Warning: Permanently added '[localhost]:4502' (ECDSA) to the list of known hosts. 2021/03/14 21:51:20 fuzzer started 2021/03/14 21:51:21 dialing manager at localhost:35927 2021/03/14 21:51:21 syscalls: 3628 2021/03/14 21:51:21 code coverage: enabled 2021/03/14 21:51:21 comparison tracing: enabled 2021/03/14 21:51:21 extra coverage: enabled 2021/03/14 21:51:21 setuid sandbox: enabled 2021/03/14 21:51:21 namespace sandbox: enabled 2021/03/14 21:51:21 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/14 21:51:21 fault injection: enabled 2021/03/14 21:51:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/14 21:51:21 net packet injection: enabled 2021/03/14 21:51:21 net device setup: enabled 2021/03/14 21:51:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/14 21:51:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/14 21:51:21 USB emulation: enabled 2021/03/14 21:51:21 hci packet injection: enabled 2021/03/14 21:51:21 wifi device emulation: enabled 2021/03/14 21:51:21 802.15.4 emulation: enabled 2021/03/14 21:51:21 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/14 21:51:21 fetching corpus: 50, signal 36672/40384 (executing program) 2021/03/14 21:51:21 fetching corpus: 100, signal 64247/69490 (executing program) 2021/03/14 21:51:22 fetching corpus: 150, signal 75172/81944 (executing program) 2021/03/14 21:51:22 fetching corpus: 200, signal 88530/96730 (executing program) 2021/03/14 21:51:22 fetching corpus: 250, signal 96363/105994 (executing program) 2021/03/14 21:51:22 fetching corpus: 300, signal 103049/114074 (executing program) 2021/03/14 21:51:22 fetching corpus: 350, signal 112775/125109 (executing program) 2021/03/14 21:51:23 fetching corpus: 400, signal 119221/132864 (executing program) 2021/03/14 21:51:23 fetching corpus: 450, signal 125176/140077 (executing program) 2021/03/14 21:51:23 fetching corpus: 500, signal 128538/144778 (executing program) 2021/03/14 21:51:23 fetching corpus: 550, signal 135783/153159 (executing program) 2021/03/14 21:51:23 fetching corpus: 600, signal 147765/165984 (executing program) 2021/03/14 21:51:24 fetching corpus: 650, signal 151003/170429 (executing program) 2021/03/14 21:51:24 fetching corpus: 700, signal 155553/176041 (executing program) 2021/03/14 21:51:24 fetching corpus: 750, signal 160369/181948 (executing program) 2021/03/14 21:51:24 fetching corpus: 800, signal 164890/187568 (executing program) 2021/03/14 21:51:25 fetching corpus: 850, signal 168487/192216 (executing program) 2021/03/14 21:51:25 fetching corpus: 900, signal 174359/198997 (executing program) 2021/03/14 21:51:25 fetching corpus: 950, signal 179642/205117 (executing program) 2021/03/14 21:51:25 fetching corpus: 1000, signal 183657/210071 (executing program) 2021/03/14 21:51:26 fetching corpus: 1050, signal 186586/214019 (executing program) 2021/03/14 21:51:26 fetching corpus: 1100, signal 190797/219046 (executing program) 2021/03/14 21:51:26 fetching corpus: 1150, signal 193157/222451 (executing program) 2021/03/14 21:51:26 fetching corpus: 1200, signal 198677/228664 (executing program) 2021/03/14 21:51:26 fetching corpus: 1250, signal 200680/231647 (executing program) 2021/03/14 21:51:27 fetching corpus: 1300, signal 203545/235378 (executing program) 2021/03/14 21:51:27 fetching corpus: 1350, signal 206355/239018 (executing program) 2021/03/14 21:51:27 fetching corpus: 1400, signal 209540/242991 (executing program) 2021/03/14 21:51:27 fetching corpus: 1450, signal 215316/249181 (executing program) 2021/03/14 21:51:27 fetching corpus: 1500, signal 217622/252335 (executing program) 2021/03/14 21:51:28 fetching corpus: 1550, signal 219701/255303 (executing program) 2021/03/14 21:51:28 fetching corpus: 1600, signal 222049/258440 (executing program) 2021/03/14 21:51:28 fetching corpus: 1650, signal 224581/261723 (executing program) 2021/03/14 21:51:28 fetching corpus: 1700, signal 228162/265925 (executing program) 2021/03/14 21:51:28 fetching corpus: 1750, signal 231320/269704 (executing program) 2021/03/14 21:51:29 fetching corpus: 1800, signal 233387/272545 (executing program) 2021/03/14 21:51:29 fetching corpus: 1850, signal 236591/276270 (executing program) 2021/03/14 21:51:29 fetching corpus: 1900, signal 238734/279148 (executing program) 2021/03/14 21:51:29 fetching corpus: 1950, signal 245498/285770 (executing program) 2021/03/14 21:51:29 fetching corpus: 2000, signal 247301/288278 (executing program) 2021/03/14 21:51:30 fetching corpus: 2050, signal 249846/291378 (executing program) 2021/03/14 21:51:30 fetching corpus: 2100, signal 251589/293795 (executing program) 2021/03/14 21:51:30 fetching corpus: 2150, signal 259757/301525 (executing program) 2021/03/14 21:51:30 fetching corpus: 2200, signal 261931/304244 (executing program) 2021/03/14 21:51:30 fetching corpus: 2250, signal 263622/306561 (executing program) 2021/03/14 21:51:31 fetching corpus: 2300, signal 266342/309727 (executing program) 2021/03/14 21:51:31 fetching corpus: 2350, signal 267753/311771 (executing program) 2021/03/14 21:51:31 fetching corpus: 2400, signal 269893/314351 (executing program) 2021/03/14 21:51:31 fetching corpus: 2450, signal 271240/316292 (executing program) 2021/03/14 21:51:32 fetching corpus: 2500, signal 273906/319321 (executing program) 2021/03/14 21:51:32 fetching corpus: 2550, signal 275344/321343 (executing program) 2021/03/14 21:51:32 fetching corpus: 2600, signal 277088/323593 (executing program) 2021/03/14 21:51:32 fetching corpus: 2650, signal 279113/326071 (executing program) 2021/03/14 21:51:33 fetching corpus: 2700, signal 280581/328069 (executing program) 2021/03/14 21:51:33 fetching corpus: 2750, signal 281924/329984 (executing program) 2021/03/14 21:51:34 fetching corpus: 2800, signal 286339/334282 (executing program) 2021/03/14 21:51:34 fetching corpus: 2850, signal 287607/336130 (executing program) 2021/03/14 21:51:34 fetching corpus: 2900, signal 289380/338320 (executing program) 2021/03/14 21:51:35 fetching corpus: 2950, signal 290883/340337 (executing program) 2021/03/14 21:51:35 fetching corpus: 3000, signal 292706/342570 (executing program) 2021/03/14 21:51:36 fetching corpus: 3050, signal 294869/345074 (executing program) 2021/03/14 21:51:36 fetching corpus: 3100, signal 298913/348933 (executing program) 2021/03/14 21:51:36 fetching corpus: 3150, signal 300099/350610 (executing program) 2021/03/14 21:51:36 fetching corpus: 3200, signal 302166/352884 (executing program) syzkaller login: [ 102.826063][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.838475][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 21:51:37 fetching corpus: 3250, signal 303320/354546 (executing program) 2021/03/14 21:51:37 fetching corpus: 3300, signal 304840/356391 (executing program) 2021/03/14 21:51:37 fetching corpus: 3350, signal 306222/358160 (executing program) 2021/03/14 21:51:37 fetching corpus: 3400, signal 307369/359770 (executing program) 2021/03/14 21:51:37 fetching corpus: 3450, signal 308406/361296 (executing program) 2021/03/14 21:51:38 fetching corpus: 3500, signal 309775/363064 (executing program) 2021/03/14 21:51:38 fetching corpus: 3550, signal 311461/364958 (executing program) 2021/03/14 21:51:38 fetching corpus: 3600, signal 312961/366812 (executing program) 2021/03/14 21:51:38 fetching corpus: 3650, signal 313931/368218 (executing program) 2021/03/14 21:51:38 fetching corpus: 3700, signal 315992/370408 (executing program) 2021/03/14 21:51:39 fetching corpus: 3750, signal 317172/371968 (executing program) 2021/03/14 21:51:39 fetching corpus: 3800, signal 318234/373388 (executing program) 2021/03/14 21:51:39 fetching corpus: 3850, signal 319854/375179 (executing program) 2021/03/14 21:51:39 fetching corpus: 3900, signal 321401/376893 (executing program) 2021/03/14 21:51:40 fetching corpus: 3950, signal 323794/379204 (executing program) 2021/03/14 21:51:40 fetching corpus: 4000, signal 324605/380463 (executing program) 2021/03/14 21:51:40 fetching corpus: 4050, signal 325655/381832 (executing program) 2021/03/14 21:51:40 fetching corpus: 4100, signal 326908/383393 (executing program) 2021/03/14 21:51:40 fetching corpus: 4150, signal 328652/385222 (executing program) 2021/03/14 21:51:41 fetching corpus: 4200, signal 329565/386552 (executing program) 2021/03/14 21:51:41 fetching corpus: 4250, signal 330401/387747 (executing program) 2021/03/14 21:51:41 fetching corpus: 4300, signal 331665/389248 (executing program) 2021/03/14 21:51:42 fetching corpus: 4350, signal 333080/390848 (executing program) 2021/03/14 21:51:42 fetching corpus: 4400, signal 334260/392328 (executing program) 2021/03/14 21:51:42 fetching corpus: 4450, signal 335473/393745 (executing program) 2021/03/14 21:51:42 fetching corpus: 4500, signal 336509/395015 (executing program) 2021/03/14 21:51:43 fetching corpus: 4550, signal 337748/396422 (executing program) 2021/03/14 21:51:43 fetching corpus: 4600, signal 338714/397661 (executing program) 2021/03/14 21:51:43 fetching corpus: 4650, signal 340586/399491 (executing program) 2021/03/14 21:51:43 fetching corpus: 4700, signal 341586/400760 (executing program) 2021/03/14 21:51:43 fetching corpus: 4750, signal 343011/402220 (executing program) 2021/03/14 21:51:44 fetching corpus: 4800, signal 343837/403358 (executing program) 2021/03/14 21:51:44 fetching corpus: 4850, signal 346732/405708 (executing program) 2021/03/14 21:51:44 fetching corpus: 4900, signal 347931/407052 (executing program) 2021/03/14 21:51:44 fetching corpus: 4950, signal 349023/408310 (executing program) 2021/03/14 21:51:44 fetching corpus: 5000, signal 350006/409498 (executing program) 2021/03/14 21:51:45 fetching corpus: 5050, signal 351599/411057 (executing program) 2021/03/14 21:51:46 fetching corpus: 5100, signal 352509/412181 (executing program) 2021/03/14 21:51:46 fetching corpus: 5150, signal 353209/413125 (executing program) 2021/03/14 21:51:46 fetching corpus: 5200, signal 354130/414260 (executing program) 2021/03/14 21:51:46 fetching corpus: 5250, signal 355158/415409 (executing program) 2021/03/14 21:51:47 fetching corpus: 5300, signal 356215/416559 (executing program) 2021/03/14 21:51:47 fetching corpus: 5350, signal 358836/418534 (executing program) 2021/03/14 21:51:47 fetching corpus: 5400, signal 359656/419559 (executing program) 2021/03/14 21:51:47 fetching corpus: 5450, signal 360807/420773 (executing program) 2021/03/14 21:51:48 fetching corpus: 5500, signal 362276/422131 (executing program) 2021/03/14 21:51:48 fetching corpus: 5550, signal 363536/423358 (executing program) 2021/03/14 21:51:48 fetching corpus: 5600, signal 364523/424408 (executing program) 2021/03/14 21:51:48 fetching corpus: 5650, signal 365428/425398 (executing program) 2021/03/14 