Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2021/03/04 17:42:25 fuzzer started 2021/03/04 17:42:25 dialing manager at 10.128.0.163:35607 2021/03/04 17:42:25 syscalls: 3540 2021/03/04 17:42:25 code coverage: enabled 2021/03/04 17:42:25 comparison tracing: enabled 2021/03/04 17:42:25 extra coverage: enabled 2021/03/04 17:42:25 setuid sandbox: enabled 2021/03/04 17:42:25 namespace sandbox: enabled 2021/03/04 17:42:25 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/04 17:42:25 fault injection: enabled 2021/03/04 17:42:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/04 17:42:25 net packet injection: enabled 2021/03/04 17:42:25 net device setup: enabled 2021/03/04 17:42:25 concurrency sanitizer: enabled 2021/03/04 17:42:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/04 17:42:25 USB emulation: enabled 2021/03/04 17:42:25 hci packet injection: enabled 2021/03/04 17:42:25 wifi device emulation: enabled 2021/03/04 17:42:25 802.15.4 emulation: enabled 2021/03/04 17:42:26 suppressing KCSAN reports in functions: 'alloc_pid' '__jbd2_journal_file_buffer' 'futex_wait_queue_me' '__xa_clear_mark' 'ext4_free_inodes_count' 'xas_clear_mark' '__ext4_new_inode' '__ext4_journal_start_sb' '__ext4_handle_dirty_metadata' 'blk_mq_rq_ctx_init' 'generic_write_end' 'do_nanosleep' 'ext4_mark_iloc_dirty' 'n_tty_receive_buf_common' 'blk_mq_dispatch_rq_list' 2021/03/04 17:42:26 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/04 17:42:27 fetching corpus: 50, signal 25603/28928 (executing program) 2021/03/04 17:42:27 fetching corpus: 100, signal 35216/39837 (executing program) 2021/03/04 17:42:27 fetching corpus: 150, signal 40513/46378 (executing program) 2021/03/04 17:42:27 fetching corpus: 199, signal 46571/53524 (executing program) 2021/03/04 17:42:27 fetching corpus: 249, signal 51702/59612 (executing program) 2021/03/04 17:42:27 fetching corpus: 299, signal 57053/65777 (executing program) 2021/03/04 17:42:27 fetching corpus: 349, signal 63016/72321 (executing program) 2021/03/04 17:42:27 fetching corpus: 399, signal 68320/78169 (executing program) 2021/03/04 17:42:27 fetching corpus: 448, signal 73867/84028 (executing program) 2021/03/04 17:42:27 fetching corpus: 498, signal 77559/88186 (executing program) 2021/03/04 17:42:27 fetching corpus: 548, signal 80194/91352 (executing program) 2021/03/04 17:42:28 fetching corpus: 598, signal 83297/94893 (executing program) 2021/03/04 17:42:28 fetching corpus: 648, signal 86436/98355 (executing program) 2021/03/04 17:42:28 fetching corpus: 697, signal 88950/101195 (executing program) 2021/03/04 17:42:28 fetching corpus: 747, signal 91156/103786 (executing program) 2021/03/04 17:42:28 fetching corpus: 797, signal 93484/106384 (executing program) 2021/03/04 17:42:28 fetching corpus: 847, signal 95051/108308 (executing program) 2021/03/04 17:42:28 fetching corpus: 897, signal 98253/111487 (executing program) 2021/03/04 17:42:28 fetching corpus: 946, signal 100294/113753 (executing program) 2021/03/04 17:42:28 fetching corpus: 995, signal 102516/116043 (executing program) 2021/03/04 17:42:28 fetching corpus: 1045, signal 104015/117743 (executing program) 2021/03/04 17:42:28 fetching corpus: 1095, signal 106579/120163 (executing program) 2021/03/04 17:42:28 fetching corpus: 1144, signal 108638/122158 (executing program) 2021/03/04 17:42:28 fetching corpus: 1194, signal 110536/123964 (executing program) 2021/03/04 17:42:28 fetching corpus: 1244, signal 111585/125192 (executing program) 2021/03/04 17:42:29 fetching corpus: 1294, signal 113951/127299 (executing program) 2021/03/04 17:42:29 fetching corpus: 1343, signal 115072/128513 (executing program) 2021/03/04 17:42:29 fetching corpus: 1393, signal 116614/129991 (executing program) 2021/03/04 17:42:29 fetching corpus: 1443, signal 118533/131546 (executing program) 2021/03/04 17:42:29 fetching corpus: 1493, signal 120410/133122 (executing program) 2021/03/04 17:42:29 fetching corpus: 1542, signal 122473/134726 (executing program) 2021/03/04 17:42:29 fetching corpus: 1592, signal 124615/136610 (executing program) 2021/03/04 17:42:29 fetching corpus: 1642, signal 126091/137831 (executing program) 2021/03/04 17:42:29 fetching corpus: 1692, signal 127592/139004 (executing program) 2021/03/04 17:42:29 fetching corpus: 1742, signal 129661/140431 (executing program) 2021/03/04 17:42:29 fetching corpus: 1792, signal 131019/141407 (executing program) 2021/03/04 17:42:29 fetching corpus: 1842, signal 132331/142374 (executing program) 2021/03/04 17:42:30 fetching corpus: 1892, signal 134087/143487 (executing program) 2021/03/04 17:42:30 fetching corpus: 1942, signal 135273/144249 (executing program) 2021/03/04 17:42:30 fetching corpus: 1992, signal 136627/145091 (executing program) 2021/03/04 17:42:30 fetching corpus: 2042, signal 137791/145767 (executing program) 2021/03/04 17:42:30 fetching corpus: 2092, signal 138677/146323 (executing program) 2021/03/04 17:42:30 fetching corpus: 2142, signal 139732/146948 (executing program) 2021/03/04 17:42:30 fetching corpus: 2192, signal 140665/147478 (executing program) 2021/03/04 17:42:30 fetching corpus: 2241, signal 141971/148216 (executing program) 2021/03/04 17:42:30 fetching corpus: 2291, signal 143075/148806 (executing program) 2021/03/04 17:42:30 fetching corpus: 2341, signal 143891/149236 (executing program) 2021/03/04 17:42:30 fetching corpus: 2391, signal 145087/149771 (executing program) 2021/03/04 17:42:30 fetching corpus: 2441, signal 146258/150261 (executing program) 2021/03/04 17:42:30 fetching corpus: 2491, signal 147597/150742 (executing program) 2021/03/04 17:42:30 fetching corpus: 2540, signal 148621/151108 (executing program) 2021/03/04 17:42:31 fetching corpus: 2590, signal 149906/151580 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150168/151689 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150168/151722 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150168/151762 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151786 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151805 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151837 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151867 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151887 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151916 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151943 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151973 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/151998 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152028 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152057 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152093 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152113 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152143 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152172 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152207 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152237 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152276 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152290 (executing program) 2021/03/04 17:42:31 fetching corpus: 2612, signal 150177/152290 (executing program) 2021/03/04 17:42:32 starting 6 fuzzer processes 17:42:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000003a40)=@newtaction={0x8a0, 0x30, 0x765d21678469b909, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6d, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}], [@TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) 17:42:32 executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) 17:42:33 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) 17:42:33 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x0, 0x0) 17:42:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x80000}]}) syzkaller login: [ 37.486013][ T8395] IPVS: ftp: loaded support on port[0] = 21 [ 37.541750][ T8395] chnl_net:caif_netlink_parms(): no params data found [ 37.570219][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.577335][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.584599][ T8395] device bridge_slave_0 entered promiscuous mode [ 37.592145][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599222][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.611812][ T8395] device bridge_slave_1 entered promiscuous mode [ 37.625815][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.636619][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.654155][ T8398] IPVS: ftp: loaded support on port[0] = 21 [ 37.654398][ T8395] team0: