[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.101' (ECDSA) to the list of known hosts. 2021/03/05 02:30:32 fuzzer started 2021/03/05 02:30:33 dialing manager at 10.128.0.169:33225 2021/03/05 02:30:33 syscalls: 3540 2021/03/05 02:30:33 code coverage: enabled 2021/03/05 02:30:33 comparison tracing: enabled 2021/03/05 02:30:33 extra coverage: enabled 2021/03/05 02:30:33 setuid sandbox: enabled 2021/03/05 02:30:33 namespace sandbox: enabled 2021/03/05 02:30:33 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/05 02:30:33 fault injection: enabled 2021/03/05 02:30:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/05 02:30:33 net packet injection: enabled 2021/03/05 02:30:33 net device setup: enabled 2021/03/05 02:30:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/05 02:30:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/05 02:30:33 USB emulation: enabled 2021/03/05 02:30:33 hci packet injection: enabled 2021/03/05 02:30:33 wifi device emulation: enabled 2021/03/05 02:30:33 802.15.4 emulation: enabled 2021/03/05 02:30:33 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/05 02:30:33 fetching corpus: 50, signal 32083/35913 (executing program) 2021/03/05 02:30:33 fetching corpus: 100, signal 52908/58498 (executing program) 2021/03/05 02:30:33 fetching corpus: 150, signal 64449/71783 (executing program) 2021/03/05 02:30:33 fetching corpus: 200, signal 78352/87334 (executing program) 2021/03/05 02:30:34 fetching corpus: 250, signal 101339/111723 (executing program) 2021/03/05 02:30:34 fetching corpus: 300, signal 119319/131072 (executing program) 2021/03/05 02:30:34 fetching corpus: 350, signal 130117/143319 (executing program) 2021/03/05 02:30:34 fetching corpus: 400, signal 138477/153132 (executing program) 2021/03/05 02:30:34 fetching corpus: 450, signal 146924/163001 (executing program) 2021/03/05 02:30:34 fetching corpus: 500, signal 160917/178225 (executing program) 2021/03/05 02:30:34 fetching corpus: 550, signal 170662/189212 (executing program) 2021/03/05 02:30:34 fetching corpus: 600, signal 178842/198632 (executing program) 2021/03/05 02:30:34 fetching corpus: 650, signal 183312/204499 (executing program) 2021/03/05 02:30:35 fetching corpus: 700, signal 186876/209423 (executing program) 2021/03/05 02:30:35 fetching corpus: 750, signal 192963/216758 (executing program) 2021/03/05 02:30:35 fetching corpus: 800, signal 197659/222732 (executing program) 2021/03/05 02:30:35 fetching corpus: 850, signal 201469/227843 (executing program) 2021/03/05 02:30:35 fetching corpus: 900, signal 206872/234457 (executing program) 2021/03/05 02:30:35 fetching corpus: 950, signal 213402/242088 (executing program) 2021/03/05 02:30:35 fetching corpus: 1000, signal 218896/248688 (executing program) 2021/03/05 02:30:35 fetching corpus: 1050, signal 227010/257721 (executing program) 2021/03/05 02:30:35 fetching corpus: 1100, signal 231671/263450 (executing program) 2021/03/05 02:30:36 fetching corpus: 1150, signal 235614/268531 (executing program) 2021/03/05 02:30:36 fetching corpus: 1200, signal 238800/272870 (executing program) 2021/03/05 02:30:36 fetching corpus: 1250, signal 244438/279469 (executing program) 2021/03/05 02:30:36 fetching corpus: 1300, signal 248624/284689 (executing program) 2021/03/05 02:30:36 fetching corpus: 1350, signal 252326/289495 (executing program) 2021/03/05 02:30:36 fetching corpus: 1400, signal 256941/295067 (executing program) 2021/03/05 02:30:36 fetching corpus: 1450, signal 259494/298699 (executing program) 2021/03/05 02:30:36 fetching corpus: 1500, signal 266261/306198 (executing program) 2021/03/05 02:30:36 fetching corpus: 1550, signal 268360/309406 (executing program) 2021/03/05 02:30:37 fetching corpus: 1600, signal 270778/312878 (executing program) 2021/03/05 02:30:37 fetching