21:51:48 fetching corpus: 5700, signal 367473/427012 (executing program) 2021/03/14 21:51:49 fetching corpus: 5750, signal 368753/428237 (executing program) 2021/03/14 21:51:49 fetching corpus: 5800, signal 369752/429292 (executing program) 2021/03/14 21:51:49 fetching corpus: 5850, signal 370422/430153 (executing program) 2021/03/14 21:51:49 fetching corpus: 5900, signal 371011/430950 (executing program) 2021/03/14 21:51:50 fetching corpus: 5950, signal 372298/432125 (executing program) 2021/03/14 21:51:50 fetching corpus: 6000, signal 373410/433180 (executing program) 2021/03/14 21:51:50 fetching corpus: 6050, signal 374200/434079 (executing program) 2021/03/14 21:51:50 fetching corpus: 6100, signal 375740/435370 (executing program) 2021/03/14 21:51:51 fetching corpus: 6150, signal 377852/436886 (executing program) 2021/03/14 21:51:51 fetching corpus: 6200, signal 378584/437725 (executing program) 2021/03/14 21:51:52 fetching corpus: 6250, signal 379914/438850 (executing program) 2021/03/14 21:51:52 fetching corpus: 6300, signal 381158/439944 (executing program) 2021/03/14 21:51:52 fetching corpus: 6350, signal 384847/442197 (executing program) 2021/03/14 21:51:52 fetching corpus: 6400, signal 385332/442860 (executing program) 2021/03/14 21:51:53 fetching corpus: 6450, signal 386211/443768 (executing program) 2021/03/14 21:51:53 fetching corpus: 6500, signal 386951/444561 (executing program) 2021/03/14 21:51:53 fetching corpus: 6550, signal 387481/445249 (executing program) 2021/03/14 21:51:53 fetching corpus: 6600, signal 388482/446178 (executing program) 2021/03/14 21:51:53 fetching corpus: 6650, signal 389010/446829 (executing program) 2021/03/14 21:51:53 fetching corpus: 6700, signal 389879/447628 (executing program) 2021/03/14 21:51:54 fetching corpus: 6750, signal 390604/448353 (executing program) 2021/03/14 21:51:54 fetching corpus: 6800, signal 391345/449138 (executing program) 2021/03/14 21:51:54 fetching corpus: 6850, signal 392739/450155 (executing program) 2021/03/14 21:51:54 fetching corpus: 6900, signal 393706/451008 (executing program) 2021/03/14 21:51:55 fetching corpus: 6950, signal 394286/451701 (executing program) 2021/03/14 21:51:55 fetching corpus: 7000, signal 394947/452387 (executing program) 2021/03/14 21:51:55 fetching corpus: 7050, signal 395675/453128 (executing program) 2021/03/14 21:51:55 fetching corpus: 7100, signal 397707/454356 (executing program) 2021/03/14 21:51:55 fetching corpus: 7150, signal 398518/455114 (executing program) 2021/03/14 21:51:56 fetching corpus: 7200, signal 399825/456040 (executing program) 2021/03/14 21:51:56 fetching corpus: 7250, signal 401599/457084 (executing program) 2021/03/14 21:51:56 fetching corpus: 7300, signal 402118/457665 (executing program) 2021/03/14 21:51:56 fetching corpus: 7350, signal 402838/458285 (executing program) 2021/03/14 21:51:56 fetching corpus: 7400, signal 403897/459065 (executing program) 2021/03/14 21:51:57 fetching corpus: 7450, signal 405451/460086 (executing program) 2021/03/14 21:51:57 fetching corpus: 7500, signal 406173/460722 (executing program) 2021/03/14 21:51:57 fetching corpus: 7550, signal 406876/461371 (executing program) 2021/03/14 21:51:57 fetching corpus: 7600, signal 407775/462072 (executing program) 2021/03/14 21:51:58 fetching corpus: 7650, signal 408865/462872 (executing program) 2021/03/14 21:51:58 fetching corpus: 7700, signal 410829/463936 (executing program) 2021/03/14 21:51:58 fetching corpus: 7750, signal 411468/464490 (executing program) 2021/03/14 21:51:58 fetching corpus: 7800, signal 412159/465090 (executing program) 2021/03/14 21:51:58 fetching corpus: 7850, signal 413192/465789 (executing program) 2021/03/14 21:51:59 fetching corpus: 7900, signal 413791/466338 (executing program) 2021/03/14 21:51:59 fetching corpus: 7950, signal 414624/466980 (executing program) 2021/03/14 21:52:00 fetching corpus: 8000, signal 415398/467554 (executing program) 2021/03/14 21:52:00 fetching corpus: 8050, signal 415979/468096 (executing program) 2021/03/14 21:52:00 fetching corpus: 8100, signal 417844/468992 (executing program) 2021/03/14 21:52:00 fetching corpus: 8150, signal 418611/469591 (executing program) 2021/03/14 21:52:00 fetching corpus: 8200, signal 419915/470374 (executing program) 2021/03/14 21:52:01 fetching corpus: 8250, signal 420494/470889 (executing program) 2021/03/14 21:52:01 fetching corpus: 8300, signal 422924/471981 (executing program) 2021/03/14 21:52:02 fetching corpus: 8350, signal 424863/472860 (executing program) 2021/03/14 21:52:02 fetching corpus: 8400, signal 425410/473307 (executing program) 2021/03/14 21:52:02 fetching corpus: 8450, signal 425916/473719 (executing program) 2021/03/14 21:52:02 fetching corpus: 8500, signal 427123/474356 (executing program) 2021/03/14 21:52:03 fetching corpus: 8550, signal 428276/475027 (executing program) 2021/03/14 21:52:03 fetching corpus: 8600, signal 429231/475575 (executing program) 2021/03/14 21:52:03 fetching corpus: 8650, signal 429676/475948 (executing program) 2021/03/14 21:52:04 fetching corpus: 8700, signal 430120/476370 (executing program) 2021/03/14 21:52:04 fetching corpus: 8750, signal 430617/476802 (executing program) 2021/03/14 21:52:04 fetching corpus: 8800, signal 431082/477200 (executing program) 2021/03/14 21:52:04 fetching corpus: 8850, signal 431735/477680 (executing program) 2021/03/14 21:52:04 fetching corpus: 8900, signal 433180/478369 (executing program) 2021/03/14 21:52:05 fetching corpus: 8950, signal 433713/478758 (executing program) 2021/03/14 21:52:06 fetching corpus: 9000, signal 434506/479246 (executing program) 2021/03/14 21:52:06 fetching corpus: 9050, signal 435006/479603 (executing program) 2021/03/14 21:52:06 fetching corpus: 9100, signal 435563/479978 (executing program) 2021/03/14 21:52:06 fetching corpus: 9150, signal 436159/480366 (executing program) 2021/03/14 21:52:07 fetching corpus: 9200, signal 436735/480781 (executing program) 2021/03/14 21:52:07 fetching corpus: 9250, signal 437078/481115 (executing program) 2021/03/14 21:52:07 fetching corpus: 9300, signal 437893/481564 (executing program) 2021/03/14 21:52:07 fetching corpus: 9350, signal 438426/481939 (executing program) 2021/03/14 21:52:08 fetching corpus: 9400, signal 439135/482311 (executing program) 2021/03/14 21:52:08 fetching corpus: 9450, signal 439735/482641 (executing program) 2021/03/14 21:52:08 fetching corpus: 9500, signal 440254/482972 (executing program) 2021/03/14 21:52:08 fetching corpus: 9550, signal 442022/483601 (executing program) 2021/03/14 21:52:09 fetching corpus: 9600, signal 442867/483997 (executing program) 2021/03/14 21:52:09 fetching corpus: 9650, signal 443361/484337 (executing program) 2021/03/14 21:52:09 fetching corpus: 9700, signal 444485/484798 (executing program) 2021/03/14 21:52:09 fetching corpus: 9750, signal 444950/485111 (executing program) 2021/03/14 21:52:10 fetching corpus: 9800, signal 445428/485403 (executing program) 2021/03/14 21:52:10 fetching corpus: 9850, signal 445760/485680 (executing program) 2021/03/14 21:52:10 fetching corpus: 9900, signal 446267/485995 (executing program) 2021/03/14 21:52:11 fetching corpus: 9950, signal 448981/486701 (executing program) 2021/03/14 21:52:11 fetching corpus: 10000, signal 449721/487018 (executing program) 2021/03/14 21:52:11 fetching corpus: 10050, signal 450307/487315 (executing program) 2021/03/14 21:52:11 fetching corpus: 10100, signal 450938/487603 (executing program) 2021/03/14 21:52:12 fetching corpus: 10150, signal 451430/487868 (executing program) 2021/03/14 21:52:12 fetching corpus: 10200, signal 451906/488136 (executing program) 2021/03/14 21:52:12 fetching corpus: 10250, signal 452420/488407 (executing program) 2021/03/14 21:52:12 fetching corpus: 10300, signal 453084/488676 (executing program) 2021/03/14 21:52:13 fetching corpus: 10350, signal 453703/488931 (executing program) 2021/03/14 21:52:13 fetching corpus: 10400, signal 454365/489202 (executing program) 2021/03/14 21:52:13 fetching corpus: 10450, signal 454742/489428 (executing program) 2021/03/14 21:52:14 fetching corpus: 10500, signal 455455/489719 (executing program) 2021/03/14 21:52:14 fetching corpus: 10550, signal 456299/489986 (executing program) 2021/03/14 21:52:14 fetching corpus: 10600, signal 457132/490233 (executing program) 2021/03/14 21:52:15 fetching corpus: 10650, signal 457648/490450 (executing program) 2021/03/14 21:52:15 fetching corpus: 10700, signal 458394/490700 (executing program) 2021/03/14 21:52:15 fetching corpus: 10750, signal 458740/490890 (executing program) 2021/03/14 21:52:15 fetching corpus: 10800, signal 459684/491137 (executing program) 2021/03/14 21:52:16 fetching corpus: 10850, signal 460176/491343 (executing program) 2021/03/14 21:52:16 fetching corpus: 10900, signal 460578/491520 (executing program) 2021/03/14 21:52:16 fetching corpus: 10950, signal 461019/491712 (executing program) 2021/03/14 21:52:17 fetching corpus: 11000, signal 461525/491910 (executing program) 2021/03/14 21:52:17 fetching corpus: 11050, signal 461857/492088 (executing program) 2021/03/14 21:52:17 fetching corpus: 11100, signal 462386/492282 (executing program) 2021/03/14 21:52:18 fetching corpus: 11150, signal 462693/492428 (executing program) 2021/03/14 21:52:18 fetching corpus: 11200, signal 463008/492584 (executing program) 2021/03/14 21:52:18 fetching corpus: 11250, signal 463759/492787 (executing program) 2021/03/14 21:52:19 fetching corpus: 11300, signal 464174/492965 (executing program) 2021/03/14 21:52:19 fetching corpus: 11350, signal 464611/493116 (executing program) 2021/03/14 21:52:19 fetching corpus: 11400, signal 466068/493345 (executing program) 2021/03/14 21:52:19 fetching corpus: 11450, signal 466434/493489 (executing program) 2021/03/14 21:52:20 fetching corpus: 11500, signal 466806/493631 (executing program) 2021/03/14 21:52:20 fetching corpus: 11550, signal 467296/493768 (executing program) 2021/03/14 21:52:20 fetching corpus: 11600, signal 467738/493906 (executing program) 2021/03/14 21:52:20 fetching corpus: 11650, signal 468195/494057 (executing program) 2021/03/14 21:52:21 fetching corpus: 11700, signal 468805/494195 (executing program) 2021/03/14 21:52:22 fetching corpus: 11750, signal 469422/494347 (executing program) 2021/03/14 21:52:23 fetching corpus: 11800, signal 469771/494464 (executing program) 2021/03/14 21:52:23 fetching corpus: 11850, signal 470318/494575 (executing program) 2021/03/14 21:52:24 fetching corpus: 11900, signal 471014/494707 (executing program) 2021/03/14 21:52:24 fetching corpus: 11950, signal 471425/494828 (executing program) 2021/03/14 21:52:25 fetching corpus: 12000, signal 471926/494939 (executing