 16:53:33 fetching corpus: 10400, signal 527048/634931 (executing program) 2021/07/14 16:53:33 fetching corpus: 10450, signal 527646/635715 (executing program) 2021/07/14 16:53:33 fetching corpus: 10500, signal 528612/636635 (executing program) 2021/07/14 16:53:33 fetching corpus: 10550, signal 529248/637441 (executing program) 2021/07/14 16:53:33 fetching corpus: 10600, signal 530206/638337 (executing program) 2021/07/14 16:53:33 fetching corpus: 10650, signal 531070/639161 (executing program) 2021/07/14 16:53:34 fetching corpus: 10700, signal 531895/639979 (executing program) 2021/07/14 16:53:34 fetching corpus: 10750, signal 532784/640833 (executing program) 2021/07/14 16:53:34 fetching corpus: 10800, signal 533507/641661 (executing program) 2021/07/14 16:53:35 fetching corpus: 10850, signal 535039/642770 (executing program) 2021/07/14 16:53:35 fetching corpus: 10900, signal 535456/643446 (executing program) 2021/07/14 16:53:35 fetching corpus: 10950, signal 536126/644193 (executing program) 2021/07/14 16:53:35 fetching corpus: 11000, signal 536731/644919 (executing program) 2021/07/14 16:53:36 fetching corpus: 11050, signal 537666/645687 (executing program) 2021/07/14 16:53:36 fetching corpus: 11100, signal 538455/646492 (executing program) 2021/07/14 16:53:36 fetching corpus: 11150, signal 538995/647172 (executing program) 2021/07/14 16:53:36 fetching corpus: 11200, signal 539455/647817 (executing program) 2021/07/14 16:53:36 fetching corpus: 11250, signal 540129/648556 (executing program) 2021/07/14 16:53:37 fetching corpus: 11300, signal 540628/649206 (executing program) 2021/07/14 16:53:37 fetching corpus: 11350, signal 541248/649896 (executing program) 2021/07/14 16:53:37 fetching corpus: 11400, signal 541844/650546 (executing program) 2021/07/14 16:53:37 fetching corpus: 11450, signal 542436/651271 (executing program) 2021/07/14 16:53:37 fetching corpus: 11500, signal 543960/652296 (executing program) 2021/07/14 16:53:38 fetching corpus: 11550, signal 544741/653001 (executing program) 2021/07/14 16:53:38 fetching corpus: 11600, signal 545288/653654 (executing program) 2021/07/14 16:53:38 fetching corpus: 11650, signal 546219/654450 (executing program) 2021/07/14 16:53:38 fetching corpus: 11700, signal 546866/655078 (executing program) 2021/07/14 16:53:38 fetching corpus: 11750, signal 547424/655684 (executing program) 2021/07/14 16:53:39 fetching corpus: 11800, signal 548056/656354 (executing program) 2021/07/14 16:53:39 fetching corpus: 11850, signal 549383/657222 (executing program) 2021/07/14 16:53:39 fetching corpus: 11900, signal 550098/657905 (executing program) 2021/07/14 16:53:39 fetching corpus: 11950, signal 550600/658526 (executing program) 2021/07/14 16:53:40 fetching corpus: 12000, signal 551069/659122 (executing program) 2021/07/14 16:53:40 fetching corpus: 12050, signal 551693/659750 (executing program) 2021/07/14 16:53:40 fetching corpus: 12100, signal 552268/660396 (executing program) 2021/07/14 16:53:40 fetching corpus: 12150, signal 553314/661132 (executing program) 2021/07/14 16:53:40 fetching corpus: 12200, signal 553992/661822 (executing program) 2021/07/14 16:53:41 fetching corpus: 12250, signal 555306/662646 (executing program) 2021/07/14 16:53:41 fetching corpus: 12300, signal 555786/663232 (executing program) 2021/07/14 16:53:41 fetching corpus: 12350, signal 556577/663946 (executing program) 2021/07/14 16:53:42 fetching corpus: 12400, signal 556923/664491 (executing program) 2021/07/14 16:53:42 fetching corpus: 12450, signal 557705/665118 (executing program) 2021/07/14 16:53:43 fetching corpus: 12500, signal 558310/665694 (executing program) 2021/07/14 16:53:43 fetching corpus: 12550, signal 558776/666236 (executing program) 2021/07/14 16:53:43 fetching corpus: 12600, signal 559274/666812 (executing program) 2021/07/14 16:53:43 fetching corpus: 12650, signal 559993/667448 (executing program) 2021/07/14 16:53:44 fetching corpus: 12700, signal 560511/668022 (executing program) 2021/07/14 16:53:44 fetching corpus: 12750, signal 561453/668686 (executing program) 2021/07/14 16:53:44 fetching corpus: 12800, signal 561867/669235 (executing program) 2021/07/14 16:53:44 fetching corpus: 12850, signal 562353/669754 (executing program) 2021/07/14 16:53:45 fetching corpus: 12900, signal 562802/670289 (executing program) 2021/07/14 16:53:45 fetching corpus: 12950, signal 563212/670805 (executing program) 2021/07/14 16:53:45 fetching corpus: 13000, signal 563782/671364 (executing program) 2021/07/14 16:53:45 fetching corpus: 13050, signal 564775/672018 (executing program) 2021/07/14 16:53:46 fetching corpus: 13100, signal 565445/672573 (executing program) 2021/07/14 16:53:46 fetching corpus: 13150, signal 565929/673126 (executing program) 2021/07/14 16:53:46 fetching corpus: 13200, signal 566738/673704 (executing program) 2021/07/14 16:53:46 fetching corpus: 13250, signal 567461/674302 (executing program) 2021/07/14 16:53:47 fetching corpus: 13300, signal 568532/674965 (executing program) 2021/07/14 16:53:47 fetching corpus: 13350, signal 569015/675506 (executing program) 2021/07/14 16:53:47 fetching corpus: 13400, signal 569898/676121 (executing program) 2021/07/14 16:53:47 fetching corpus: 13450, signal 570438/676653 (executing program) 2021/07/14 16:53:48 fetching corpus: 13500, signal 570948/677147 (executing program) 2021/07/14 16:53:48 fetching corpus: 13550, signal 571869/677757 (executing program) 2021/07/14 16:53:48 fetching corpus: 13600, signal 573616/678569 (executing program) 2021/07/14 16:53:48 fetching corpus: 13650, signal 574450/679181 (executing program) 2021/07/14 16:53:48 fetching corpus: 13700, signal 574888/679673 (executing program) 2021/07/14 16:53:49 fetching corpus: 13750, signal 575288/680106 (executing program) 2021/07/14 16:53:49 fetching corpus: 13800, signal 575827/680618 (executing program) 2021/07/14 16:53:49 fetching corpus: 13850, signal 576348/681109 (executing program) 2021/07/14 16:53:49 fetching corpus: 13900, signal 576792/681591 (executing program) 2021/07/14 16:53:49 fetching corpus: 13950, signal 577623/682156 (executing program) 2021/07/14 16:53:50 fetching corpus: 14000, signal 578304/682654 (executing program) 2021/07/14 16:53:50 fetching corpus: 14050, signal 578778/683081 (executing program) 2021/07/14 16:53:50 fetching corpus: 14100, signal 579952/683670 (executing program) 2021/07/14 16:53:50 fetching corpus: 14150, signal 580487/684154 (executing program) 2021/07/14 16:53:50 fetching corpus: 14200, signal 581297/684681 (executing program) 2021/07/14 16:53:51 fetching corpus: 14250, signal 582233/685228 (executing program) 2021/07/14 16:53:51 fetching corpus: 14300, signal 583002/685736 (executing program) 2021/07/14 16:53:51 fetching corpus: 14350, signal 583637/686226 (executing program) 2021/07/14 16:53:51 fetching corpus: 14400, signal 584733/686831 (executing program) 2021/07/14 16:53:52 fetching corpus: 14450, signal 585403/687280 (executing program) 2021/07/14 16:53:52 fetching corpus: 14500, signal 586272/687762 (executing program) 2021/07/14 16:53:52 fetching corpus: 14550, signal 586541/688177 (executing program) 2021/07/14 16:53:52 fetching corpus: 14600, signal 586914/688575 (executing program) 2021/07/14 16:53:52 fetching corpus: 14650, signal 587552/689048 (executing program) 2021/07/14 16:53:53 fetching corpus: 14700, signal 587979/689467 (executing program) 2021/07/14 16:53:53 fetching corpus: 14750, signal 588705/689934 (executing program) 2021/07/14 16:53:53 fetching corpus: 14800, signal 589311/690387 (executing program) 2021/07/14 16:53:53 fetching corpus: 14850, signal 589763/690786 (executing program) 2021/07/14 16:53:53 fetching corpus: 14900, signal 590353/691201 (executing program) 2021/07/14 16:53:54 fetching corpus: 14950, signal 590765/691602 (executing program) 2021/07/14 16:53:54 fetching corpus: 15000, signal 591128/692002 (executing program) 2021/07/14 16:53:54 fetching corpus: 15050, signal 592075/692441 (executing program) 2021/07/14 16:53:55 fetching corpus: 15100, signal 592463/692849 (executing program) 2021/07/14 16:53:55 fetching corpus: 15150, signal 593165/693286 (executing program) 2021/07/14 16:53:55 fetching corpus: 15200, signal 594018/693719 (executing program) 2021/07/14 16:53:55 fetching corpus: 15250, signal 594501/694079 (executing program) 2021/07/14 16:53:55 fetching corpus: 15300, signal 595530/694534 (executing program) 2021/07/14 16:53:56 fetching corpus: 15350, signal 596077/694952 (executing program) 2021/07/14 16:53:56 fetching corpus: 15400, signal 596814/695377 (executing program) 2021/07/14 16:53:56 fetching corpus: 15450, signal 597173/695733 (executing program) 2021/07/14 16:53:56 fetching corpus: 15500, signal 597627/696116 (executing program) 2021/07/14 16:53:56 fetching corpus: 15550, signal 598146/696475 (executing program) 2021/07/14 16:53:57 fetching corpus: 15600, signal 598640/696857 (executing program) 2021/07/14 16:53:57 fetching corpus: 15650, signal 598960/697207 (executing program) 2021/07/14 16:53:57 fetching corpus: 15700, signal 599450/697555 (executing program) 2021/07/14 16:53:57 fetching corpus: 15750, signal 599866/697916 (executing program) 2021/07/14 16:53:58 fetching corpus: 15800, signal 600425/698295 (executing program) 2021/07/14 16:53:58 fetching corpus: 15850, signal 600801/698634 (executing program) 2021/07/14 16:53:58 fetching corpus: 15900, signal 601536/698994 (executing program) 2021/07/14 16:53:59 fetching corpus: 15950, signal 602232/699379 (executing program) 2021/07/14 16:53:59 fetching corpus: 16000, signal 602698/699713 (executing program) 2021/07/14 16:53:59 fetching corpus: 16050, signal 603344/700055 (executing program) 2021/07/14 16:54:00 fetching corpus: 16100, signal 605133/700540 (executing program) 2021/07/14 16:54:00 fetching corpus: 16150, signal 606179/700943 (executing program) 2021/07/14 16:54:00 fetching corpus: 16200, signal 606542/701279 (executing program) 2021/07/14 16:54:00 fetching corpus: 16250, signal 607034/701619 (executing program) 2021/07/14 16:54:01 fetching corpus: 16300, signal 607499/701922 (executing program) 2021/07/14 16:54:01 fetching corpus: 16350, signal 608121/702261 (executing program) 