Port device team_slave_0 added [ 37.667235][ T8395] team0: Port device team_slave_1 added [ 37.680086][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.687461][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.713923][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.726719][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.733640][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.760351][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.798672][ T8395] device hsr_slave_0 entered promiscuous mode [ 37.800346][ T8400] IPVS: ftp: loaded support on port[0] = 21 [ 37.810818][ T8395] device hsr_slave_1 entered promiscuous mode [ 37.886768][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 37.965442][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.978096][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.986639][ T8398] device bridge_slave_0 entered promiscuous mode [ 37.994703][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.002713][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.010242][ T8398] device bridge_slave_1 entered promiscuous mode [ 38.023785][ T8395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.032769][ T8395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.041346][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 38.050385][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.060095][ T8395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.070842][ T8402] IPVS: ftp: loaded support on port[0] = 21 [ 38.070877][ T8395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.089390][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.119982][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.127040][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.134316][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.141345][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.162064][ T8404] IPVS: ftp: loaded support on port[0] = 21 [ 38.195290][ T8398] team0: Port device team_slave_0 added [ 38.202916][ T8398] team0: Port device team_slave_1 added [ 38.216448][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.223473][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.230987][ T8400] device bridge_slave_0 entered promiscuous mode [ 38.248590][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.257873][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.293323][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.305773][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.312864][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.328381][ T8400] device bridge_slave_1 entered promiscuous mode [ 38.339523][ T8406] IPVS: ftp: loaded support on port[0] = 21 [ 38.350707][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.357787][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.384166][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.435018][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 38.448881][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 38.468444][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.488450][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.521385][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.528501][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.536252][ T8404] device bridge_slave_0 entered promiscuous mode [ 38.543501][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.551110][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.558684][ T8404] device bridge_slave_1 entered promiscuous mode [ 38.567110][ T8400] team0: Port device team_slave_0 added [ 38.574763][ T8400] team0: Port device team_slave_1 added [ 38.581912][ T8398] device hsr_slave_0 entered promiscuous mode [ 38.588467][ T8398] device hsr_slave_1 entered promiscuous mode [ 38.594734][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.602342][ T8398] Cannot create hsr debugfs directory [ 38.617794][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.625959][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.650322][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.668156][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.675184][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.701808][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.727844][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.752081][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.759185][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.785358][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.803603][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.810976][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.819331][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.826946][ T8402] device bridge_slave_0 entered promiscuous mode [ 38.836434][ T8398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.845375][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.861243][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 38.869452][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.877050][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.884681][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.891869][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.899266][ T8402] device bridge_slave_1 entered promiscuous mode [ 38.908454][ T8398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.916948][ T8398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.931786][ T8400] device hsr_slave_0 entered promiscuous mode [ 38.938078][ T8400] device hsr_slave_1 entered promiscuous mode [ 38.944356][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.952608][ T8400] Cannot create hsr debugfs directory [ 38.965297][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.973605][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.981956][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.988991][ T8870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.996652][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.004929][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.013223][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.020259][ T8870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.027912][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.036641][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.053989][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.065982][ T8398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.087464][ T8404] team0: Port device team_slave_0 added [ 39.093971][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.103122][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.112256][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.121456][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.131093][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.147882][ T8402] team0: Port device team_slave_0 added [ 39.154754][ T8402] team0: Port device team_slave_1 added [ 39.172372][ T8395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.184408][ T8395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.196691][ T8404] team0: Port device team_slave_1 added [ 39.202716][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.213092][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.222563][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.230697][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.239024][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.247401][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.269825][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.276799][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.304500][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.325150][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.332170][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.339960][ T8406] device bridge_slave_0 entered promiscuous mode [ 39.353834][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.361830][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.369389][ T8406] device bridge_slave_1 entered promiscuous mode [ 39.379108][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.386332][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.412604][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.423746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.432172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.442937][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.451098][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.458182][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.484354][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.503233][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.520478][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.527925][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.535163][ T9383] Bluetooth: hci0: command 0x0409 tx timeout [ 39.554279][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.571464][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.605254][ T8402] device hsr_slave_0 entered promiscuous mode [ 39.611720][ T8402] device hsr_slave_1 entered promiscuous mode [ 39.618125][ T8402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.626291][ T8402] Cannot create hsr debugfs directory [ 39.637393][ T8400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.649907][ T8406] team0: Port device team_slave_0 added [ 39.656269][ T8400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.666685][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.675117][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.691759][ T8395] device veth0_vlan entered promiscuous mode [ 39.698076][ T9383] Bluetooth: hci1: command 0x0409 tx timeout [ 39.712036][ T8406] team0: Port device team_slave_1 added [ 39.717878][ T8400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.726341][ T8400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.737187][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.747035][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.772029][ T8404] device hsr_slave_0 entered promiscuous mode [ 39.778498][ T8404] device hsr_slave_1 entered promiscuous mode [ 39.784763][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.792429][ T8404] Cannot create hsr debugfs directory [ 39.798481][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.807237][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.818738][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.818747][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.818840][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.819804][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.819865][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.819882][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.838329][ T8395] device veth1_vlan entered promiscuous mode [ 39.921289][ T9421] Bluetooth: hci2: command 0x0409 tx timeout [ 39.942982][ T8406] device hsr_slave_0 entered promiscuous mode [ 39.949550][ T8406] device hsr_slave_1 entered promiscuous mode [ 39.956968][ T8406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.964500][ T8406] Cannot create hsr debugfs directory [ 39.994589][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.016168][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.024007][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.034118][ T8870] Bluetooth: hci3: command 0x0409 tx timeout [ 40.041306][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.050192][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.060316][ T8402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.078222][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.086031][ T8395] device veth0_macvtap entered promiscuous mode [ 40.098179][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.106215][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.114214][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.123309][ T8402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.136492][ T8395] device veth1_macvtap entered promiscuous mode [ 40.152830][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.160613][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.171046][ T9676] Bluetooth: hci4: command 0x0409 tx timeout [ 40.172767][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.187528][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.194544][ T9383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.202373][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.210849][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.219080][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.226102][ T9383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.233720][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.243170][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.251551][ T8402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.268044][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.277179][ T8404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.290367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.299451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.308122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.316875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.325694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.334202][ T8402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.341209][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 40.351421][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.361735][ T8404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.370281][ T8404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.379369][ T8404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.387973][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.396078][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.404309][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.413010][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.421693][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.432150][ T8395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.441421][ T8395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.450429][ T8395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.460819][ T8395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.475297][ T8406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.486274][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.494580][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.505218][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.522163][ T8406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.532824][ T8398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.545256][ T8398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.558505][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.566858][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.576230][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.583677][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.592091][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.599461][ T8406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.608375][ T8406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.635269][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.643858][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.652321][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.659466][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.667480][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.676100][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.684331][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.691380][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.699091][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.706590][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.714157][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.725788][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.741636][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.768429][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.782088][ T1963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.802277][ T1963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.813747][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.826547][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.836866][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.852718][ T8400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.863567][ T8400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.878321][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.884953][ T1963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.892875][ T1963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.903260][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.911875][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.920437][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.929338][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.938244][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.946563][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.954983][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.962989][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.971520][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.981117][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.002673][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.011481][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:42:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000003a40)=@newtaction={0x8a0, 