corpus: 1650, signal 273751/316861 (executing program) 2021/03/05 02:30:37 fetching corpus: 1700, signal 278260/322215 (executing program) 2021/03/05 02:30:37 fetching corpus: 1750, signal 283188/327940 (executing program) 2021/03/05 02:30:37 fetching corpus: 1800, signal 285670/331434 (executing program) 2021/03/05 02:30:37 fetching corpus: 1850, signal 289514/336084 (executing program) 2021/03/05 02:30:37 fetching corpus: 1900, signal 291928/339448 (executing program) 2021/03/05 02:30:37 fetching corpus: 1950, signal 294498/342979 (executing program) 2021/03/05 02:30:37 fetching corpus: 2000, signal 297349/346720 (executing program) 2021/03/05 02:30:37 fetching corpus: 2050, signal 299364/349744 (executing program) 2021/03/05 02:30:37 fetching corpus: 2100, signal 301357/352662 (executing program) 2021/03/05 02:30:37 fetching corpus: 2150, signal 302589/354948 (executing program) 2021/03/05 02:30:37 fetching corpus: 2200, signal 306983/360006 (executing program) 2021/03/05 02:30:38 fetching corpus: 2250, signal 310368/364182 (executing program) 2021/03/05 02:30:38 fetching corpus: 2300, signal 312112/366901 (executing program) 2021/03/05 02:30:38 fetching corpus: 2350, signal 314877/370448 (executing program) 2021/03/05 02:30:38 fetching corpus: 2400, signal 318322/374584 (executing program) 2021/03/05 02:30:38 fetching corpus: 2450, signal 320335/377445 (executing program) 2021/03/05 02:30:38 fetching corpus: 2500, signal 322555/380530 (executing program) 2021/03/05 02:30:38 fetching corpus: 2550, signal 324557/383397 (executing program) 2021/03/05 02:30:38 fetching corpus: 2600, signal 326711/386348 (executing program) 2021/03/05 02:30:38 fetching corpus: 2650, signal 329614/389954 (executing program) 2021/03/05 02:30:39 fetching corpus: 2700, signal 334486/395236 (executing program) 2021/03/05 02:30:39 fetching corpus: 2750, signal 339222/400369 (executing program) 2021/03/05 02:30:39 fetching corpus: 2800, signal 340932/402870 (executing program) 2021/03/05 02:30:39 fetching corpus: 2850, signal 343714/406351 (executing program) 2021/03/05 02:30:39 fetching corpus: 2900, signal 345586/409042 (executing program) 2021/03/05 02:30:39 fetching corpus: 2950, signal 347771/411979 (executing program) 2021/03/05 02:30:39 fetching corpus: 3000, signal 349066/414125 (executing program) 2021/03/05 02:30:39 fetching corpus: 3050, signal 351059/416832 (executing program) 2021/03/05 02:30:39 fetching corpus: 3100, signal 352972/419422 (executing program) 2021/03/05 02:30:39 fetching corpus: 3150, signal 354492/421713 (executing program) 2021/03/05 02:30:39 fetching corpus: 3200, signal 356023/424056 (executing program) 2021/03/05 02:30:39 fetching corpus: 3250, signal 357625/426410 (executing program) 2021/03/05 02:30:40 fetching corpus: 3300, signal 359274/428790 (executing program) 2021/03/05 02:30:40 fetching corpus: 3350, signal 360768/431084 (executing program) 2021/03/05 02:30:40 fetching corpus: 3400, signal 362201/433283 (executing program) 2021/03/05 02:30:40 fetching corpus: 3450, signal 363733/435549 (executing program) 2021/03/05 02:30:40 fetching corpus: 3500, signal 365032/437599 (executing program) 2021/03/05 02:30:40 fetching corpus: 3550, signal 366905/440145 (executing program) 2021/03/05 02:30:40 fetching corpus: 3600, signal 368722/442628 (executing program) 2021/03/05 02:30:40 fetching corpus: 3650, signal 369740/444475 (executing program) 2021/03/05 02:30:41 fetching corpus: 3700, signal 371975/447303 (executing program) 2021/03/05 02:30:41 fetching corpus: 3750, signal 373502/449484 (executing program) syzkaller login: [ 70.992955][ T3270] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.999545][ T3270] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/05 02:30:41 fetching corpus: 3800, signal 375995/452488 (executing program) 2021/03/05 02:30:41 fetching corpus: 3850, signal 377560/454738 (executing program) 2021/03/05 02:30:41 fetching corpus: 3900, signal 379102/456958 (executing program) 2021/03/05 02:30:41 fetching corpus: 3950, signal 380131/458794 (executing program) 2021/03/05 02:30:41 fetching corpus: 4000, signal 381121/460566 (executing program) 2021/03/05 02:30:41 fetching corpus: 4050, signal 382333/462471 (executing program) 2021/03/05 02:30:41 fetching corpus: 4100, signal 385310/465692 (executing program) 2021/03/05 02:30:41 fetching corpus: 4149, signal 387035/467986 (executing program) 2021/03/05 02:30:42 fetching corpus: 4199, signal 388326/469968 (executing program) 2021/03/05 02:30:42 fetching corpus: 4249, signal 389842/472121 (executing program) 2021/03/05 02:30:42 fetching corpus: 4299, signal 391464/474387 (executing program) 2021/03/05 02:30:42 fetching corpus: 4349, signal 393211/476678 (executing program) 2021/03/05 02:30:42 fetching corpus: 4399, signal 394694/478784 (executing program) 2021/03/05 02:30:42 fetching corpus: 4449, signal 398175/482433 (executing program) 2021/03/05 02:30:42 fetching corpus: 4499, signal 399924/484704 (executing program) 2021/03/05 02:30:42 fetching corpus: 4549, signal 400996/486429 (executing program) 2021/03/05 02:30:42 fetching corpus: 4599, signal 403161/489011 (executing program) 2021/03/05 02:30:42 fetching corpus: 4649, signal 405529/491714 (executing program) 2021/03/05 02:30:42 fetching corpus: 4699, signal 407548/494157 (executing program) 2021/03/05 02:30:42 fetching corpus: 4749, signal 409181/496268 (executing program) 2021/03/05 02:30:43 fetching corpus: 4799, signal 410852/498380 (executing program) 2021/03/05 02:30:43 fetching corpus: 4849, signal 413299/501024 (executing program) 2021/03/05 02:30:43 fetching corpus: 4899, signal 414339/502730 (executing program) 2021/03/05 02:30:43 fetching corpus: 4949, signal 415899/504783 (executing program) 2021/03/05 02:30:43 fetching corpus: 4999, signal 417719/506982 (executing program) 2021/03/05 02:30:43 fetching corpus: 5049, signal 418970/508808 (executing program) 2021/03/05 02:30:43 fetching corpus: 5099, signal 420338/510677 (executing program) 2021/03/05 02:30:43 fetching corpus: 5149, signal 422131/512822 (executing program) 2021/03/05 02:30:43 fetching corpus: 5199, signal 423150/514410 (executing program) 2021/03/05 02:30:43 fetching corpus: 5249, signal 424218/516047 (executing program) 2021/03/05 02:30:43 fetching corpus: 5299, signal 425395/517757 (executing program) 2021/03/05 02:30:43 fetching corpus: 5349, signal 427148/519868 (executing program) 2021/03/05 02:30:43 fetching corpus: 5399, signal 428550/521718 (executing program) 2021/03/05 02:30:44 fetching corpus: 5449, signal 429402/523187 (executing program) 2021/03/05 02:30:44 fetching corpus: 5499, signal 430276/524604 (executing program) 2021/03/05 02:30:44 fetching corpus: 5548, signal 431805/526502 (executing program) 2021/03/05 02:30:44 fetching corpus: 5598, signal 434431/529170 (executing program) 2021/03/05 02:30:44 fetching corpus: 5648, signal 435544/530798 (executing program) 2021/03/05 02:30:44 fetching corpus: 5698, signal 437820/533186 (executing program) 2021/03/05 02:30:44 fetching corpus: 5748, signal 440529/535857 (executing program) 2021/03/05 02:30:44 fetching corpus: 5798, signal 442368/538081 (executing program) 2021/03/05 02:30:44 fetching corpus: 5848, signal 443594/539794 (executing program) 2021/03/05 02:30:44 fetching corpus: 5898, signal 446662/542659 (executing program) 2021/03/05 02:30:45 fetching corpus: 5948, signal 448103/544452 (executing program) 2021/03/05 02:30:45 fetching corpus: 5998, signal 449828/546468 (executing program) 2021/03/05 02:30:45 fetching corpus: 6048, signal 451259/548226 (executing program) 