2021/07/14 16:54:01 fetching corpus: 16400, signal 608481/702564 (executing program) 2021/07/14 16:54:01 fetching corpus: 16450, signal 609154/702892 (executing program) 2021/07/14 16:54:02 fetching corpus: 16500, signal 609544/703213 (executing program) 2021/07/14 16:54:02 fetching corpus: 16550, signal 610207/703559 (executing program) 2021/07/14 16:54:02 fetching corpus: 16600, signal 611151/703893 (executing program) 2021/07/14 16:54:02 fetching corpus: 16650, signal 611645/704214 (executing program) 2021/07/14 16:54:03 fetching corpus: 16700, signal 612238/704541 (executing program) 2021/07/14 16:54:03 fetching corpus: 16750, signal 613069/704881 (executing program) [ 163.806748][ T3406] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.814575][ T3406] ieee802154 phy1 wpan1: encryption failed: -22 2021/07/14 16:54:03 fetching corpus: 16800, signal 613620/705168 (executing program) 2021/07/14 16:54:03 fetching corpus: 16850, signal 613923/705431 (executing program) 2021/07/14 16:54:04 fetching corpus: 16900, signal 614574/705732 (executing program) 2021/07/14 16:54:04 fetching corpus: 16950, signal 615163/706035 (executing program) 2021/07/14 16:54:04 fetching corpus: 17000, signal 616030/706347 (executing program) 2021/07/14 16:54:05 fetching corpus: 17050, signal 616568/706637 (executing program) 2021/07/14 16:54:05 fetching corpus: 17100, signal 616985/706908 (executing program) 2021/07/14 16:54:05 fetching corpus: 17150, signal 617437/707199 (executing program) 2021/07/14 16:54:05 fetching corpus: 17200, signal 617972/707483 (executing program) 2021/07/14 16:54:06 fetching corpus: 17250, signal 618737/707759 (executing program) 2021/07/14 16:54:06 fetching corpus: 17300, signal 619282/708020 (executing program) 2021/07/14 16:54:06 fetching corpus: 17350, signal 619646/708290 (executing program) 2021/07/14 16:54:06 fetching corpus: 17400, signal 619990/708545 (executing program) 2021/07/14 16:54:07 fetching corpus: 17450, signal 620484/708802 (executing program) 2021/07/14 16:54:07 fetching corpus: 17500, signal 621021/709055 (executing program) 2021/07/14 16:54:08 fetching corpus: 17550, signal 621724/709331 (executing program) 2021/07/14 16:54:08 fetching corpus: 17600, signal 622079/709602 (executing program) 2021/07/14 16:54:08 fetching corpus: 17650, signal 622607/709852 (executing program) 2021/07/14 16:54:08 fetching corpus: 17700, signal 623064/710096 (executing program) 2021/07/14 16:54:09 fetching corpus: 17750, signal 623434/710101 (executing program) 2021/07/14 16:54:09 fetching corpus: 17800, signal 623896/710117 (executing program) 2021/07/14 16:54:10 fetching corpus: 17850, signal 624185/710117 (executing program) 2021/07/14 16:54:10 fetching corpus: 17900, signal 624681/710117 (executing program) 2021/07/14 16:54:10 fetching corpus: 17950, signal 625082/710117 (executing program) 2021/07/14 16:54:11 fetching corpus: 18000, signal 625597/710117 (executing program) 2021/07/14 16:54:11 fetching corpus: 18050, signal 626118/710117 (executing program) 2021/07/14 16:54:11 fetching corpus: 18100, signal 626784/710117 (executing program) 2021/07/14 16:54:11 fetching corpus: 18150, signal 627252/710117 (executing program) 2021/07/14 16:54:11 fetching corpus: 18200, signal 627993/710123 (executing program) 2021/07/14 16:54:12 fetching corpus: 18250, signal 628369/710123 (executing program) 2021/07/14 16:54:12 fetching corpus: 18300, signal 629071/710123 (executing program) 2021/07/14 16:54:12 fetching corpus: 18350, signal 629486/710125 (executing program) 2021/07/14 16:54:12 fetching corpus: 18400, signal 630184/710197 (executing program) 2021/07/14 16:54:12 fetching corpus: 18448, signal 630762/710197 (executing program) 2021/07/14 16:54:13 fetching corpus: 18498, signal 631167/710197 (executing program) 2021/07/14 16:54:13 fetching corpus: 18548, signal 631652/710197 (executing program) 2021/07/14 16:54:13 fetching corpus: 18598, signal 632109/710198 (executing program) 2021/07/14 16:54:14 fetching corpus: 18647, signal 632657/710204 (executing program) 2021/07/14 16:54:14 fetching corpus: 18696, signal 633405/710205 (executing program) 2021/07/14 16:54:14 fetching corpus: 18746, signal 633916/710212 (executing program) 2021/07/14 16:54:14 fetching corpus: 18796, signal 634365/710216 (executing program) 2021/07/14 16:54:15 fetching corpus: 18846, signal 634758/710225 (executing program) 2021/07/14 16:54:15 fetching corpus: 18896, signal 635332/710225 (executing program) 2021/07/14 16:54:15 fetching corpus: 18946, signal 635705/710225 (executing program) 2021/07/14 16:54:15 fetching corpus: 18996, signal 635982/710225 (executing program) 2021/07/14 16:54:15 fetching corpus: 19046, signal 636297/710225 (executing program) 2021/07/14 16:54:16 fetching corpus: 19095, signal 639128/710227 (executing program) 2021/07/14 16:54:16 fetching corpus: 19145, signal 639802/710241 (executing program) 2021/07/14 16:54:16 fetching corpus: 19195, signal 640518/710241 (executing program) 2021/07/14 16:54:17 fetching corpus: 19245, signal 640998/710242 (executing program) 2021/07/14 16:54:17 fetching corpus: 19295, signal 641458/710242 (executing program) 2021/07/14 16:54:17 fetching corpus: 19345, signal 642052/710268 (executing program) 2021/07/14 16:54:17 fetching corpus: 19394, signal 642576/710268 (executing program) 2021/07/14 16:54:17 fetching corpus: 19444, signal 643019/710268 (executing program) 2021/07/14 16:54:18 fetching corpus: 19494, signal 643453/710268 (executing program) 2021/07/14 16:54:18 fetching corpus: 19544, signal 643907/710268 (executing program) 2021/07/14 16:54:18 fetching corpus: 19594, signal 644382/710272 (executing program) 2021/07/14 16:54:18 fetching corpus: 19643, signal 644730/710281 (executing program) 2021/07/14 16:54:19 fetching corpus: 19693, signal 645099/710282 (executing program) 2021/07/14 16:54:19 fetching corpus: 19743, signal 645624/710300 (executing program) 2021/07/14 16:54:19 fetching corpus: 19792, signal 646170/710300 (executing program) 2021/07/14 16:54:19 fetching corpus: 19842, signal 646567/710302 (executing program) 2021/07/14 16:54:19 fetching corpus: 19892, signal 647056/710302 (executing program) 2021/07/14 16:54:20 fetching corpus: 19942, signal 647404/710303 (executing program) 2021/07/14 16:54:20 fetching corpus: 19992, signal 648663/710303 (executing program) 2021/07/14 16:54:20 fetching corpus: 20042, signal 649222/710303 (executing program) 2021/07/14 16:54:20 fetching corpus: 20092, signal 650102/710303 (executing program) 2021/07/14 16:54:20 fetching corpus: 20142, signal 650570/710303 (executing program) 2021/07/14 16:54:21 fetching corpus: 20192, signal 651065/710304 (executing program) 2021/07/14 16:54:21 fetching corpus: 20242, signal 651757/710304 (executing program) 2021/07/14 16:54:21 fetching corpus: 20292, signal 652053/710309 (executing program) 2021/07/14 16:54:21 fetching corpus: 20342, signal 652398/710309 (executing program) 2021/07/14 16:54:21 fetching corpus: 20391, signal 652876/710310 (executing program) 2021/07/14 16:54:22 fetching corpus: 20441, signal 653389/710310 (executing program) 2021/07/14 16:54:22 fetching corpus: 20491, signal 653907/710310 (executing program) 2021/07/14 16:54:22 fetching corpus: 20541, signal 654394/710310 (executing program) 2021/07/14 16:54:22 fetching corpus: 20591, signal 655740/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20641, signal 656254/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20691, signal 656608/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20741, signal 657448/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20791, signal 657716/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20841, signal 658345/710310 (executing program) 2021/07/14 16:54:23 fetching corpus: 20891, signal 658698/710310 (executing program) 2021/07/14 16:54:24 fetching corpus: 20941, signal 658987/710310 (executing program) 2021/07/14 16:54:24 fetching corpus: 20991, signal 659361/710310 (executing program) 2021/07/14 16:54:24 fetching corpus: 21041, signal 659843/710310 (executing program) 2021/07/14 16:54:24 fetching corpus: 21091, signal 660454/710313 (executing program) 2021/07/14 16:54:25 fetching corpus: 21141, signal 660759/710313 (executing program) 2021/07/14 16:54:25 fetching corpus: 21191, signal 661136/710313 (executing program) 2021/07/14 16:54:25 fetching corpus: 21241, signal 662238/710313 (executing program) 2021/07/14 16:54:25 fetching corpus: 21291, signal 662681/710313 (executing program) 2021/07/14 16:54:26 fetching corpus: 21341, signal 663260/710313 (executing program) 2021/07/14 16:54:27 fetching corpus: 21391, signal 663463/710313 (executing program) 2021/07/14 16:54:27 fetching corpus: 21441, signal 664023/710318 (executing program) 2021/07/14 16:54:27 fetching corpus: 21491, signal 664414/710318 (executing program) 2021/07/14 16:54:27 fetching corpus: 21541, signal 664780/710319 (executing program) 2021/07/14 16:54:27 fetching corpus: 21591, signal 665318/710319 (executing program) 2021/07/14 16:54:28 fetching corpus: 21641, signal 665804/710319 (executing program) 2021/07/14 16:54:28 fetching corpus: 21691, signal 666172/710319 (executing program) 2021/07/14 16:54:28 fetching corpus: 21741, signal 666483/710319 (executing program) 2021/07/14 16:54:28 fetching corpus: 21791, signal 666792/710319 (executing program) 2021/07/14 16:54:28 fetching corpus: 21841, signal 667217/710319 (executing program) 2021/07/14 16:54:29 fetching corpus: 21891, signal 667603/710324 (executing program) 2021/07/14 16:54:29 fetching corpus: 21941, signal 667960/710324 (executing program) 2021/07/14 16:54:29 fetching corpus: 21991, signal 668489/710324 (executing program) 2021/07/14 16:54:29 fetching corpus: 22041, signal 668920/710324 (executing program) 2021/07/14 16:54:30 fetching corpus: 22091, signal 669258/710325 (executing program) 2021/07/14 16:54:30 fetching corpus: 22141, signal 669661/710325 (executing program) 2021/07/14 16:54:30 fetching corpus: 22191, signal 669943/710325 (executing program) 2021/07/14 16:54:30 fetching corpus: 22240, signal 670598/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22290, signal 671133/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22339, signal 