0x30, 0x765d21678469b909, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6d, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}], [@TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) [ 41.020267][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.031506][ T8398] device veth0_vlan entered promiscuous mode [ 41.044132][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.057164][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.065967][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.077310][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.092969][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.105181][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.115216][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.130106][ T8398] device veth1_vlan entered promiscuous mode [ 41.147949][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.157799][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.167369][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.176666][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.186132][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.195336][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.203468][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.210509][ T9383] bridge0: port 1(bridge_slave_0) entered forwarding state 17:42:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000003a40)=@newtaction={0x8a0, 0x30, 0x765d21678469b909, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6d, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}], [@TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) [ 41.223306][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.241139][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.249055][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.259668][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.268447][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.275511][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.284729][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.292316][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.300819][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.312725][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.322240][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.331134][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.339242][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.348246][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.357465][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.366496][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state 17:42:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000003a40)=@newtaction={0x8a0, 0x30, 0x765d21678469b909, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6d, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}], [@TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0) [ 41.373605][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.381901][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.391004][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.401386][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.424741][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.433518][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.442576][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.455268][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.463523][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.472017][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.480963][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.492406][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.502203][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.511040][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.519429][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.528093][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.536343][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.544437][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.552869][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 17:42:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSKBENT(r0, 0x80285442, 0x0) [ 41.571511][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.586065][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.593109][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.604190][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.613476][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 17:42:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSKBENT(r0, 0x80285442, 0x0) [ 41.623087][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.635107][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.643436][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.664985][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 17:42:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSKBENT(r0, 0x80285442, 0x0) [ 41.673194][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.682760][ T9730] Bluetooth: hci0: command 0x041b tx timeout [ 41.685704][ T8398] device veth0_macvtap entered promiscuous mode [ 41.705686][ T8402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.723696][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.740846][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.749135][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.763577][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.772271][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.775096][ T9730] Bluetooth: hci1: command 0x041b tx timeout [ 41.780879][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.793922][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.802517][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.810121][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.818469][ T8400] device veth0_vlan entered promiscuous mode 17:42:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSKBENT(r0, 0x80285442, 0x0) [ 41.827812][ T8398] device veth1_macvtap entered promiscuous mode [ 41.845033][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.855118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.863875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.873322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.881453][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.890773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.899753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.909975][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.917026][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.930662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.972887][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.984091][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.995650][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.003459][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.013081][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.014517][ T9421] Bluetooth: hci2: command 0x041b tx timeout [ 42.022030][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.034213][ T3809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.042684][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.051428][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.060522][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.069032][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.077521][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.086094][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.094489][ T9421] Bluetooth: hci3: command 0x041b tx timeout [ 42.094769][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.111280][ T8400] device veth1_vlan entered promiscuous mode [ 42.127205][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.136619][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.145941][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.156082][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.164100][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.172632][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.182938][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.193575][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.204804][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.214327][ T8406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.232344][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.241655][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.250898][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.260054][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.268799][ T9421] Bluetooth: hci4: command 0x041b tx timeout [ 42.274479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.283339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.294534][ T8398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.303242][ T8398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.313397][ T8398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.322456][ T8398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.350593][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.359143][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.385360][ T8400] device veth0_macvtap entered promiscuous mode [ 42.392144][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.400150][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.407892][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.415239][ T9730] Bluetooth: hci5: command 0x041b tx timeout [ 42.415359][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.428892][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.437172][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.452959][ T8404] device veth0_vlan entered promiscuous mode [ 42.465965][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.473794][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.494704][ T3145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.495202][ T8402] device veth0_vlan entered promiscuous mode [ 42.502524][ T3145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.520018][ T8404] device veth1_vlan entered promiscuous mode [ 42.529626][ T8400] device veth1_macvtap entered promiscuous mode [ 42.541782][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.549754][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.557696][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.557966][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.581192][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.589196][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.597828][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.605484][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.617636][ T8402] device veth1_vlan entered promiscuous mode [ 42.625778][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.633533][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.644830][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.652473][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.671422][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 42.682021][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.693028][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 42.704127][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.715985][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.726401][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.738668][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.748913][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.759682][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.770712][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.784603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.792606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 17:42:39 executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) [ 42.806246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.818550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.827342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.845113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.853507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.873197][ T8404] device veth0_macvtap entered promiscuous mode [ 42.882818][ T8400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.892625][ T8400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.901599][ T8400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.912339][ T8400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.924665][ T8402] device veth0_macvtap entered promiscuous mode [ 42.931889][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.941784][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.952835][ T9652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.965202][ T8404] device veth1_macvtap entered promiscuous mode [ 42.984930][ T8402] device veth1_macvtap entered promiscuous mode [ 42.999783][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.008568][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.024332][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.032664][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.053304][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.066072][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.076293][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.086755][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.096590][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.107198][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.118269][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.127475][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.138148][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.148128][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.158727][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.168668][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.179182][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.189080][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.199674][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.210631][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.232292][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.240668][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.249447][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.257971][ T9676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.268330][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.279091][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.289213][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.300639][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.310473][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.320954][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.331654][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.339311][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.349919][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.359939][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.370755][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.380682][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.391267][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.401097][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.411575][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.422491][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.433864][ T8404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.443735][ T8404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.452686][ T8404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.462929][ T8404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.485455][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.493920][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.502849][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.511637][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.524975][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.540184][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.555114][ T8402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.563876][ T8402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.572720][ T8402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.581612][ T8402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.596061][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.596604][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.603881][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.619389][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.627731][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.636096][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.645402][ T8406] device