program) 2021/03/14 21:52:25 fetching corpus: 12050, signal 472638/495055 (executing program) 2021/03/14 21:52:25 fetching corpus: 12100, signal 473230/495167 (executing program) 2021/03/14 21:52:25 fetching corpus: 12150, signal 474097/495254 (executing program) 2021/03/14 21:52:26 fetching corpus: 12200, signal 474670/495350 (executing program) 2021/03/14 21:52:26 fetching corpus: 12250, signal 475313/495425 (executing program) 2021/03/14 21:52:26 fetching corpus: 12300, signal 475835/495505 (executing program) 2021/03/14 21:52:27 fetching corpus: 12350, signal 476301/495572 (executing program) 2021/03/14 21:52:27 fetching corpus: 12400, signal 476729/495572 (executing program) 2021/03/14 21:52:27 fetching corpus: 12450, signal 477549/495572 (executing program) 2021/03/14 21:52:28 fetching corpus: 12500, signal 478392/495572 (executing program) 2021/03/14 21:52:28 fetching corpus: 12550, signal 478784/495572 (executing program) 2021/03/14 21:52:28 fetching corpus: 12600, signal 479303/495572 (executing program) 2021/03/14 21:52:29 fetching corpus: 12650, signal 480024/495572 (executing program) 2021/03/14 21:52:29 fetching corpus: 12700, signal 480473/495572 (executing program) 2021/03/14 21:52:30 fetching corpus: 12750, signal 481081/495572 (executing program) 2021/03/14 21:52:30 fetching corpus: 12800, signal 481448/495572 (executing program) 2021/03/14 21:52:31 fetching corpus: 12850, signal 481959/495572 (executing program) 2021/03/14 21:52:31 fetching corpus: 12900, signal 482568/495572 (executing program) 2021/03/14 21:52:31 fetching corpus: 12950, signal 482932/495572 (executing program) 2021/03/14 21:52:32 fetching corpus: 13000, signal 483319/495572 (executing program) 2021/03/14 21:52:32 fetching corpus: 13050, signal 483678/495572 (executing program) 2021/03/14 21:52:32 fetching corpus: 13100, signal 484045/495572 (executing program) 2021/03/14 21:52:32 fetching corpus: 13150, signal 484830/495572 (executing program) 2021/03/14 21:52:33 fetching corpus: 13200, signal 485263/495572 (executing program) 2021/03/14 21:52:33 fetching corpus: 13250, signal 486109/495572 (executing program) 2021/03/14 21:52:33 fetching corpus: 13300, signal 486443/495572 (executing program) 2021/03/14 21:52:33 fetching corpus: 13350, signal 486732/495572 (executing program) 2021/03/14 21:52:34 fetching corpus: 13400, signal 487681/495572 (executing program) 2021/03/14 21:52:34 fetching corpus: 13450, signal 487992/495572 (executing program) 2021/03/14 21:52:34 fetching corpus: 13500, signal 488445/495572 (executing program) 2021/03/14 21:52:35 fetching corpus: 13550, signal 488774/495572 (executing program) 2021/03/14 21:52:35 fetching corpus: 13600, signal 489115/495572 (executing program) 2021/03/14 21:52:35 fetching corpus: 13650, signal 489775/495572 (executing program) 2021/03/14 21:52:35 fetching corpus: 13700, signal 490381/495572 (executing program) 2021/03/14 21:52:35 fetching corpus: 13750, signal 491009/495572 (executing program) 2021/03/14 21:52:36 fetching corpus: 13800, signal 492239/495572 (executing program) 2021/03/14 21:52:36 fetching corpus: 13815, signal 492714/495572 (executing program) 2021/03/14 21:52:36 fetching corpus: 13815, signal 492714/495572 (executing program) [ 164.296182][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.312730][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/14 21:52:42 starting 4 fuzzer processes 21:52:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 21:52:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x0, @loopback}}) 21:52:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 171.891945][ T8646] IPVS: ftp: loaded support on port[0] = 21 [ 172.382020][ T8646] chnl_net:caif_netlink_parms(): no params data found [ 172.566394][ T8647] IPVS: ftp: loaded support on port[0] = 21 21:52:46 executing program 3: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 172.677949][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.768148][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.829583][ T8646] device bridge_slave_0 entered promiscuous mode [ 172.890792][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.911316][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.927498][ T8646] device bridge_slave_1 entered promiscuous mode [ 173.061773][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.094794][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.226285][ T8646] team0: Port device team_slave_0 added [ 173.265003][ T8646] team0: Port device team_slave_1 added [ 173.471832][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.487407][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.568885][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.806161][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.837638][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.931967][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 173.940810][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.001552][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 174.042244][ T8772] IPVS: ftp: loaded support on port[0] = 21 [ 174.337431][ T8646] device hsr_slave_0 entered promiscuous mode [ 174.429617][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 174.510884][ T8646] device hsr_slave_1 entered promiscuous mode [ 174.542406][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.571801][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.631268][ T8647] device bridge_slave_0 entered promiscuous mode [ 174.673711][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.699814][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.721805][ T8647] device bridge_slave_1 entered promiscuous mode [ 174.999724][ T8837] IPVS: ftp: loaded support on port[0] = 21 [ 175.107970][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.153742][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.336558][ T8647] team0: Port device team_slave_0 added [ 175.421389][ T8647] team0: Port device team_slave_1 added [ 175.706060][ T3040] Bluetooth: hci2: command 0x0409 tx timeout [ 175.774611][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.784929][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.928188][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.015648][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.020993][ T37] Bluetooth: hci0: command 0x041b tx timeout [ 176.035664][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.175112][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.459855][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 176.499456][ T8647] device hsr_slave_0 entered promiscuous mode [ 176.508274][ T37] Bluetooth: hci1: command 0x041b tx timeout [ 176.579495][ T8647] device hsr_slave_1 entered promiscuous mode [ 176.606399][ T8647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.627045][ T8647] Cannot create hsr debugfs directory [ 176.741045][ T3314] Bluetooth: hci3: command 0x0409 tx timeout [ 177.020282][ T8646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.115955][ T8646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.337712][ T8646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.498685][ T8646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.660707][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 177.794290][ T3040] Bluetooth: hci2: command 0x041b tx timeout [ 177.839915][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.865924][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.901747][ T8772] device bridge_slave_0 entered promiscuous mode [ 178.024272][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.051695][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.078063][ T8772] device bridge_slave_1 entered promiscuous mode [ 178.100611][ T3040] Bluetooth: hci0: command 0x040f tx timeout [ 178.371296][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.414882][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.433542][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.478818][ T8837] device bridge_slave_0 entered promiscuous mode [ 178.514431][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.549553][ T8772] team0: Port device team_slave_0 added [ 178.577456][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.587687][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.624685][ T8837] device bridge_slave_1 entered promiscuous mode [ 178.660569][ T3040] Bluetooth: hci1: command 0x040f tx timeout [ 178.722056][ T8772] team0: Port device team_slave_1 added [ 178.838606][ T3040] Bluetooth: hci3: command 0x041b tx timeout [ 178.890138][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.912700][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.991924][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.061483][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.122652][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.143601][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.251918][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.303284][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.318939][ T8647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.473084][ T8647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.551066][ T8772] device hsr_slave_0 entered promiscuous mode [ 179.569476][ T8772] device hsr_slave_1 entered promiscuous mode [ 179.594567][ T8772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.610564][ T8772] Cannot create hsr debugfs directory [ 179.646679][ T8647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.732563][ T8837] team0: Port device team_slave_0 added [ 179.771064][ T8837] team0: Port device team_slave_1 added [ 179.864455][ T3040] Bluetooth: hci2: command 0x040f tx timeout [ 179.873313][ T8647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.921993][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.959556][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.053436][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.135571][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.146120][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.254196][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.257872][ T20] Bluetooth: hci0: command 0x0419 tx timeout [ 180.366418][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.537545][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.657073][ T8837] device hsr_slave_0 entered promiscuous mode [ 180.730278][ T8837] device hsr_slave_1 entered promiscuous mode [ 180.741815][ T3040] Bluetooth: hci1: command 0x0419 tx timeout [ 180.835843][ T8837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.856911][ T8837] Cannot create hsr debugfs directory [ 180.920655][ T3040] Bluetooth: hci3: command 0x040f