671458/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22389, signal 672226/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22439, signal 672829/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22489, signal 673087/710325 (executing program) 2021/07/14 16:54:31 fetching corpus: 22539, signal 673382/710325 (executing program) 2021/07/14 16:54:32 fetching corpus: 22589, signal 673872/710325 (executing program) 2021/07/14 16:54:32 fetching corpus: 22639, signal 674193/710325 (executing program) 2021/07/14 16:54:32 fetching corpus: 22689, signal 674503/710325 (executing program) 2021/07/14 16:54:32 fetching corpus: 22739, signal 674807/710325 (executing program) 2021/07/14 16:54:32 fetching corpus: 22789, signal 675804/710325 (executing program) 2021/07/14 16:54:33 fetching corpus: 22837, signal 676303/710325 (executing program) 2021/07/14 16:54:33 fetching corpus: 22887, signal 676588/710336 (executing program) 2021/07/14 16:54:33 fetching corpus: 22937, signal 677146/710336 (executing program) 2021/07/14 16:54:34 fetching corpus: 22987, signal 677465/710342 (executing program) 2021/07/14 16:54:34 fetching corpus: 23037, signal 678430/710342 (executing program) 2021/07/14 16:54:34 fetching corpus: 23087, signal 678723/710342 (executing program) 2021/07/14 16:54:34 fetching corpus: 23137, signal 679020/710342 (executing program) 2021/07/14 16:54:34 fetching corpus: 23187, signal 679445/710342 (executing program) 2021/07/14 16:54:35 fetching corpus: 23237, signal 680108/710342 (executing program) 2021/07/14 16:54:35 fetching corpus: 23286, signal 680636/710348 (executing program) 2021/07/14 16:54:35 fetching corpus: 23336, signal 683102/710348 (executing program) 2021/07/14 16:54:35 fetching corpus: 23385, signal 683515/710352 (executing program) 2021/07/14 16:54:35 fetching corpus: 23435, signal 683900/710352 (executing program) 2021/07/14 16:54:36 fetching corpus: 23485, signal 684244/710352 (executing program) 2021/07/14 16:54:36 fetching corpus: 23535, signal 684605/710352 (executing program) 2021/07/14 16:54:36 fetching corpus: 23585, signal 685068/710352 (executing program) 2021/07/14 16:54:36 fetching corpus: 23635, signal 686189/710352 (executing program) 2021/07/14 16:54:36 fetching corpus: 23685, signal 687050/710378 (executing program) 2021/07/14 16:54:37 fetching corpus: 23734, signal 687331/710378 (executing program) 2021/07/14 16:54:37 fetching corpus: 23784, signal 687638/710380 (executing program) 2021/07/14 16:54:37 fetching corpus: 23834, signal 688132/710380 (executing program) 2021/07/14 16:54:37 fetching corpus: 23884, signal 688591/710380 (executing program) 2021/07/14 16:54:37 fetching corpus: 23934, signal 688949/710380 (executing program) 2021/07/14 16:54:38 fetching corpus: 23984, signal 689404/710383 (executing program) 2021/07/14 16:54:38 fetching corpus: 24034, signal 689715/710387 (executing program) 2021/07/14 16:54:38 fetching corpus: 24084, signal 690009/710390 (executing program) 2021/07/14 16:54:39 fetching corpus: 24134, signal 690318/710390 (executing program) 2021/07/14 16:54:39 fetching corpus: 24183, signal 690783/710416 (executing program) 2021/07/14 16:54:39 fetching corpus: 24233, signal 691142/710429 (executing program) 2021/07/14 16:54:39 fetching corpus: 24283, signal 691475/710454 (executing program) 2021/07/14 16:54:39 fetching corpus: 24333, signal 691924/710454 (executing program) 2021/07/14 16:54:40 fetching corpus: 24383, signal 692198/710454 (executing program) 2021/07/14 16:54:40 fetching corpus: 24433, signal 692505/710455 (executing program) 2021/07/14 16:54:40 fetching corpus: 24483, signal 693033/710455 (executing program) 2021/07/14 16:54:40 fetching corpus: 24533, signal 693412/710455 (executing program) 2021/07/14 16:54:41 fetching corpus: 24583, signal 694558/710455 (executing program) 2021/07/14 16:54:41 fetching corpus: 24632, signal 694833/710455 (executing program) 2021/07/14 16:54:41 fetching corpus: 24682, signal 695428/710455 (executing program) 2021/07/14 16:54:41 fetching corpus: 24732, signal 695932/710455 (executing program) 2021/07/14 16:54:41 fetching corpus: 24782, signal 696214/710462 (executing program) 2021/07/14 16:54:42 fetching corpus: 24832, signal 696541/710462 (executing program) 2021/07/14 16:54:42 fetching corpus: 24882, signal 696941/710462 (executing program) 2021/07/14 16:54:42 fetching corpus: 24932, signal 697242/710462 (executing program) 2021/07/14 16:54:42 fetching corpus: 24982, signal 697509/710462 (executing program) 2021/07/14 16:54:42 fetching corpus: 25032, signal 697823/710462 (executing program) 2021/07/14 16:54:43 fetching corpus: 25082, signal 698170/710462 (executing program) 2021/07/14 16:54:44 fetching corpus: 25132, signal 698372/710467 (executing program) 2021/07/14 16:54:44 fetching corpus: 25182, signal 698909/710467 (executing program) 2021/07/14 16:54:44 fetching corpus: 25232, signal 699178/710467 (executing program) 2021/07/14 16:54:44 fetching corpus: 25282, signal 699520/710469 (executing program) 2021/07/14 16:54:45 fetching corpus: 25331, signal 699784/710472 (executing program) 2021/07/14 16:54:45 fetching corpus: 25381, signal 700019/710472 (executing program) 2021/07/14 16:54:45 fetching corpus: 25431, signal 700344/710472 (executing program) 2021/07/14 16:54:45 fetching corpus: 25481, signal 700572/710477 (executing program) 2021/07/14 16:54:45 fetching corpus: 25531, signal 700811/710477 (executing program) 2021/07/14 16:54:46 fetching corpus: 25581, signal 701195/710477 (executing program) 2021/07/14 16:54:46 fetching corpus: 25631, signal 701518/710478 (executing program) 2021/07/14 16:54:46 fetching corpus: 25681, signal 701741/710478 (executing program) 2021/07/14 16:54:46 fetching corpus: 25731, signal 702083/710478 (executing program) 2021/07/14 16:54:46 fetching corpus: 25781, signal 702417/710478 (executing program) 2021/07/14 16:54:47 fetching corpus: 25830, signal 702980/710479 (executing program) 2021/07/14 16:54:47 fetching corpus: 25880, signal 703175/710479 (executing program) 2021/07/14 16:54:47 fetching corpus: 25930, signal 703840/710483 (executing program) 2021/07/14 16:54:47 fetching corpus: 25962, signal 704042/710504 (executing program) 2021/07/14 16:54:47 fetching corpus: 25962, signal 704042/710504 (executing program) 2021/07/14 16:54:51 starting 4 fuzzer processes 16:54:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ebc, 0x0) 16:54:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 16:54:52 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x7, 0x8]}, &(0x7f0000000100), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 16:54:52 executing program 3: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000063000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x100000002, 0xca}, 0x8014, 0x9, 0x800004, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0xfffffffffffffffd, r0, 0x1) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/146) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000260000/0x4000)=nil) [ 213.415460][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 213.536198][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.550144][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.564002][ T8693] device bridge_slave_0 entered promiscuous mode [ 213.579489][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.593627][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.607995][ T8693] device bridge_slave_1 entered promiscuous mode [ 213.659697][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.693821][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.733333][ T8693] team0: Port device team_slave_0 added [ 213.744038][ T8693] team0: Port device team_slave_1 added [ 213.779066][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.793647][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.832409][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.853242][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.865201][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.899341][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.939140][ T8693] device hsr_slave_0 entered promiscuous mode [ 213.949246][ T8693] device hsr_slave_1 entered promiscuous mode [ 214.102415][ T8695] chnl_net:caif_netlink_parms(): no params data found [ 214.267276][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.277610][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.287214][ T8695] device bridge_slave_0 entered promiscuous mode [ 214.301284][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.313716][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.326646][ T8695] device bridge_slave_1 entered promiscuous mode [ 214.418837][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.436996][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.466058][ T8693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.501704][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 214.534748][ T8693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.561202][ T8695] team0: Port device team_slave_0 added [ 214.585655][ T8693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.610083][ T8695] team0: Port device team_slave_1 added [ 214.632307][ T8693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.661742][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.672461][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.706965][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.727098][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.738241][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.770546][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.827039][ T8695] device hsr_slave_0 entered promiscuous mode [ 214.836418][ T8695] device hsr_slave_1 entered promiscuous mode [ 214.845183][ T8695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.855621][ T8695] Cannot create hsr debugfs directory [ 214.929910][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.941908][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.953579][ T8697] device bridge_slave_0 entered promiscuous mode [ 215.007461][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.022085][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.038983][ T8697] device bridge_slave_1 entered promiscuous mode [ 215.094671][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.114364][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.134538][ T8699] chnl_net:caif_netlink_parms(): no params data found [ 215.210768][ T8697] team0: Port device team_slave_0 added [ 215.248866][ T8697] team0: Port device team_slave_1 added [ 215.266737][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 215.293227][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.305575][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.320203][ T8699] device bridge_slave_0 entered promiscuous mode [ 215.333575][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.345563][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.358335][ T8699] device bridge_slave_1 entered promiscuous mode [ 215.403750][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.418146][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.472175][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.495614][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.503621][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.535606][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.572379][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.575521][ T3313] Bluetooth: hci1: command 0x0409 tx timeout [ 215.624282][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.664448][ T8697] device hsr_slave_0 entered promiscuous mode [ 215.673196][ T8697] device hsr_slave_1 entered promiscuous mode [ 215.684110][ T8697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.695521][ T8697] Cannot create hsr debugfs directory [ 215.703287][ T8695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.722726][ T8699] team0: Port device team_slave_0 added [ 215.734814][ T8699] team0: Port device team_slave_1 added [ 215.748801][ T8695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.759613][ T8695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.796380][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.807101][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.848441][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.865232][ T8695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.885529][ T3313] Bluetooth: hci2: command 0x0409 tx timeout [ 215.931985][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.945488][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.989331][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.027923][ T8699] device hsr_slave_0 entered promiscuous mode [ 216.042033][ T8699] device hsr_slave_1 entered promiscuous mode [ 216.050695][ T8699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.060216][ T8699] Cannot create hsr debugfs directory [ 216.074779][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.181073][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.192975][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.205552][ T3313] Bluetooth: hci3: command 0x0409 tx timeout [ 216.229185][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.303634][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.319408][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.346003][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.357754][ T9515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.370563][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.416009][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.435018][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.453684][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.466996][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.500195][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.532678][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.558868][ T8697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.573581][ T8697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.591744][ T8697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.619522][ T8697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.634992][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.657024][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.669791][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.692612][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.705266][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.716525][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.727047][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.737525][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.774636][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.789160][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.806278][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.824192][ T8699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.842170][ T8699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.855083][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.874252][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.892172][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.901460][ T8699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.912241][ T8699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.946098][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.958757][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.970360][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.980142][ T9421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.996462][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.020364][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.033646][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.044936][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.052777][ T9515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.077224][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.088715][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.100358][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.125879][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.167986][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.178275][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.189819][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.201424][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.224571][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.237699][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.250901][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.262956][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.308938][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.324994][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.336960][ T38] Bluetooth: hci0: command 0x041b tx timeout [ 217.347881][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.361755][ T8693] device veth0_vlan entered promiscuous mode [ 217.373596][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.384982][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.395246][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.404819][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.414444][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.423633][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.454325][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.467498][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.478648][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.496913][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.509691][ T8693] device veth1_vlan entered promiscuous mode [ 217.553922][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.566145][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.583840][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.596694][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.608286][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.616768][ T9536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.628837][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.643293][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.655576][ T3313] Bluetooth: hci1: command 0x041b tx timeout [ 217.673590][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.684939][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.695937][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.704789][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.733839][ T8693] device veth0_macvtap entered promiscuous mode [ 217.749832][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.758346][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.771537][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.781376][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.797518][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.823712][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.840361][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.858745][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.874320][ T8693] device veth1_macvtap entered promiscuous mode [ 217.903576][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.922050][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.938980][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.953843][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.965520][ T3313] Bluetooth: hci2: command 0x041b tx timeout [ 217.975790][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.994328][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.012099][ T8693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.023719][ T8693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.035660][ T8693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.047225][ T8693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.068700][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.083383][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.096454][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.109513][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.121426][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.134379][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.146957][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.156623][ T9536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.168390][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.180911][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.192918][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.203020][ T9536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.213912][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.224758][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.234815][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.245792][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.256420][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.266254][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.286359][ T3313] Bluetooth: hci3: command 0x041b tx timeout [ 218.295548][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.296445][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.329483][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.340448][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.357261][ T8697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.379058][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.404722][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.416228][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.428413][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.441589][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.454011][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.524340][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.535978][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.548548][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.559416][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.571554][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.582659][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.595421][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.607181][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.616440][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.635857][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.650138][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.682475][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.694460][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.706160][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.752681][ T8695] device veth0_vlan entered promiscuous mode [ 218.778550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.795217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.815019][ T8695] device veth1_vlan entered promiscuous mode [ 218.855842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.866508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.879031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.900319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.911570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.922711][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.933534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.944707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.953484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.970658][ T8697] device veth0_vlan entered promiscuous mode [ 218.977222][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.992157][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.993232][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.032216][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.047229][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.064742][ T8697] device veth1_vlan entered promiscuous mode [ 219.067790][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.092344][ T8697] device veth0_macvtap entered promiscuous mode [ 219.095904][ T8697] device veth1_macvtap entered promiscuous mode [ 219.104381][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.137308][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.148919][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.160168][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.173833][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.184612][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.196620][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.207176][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.219726][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.233899][ T8695] device veth0_macvtap entered promiscuous mode [ 219.250739][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.261061][ T1719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.283741][ T8695] device veth1_macvtap entered promiscuous mode [ 219.320241][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.336644][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.344277][ T49] audit: type=1800 audit(1626281699.110:2): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=13879 res=0 errno=0 [ 219.353145][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.393726][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.407198][ T9569] Bluetooth: hci0: command 0x040f tx timeout [ 219.409971][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.429309][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.445410][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:54:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ebc, 0x0) [ 219.461204][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.472164][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.486168][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.500186][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.510962][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.528680][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.544101][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.554971][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.567506][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.579331][ T49] audit: type=1800 audit(1626281699.340:3): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=13879 res=0 errno=0 [ 219.585578][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:54:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ebc, 0x0) [ 219.627539][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.656452][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.668213][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.682541][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.696059][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.710662][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.723808][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.739053][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.746342][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 219.762782][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.773326][ T49] audit: type=1800 audit(1626281699.510:4): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=13879 res=0 errno=0 [ 219.784057][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 16:54:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ebc, 0x0) [ 219.821369][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.836481][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.858297][ T8697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.872717][ T8697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.886801][ T8697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.899838][ T8697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.927689][ T8699] device veth0_vlan entered promiscuous mode [ 219.931529][ T49] audit: type=1800 audit(1626281699.700:5): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=13879 res=0 errno=0 [ 219.940023][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.987339][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.004753][ T8695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 16:54:59 executing program 0: personality(0x400000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x10000000) [ 220.023010][ T8695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.034918][ T8695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.045748][ T5] Bluetooth: hci2: command 0x040f tx timeout 16:54:59 executing program 0: personality(0x400000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x10000000) [ 220.053195][ T8695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.075587][ T8699] device veth1_vlan entered promiscuous mode [ 220.171181][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.182169][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.196434][ T8699] device veth0_macvtap entered promiscuous mode [ 220.227831][ T8699] device veth1_macvtap entered promiscuous mode [ 220.261363][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.274119][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.285909][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.303867][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.317984][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.332847][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.347280][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.361682][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.376122][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 220.377239][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.402919][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.413666][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.428086][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.440251][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.452725][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.499194][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.509278][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.511857][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.534270][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.545908][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.561367][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.574800][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.600851][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.614087][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.635609][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.647565][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.659934][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.680630][ T8699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.681169][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.692733][ T8699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.706332][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.719203][ T8699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.744450][ T8699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.769947][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.784900][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.798917][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.813168][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.858844][ C3] hrtimer: interrupt took 38544 ns [ 220.884321][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.898093][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.909315][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.924581][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.941639][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 16:55:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) [ 220.961776][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.120843][ T9712] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 221.132779][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.162489][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.178075][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.191022][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.456910][ T9714] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 221.468507][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.487298][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.491507][ T9569] Bluetooth: hci0: command 0x0419 tx timeout [ 221.500760][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.519022][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.806972][ T38] Bluetooth: hci1: command 0x0419 tx timeout [ 222.125748][ T9572] Bluetooth: hci2: command 0x0419 tx timeout [ 222.445854][ T3313] Bluetooth: hci3: command 0x0419 tx timeout 16:55:03 executing program 0: personality(0x400000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x10000000) 16:55:03 executing program 3: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000063000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x100000002, 0xca}, 0x8014, 0x9, 0x800004, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0xfffffffffffffffd, r0, 0x1) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/146) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000260000/0x4000)=nil) 16:55:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 16:55:03 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x7, 0x8]}, &(0x7f0000000100), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 16:55:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 16:55:03 executing program 0: personality(0x400000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x10000000) 16:55:03 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fchmod(r0, 0x0) 16:55:03 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fchmod(r0, 0x0) 16:55:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 16:55:03 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x7, 0x8]}, &(0x7f0000000100), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 16:55:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f000000fe40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 16:55:03 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fchmod(r0, 0x0) 16:55:03 executing program 3: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000063000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x100000002, 0xca}, 0x8014, 0x9, 0x800004, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0xfffffffffffffffd, r0, 0x1) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/146) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000260000/0x4000)=nil) 16:55:03 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fchmod(r0, 0x0) 16:55:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f000000fe40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 223.829304][ T9762] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 223.841033][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.862292][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.878788][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.910323][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:55:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f000000fe40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 16:55:03 executing program 3: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x0, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x10010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/188) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000063000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_UNLOCK(r2, 0xc) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9082, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x100000002, 0xca}, 0x8014, 0x9, 0x800004, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800c7}, 0x0, 0xfffffffffffffffd, r0, 0x1) fstatfs(0xffffffffffffffff, &(0x7f0000000440)=""/146) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000260000/0x4000)=nil) 16:55:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x4) 16:55:04 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x7, 0x8]}, &(0x7f0000000100), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 16:55:04 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f000000fe40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 224.905799][ T9775] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 16:55:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 224.922416][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.953715][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.968038][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.980782][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:55:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 225.256888][ T3406] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.264652][ T3406] ieee802154 phy1 wpan1: encryption failed: -22 16:55:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x4) 16:55:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 16:55:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 16:55:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 227.279422][ T9824] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:55:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000010c0)="59ee55a93634a4a6ba54c479587e61f8183957228a84ec643641dc3977d71319", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 227.300814][ T9824] device bridge1 entered promiscuous mode [ 227.310590][ T9824] batman_adv: batadv0: Adding interface: bridge1 [ 227.322231][ T9824] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.359790][ T9824] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 227.385107][ T9824] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.399910][ T9834] device bridge2 entered promiscuous mode [ 227.409476][ T9834] batman_adv: batadv0: Adding interface: bridge2 16:55:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) 16:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x603, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) [ 227.417423][ T9834] batman_adv: batadv0: The MTU of interface bridge2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.465539][ T9834] batman_adv: batadv0: Not using interface bridge2 (retrying later): interface not active 16:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x603, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 16:55:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 16:55:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x4) 16:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x603, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 16:55:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x1a, 0x8, 0x1, 0x6, 0x24, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="000000a0ebfaf00008001b"], 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000024817f4700000028009bbbd4", @ANYRES32=0x0, @ANYBLOB="f2ff0300030000000900e9ff060005000303000006000500051f0000"], 0x34}}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0x0) gettid() pipe(0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) pivot_root(0x0, &(0x7f00000000c0)='.\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) [ 228.120217][ T9855] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x603, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) [ 228.151263][ T9855] device bridge3 entered promiscuous mode 16:55:08 executing program 0: r0 = socket(0x2, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000001c80)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="a860a2", 0x3}], 0x1, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0xc}}], 0x24}], 0x1, 0x4004010) [ 228.301558][ T9869] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 16:55:08 executing program 0: r0 = socket(0x2, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000001c80)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="a860a2", 0x3}], 0x1, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0xc}}], 0x24}], 0x1, 0x4004010) 16:55:08 executing program 0: r0 = socket(0x2, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000001c80)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="a860a2", 0x3}], 0x1, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0xc}}], 0x24}], 0x1, 0x4004010) [ 229.272550][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.283032][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.130657][ T9856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.242519][ T9856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.071916][ T9856] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.085781][ T9856] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.104978][ T9856] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.119282][ T9856] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.381628][ T9856] syz-executor.3 (9856) used greatest stack depth: 21600 bytes left [ 231.385944][ T9874] device