veth0_vlan entered promiscuous mode [ 43.661242][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.669284][ T3809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.713658][ T8406] device veth1_vlan entered promiscuous mode [ 43.739338][ T3145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.749390][ T3145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:42:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) [ 43.763527][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.773032][ T8406] device veth0_macvtap entered promiscuous mode [ 43.775067][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.780101][ T9421] Bluetooth: hci0: command 0x040f tx timeout [ 43.797842][ T8406] device veth1_macvtap entered promiscuous mode [ 43.823942][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.833023][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.854582][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.862326][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.871102][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.880498][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.889561][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.917719][ T9843] Bluetooth: hci1: command 0x040f tx timeout [ 43.935231][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.946048][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.956761][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.968648][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.979157][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.989918][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.000110][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 44.011401][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.021720][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 44.032639][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.043782][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.053221][ T3145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.061655][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.062042][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.080351][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.080547][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.093317][ T3145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.097962][ T3604] Bluetooth: hci2: command 0x040f tx timeout [ 44.109022][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.122211][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.132233][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.142793][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.154073][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.164958][ T3604] Bluetooth: hci3: command 0x040f tx timeout [ 44.165258][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.181143][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.191678][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.202564][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.214894][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.223753][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.233650][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.243034][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.252051][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.260044][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.268680][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.288443][ T8406] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.297323][ T8406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.306535][ T8406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.315950][ T8406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.324794][ T9383] Bluetooth: hci4: command 0x040f tx timeout 17:42:40 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x0, 0x0) 17:42:40 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) [ 44.388159][ T3145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.410785][ T3145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.438367][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.458764][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.477030][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.492968][ T9892] [U] þ [ 44.495104][ T9843] Bluetooth: hci5: command 0x040f tx timeout [ 44.499909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.511891][ T9892] [U] þ 17:42:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x80000}]}) 17:42:41 executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) 17:42:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x0, 0x0) [ 44.565992][ T9900] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x0, 0x0) 17:42:41 executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) 17:42:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x80000}]}) [ 44.660986][ T9914] [U] þ 17:42:41 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) 17:42:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0x80000}]}) 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) [ 44.789402][ T9938] [U] þ 17:42:41 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 44.857833][ T9942] [U] þ [ 44.898374][ T9945] [U] þ 17:42:41 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) [ 44.919278][ T9951] [U] þ [ 44.930364][ T9949] [U] þ 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:42:41 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1) 17:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2}) [ 44.991178][ T9962] [U] þ [ 45.022277][ T9966] [U] þ 17:42:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) 17:42:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x881, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2}) 17:42:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x71, 0x11, 0x3b}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 45.088710][ T9970] [U] þ 17:42:41 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2302"], 0x18e) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000c7e) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17:42:41 executing program 0: perf_event_open(&(0x7f0000001880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:42:41 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0d05640, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7dabaed1"}, 0x0, 0x0, @userptr}) 17:42:41 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x37) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000100)='1', 0x1) 17:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2}) 17:42:41 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2302"], 0x18e) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000c7e) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17:42:41 executing program 0: perf_event_open(&(0x7f0000001880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:42:41 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000039000511d25a806c8c63940d0135fc604a001240", 0x18}], 0x1}, 0x0) 17:42:41 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0d05640, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7dabaed1"}, 0x0, 0x0, @userptr}) 17:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x2}) 17:42:41 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2302"], 0x18e) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000c7e) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 45.853887][ T9383] Bluetooth: hci0: command 0x0419 tx timeout [ 45.924260][ T9383] Bluetooth: hci1: command 0x0419 tx timeout [ 46.163912][ T9730] Bluetooth: hci2: command 0x0419 tx timeout 17:42:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) 17:42:42 executing program 0: perf_event_open(&(0x7f0000001880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:42:42 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0d05640, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7dabaed1"}, 0x0, 0x0, @userptr}) 17:42:42 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000039000511d25a806c8c63940d0135fc604a001240", 0x18}], 0x1}, 0x0) 17:42:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:42 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="2302"], 0x18e) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000c7e) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 17:42:42 executing program 0: perf_event_open(&(0x7f0000001880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 46.244926][ T9730] Bluetooth: hci3: command 0x0419 tx timeout 17:42:42 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0d05640, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7dabaed1"}, 