2021/03/05 02:30:45 fetching corpus: 6098, signal 452484/549850 (executing program) 2021/03/05 02:30:45 fetching corpus: 6148, signal 455381/552583 (executing program) 2021/03/05 02:30:45 fetching corpus: 6197, signal 456750/554291 (executing program) 2021/03/05 02:30:45 fetching corpus: 6247, signal 459205/556665 (executing program) 2021/03/05 02:30:45 fetching corpus: 6297, signal 460966/558561 (executing program) 2021/03/05 02:30:45 fetching corpus: 6347, signal 461815/559852 (executing program) 2021/03/05 02:30:45 fetching corpus: 6397, signal 463478/561743 (executing program) 2021/03/05 02:30:45 fetching corpus: 6446, signal 464627/563204 (executing program) 2021/03/05 02:30:46 fetching corpus: 6496, signal 466309/565052 (executing program) 2021/03/05 02:30:46 fetching corpus: 6546, signal 467207/566398 (executing program) 2021/03/05 02:30:46 fetching corpus: 6596, signal 468652/568075 (executing program) 2021/03/05 02:30:46 fetching corpus: 6646, signal 469468/569349 (executing program) 2021/03/05 02:30:46 fetching corpus: 6696, signal 470559/570797 (executing program) 2021/03/05 02:30:46 fetching corpus: 6746, signal 471892/572385 (executing program) 2021/03/05 02:30:46 fetching corpus: 6796, signal 472693/573626 (executing program) 2021/03/05 02:30:46 fetching corpus: 6846, signal 474118/575288 (executing program) 2021/03/05 02:30:46 fetching corpus: 6896, signal 475482/576884 (executing program) 2021/03/05 02:30:47 fetching corpus: 6946, signal 476284/578073 (executing program) 2021/03/05 02:30:47 fetching corpus: 6996, signal 479082/580555 (executing program) 2021/03/05 02:30:47 fetching corpus: 7046, signal 480662/582259 (executing program) 2021/03/05 02:30:47 fetching corpus: 7096, signal 482816/584326 (executing program) 2021/03/05 02:30:47 fetching corpus: 7146, signal 483598/585472 (executing program) 2021/03/05 02:30:47 fetching corpus: 7196, signal 484804/586953 (executing program) 2021/03/05 02:30:47 fetching corpus: 7246, signal 486202/588512 (executing program) 2021/03/05 02:30:47 fetching corpus: 7296, signal 487677/590144 (executing program) 2021/03/05 02:30:47 fetching corpus: 7346, signal 488513/591358 (executing program) 2021/03/05 02:30:47 fetching corpus: 7395, signal 489436/592586 (executing program) 2021/03/05 02:30:47 fetching corpus: 7445, signal 490399/593903 (executing program) 2021/03/05 02:30:48 fetching corpus: 7495, signal 493172/596216 (executing program) 2021/03/05 02:30:48 fetching corpus: 7545, signal 493967/597392 (executing program) 2021/03/05 02:30:48 fetching corpus: 7595, signal 494917/598639 (executing program) 2021/03/05 02:30:48 fetching corpus: 7645, signal 495828/599916 (executing program) 2021/03/05 02:30:48 fetching corpus: 7695, signal 497019/601344 (executing program) 2021/03/05 02:30:48 fetching corpus: 7745, signal 497548/602325 (executing program) 2021/03/05 02:30:48 fetching corpus: 7795, signal 499850/604331 (executing program) 2021/03/05 02:30:48 fetching corpus: 7845, signal 500444/605358 (executing program) 2021/03/05 02:30:48 fetching corpus: 7895, signal 501463/606625 (executing program) 2021/03/05 02:30:48 fetching corpus: 7945, signal 502063/607656 (executing program) 2021/03/05 02:30:49 fetching corpus: 7995, signal 503751/609320 (executing program) 2021/03/05 02:30:49 fetching corpus: 8045, signal 504785/610556 (executing program) 2021/03/05 02:30:49 fetching corpus: 8095, signal 505900/611867 (executing program) 2021/03/05 02:30:49 fetching corpus: 8145, signal 506432/612802 (executing program) 2021/03/05 02:30:49 fetching corpus: 8195, signal 507415/613987 (executing program) 2021/03/05 02:30:49 fetching corpus: 8245, signal 508091/615081 (executing program) 2021/03/05 02:30:49 fetching corpus: 8295, signal 508663/616047 (executing program) 2021/03/05 