tx timeout [ 180.943475][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.009211][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.167972][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.195529][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.261447][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.280269][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.295119][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.345435][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.366825][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.418299][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.557154][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.608240][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.788380][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.803756][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.825868][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.875992][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.900168][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.942353][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.957590][ T3040] Bluetooth: hci2: command 0x0419 tx timeout [ 182.005106][ T8772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.189967][ T8772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.228655][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.240856][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.285060][ T8772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.360773][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.397427][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.440691][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.471790][ T8772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.685794][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.699236][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.756119][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.831977][ T8837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.883464][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.928654][ T8837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.972638][ T8837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.990436][ T3040] Bluetooth: hci3: command 0x0419 tx timeout [ 183.026027][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.074739][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.129248][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.221403][ T8837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.365429][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.413137][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.467341][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.482149][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.545344][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.673075][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.775500][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.788710][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.858940][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.908442][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.929461][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.957405][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.977460][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.000123][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.103249][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.186807][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.282646][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.334678][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.364347][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.452779][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.511256][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.598995][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.679142][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.713876][ T8647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.753858][ T8647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.816120][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.859578][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.912962][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.102847][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.154150][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.185105][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.256940][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.278696][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.340888][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.361059][ T9243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.400734][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.413971][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.444343][ T8646] device veth0_vlan entered promiscuous mode [ 185.518459][ T8646] device veth1_vlan entered promiscuous mode [ 185.564549][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.645033][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.678200][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.692363][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.746799][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.861887][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.917263][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.968239][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.994047][ T9234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.058542][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.123300][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.217477][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.276441][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.333803][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.580234][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.611394][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.647334][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.686323][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.708896][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.722849][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.739018][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.841783][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.855205][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.886683][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.969260][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.986463][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.003923][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.034373][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.050226][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.097983][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.153997][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.221408][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.313274][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.362095][ T8647] device veth0_vlan entered promiscuous mode [ 187.449291][ T8647] device veth1_vlan entered promiscuous mode [ 187.537602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.585383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.659190][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.695449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.773600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.799422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.818113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.842303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.866915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.918963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.979526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.997129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.041379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.069598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.100021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.146833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.174207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.266713][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.322934][ T8772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.379683][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.418214][ T8646] device veth0_macvtap entered promiscuous mode [ 188.436326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.475759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.514629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.577843][ T8646] device veth1_macvtap entered promiscuous mode [ 188.687128][ T8647] device veth0_macvtap entered promiscuous mode [ 188.783234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.804679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.845849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.984451][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.017894][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.044013][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.082306][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.148030][ T8647] device veth1_macvtap entered promiscuous mode [ 189.191202][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.264426][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.310137][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.389100][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.496431][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.558510][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.606150][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 189.641060][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.698032][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.807874][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.886143][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.915978][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.979544][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.015963][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.048905][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.107610][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.163087][ T8646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.204453][ T8646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.248898][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.281314][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.325789][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.369963][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.387424][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.465827][ T8647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.497699][ T8647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.565754][ T8647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.620148][ T8647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.731619][ T8646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.772504][ T8646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.861909][ T8646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.922481][ T8646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.017573][ T8837] device veth0_vlan entered promiscuous mode [ 191.048337][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.065949][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.165260][ T8772] device veth0_vlan entered promiscuous mode [ 191.236287][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.248927][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.266157][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.286565][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.297383][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.344983][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.579367][ T8772] device veth1_vlan entered promiscuous mode [ 191.721324][ T8837] device veth1_vlan entered promiscuous mode [ 192.152677][ T8837] device veth0_macvtap entered promiscuous mode [ 192.239282][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.280237][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.316021][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.381375][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.519914][ T8837] device veth1_macvtap entered promiscuous mode [ 192.614277][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.732527][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.750481][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.777626][ T9034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.806036][ T9034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.816522][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.842093][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.867418][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.901826][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.926754][ T8772] device veth0_macvtap entered promiscuous mode [ 192.963039][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.011214][ T8772] device veth1_macvtap entered promiscuous mode [ 193.036270][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.060242][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.122043][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.146807][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.233207][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.311356][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.352278][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.380172][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.391177][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.443332][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.529893][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.585856][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.588066][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.636636][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.636710][ T8837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.636731][ T8837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.664373][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.762334][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.762357][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.762366][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.762396][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.762408][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.762420][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.765568][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.768720][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.768740][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.768749][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.768761][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.768773][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.768784][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.789412][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.809757][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.603488][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.645073][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.711295][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.757896][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.799388][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.836124][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.873878][ T9527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.910683][ T8837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.947427][ T8837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.020875][ T8837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.050956][ T8837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.087383][ T8772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 21:53:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 195.149373][ T8772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.211704][ T8772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.251589][ T8772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 21:53:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 196.028822][ T8826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.097699][ T8826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.142883][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 21:53:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 21:53:10 executing program 1: io_cancel(0x0, &(0x7f00000028c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 196.283041][ T8826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.365046][ T8826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.414294][ T9580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.421983][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.464823][ T9580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.498127][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.539852][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.564065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.603235][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:53:11 executing program 1: io_cancel(0x0, &(0x7f00000028c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 21:53:11 executing program 0: inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) eventfd(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 197.474038][ T9634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.562036][ T9636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.649700][ T9634] syz-executor.2 (9634) used greatest stack depth: 22920 bytes left 21:53:11 executing program 1: io_cancel(0x0, &(0x7f00000028c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 21:53:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:53:12 executing program 3: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 21:53:12 executing program 1: io_cancel(0x0, &(0x7f00000028c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 21:53:12 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 21:53:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 198.400871][ T9650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:53:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:53:12 executing program 3: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 198.807683][ T9659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.847667][ T9661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:53:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 21:53:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:53:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:53:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 21:53:13 executing program 3: perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 21:53:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) [ 199.403906][ T9674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:53:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x701, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x7}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x24}}, 0x0) 21:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r0, @ANYBLOB="0100000000aa9c8005006000000008000300", @ANYRES16, @ANYBLOB="06012a"], 0x124}}, 0x0) 21:53:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:53:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) fsetxattr$security_evm(r0, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0x2, 0x4, 0x48, "46bf7eb297a7ecc0f92aa739eadf1f2c2226300ab0c71966e9023e1e244f7b0b4c1353724221c954b7e5e6175db6ad222b3cb12f67af3d49f85a422e6b64745898198d2358f7b61e"}, 0x51, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x400000000000000) [ 199.842301][ T9688] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.880918][ T9692] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. 21:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x701, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x7}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x24}}, 0x0) 21:53:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r0, @ANYBLOB="0100000000aa9c8005006000000008000300", @ANYRES16, @ANYBLOB="06012a"], 0x124}}, 0x0) 21:53:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:53:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) fsetxattr$security_evm(r0, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0x2, 0x4, 0x48, "46bf7eb297a7ecc0f92aa739eadf1f2c2226300ab0c71966e9023e1e244f7b0b4c1353724221c954b7e5e6175db6ad222b3cb12f67af3d49f85a422e6b64745898198d2358f7b61e"}, 0x51, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x400000000000000) 21:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x701, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x7}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x24}}, 0x0) [ 200.554199][ T9701] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. 21:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x701, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x7}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x24}}, 0x0) 21:53:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xffff, 0x0, 0x11, 0x0, @broadcast, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 21:53:14 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r0, @ANYBLOB="0100000000aa9c8005006000000008000300", @ANYRES16, @ANYBLOB="06012a"], 0x124}}, 0x0) 21:53:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) fsetxattr$security_evm(r0, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0x2, 0x4, 0x48, "46bf7eb297a7ecc0f92aa739eadf1f2c2226300ab0c71966e9023e1e244f7b0b4c1353724221c954b7e5e6175db6ad222b3cb12f67af3d49f85a422e6b64745898198d2358f7b61e"}, 0x51, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x400000000000000) 21:53:15 executing program 1: unshare(0x40000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="0400050900000000666174", 0xb}], 0x90, &(0x7f0000000080)=ANY=[]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) [ 201.251210][ T9716] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. 21:53:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) fsetxattr$security_evm(r0, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x5, 0x1, 0x2, 0x4, 0x48, "46bf7eb297a7ecc0f92aa739eadf1f2c2226300ab0c71966e9023e1e244f7b0b4c1353724221c954b7e5e6175db6ad222b3cb12f67af3d49f85a422e6b64745898198d2358f7b61e"}, 0x51, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000100)) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x400000000000000) [ 201.445113][ T9722] IPVS: ftp: loaded support on port[0] = 21 21:53:15 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) 21:53:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r0, @ANYBLOB="0100000000aa9c8005006000000008000300", @ANYRES16, @ANYBLOB="06012a"], 0x124}}, 0x0) [ 201.662509][ T9723] FAT-fs (loop1): bogus number of reserved sectors [ 201.689292][ T9723] FAT-fs (loop1): Can't find a valid FAT filesystem [ 201.933505][ T9722] IPVS: ftp: loaded support on port[0] = 21 21:53:16 executing program 1: unshare(0x40000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="0400050900000000666174", 0xb}], 0x90, &(0x7f0000000080)=ANY=[]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) [ 202.169267][ T9776] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. 21:53:16 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) 21:53:16 executing program 0: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) 21:53:16 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000004, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x103802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001c80)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="bb", 0x1}]) [ 202.488139][ T9782] IPVS: ftp: loaded support on port[0] = 21 [ 202.544505][ T9783] FAT-fs (loop1): bogus number of reserved sectors [ 202.571592][ T9783] FAT-fs (loop1): Can't find a valid FAT filesystem 21:53:17 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) 21:53:17 executing program 1: unshare(0x40000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="0400050900000000666174", 0xb}], 0x90, &(0x7f0000000080)=ANY=[]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 21:53:17 executing program 0: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) [ 203.803493][ T9826] IPVS: ftp: loaded support on port[0] = 21 21:53:17 executing program 3: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) [ 203.925375][ T9831] FAT-fs (loop1): bogus number of reserved sectors [ 203.981617][ T9831] FAT-fs (loop1): Can't find a valid FAT filesystem 21:53:18 executing program 0: openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10000) 21:53:18 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000004, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x103802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001c80)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="bb", 0x1}]) 21:53:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:53:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b16b60b5"}, 0x0, 0x0, @fd}) 21:53:18 executing program 1: unshare(0x40000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="0400050900000000666174", 0xb}], 0x90, &(0x7f0000000080)=ANY=[]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 21:53:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 204.946866][ T9878] IPVS: ftp: loaded support on port[0] = 21 21:53:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 205.031335][ T9881] FAT-fs (loop1): bogus number of reserved sectors [ 205.108739][ T9881] FAT-fs (loop1): Can't find a valid FAT filesystem 21:53:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:19 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000004, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x103802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001c80)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="bb", 0x1}]) 21:53:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:53:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:20 executing program 3: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) 21:53:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) [ 206.353502][ T9929] tmpfs: Bad value for 'mpol' [ 206.395874][ T9932] tmpfs: Bad value for 'mpol' 21:53:20 executing program 2: io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000004, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x103802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001c80)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="bb", 0x1}]) 21:53:20 executing program 3: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) 21:53:20 executing program 0: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) [ 206.662076][ T9939] tmpfs: Bad value for 'mpol' 21:53:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 21:53:20 executing program 0: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) [ 206.955035][ T9949] tmpfs: Bad value for 'mpol' 21:53:21 executing program 3: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) 21:53:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) [ 207.218815][ T9953] tmpfs: Bad value for 'mpol' [ 207.233888][ T9958] tmpfs: Bad value for 'mpol' 21:53:21 executing program 3: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) 21:53:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 21:53:21 executing program 0: mknod$loop(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0xa, [0x2c, 0x31]}}}}]}) 21:53:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) [ 207.699683][ T9966] tmpfs: Bad value for 'mpol' [ 207.816435][ T9969] tmpfs: Bad value for 'mpol' 21:53:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008101000418e00000004fcff", 0x58}], 0x1) 21:53:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 21:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 21:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 21:53:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 21:53:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008101000418e00000004fcff", 0x58}], 0x1) 21:53:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 21:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 21:53:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 21:53:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008101000418e00000004fcff", 0x58}], 0x1) 21:53:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 21:53:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) socket(0x1e, 0x0, 0x0) 21:53:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008101000418e00000004fcff", 0x58}], 0x1) 21:53:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 21:53:23 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:53:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) dup2(r0, r1) 21:53:23 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:53:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x178, 0x5c, 0x160, 0x0, 0x3e0, 0x288, 0x228, 0x228, 0x288, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x118, 0x178, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 21:53:24 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xe5\xbc*,\xaeG0\xbe\xa8\x05Q\xbe\x03\x02\x936]o\xb2^`\x8e\x00\x00\x00\x00\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x18\xe9\a^\xb7\xc4V\x0eo', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0xa4000972) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x300, 0x0) 21:53:24 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:53:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) dup2(r0, r1) 21:53:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x178, 0x5c, 0x160, 0x0, 0x3e0, 0x288, 0x228, 0x228, 0x288, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x118, 0x178, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 21:53:25 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:53:25 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xe5\xbc*,\xaeG0\xbe\xa8\x05Q\xbe\x03\x02\x936]o\xb2^`\x8e\x00\x00\x00\x00\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x18\xe9\a^\xb7\xc4V\x0eo', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0xa4000972) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x300, 0x0) 21:53:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) dup2(r0, r1) 21:53:25 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:53:25 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xe5\xbc*,\xaeG0\xbe\xa8\x05Q\xbe\x03\x02\x936]o\xb2^`\x8e\x00\x00\x00\x00\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x18\xe9\a^\xb7\xc4V\x0eo', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0xa4000972) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x300, 0x0) 21:53:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x178, 0x5c, 0x160, 0x0, 0x3e0, 0x288, 0x228, 0x228, 0x288, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x118, 0x178, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 21:53:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) dup2(r0, r1) 21:53:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) 21:53:26 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xe5\xbc*,\xaeG0\xbe\xa8\x05Q\xbe\x03\x02\x936]o\xb2^`\x8e\x00\x00\x00\x00\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x18\xe9\a^\xb7\xc4V\x0eo', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0xa4000972) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x300, 0x0) 21:53:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) 21:53:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 21:53:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) 21:53:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 21:53:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x178, 0x5c, 0x160, 0x0, 0x3e0, 0x288, 0x228, 0x228, 0x288, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x118, 0x178, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 21:53:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x0) 21:53:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 21:53:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 