0x0, 0x0, @userptr}) 17:42:42 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000039000511d25a806c8c63940d0135fc604a001240", 0x18}], 0x1}, 0x0) 17:42:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000002c0)="a7", 0x1) 17:42:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000002c0)="a7", 0x1) [ 46.378828][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 46.414927][ T9730] Bluetooth: hci4: command 0x0419 tx timeout 17:42:42 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) [ 46.435764][ C0] hrtimer: interrupt took 28362 ns [ 46.476164][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) 17:42:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) 17:42:43 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1800000039000511d25a806c8c63940d0135fc604a001240", 0x18}], 0x1}, 0x0) 17:42:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000002c0)="a7", 0x1) 17:42:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) [ 46.551363][ T36] audit: type=1800 audit(1614879762.980:2): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cpuacct.stat" dev="sda1" ino=14208 res=0 errno=0 [ 46.573599][ T9730] Bluetooth: hci5: command 0x0419 tx timeout 17:42:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000002c0)="a7", 0x1) 17:42:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) 17:42:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) [ 46.658755][T10074] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 46.698212][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) 17:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) 17:42:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) 17:42:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) [ 46.778160][T10088] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 46.817865][T10089] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 17:42:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) 17:42:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) 17:42:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) 17:42:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) [ 46.879574][T10096] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 46.888380][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x5, 0x2, @private}]}]}, 0x70}}, 0x0) [ 46.945321][T10101] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 17:42:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xfee0, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], '\x00\x00\x00\x00\x00t\x00\x00'}}}}}}}, 0x0) 17:42:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) 17:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:42:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 17:42:43 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x0) [ 47.054243][T10111] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 47.074421][T10113] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 47.127505][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:42:43 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x0) 17:42:43 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:42:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 17:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:42:43 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x0) 17:42:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 17:42:43 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 17:42:43 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x0) 17:42:43 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}}, 0x0) 17:42:46 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:46 executing program 5: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:46 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000000, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 17:42:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:46 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="2321202e2f66696c6530204767cc5244e2c8be00001a105d72b9e241ffb699c22341a5f7b5b16b4317803180a7a210dfb3ebd3ce31f826dec0ab2b417713f032100e2efa8daedb5e74b883fcb01cd1badab3f5ff155d1e16a09b8f73334bb21ce0083b4304cae965c2b46cef4f7a848e7dd1c24ef7e2ad01c297614940dcf87a6197af6c349a5911cc150fa44d0a8b66debb98cf3d45aba6b9923efe2fd81445d39d0ddf99af99e9ed62ed06b9194d74b4977e9954e47d58fe68efc6cebf8f168c824d6c24b8f5e4bd01112dee5dc926f9db31cf3bc0e3a1031081fb7da4de165e7cd019ac922e2b28089925f7d4b93fa280aba32db857d52b5f1aa8082f20aa008add30a4cb35cb6aed35de1029fbd9e2cbb5671901088c4c7094149c92aeb6c8d2fa689621d92c3a1428be75a5c71c52c82cdffe03d6e22b0f7949941691dbd8bc01a682b5"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:46 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) [ 50.344896][ T36] audit: type=1804 audit(1614879766.780:3): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir698852649/syzkaller.pSx8HM/18/bus" dev="sda1" ino=14214 res=1 errno=0 17:42:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:46 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:42:47 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:47 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) [ 51.155404][ T36] audit: type=1804 audit(1614879767.591:4): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir698852649/syzkaller.pSx8HM/18/bus" dev="sda1" ino=14214 res=1 errno=0 17:42:47 executing program 5: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:47 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:47 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:47 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) [ 51.360803][ T36] audit: type=1804 audit(1614879767.791:5): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir698852649/syzkaller.pSx8HM/19/bus" dev="sda1" ino=14214 res=1 errno=0 17:42:49 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:49 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 17:42:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:49 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x8, 0x70, 0xff, 0x0, 0x6, 0x40, 0x0, 0x7, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x14c9}, 0x4001, 0xd6, 0x8000, 0x0, 0x80000001, 0x40000004, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r2, 0x53, &(0x7f0000000380)=""/178) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc300, 0x16e) 17:42:49 executing program 5: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:49 executing program 4: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) [ 53.510529][ T36] audit: type=1804 audit(1614879769.941:6): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir698852649/syzkaller.pSx8HM/20/bus" dev="sda1" ino=14218 res=1 errno=0 17:42:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) [ 53.646874][ T36] audit: type=1804 audit(1614879770.081:7): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir626753951/syzkaller.f5EycD/21/bus" dev="sda1" ino=14217 res=1 errno=0 17:42:52 executing program 0: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r1, &(0x7f0000d06ff8)='./file0\x00') openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x18) 17:42:52 executing program 5: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:52 executing program 4: getpid() sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) 17:42:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 17:42:53 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x92) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1}) [ 56.540408][ T36] audit: type=1804 audit(1614879772.971:8): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir626753951/syzkaller.f5EycD/22/bus" dev="sda1" ino=14206 res=1 errno=0 17:42:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @remote, 0x1009}, 0x1c, 0x0}, 0x0) [ 56.596398][ T36] audit: type=1804 audit(1614879773.011:9): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir698852649/syzkaller.pSx8HM/21/bus" dev="sda1" ino=14218 res=1 errno=0 17:42:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) [ 56.678146][ T36] audit: type=1804 audit(1614879773.031:10): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=14207 res=1 errno=0 17:42:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 17:42:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @remote, 0x1009}, 0x1c, 0x0}, 0x0) 17:42:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000680)={0xa, 0x4e20, 0x0, @remote, 0x1009}, 0x1c, 0x0}, 0x0) [ 56.814720][ T36] audit: type=1326 audit(1614879773.