02:30:49 fetching corpus: 8345, signal 509845/617316 (executing program) 2021/03/05 02:30:49 fetching corpus: 8395, signal 510718/618403 (executing program) 2021/03/05 02:30:49 fetching corpus: 8445, signal 512007/619681 (executing program) 2021/03/05 02:30:49 fetching corpus: 8495, signal 512561/620581 (executing program) 2021/03/05 02:30:50 fetching corpus: 8545, signal 513092/621471 (executing program) 2021/03/05 02:30:50 fetching corpus: 8595, signal 514126/622627 (executing program) 2021/03/05 02:30:50 fetching corpus: 8645, signal 515348/623924 (executing program) 2021/03/05 02:30:50 fetching corpus: 8695, signal 516576/625254 (executing program) 2021/03/05 02:30:50 fetching corpus: 8745, signal 517437/626308 (executing program) 2021/03/05 02:30:50 fetching corpus: 8795, signal 518350/627430 (executing program) 2021/03/05 02:30:50 fetching corpus: 8845, signal 519242/628510 (executing program) 2021/03/05 02:30:50 fetching corpus: 8895, signal 519640/629309 (executing program) 2021/03/05 02:30:50 fetching corpus: 8945, signal 520465/630291 (executing program) 2021/03/05 02:30:50 fetching corpus: 8995, signal 521577/631501 (executing program) 2021/03/05 02:30:50 fetching corpus: 9045, signal 522573/632577 (executing program) 2021/03/05 02:30:50 fetching corpus: 9095, signal 523463/633619 (executing program) 2021/03/05 02:30:50 fetching corpus: 9145, signal 524644/634852 (executing program) 2021/03/05 02:30:51 fetching corpus: 9195, signal 526058/636188 (executing program) 2021/03/05 02:30:51 fetching corpus: 9245, signal 527178/637296 (executing program) 2021/03/05 02:30:51 fetching corpus: 9295, signal 528480/638509 (executing program) 2021/03/05 02:30:51 fetching corpus: 9345, signal 530621/640165 (executing program) 2021/03/05 02:30:51 fetching corpus: 9395, signal 531424/641127 (executing program) 2021/03/05 02:30:51 fetching corpus: 9445, signal 532632/642264 (executing program) 2021/03/05 02:30:51 fetching corpus: 9495, signal 533295/643148 (executing program) 2021/03/05 02:30:51 fetching corpus: 9545, signal 534039/644068 (executing program) 2021/03/05 02:30:51 fetching corpus: 9595, signal 534847/645042 (executing program) 2021/03/05 02:30:51 fetching corpus: 9645, signal 536135/646292 (executing program) 2021/03/05 02:30:51 fetching corpus: 9695, signal 536898/647196 (executing program) 2021/03/05 02:30:51 fetching corpus: 9745, signal 537875/648240 (executing program) 2021/03/05 02:30:52 fetching corpus: 9795, signal 538996/649340 (executing program) 2021/03/05 02:30:52 fetching corpus: 9845, signal 539517/650138 (executing program) 2021/03/05 02:30:52 fetching corpus: 9895, signal 540212/651020 (executing program) 2021/03/05 02:30:52 fetching corpus: 9945, signal 540769/651859 (executing program) 2021/03/05 02:30:52 fetching corpus: 9995, signal 541519/652791 (executing program) 2021/03/05 02:30:52 fetching corpus: 10045, signal 542314/653710 (executing program) 2021/03/05 02:30:52 fetching corpus: 10095, signal 542778/654490 (executing program) 2021/03/05 02:30:52 fetching corpus: 10145, signal 544054/655651 (executing program) 2021/03/05 02:30:52 fetching corpus: 10195, signal 544510/656398 (executing program) 2021/03/05 02:30:52 fetching corpus: 10245, signal 545336/657260 (executing program) 2021/03/05 02:30:52 fetching corpus: 10295, signal 546343/658255 (executing program) 2021/03/05 02:30:52 fetching corpus: 10345, signal 546943/659058 (executing program) 2021/03/05 02:30:52 fetching corpus: 10395, signal 547824/659984 (executing program) 2021/03/05 02:30:53 fetching corpus: 10445, signal 548345/660769 (executing program) 2021/03/05 02:30:53 fetching corpus: 10495, signal 549336/661701 (executing program) 2021/03/05 02:30:53 fetching corpus: 10545, signal 549978/662493 (executing program) 2021/03/05 02:30:53 