21:53:27 executing program 0: pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 21:53:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:53:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xffff0000, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000ab40)={&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000008780)=""/154, 0x9a}, {&(0x7f0000008840)=""/254, 0xfe}, {0x0}, {&(0x7f0000008ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000009b40)=""/4096, 0x1000}, 0x80000141) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000f80), 0xc, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd2d, 0xff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "77e6961495cbf9116af387c482ed3bc8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e1d10157148369ec264393f7da8f9d2d011d59465f8b107f545f9d70c8fc3979"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000813}, 0x810) 21:53:29 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 21:53:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 21:53:30 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b000e0000ff7f", 0xa}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) [ 216.364115][T10142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 21:53:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) 21:53:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x8, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp, 0xbcb56b97c6031db0}, 0x20) [ 216.564851][T10146] loop0: detected capacity change from 0 to 2 [ 216.598310][T10145] overlayfs: failed to resolve './file0': -2 [ 216.598497][T10146] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 216.646208][T10146] BFS-fs: bfs_fill_super(): Last block not available on loop0: 63 21:53:30 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b000e0000ff7f", 0xa}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 21:53:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 21:53:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) 21:53:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x8, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp, 0xbcb56b97c6031db0}, 0x20) [ 217.309942][T10158] loop0: detected capacity change from 0 to 2 [ 217.357987][T10158] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 217.389630][T10158] BFS-fs: bfs_fill_super(): Last block not available on loop0: 63 21:53:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x8, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp, 0xbcb56b97c6031db0}, 0x20) 21:53:31 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b000e0000ff7f", 0xa}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 21:53:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) [ 218.020461][T10168] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 21:53:32 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') [ 218.589644][T10173] loop0: detected capacity change from 0 to 2 21:53:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) [ 218.659762][T10173] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 218.692039][T10173] BFS-fs: bfs_fill_super(): Last block not available on loop0: 63 21:53:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x8, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp, 0xbcb56b97c6031db0}, 0x20) [ 218.916070][T10181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 21:53:33 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b000e0000ff7f", 0xa}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 21:53:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) 21:53:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 21:53:33 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') [ 219.506037][T10191] loop0: detected capacity change from 0 to 2 [ 219.599110][T10191] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 219.621646][T10191] BFS-fs: bfs_fill_super(): Last block not available on loop0: 63 21:53:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) 21:53:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00)) 21:53:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) [ 220.104073][T10201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.149484][T10205] loop0: detected capacity change from 0 to 132 21:53:34 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 21:53:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8914, &(0x7f0000000000)={'batadv0\x00'}) [ 220.494963][T10209] overlayfs: failed to resolve './file0': -2 21:53:34 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x456a4056fdf54672) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='#! ./file0 \n'], 0x35) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:53:34 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x456a4056fdf54672) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='#! ./file0 \n'], 0x35) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:53:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x890d, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @dev}, {0x2, 0x4e21, @multicast2}, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000005a40), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000005a40), 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r1, r3, r4, r1, r1], 0x5) r5 = socket(0x35, 0x4, 0x7f) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r5) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0x4c, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc095}, 0x4008000) 21:53:35 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x456a4056fdf54672) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='#! ./file0 \n'], 0x35) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:53:35 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x160, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 21:53:35 executing program 1: open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 221.939517][T10232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 21:53:36 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000600)='./bus/file0\x00') mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0xee00) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 21:53:36 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x456a4056fdf54672) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='#! ./file0 \n'], 0x35) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 21:53:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xa, 0x3, 0x220, 0x26c, 0x0, 0xb4, 0xb4, 0xb4, 0x18c, 0x18c, 0x18c, 0x18c, 0x18c, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@inet=@ecn={{0x37, 'ecn\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) [ 223.891657][ T51] audit: type=1800 audit(1615758817.915:2): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14193 res=0 errno=0 [ 223.948996][T10245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.126422][ T51] audit: type=1800 audit(1615758818.175:3): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14193 res=0 errno=0 21:53:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xa, 0x3, 0x220, 0x26c, 0x0, 0xb4, 0xb4, 0xb4, 0x18c, 0x18c, 0x18c, 0x18c, 0x18c, 0x3, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@inet=@ecn={{0x37, 'ecn\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) [ 224.274011][T10249] ================================================================== 21:53:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x160, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) [ 224.303625][T10249] BUG: KASAN: use-after-free in __cpuhp_state_remove_instance+0x58b/0x5b0 21:53:38 executing program 2: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x40189206, &(0x7f0000000080)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 224.369038][T10249] Read of size 8 at addr ffff888012a9fd98 by task syz-executor.1/10249 [ 224.428436][T10249] [ 224.436692][T10249] CPU: 2 PID: 10249 Comm: syz-executor.1 Not tainted 5.12.0-rc1-syzkaller #0 [ 224.472231][T10249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 224.531887][T10249] Call Trace: [ 224.543294][T10249] dump_stack+0xfa/0x151 [ 224.570739][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 224.585017][T10249] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 224.613828][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 224.640376][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 224.651039][T10249] kasan_report.cold+0x7c/0xd8 [ 224.672062][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 224.685424][T10249] __cpuhp_state_remove_instance+0x58b/0x5b0 [ 224.707590][T10249] io_wq_create+0x6ca/0xbf0 [ 224.726116][T10249] io_uring_alloc_task_context+0x1bf/0x6a0 [ 224.739816][T10249] ? io_req_caches_free.constprop.0+0x4d0/0x4d0 [ 224.761040][T10249] ? io_issue_sqe+0x4f00/0x4f00 [ 224.782936][T10249] ? io_async_find_and_cancel+0x2f0/0x2f0 [ 224.791902][T10249] ? do_raw_spin_unlock+0x171/0x230 [ 224.817390][T10249] ? _raw_spin_unlock+0x24/0x40 [ 224.825650][T10249] ? alloc_fd+0x2bc/0x640 [ 224.849416][T10249] io_uring_add_task_file+0x261/0x350 [ 224.857062][T10249] io_uring_setup+0x14c7/0x2be0 [ 224.876881][T10249] ? io_async_buf_func+0x720/0x720 [ 224.893659][T10249] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 224.909186][T10249] __do_fast_syscall_32+0x56/0x80 [ 224.922553][T10249] do_fast_syscall_32+0x2f/0x70 [ 224.935468][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 224.993783][T10249] RIP: 0023:0xf7f89549 [ 225.021620][T10249] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.116381][T10249] RSP: 002b:00000000f55625ac EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 225.134751][T10249] RAX: ffffffffffffffda RBX: 0000000000002de5 RCX: 0000000020000240 [ 225.170585][T10249] RDX: 00000000f5562670 RSI: 000000000816c000 RDI: 0000000020ffd000 [ 225.206345][T10249] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000000000000 [ 225.242591][T10249] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 225.253782][T10249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.305114][T10249] [ 225.312870][T10249] Allocated by task 10249: [ 225.328376][T10249] kasan_save_stack+0x1b/0x40 [ 225.334818][T10249] __kasan_kmalloc+0x99/0xc0 [ 225.355852][T10249] io_wq_create+0xc0/0xbf0 [ 225.363868][T10249] io_uring_alloc_task_context+0x1bf/0x6a0 [ 225.373767][T10249] io_uring_add_task_file+0x261/0x350 [ 225.388238][T10249] io_uring_setup+0x14c7/0x2be0 [ 225.396751][T10249] __do_fast_syscall_32+0x56/0x80 [ 225.419035][T10249] do_fast_syscall_32+0x2f/0x70 [ 225.430680][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 225.444176][T10249] [ 225.449944][T10249] Freed by task 10249: [ 225.460361][T10249] kasan_save_stack+0x1b/0x40 [ 225.469860][T10249] kasan_set_track+0x1c/0x30 [ 