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10300 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x7fc00000 [ 57.109960][T10298] ================================================================== [ 57.118062][T10298] BUG: KCSAN: data-race in jbd2_journal_dirty_metadata / jbd2_journal_dirty_metadata [ 57.127534][T10298] [ 57.129837][T10298] write to 0xffff88810d7d4ef4 of 4 bytes by task 10301 on cpu 0: [ 57.137526][T10298] jbd2_journal_dirty_metadata+0x2df/0x670 [ 57.143311][T10298] __ext4_handle_dirty_metadata+0xc6/0x590 [ 57.149112][T10298] ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 57.154912][T10298] ext4_mb_new_blocks+0xa3d/0x1150 [ 57.160002][T10298] ext4_ext_map_blocks+0x146f/0x1fd0 [ 57.165265][T10298] ext4_map_blocks+0x726/0xff0 [ 57.170009][T10298] mpage_map_one_extent+0x10d/0x3a0 [ 57.175195][T10298] ext4_writepages+0xa51/0x1e70 [ 57.180020][T10298] do_writepages+0x7b/0x150 [ 57.184504][T10298] __filemap_fdatawrite_range+0x19d/0x1d0 [ 57.190210][T10298] file_write_and_wait_range+0x9f/0x120 [ 57.195732][T10298] ext4_sync_file+0x105/0x6e0 [ 57.200389][T10298] vfs_fsync_range+0x107/0x120 [ 57.205135][T10298] ext4_buffered_write_iter+0x38f/0x3e0 [ 57.210659][T10298] ext4_file_write_iter+0x48a/0x10b0 [ 57.215944][T10298] do_iter_readv_writev+0x2cb/0x360 [ 57.221117][T10298] do_iter_write+0x112/0x4c0 [ 57.225680][T10298] vfs_iter_write+0x4c/0x70 [ 57.230158][T10298] iter_file_splice_write+0x40a/0x750 [ 57.235521][T10298] direct_splice_actor+0x80/0xa0 [ 57.240434][T10298] splice_direct_to_actor+0x345/0x650 [ 57.245783][T10298] do_splice_direct+0xf5/0x170 [ 57.250537][T10298] do_sendfile+0x7a6/0xe20 [ 57.254954][T10298] __x64_sys_sendfile64+0xa9/0x130 [ 57.260067][T10298] do_syscall_64+0x39/0x80 [ 57.264461][T10298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.270330][T10298] [ 57.272633][T10298] read to 0xffff88810d7d4ef4 of 4 bytes by task 10298 on cpu 1: [ 57.280233][T10298] jbd2_journal_dirty_metadata+0x15e/0x670 [ 57.286017][T10298] __ext4_handle_dirty_metadata+0xc6/0x590 [ 57.291802][T10298] ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 57.297587][T10298] ext4_mb_new_blocks+0xa3d/0x1150 [ 57.302689][T10298] ext4_ext_map_blocks+0x146f/0x1fd0 [ 57.307951][T10298] ext4_map_blocks+0x726/0xff0 [ 57.312688][T10298] mpage_map_one_extent+0x10d/0x3a0 [ 57.317876][T10298] ext4_writepages+0xa51/0x1e70 [ 57.322701][T10298] do_writepages+0x7b/0x150 [ 57.327199][T10298] __filemap_fdatawrite_range+0x19d/0x1d0 [ 57.332909][T10298] file_write_and_wait_range+0x9f/0x120 [ 57.338443][T10298] ext4_sync_file+0x105/0x6e0 [ 57.343096][T10298] vfs_fsync_range+0x107/0x120 [ 57.347839][T10298] ext4_buffered_write_iter+0x38f/0x3e0 [ 57.353376][T10298] ext4_file_write_iter+0x48a/0x10b0 [ 57.358639][T10298] do_iter_readv_writev+0x2cb/0x360 [ 57.363830][T10298] do_iter_write+0x112/0x4c0 [ 57.368414][T10298] vfs_iter_write+0x4c/0x70 [ 57.372911][T10298] iter_file_splice_write+0x40a/0x750 [ 57.378282][T10298] direct_splice_actor+0x80/0xa0 [ 57.383219][T10298] splice_direct_to_actor+0x345/0x650 [ 57.388588][T10298] do_splice_direct+0xf5/0x170 [ 57.393353][T10298] do_sendfile+0x7a6/0xe20 [ 57.397762][T10298] __x64_sys_sendfile64+0xa9/0x130 [ 57.402869][T10298] do_syscall_64+0x39/0x80 [ 57.407315][T10298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.413209][T10298] [ 57.415522][T10298] Reported by Kernel Concurrency Sanitizer on: [ 57.421654][T10298] CPU: 1 PID: 10298 Comm: syz-executor.4 Not tainted 5.12.0-rc1-syzkaller #0 [ 57.430424][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.440465][T10298] ================================================================== [ 57.448498][T10298] Kernel panic - not syncing: panic_on_warn set ... [ 57.455051][T10298] CPU: 1 PID: 10298 Comm: syz-executor.4 Not tainted 5.12.0-rc1-syzkaller #0 [ 57.463785][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.473813][T10298] Call Trace: [ 57.477069][T10298] dump_stack+0x137/0x19d [ 57.481375][T10298] panic+0x1e7/0x5fa [ 57.485248][T10298] ? vprintk_emit+0x2fa/0x3e0 [ 57.489914][T10298] kcsan_report+0x67b/0x680 [ 57.494402][T10298] ? kcsan_setup_watchpoint+0x40b/0x470 [ 57.499930][T10298] ? jbd2_journal_dirty_metadata+0x15e/0x670 [ 57.505895][T10298] ? __ext4_handle_dirty_metadata+0xc6/0x590 [ 57.511858][T10298] ? ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 57.517818][T10298] ? ext4_mb_new_blocks+0xa3d/0x1150 [ 57.523084][T10298] ? ext4_ext_map_blocks+0x146f/0x1fd0 [ 57.528523][T10298] ? ext4_map_blocks+0x726/0xff0 [ 57.533439][T10298] ? mpage_map_one_extent+0x10d/0x3a0 [ 57.538792][T10298] ? ext4_writepages+0xa51/0x1e70 [ 57.543902][T10298] ? do_writepages+0x7b/0x150 [ 57.548560][T10298] ? __filemap_fdatawrite_range+0x19d/0x1d0 [ 57.554431][T10298] ? file_write_and_wait_range+0x9f/0x120 [ 57.560140][T10298] ? ext4_sync_file+0x105/0x6e0 [ 57.564987][T10298] ? vfs_fsync_range+0x107/0x120 [ 57.569906][T10298] ? ext4_buffered_write_iter+0x38f/0x3e0 [ 57.575617][T10298] ? ext4_file_write_iter+0x48a/0x10b0 [ 57.581064][T10298] ? do_iter_readv_writev+0x2cb/0x360 [ 57.586833][T10298] ? do_iter_write+0x112/0x4c0 [ 57.591573][T10298] ? vfs_iter_write+0x4c/0x70 [ 57.596227][T10298] ? iter_file_splice_write+0x40a/0x750 [ 57.601756][T10298] ? direct_splice_actor+0x80/0xa0 [ 57.606854][T10298] ? splice_direct_to_actor+0x345/0x650 [ 57.612384][T10298] ? do_splice_direct+0xf5/0x170 [ 57.617301][T10298] ? do_sendfile+0x7a6/0xe20 [ 57.621870][T10298] ? __x64_sys_sendfile64+0xa9/0x130 [ 57.627135][T10298] ? do_syscall_64+0x39/0x80 [ 57.631708][T10298] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.637770][T10298] ? io_schedule+0x3b/0x50 [ 57.642174][T10298] ? crypto_shash_update+0x12c/0x190 [ 57.647455][T10298] kcsan_setup_watchpoint+0x40b/0x470 [ 57.652809][T10298] jbd2_journal_dirty_metadata+0x15e/0x670 [ 57.658602][T10298] __ext4_handle_dirty_metadata+0xc6/0x590 [ 57.664393][T10298] ? __rcu_read_unlock+0x5c/0x250 [ 57.669401][T10298] ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 57.675196][T10298] ext4_mb_new_blocks+0xa3d/0x1150 [ 57.680293][T10298] ext4_ext_map_blocks+0x146f/0x1fd0 [ 57.685560][T10298] ? ext4_es_lookup_extent+0x221/0x500 [ 57.691001][T10298] ext4_map_blocks+0x726/0xff0 [ 57.695745][T10298] ? ext4_alloc_io_end_vec+0x2e/0xd0 [ 57.701013][T10298] mpage_map_one_extent+0x10d/0x3a0 [ 57.706191][T10298] ext4_writepages+0xa51/0x1e70 [ 57.711023][T10298] ? ext4_mark_iloc_dirty+0x1606/0x16f0 [ 57.716549][T10298] ? jbd2_journal_stop+0x5cb/0x6d0 [ 57.721640][T10298] ? kmem_cache_free+0x59/0x100 [ 57.726468][T10298] ? jbd2_journal_stop+0x5cb/0x6d0 [ 57.731559][T10298] ? kcsan_setup_watchpoint+0x26e/0x470 [ 57.737092][T10298] ? ext4_readpage+0x180/0x180 [ 57.741836][T10298] do_writepages+0x7b/0x150 [ 57.746320][T10298] ? _raw_spin_unlock+0x22/0x40 [ 57.751150][T10298] __filemap_fdatawrite_range+0x19d/0x1d0 [ 57.756848][T10298] file_write_and_wait_range+0x9f/0x120 [ 57.762373][T10298] ext4_sync_file+0x105/0x6e0 [ 57.767032][T10298] ? tsan.module_ctor+0x10/0x10 [ 57.771863][T10298] vfs_fsync_range+0x107/0x120 [ 57.776609][T10298] ext4_buffered_write_iter+0x38f/0x3e0 [ 57.782136][T10298] ext4_file_write_iter+0x48a/0x10b0 [ 57.787403][T10298] ? copy_page_to_iter+0x873/0x8a0 [ 57.792497][T10298] do_iter_readv_writev+0x2cb/0x360 [ 57.797696][T10298] do_iter_write+0x112/0x4c0 [ 57.802274][T10298] ? kmalloc_array+0x2d/0x40 [ 57.806846][T10298] vfs_iter_write+0x4c/0x70 [ 57.811342][T10298] iter_file_splice_write+0x40a/0x750 [ 57.816702][T10298] ? splice_from_pipe+0xc0/0xc0 [ 57.821540][T10298] direct_splice_actor+0x80/0xa0 [ 57.826477][T10298] splice_direct_to_actor+0x345/0x650 [ 57.831836][T10298] ? do_splice_direct+0x170/0x170 [ 57.836843][T10298] do_splice_direct+0xf5/0x170 [ 57.841592][T10298] do_sendfile+0x7a6/0xe20 [ 57.845989][T10298] __x64_sys_sendfile64+0xa9/0x130 [ 57.851082][T10298] do_syscall_64+0x39/0x80 [ 57.855479][T10298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.861351][T10298] RIP: 0033:0x465ef9 [ 57.865236][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 57.884819][T10298] RSP: 002b:00007f328d312188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 57.893216][T10298] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 57.901167][T10298] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000004 [ 57.909118][T10298] RBP: 00000000004bfa34 R08: 0000000000000000 R09: 0000000000000000 [ 57.917066][T10298] R10: 00008080ffffff7e R11: 0000000000000246 R12: 000000000056c008 [ 57.925017][T10298] R13: 00007ffca89e511f R14: 00007f328d312300 R15: 0000000000022000 [ 57.933645][T10298] Kernel Offset: disabled [ 57.937986][T10298] Rebooting in 86400 seconds..