fetching corpus: 10595, signal 550926/663420 (executing program) 2021/03/05 02:30:53 fetching corpus: 10645, signal 551826/664325 (executing program) 2021/03/05 02:30:53 fetching corpus: 10695, signal 552437/665074 (executing program) 2021/03/05 02:30:53 fetching corpus: 10745, signal 553860/666218 (executing program) 2021/03/05 02:30:53 fetching corpus: 10795, signal 554718/667083 (executing program) 2021/03/05 02:30:53 fetching corpus: 10845, signal 555563/667955 (executing program) 2021/03/05 02:30:53 fetching corpus: 10895, signal 556339/668796 (executing program) 2021/03/05 02:30:54 fetching corpus: 10945, signal 557070/669642 (executing program) 2021/03/05 02:30:54 fetching corpus: 10995, signal 558689/670801 (executing program) 2021/03/05 02:30:54 fetching corpus: 11045, signal 559387/671593 (executing program) 2021/03/05 02:30:54 fetching corpus: 11095, signal 559885/672294 (executing program) 2021/03/05 02:30:54 fetching corpus: 11145, signal 560442/673014 (executing program) 2021/03/05 02:30:54 fetching corpus: 11195, signal 561415/673878 (executing program) 2021/03/05 02:30:54 fetching corpus: 11245, signal 562097/674619 (executing program) 2021/03/05 02:30:54 fetching corpus: 11295, signal 562666/675361 (executing program) 2021/03/05 02:30:54 fetching corpus: 11345, signal 563389/676113 (executing program) 2021/03/05 02:30:54 fetching corpus: 11395, signal 564225/676917 (executing program) 2021/03/05 02:30:54 fetching corpus: 11445, signal 564839/677669 (executing program) 2021/03/05 02:30:54 fetching corpus: 11495, signal 565718/678484 (executing program) 2021/03/05 02:30:55 fetching corpus: 11545, signal 566425/679263 (executing program) 2021/03/05 02:30:55 fetching corpus: 11595, signal 567246/680063 (executing program) 2021/03/05 02:30:55 fetching corpus: 11645, signal 567771/680736 (executing program) 2021/03/05 02:30:55 fetching corpus: 11695, signal 568379/681439 (executing program) 2021/03/05 02:30:55 fetching corpus: 11745, signal 568604/681976 (executing program) 2021/03/05 02:30:55 fetching corpus: 11795, signal 569558/682784 (executing program) 2021/03/05 02:30:55 fetching corpus: 11845, signal 570137/683466 (executing program) 2021/03/05 02:30:55 fetching corpus: 11895, signal 571353/684435 (executing program) 2021/03/05 02:30:55 fetching corpus: 11945, signal 572494/685327 (executing program) 2021/03/05 02:30:55 fetching corpus: 11995, signal 573116/686027 (executing program) 2021/03/05 02:30:56 fetching corpus: 12045, signal 573545/686629 (executing program) 2021/03/05 02:30:56 fetching corpus: 12095, signal 574381/687410 (executing program) 2021/03/05 02:30:56 fetching corpus: 12145, signal 575314/688173 (executing program) 2021/03/05 02:30:56 fetching corpus: 12195, signal 575753/688793 (executing program) 2021/03/05 02:30:56 fetching corpus: 12245, signal 576405/689479 (executing program) 2021/03/05 02:30:56 fetching corpus: 12295, signal 577155/690194 (executing program) 2021/03/05 02:30:56 fetching corpus: 12345, signal 577851/690875 (executing program) 2021/03/05 02:30:56 fetching corpus: 12395, signal 578941/691684 (executing program) 2021/03/05 02:30:56 fetching corpus: 12445, signal 579383/692311 (executing program) 2021/03/05 02:30:56 fetching corpus: 12495, signal 580208/693080 (executing program) 2021/03/05 02:30:57 fetching corpus: 12545, signal 581561/693993 (executing program) 2021/03/05 02:30:57 fetching corpus: 12595, signal 582059/694600 (executing program) 2021/03/05 02:30:57 fetching corpus: 12645, signal 582413/695182 (executing program) 2021/03/05 02:30:57 fetching corpus: 12695, signal 582930/695804 (executing program) 2021/03/05 02:30:57 fetching corpus: 12745, signal 583401/696437 (executing program) 2021/03/05 02:30:57 fetching corpus: 12795, signal 584314/697117 (executing