225.478033][T10249] kasan_set_free_info+0x20/0x30 [ 225.488303][T10249] __kasan_slab_free+0xf5/0x130 [ 225.499011][T10249] slab_free_freelist_hook+0x72/0x1b0 [ 225.508671][T10249] kfree+0xe5/0x7b0 [ 225.514702][T10249] io_wq_put+0x4d0/0x6d0 [ 225.521934][T10249] io_wq_create+0x92d/0xbf0 [ 225.535967][T10249] io_uring_alloc_task_context+0x1bf/0x6a0 [ 225.553861][T10249] io_uring_add_task_file+0x261/0x350 [ 225.575432][T10249] io_uring_setup+0x14c7/0x2be0 [ 225.601587][T10249] __do_fast_syscall_32+0x56/0x80 [ 225.642986][T10249] do_fast_syscall_32+0x2f/0x70 [ 225.681183][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 225.695475][T10249] [ 225.701550][T10249] Last potentially related work creation: [ 225.715646][T10249] kasan_save_stack+0x1b/0x40 [ 225.739102][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.741487][T10249] kasan_record_aux_stack+0xe5/0x110 [ 225.741604][T10249] call_rcu+0xb1/0x700 [ 225.766765][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.871846][T10249] __nf_register_net_hook+0x2aa/0x610 [ 225.917380][T10249] nf_register_net_hook+0x114/0x170 [ 225.959175][T10249] nf_register_net_hooks+0x59/0xc0 [ 225.966202][T10249] ip6t_register_table+0x235/0x2f0 [ 225.989754][T10249] ip6table_raw_table_init+0xaa/0xd0 [ 225.998474][T10249] xt_find_table_lock+0x2d9/0x540 [ 226.007034][T10249] xt_request_find_table_lock+0x27/0xf0 [ 226.016135][T10249] get_info+0x16a/0x710 [ 226.025521][T10249] do_ip6t_get_ctl+0x152/0xa00 [ 226.044409][T10249] nf_getsockopt+0x72/0xd0 [ 226.052193][T10249] ipv6_getsockopt+0x1be/0x270 [ 226.059727][T10249] tcp_getsockopt+0x86/0xd0 [ 226.066696][T10249] __sys_getsockopt+0x21f/0x5f0 [ 226.075242][T10249] __do_compat_sys_socketcall+0x513/0x660 [ 226.091916][T10249] __do_fast_syscall_32+0x56/0x80 [ 226.106278][T10249] do_fast_syscall_32+0x2f/0x70 [ 226.154300][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 226.177291][T10249] [ 226.181660][T10249] Second to last potentially related work creation: [ 226.190830][T10249] kasan_save_stack+0x1b/0x40 [ 226.225515][T10249] kasan_record_aux_stack+0xe5/0x110 [ 226.234386][T10249] insert_work+0x48/0x370 [ 226.257492][T10249] __queue_work+0x5c1/0xf00 [ 226.263923][T10249] queue_work_on+0xae/0xc0 [ 226.286493][T10249] netdevice_event+0x3aa/0x720 [ 226.294303][T10249] notifier_call_chain+0xb5/0x200 [ 226.303370][T10249] call_netdevice_notifiers_info+0xb5/0x130 [ 226.316772][T10249] __dev_notify_flags+0x110/0x2b0 [ 226.331617][T10249] dev_change_flags+0x112/0x170 [ 226.344002][T10249] vlan_device_event+0x1768/0x2020 [ 226.358100][T10249] notifier_call_chain+0xb5/0x200 [ 226.371616][T10249] call_netdevice_notifiers_info+0xb5/0x130 [ 226.390177][T10249] __dev_notify_flags+0x110/0x2b0 [ 226.403034][T10249] dev_change_flags+0x112/0x170 [ 226.415996][T10249] do_setlink+0x89a/0x3a70 [ 226.477580][T10249] __rtnl_newlink+0xdc6/0x1710 [ 226.515088][T10249] rtnl_newlink+0x64/0xa0 [ 226.553605][T10249] rtnetlink_rcv_msg+0x44e/0xad0 [ 226.590818][T10249] netlink_rcv_skb+0x153/0x420 [ 226.612183][T10249] netlink_unicast+0x533/0x7d0 [ 226.618899][T10249] netlink_sendmsg+0x856/0xd90 [ 226.630896][T10249] sock_sendmsg+0xcf/0x120 [ 226.639245][T10249] __sys_sendto+0x21c/0x320 [ 226.648990][T10249] __do_compat_sys_socketcall+0x47f/0x660 [ 226.666271][T10249] __do_fast_syscall_32+0x56/0x80 [ 226.689969][T10249] do_fast_syscall_32+0x2f/0x70 [ 226.705829][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 226.718985][T10249] [ 226.722944][T10249] The buggy address belongs to the object at ffff888012a9fd00 [ 226.722944][T10249] which belongs to the cache kmalloc-192 of size 192 [ 226.773625][T10249] The buggy address is located 152 bytes inside of [ 226.773625][T10249] 192-byte region [ffff888012a9fd00, ffff888012a9fdc0) [ 226.805599][T10249] The buggy address belongs to the page: [ 226.825542][T10249] page:00000000efd56afe refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a9f [ 226.861467][T10249] flags: 0xfff00000000200(slab) [ 226.869379][T10249] raw: 00fff00000000200 ffffea00004af1c0 0000000700000007 ffff888010842a00 [ 226.901501][T10249] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 226.918667][T10249] page dumped because: kasan: bad access detected [ 226.934602][T10249] [ 226.938685][T10249] Memory state around the buggy address: [ 226.947774][T10249] ffff888012a9fc80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 226.977973][T10249] ffff888012a9fd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.018647][T10249] >ffff888012a9fd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 227.053579][T10249] ^ [ 227.091829][T10249] ffff888012a9fe00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.109203][T10249] ffff888012a9fe80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 227.129110][T10249] ================================================================== [ 227.147779][T10249] Disabling lock debugging due to kernel taint [ 227.166036][T10249] Kernel panic - not syncing: panic_on_warn set ... [ 227.179324][T10249] CPU: 2 PID: 10249 Comm: syz-executor.1 Tainted: G B 5.12.0-rc1-syzkaller #0 [ 227.209305][T10249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 227.237130][T10249] Call Trace: [ 227.241971][T10249] dump_stack+0xfa/0x151 [ 227.248833][T10249] panic+0x306/0x73d [ 227.269818][T10249] ? __warn_printk+0xf3/0xf3 [ 227.277982][T10249] ? preempt_schedule_common+0x59/0xc0 [ 227.303466][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 227.315273][T10249] ? preempt_schedule_thunk+0x16/0x18 [ 227.339286][T10249] ? trace_hardirqs_on+0x38/0x1c0 [ 227.349401][T10249] ? trace_hardirqs_on+0x51/0x1c0 [ 227.357614][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 227.367831][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 227.396861][T10249] end_report.cold+0x5a/0x5a [ 227.426202][T10249] kasan_report.cold+0x6a/0xd8 [ 227.447200][T10249] ? __cpuhp_state_remove_instance+0x58b/0x5b0 [ 227.473842][T10249] __cpuhp_state_remove_instance+0x58b/0x5b0 [ 227.495679][T10249] io_wq_create+0x6ca/0xbf0 [ 227.512830][T10249] io_uring_alloc_task_context+0x1bf/0x6a0 [ 227.520268][T10249] ? io_req_caches_free.constprop.0+0x4d0/0x4d0 [ 227.561011][T10249] ? io_issue_sqe+0x4f00/0x4f00 [ 227.569396][T10249] ? io_async_find_and_cancel+0x2f0/0x2f0 [ 227.578706][T10249] ? do_raw_spin_unlock+0x171/0x230 [ 227.587169][T10249] ? _raw_spin_unlock+0x24/0x40 [ 227.594343][T10249] ? alloc_fd+0x2bc/0x640 [ 227.601015][T10249] io_uring_add_task_file+0x261/0x350 [ 227.608363][T10249] io_uring_setup+0x14c7/0x2be0 [ 227.626871][T10249] ? io_async_buf_func+0x720/0x720 [ 227.646858][T10249] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 227.656998][T10249] __do_fast_syscall_32+0x56/0x80 [ 227.670153][T10249] do_fast_syscall_32+0x2f/0x70 [ 227.679281][T10249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 227.690552][T10249] RIP: 0023:0xf7f89549 [ 227.714326][T10249] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.796671][T10249] RSP: 002b:00000000f55625ac EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 227.822320][T10249] RAX: ffffffffffffffda RBX: 0000000000002de5 RCX: 0000000020000240 [ 227.848604][T10249] RDX: 00000000f5562670 RSI: 000000000816c000 RDI: 0000000020ffd000 [ 227.886325][T10249] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000000000000 [ 227.918587][T10249] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 227.952429][T10249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.979296][T10249] Dumping ftrace buffer: [ 227.991527][T10249] (ftrace buffer empty) [ 228.004996][T10249] Kernel Offset: disabled [ 228.016839][T10249] Rebooting in 1 seconds.. [ 229.976553][T10249] ACPI MEMORY or I/O RESET_REG. Connection to localhost closed by remote host. VM DIAGNOSIS: 21:53:38 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff92000292f76 RCX=ffffffff81591218 RDX=1ffffffff17ef86e RSI=00000000ffffffff RDI=ffffffff8bf73ca0 RBP=0000000000000000 RSP=ffffc90001497b78 R8 =0000000000000000 R9 =ffffffff8dc6354f R10=fffffbfff1b8c6a9 R11=0000000000000000 R12=0000000000000001 R13=ffffffff8bf73d60 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8902d7c4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561f24fcc1a8 CR3=0000000015df6000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff000000000000ff00000000000000 XMM01=660065676e61686300746e657665752f XMM02=65766965636572206f742064656c6961 XMM03=ffffffffffffff00ffffffffffffff00 XMM04=00000000000000000000000000000000 XMM05=0000000000000000ffff00000000ff00 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=0000561f24f880500000561f24f87f50 XMM09=64646464646464356464646464646464 XMM10=64641be9d8774f3c642c302534322120 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801d15d500 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff838ae66b RDI=ffff88801d15d518 RBP=dffffc0000000000 RSP=ffffc90000bd7a20 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff838ae6f1 R11=0000000000000001 R12=ffffc90000bd7b50 R13=ffff888041ef7a90 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff838ae680 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8dbd0028c0 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe5eebb2000 CR3=0000000015df6000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6d616e002f002f70756f7267632f7366 XMM01=0000657079743e2d780073257325002f XMM02=ffff0f0e0d0c0b0a0908070605040302 XMM03=00000000000000000000006d616e002f XMM04=00000000000000000000000000000073 XMM05=0000000000000000ffff00000000ff00 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=0000561f24f880500000561f24f87f50 XMM09=64646464646464356464646464646464 XMM10=64641be9d8774f3c642c302534322120 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff841b45bc RDI=ffffffff9011a2e0 RBP=ffffffff9011a2a0 RSP=ffffc90000e27738 R8 =000000000000005c R9 =0000000000000000 R10=ffffffff841b45ad R11=000000000000001f R12=0000000000000000 R13=fffffbfff20234a7 R14=fffffbfff202345e R15=dffffc0000000000 RIP=ffffffff841b45e2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003012b000 CR3=000000001cfad000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=00000120000000000000000300000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000012bb4f RBX=ffff888011091bc0 RCX=ffffffff8902ddc0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed1002212378 RSP=ffffc9000043fdf8 R8 =0000000000000001 R9 =ffff88802cd3610b R10=ffffed10059a6c21 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8dc63548 R15=0000000000000000 RIP=ffffffff8905302e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb69e3cd010 CR3=000000005fc6c000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=00000120000000000000000300000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000