bridge_slave_0 left promiscuous mode [ 231.402086][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state 16:55:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 16:55:11 executing program 0: r0 = socket(0x2, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000001c80)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="a860a2", 0x3}], 0x1, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0xc}}], 0x24}], 0x1, 0x4004010) [ 231.417977][ T9874] device bridge_slave_1 left promiscuous mode [ 231.428855][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.445568][ T9874] bond0: (slave bond_slave_0): Releasing backup interface [ 231.463510][ T9874] bond0: (slave bond_slave_1): Releasing backup interface [ 231.481139][ T9874] team0: Port device team_slave_0 removed [ 231.493410][ T9874] team0: Port device team_slave_1 removed [ 231.504878][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.522247][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.541544][ T9890] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 231.560677][ T9893] device bridge3 entered promiscuous mode 16:55:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x1a, 0x8, 0x1, 0x6, 0x24, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="000000a0ebfaf00008001b"], 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000024817f4700000028009bbbd4", @ANYRES32=0x0, @ANYBLOB="f2ff0300030000000900e9ff060005000303000006000500051f0000"], 0x34}}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0x0) gettid() pipe(0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) pivot_root(0x0, &(0x7f00000000c0)='.\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) 16:55:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x4) 16:55:11 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x3}, {0x6}]}) [ 231.594358][ T49] audit: type=1326 audit(1626281711.360:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9899 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb0549 code=0x0 16:55:11 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = geteuid() syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYRESDEC, @ANYBLOB=',euid', @ANYBLOB]) [ 231.778922][ T9916] fuse: Bad value for 'user_id' 16:55:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x1a, 0x8, 0x1, 0x6, 0x24, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="000000a0ebfaf00008001b"], 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000024817f4700000028009bbbd4", @ANYRES32=0x0, @ANYBLOB="f2ff0300030000000900e9ff060005000303000006000500051f0000"], 0x34}}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0x0) gettid() pipe(0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) pivot_root(0x0, &(0x7f00000000c0)='.\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) 16:55:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 16:55:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x800000000009031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, r2, 0x0) [ 231.889018][ T9921] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:55:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x1a, 0x8, 0x1, 0x6, 0x24, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="000000a0ebfaf00008001b"], 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000024817f4700000028009bbbd4", @ANYRES32=0x0, @ANYBLOB="f2ff0300030000000900e9ff060005000303000006000500051f0000"], 0x34}}, 0x4080) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0x0) gettid() pipe(0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) pivot_root(0x0, &(0x7f00000000c0)='.\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) [ 231.932468][ T9921] device bridge3 entered promiscuous mode 16:55:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x2}, 0x2) [ 232.254984][ T9938] misc userio: The device must be registered before sending interrupts 16:55:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x2}, 0x2) 16:55:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0xffffffffffff7fff}) [ 232.504130][ T9958] misc userio: The device must be registered before sending interrupts 16:55:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0xffffffffffff7fff}) 16:55:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x2}, 0x2) 16:55:12 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0xffffffffffff7fff}) [ 232.651906][ T9970] misc userio: The device must be registered before sending interrupts 16:55:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x800000000009031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, r2, 0x0) [ 233.529026][ T9886] device hsr_slave_0 left promiscuous mode [ 233.540680][ T9886] device hsr_slave_1 left promiscuous mode [ 233.832534][ T9886] bond0 (unregistering): Released all slaves [ 235.535104][T10005] chnl_net:caif_netlink_parms(): no params data found [ 235.604265][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.619973][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.633755][T10005] device bridge_slave_0 entered promiscuous mode [ 235.650260][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.660514][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.671476][T10005] device bridge_slave_1 entered promiscuous mode [ 235.697614][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.717899][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.758808][T10005] team0: Port device team_slave_0 added [ 235.768772][T10005] team0: Port device team_slave_1 added [ 235.788295][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.800090][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.834860][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.850975][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.860776][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.894113][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.930777][T10005] device hsr_slave_0 entered promiscuous mode [ 235.942641][T10005] device hsr_slave_1 entered promiscuous mode [ 235.951816][T10005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.963166][T10005] Cannot create hsr debugfs directory [ 236.074923][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.084735][T10005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.094285][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.102523][T10005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.160602][T10005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.188199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.198633][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.212013][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.224406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 236.243200][T10005] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.257398][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.267318][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.276025][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.294726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.305971][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.316032][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.357740][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.370713][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.381677][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.412710][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.436826][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.451587][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.479620][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.489070][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.511583][T10005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.671121][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.686718][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.720070][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.731528][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.744542][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.754859][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.770313][T10005] device veth0_vlan entered promiscuous mode [ 236.792527][T10005] device veth1_vlan entered promiscuous mode [ 236.823972][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.834383][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.844314][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.857577][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.876513][T10005] device veth0_macvtap entered promiscuous mode [ 236.899438][T10005] device veth1_macvtap entered promiscuous mode [ 236.922145][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.935728][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.948012][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.960831][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.974624][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.989191][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.011370][T10005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.024647][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.038906][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.051376][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.065875][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.096077][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.115463][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.129921][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.145441][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.161403][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.178931][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.197018][T10005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.208148][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.220739][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.306973][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.322556][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.343602][ T9341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.346257][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.357163][ T9341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.382722][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.418691][ T9572] Bluetooth: hci3: command 0x0409 tx timeout [ 238.123975][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.131544][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.142377][T10235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.249685][T10235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.485620][ T9536] Bluetooth: hci3: command 0x041b tx timeout [ 240.355975][T10239] device bridge_slave_0 left promiscuous mode [ 240.371792][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.384296][T10239] device bridge_slave_1 left promiscuous mode [ 240.395639][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.406491][T10239] bond0: (slave bond_slave_0): Releasing backup interface [ 240.415907][T10239] bond0: (slave bond_slave_1): Releasing backup interface [ 240.437415][T10239] team0: Port device team_slave_0 removed [ 240.454387][T10239] team0: Port device team_slave_1 removed [ 240.461637][T10239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.471494][T10239] batman_adv: batadv0: Removing interface: batadv_slave_1 16:55:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x800000000009031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70}, 0x0, 0xffffffffffffffff, r2, 0x0) 16:55:20 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0xffffffffffff7fff}) 16:55:20 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x2}, 0x2) 16:55:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f00000000c0)=""/180, 0x2d, 0xb4, 0x1}, 0x20) 16:55:20 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b26, &(0x7f0000000040)) [ 240.533690][T10245] misc userio: The device must be registered before sending interrupts 16:55:20 executing program 2: r0 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93 0b e9 a5 ee ff ff e8 f7 8e 1f fc 0f b6 1d 85 e7 01 08 31 ff 41 [ 244.062354][T10432] RSP: 0018:ffffc900010c7b88 EFLAGS: 00010082 [ 244.062393][T10432] RAX: 0000000000000000 RBX: ffff88802713d058 RCX: 0000000000000000 [ 244.062414][T10432] RDX: 0000000000040000 RSI: ffffffff815d6835 RDI: fffff52000218f63 [ 244.062440][T10432] RBP: ffff88804b599ed8 R08: 0000000000000000 R09: 0000000000000000 [ 244.219796][T10432] R10: ffffffff815d066e R11: 0000000000000000 R12: ffff88804b5994b0 [ 244.230729][T10432] R13: 00000000000000a1 R14: 0000000080000280 R15: ffff88801e2f2100 [ 244.241434][T10432] FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f5518b40 [ 244.253565][T10432] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 244.264071][T10432] CR2: 00007ffddabec960 CR3: 000000002a60c000 CR4: 0000000000150ee0 [ 244.277965][T10432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.291369][T10432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.304138][T10432] Call Trace: [ 244.309575][T10432] hid_submit_ctrl+0x6ec/0xd80 [ 244.317444][T10432] usbhid_restart_ctrl_queue.isra.0+0x244/0x3a0 [ 244.325485][T10432] __usbhid_submit_report+0x6f0/0xd50 [ 244.332186][T10432] usbhid_init_reports+0x16e/0x3b0 [ 244.338784][T10432] hiddev_ioctl+0x10d4/0x1630 [ 244.345530][T10432] ? hiddev_ioctl_string.constprop.0.isra.0+0x1f0/0x1f0 [ 244.355742][T10432] ? lock_downgrade+0x6e0/0x6e0 [ 244.363408][T10432] ? find_held_lock+0x2d/0x110 [ 244.369084][T10432] ? __fget_files+0x23d/0x3e0 [ 244.374627][T10432] ? hiddev_ioctl_string.constprop.0.isra.0+0x1f0/0x1f0 [ 244.383733][T10432] compat_ptr_ioctl+0x67/0x90 [ 244.389279][T10432] ? vfs_fileattr_get+0xc0/0xc0 [ 244.395439][T10432] __do_compat_sys_ioctl+0x1c7/0x290 [ 244.402430][T10432] __do_fast_syscall_32+0x65/0xf0 [ 244.408964][T10432] do_fast_syscall_32+0x2f/0x70 [ 244.414816][T10432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 244.422191][T10432] RIP: 0023:0xf7f60549 [ 244.426639][T10432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.451608][T10432] RSP: 002b:00000000f55185fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 244.462544][T10432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018480d [ 244.474196][T10432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.484636][T10432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.496385][T10432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.506487][T10432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.515495][T10432] Kernel panic - not syncing: panic_on_warn set ... [ 244.523228][T10432] CPU: 3 PID: 10432 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 244.533368][T10432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 244.543520][T10432] Call Trace: [ 244.547221][T10432] dump_stack_lvl+0xcd/0x134 [ 244.554136][T10432] panic+0x306/0x73d [ 244.559021][T10432] ? __warn_printk+0xf3/0xf3 [ 244.564067][T10432] ? __warn.cold+0x1a/0x44 [ 244.569268][T10432] ? usb_submit_urb+0x149d/0x18a0 [ 244.575832][T10432] __warn.cold+0x35/0x44 [ 244.580377][T10432] ? wake_up_klogd.part.0+0x8e/0xd0 [ 244.586102][T10432] ? usb_submit_urb+0x149d/0x18a0 [ 244.592955][T10432] report_bug+0x1bd/0x210 [ 244.598090][T10432] handle_bug+0x3c/0x60 [ 244.602884][T10432] exc_invalid_op+0x14/0x40 [ 244.607747][T10432] asm_exc_invalid_op+0x12/0x20 [ 244.613095][T10432] RIP: 0010:usb_submit_urb+0x149d/0x18a0 [ 244.619417][T10432] Code: 7c 24 40 e8 25 8f 1f fc 48 8b 7c 24 40 e8 db c6 0b ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 c0 ad 27 8a e8 74 77 91 03 <0f> 0b e9 a5 ee ff ff e8 f7 8e 1f fc 0f b6 1d 85 e7 01 08 31 ff 41 [ 244.642669][T10432] RSP: 0018:ffffc900010c7b88 EFLAGS: 00010082 [ 244.650361][T10432] RAX: 0000000000000000 RBX: ffff88802713d058 RCX: 0000000000000000 [ 244.660361][T10432] RDX: 0000000000040000 RSI: ffffffff815d6835 RDI: fffff52000218f63 [ 244.670948][T10432] RBP: ffff88804b599ed8 R08: 0000000000000000 R09: 0000000000000000 [ 244.682027][T10432] R10: ffffffff815d066e R11: 0000000000000000 R12: ffff88804b5994b0 [ 244.692000][T10432] R13: 00000000000000a1 R14: 0000000080000280 R15: ffff88801e2f2100 [ 244.702829][T10432] ? wake_up_klogd.part.0+0x8e/0xd0 [ 244.711108][T10432] ? vprintk+0x95/0x260 [ 244.716245][T10432] ? usb_submit_urb+0x149d/0x18a0 [ 244.722522][T10432] hid_submit_ctrl+0x6ec/0xd80 [ 244.727949][T10432] usbhid_restart_ctrl_queue.isra.0+0x244/0x3a0 [ 244.735508][T10432] __usbhid_submit_report+0x6f0/0xd50 [ 244.741795][T10432] usbhid_init_reports+0x16e/0x3b0 [ 244.748620][T10432] hiddev_ioctl+0x10d4/0x1630 [ 244.755419][T10432] ? hiddev_ioctl_string.constprop.0.isra.0+0x1f0/0x1f0 [ 244.764567][T10432] ? lock_downgrade+0x6e0/0x6e0 [ 244.771429][T10432] ? find_held_lock+0x2d/0x110 [ 244.778689][T10432] ? __fget_files+0x23d/0x3e0 [ 244.784703][T10432] ? hiddev_ioctl_string.constprop.0.isra.0+0x1f0/0x1f0 [ 244.794148][T10432] compat_ptr_ioctl+0x67/0x90 [ 244.799943][T10432] ? vfs_fileattr_get+0xc0/0xc0 [ 244.806588][T10432] __do_compat_sys_ioctl+0x1c7/0x290 [ 244.813795][T10432] __do_fast_syscall_32+0x65/0xf0 [ 244.820879][T10432] do_fast_syscall_32+0x2f/0x70 [ 244.826969][T10432] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 244.834886][T10432] RIP: 0023:0xf7f60549 [ 244.839832][T10432] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.863257][T10432] RSP: 002b:00000000f55185fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 244.874236][T10432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c018480d [ 244.884984][T10432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.895137][T10432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.904496][T10432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.914292][T10432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.034949][T10432] Shutting down cpus with NMI [ 246.042182][T10432] Kernel Offset: disabled [ 246.047365][T10432] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:55:24 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffff11004fb3523 RDX=0000000000000001 RSI=dffffc0000000000 RDI=ffff888027d9a91a RBP=ffff888027d9a918 RSP=ffffc90000007b50 R8 =0000000000000001 R9 =ffff888027d9a91b R10=ffffed1004fb3523 R11=0000000000000000 R12=0000000000001a40 R13=ffffed1004fb3523 R14=0000000000000001 R15=ffff88802ca52880 RIP=ffffffff815b657a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f54f7db0 CR3=0000000076dd7000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000ffffffffffffffffffffffffff XMM02=ff000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000b5af5 RBX=ffff888011209c40 RCX=ffffffff8929b97f RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000043fdf8 R8 =0000000000000001 R9 =ffff88802cb52a4b R10=ffffed100596a549 R11=0000000000000000 R12=ffffed1002241388 R13=0000000000000001 R14=ffffffff8d6c4bd0 R15=0000000000000000 RIP=ffffffff892c55fb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e56f3fc188 CR3=000000006f2e0000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000052 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000008bfbd RBX=ffff88801120b880 RCX=ffffffff8929b97f RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000002 RSP=ffffc9000044fdf8 R8 =0000000000000001 R9 =ffff88802cc52a4b R10=ffffed100598a549 R11=0000000000000000 R12=ffffed1002241710 R13=0000000000000002 R14=ffffffff8d6c4bd0 R15=0000000000000000 RIP=ffffffff892c55fb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0400a33000 CR3=0000000015af1000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5837fe9dc1c91f3200000000000402f8 XMM01=8ca0b852b1c7c8e10000000000040498 XMM02=f1c1a81e7e6f168700000000000406e8 XMM03=ac8bc31478ec851100000000000434c0 XMM04=7ac2d11a15cb5d3200000000001b2690 XMM05=d3fdd5f48436fbd70000000000040790 XMM06=b3af9236d9238bc90000000000040648 XMM07=a1fcdcf819d7e1e50000000000040408 XMM08=edea6ff5c59c77dd00000000001b1698 XMM09=07070707070707070707505151515151 XMM10=685b050f231100226b07070707070707 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8432b4fc RDI=ffffffff904e55e0 RBP=ffffffff904e55a0 RSP=ffffc900010c7538 R8 =000000000000004d R9 =0000000000000000 R10=ffffffff8432b4ed R11=000000000000001f R12=0000000000000000 R13=fffffbfff209cb07 R14=fffffbfff209cabe R15=dffffc0000000000 RIP=ffffffff8432b522 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffddabec960 CR3=000000002a60c000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=23232323232323232323232323232323 XMM02=ffffffffffffffffffffffffffffffff XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000