program) 2021/03/05 02:30:57 fetching corpus: 12845, signal 585089/697793 (executing program) 2021/03/05 02:30:57 fetching corpus: 12895, signal 585568/698371 (executing program) 2021/03/05 02:30:57 fetching corpus: 12945, signal 586172/698968 (executing program) 2021/03/05 02:30:58 fetching corpus: 12995, signal 587570/699767 (executing program) 2021/03/05 02:30:58 fetching corpus: 13045, signal 588006/700348 (executing program) 2021/03/05 02:30:58 fetching corpus: 13095, signal 588448/700905 (executing program) 2021/03/05 02:30:58 fetching corpus: 13145, signal 588975/701502 (executing program) 2021/03/05 02:30:58 fetching corpus: 13195, signal 589354/702044 (executing program) 2021/03/05 02:30:58 fetching corpus: 13245, signal 589730/702581 (executing program) 2021/03/05 02:30:58 fetching corpus: 13295, signal 590561/703279 (executing program) 2021/03/05 02:30:58 fetching corpus: 13345, signal 590991/703835 (executing program) 2021/03/05 02:30:58 fetching corpus: 13395, signal 591385/704376 (executing program) 2021/03/05 02:30:58 fetching corpus: 13445, signal 591918/704948 (executing program) 2021/03/05 02:30:58 fetching corpus: 13495, signal 592281/705462 (executing program) 2021/03/05 02:30:59 fetching corpus: 13545, signal 593352/706210 (executing program) 2021/03/05 02:30:59 fetching corpus: 13595, signal 593774/706721 (executing program) 2021/03/05 02:30:59 fetching corpus: 13645, signal 594810/707456 (executing program) 2021/03/05 02:30:59 fetching corpus: 13695, signal 595278/707963 (executing program) 2021/03/05 02:30:59 fetching corpus: 13745, signal 595923/708529 (executing program) 2021/03/05 02:30:59 fetching corpus: 13795, signal 596611/709130 (executing program) 2021/03/05 02:30:59 fetching corpus: 13845, signal 597445/709765 (executing program) 2021/03/05 02:30:59 fetching corpus: 13895, signal 598166/710395 (executing program) 2021/03/05 02:30:59 fetching corpus: 13945, signal 598400/710869 (executing program) 2021/03/05 02:30:59 fetching corpus: 13995, signal 598911/711411 (executing program) 2021/03/05 02:30:59 fetching corpus: 14045, signal 600665/712297 (executing program) 2021/03/05 02:30:59 fetching corpus: 14095, signal 600958/712752 (executing program) 2021/03/05 02:31:00 fetching corpus: 14145, signal 601481/713250 (executing program) 2021/03/05 02:31:00 fetching corpus: 14195, signal 602254/713841 (executing program) 2021/03/05 02:31:00 fetching corpus: 14245, signal 602839/714380 (executing program) 2021/03/05 02:31:00 fetching corpus: 14295, signal 603412/714881 (executing program) 2021/03/05 02:31:00 fetching corpus: 14345, signal 603772/715354 (executing program) 2021/03/05 02:31:00 fetching corpus: 14395, signal 605942/716254 (executing program) 2021/03/05 02:31:00 fetching corpus: 14445, signal 606336/716719 (executing program) 2021/03/05 02:31:00 fetching corpus: 14495, signal 607105/717271 (executing program) 2021/03/05 02:31:00 fetching corpus: 14545, signal 607511/717731 (executing program) 2021/03/05 02:31:00 fetching corpus: 14595, signal 608151/718246 (executing program) 2021/03/05 02:31:00 fetching corpus: 14645, signal 608754/718748 (executing program) 2021/03/05 02:31:00 fetching corpus: 14695, signal 609285/719209 (executing program) 2021/03/05 02:31:00 fetching corpus: 14745, signal 609659/719644 (executing program) 2021/03/05 02:31:01 fetching corpus: 14795, signal 610483/720187 (executing program) 2021/03/05 02:31:01 fetching corpus: 14845, signal 611174/720695 (executing program) 2021/03/05 02:31:01 fetching corpus: 14895, signal 611670/721151 (executing program) 2021/03/05 02:31:01 fetching corpus: 14945, signal 612030/721573 (executing program) 2021/03/05 02:31:01 fetching corpus: 14995, signal 612590/722039 (executing program) 2021/03/05 02:31:01 fetching corpus: 15045, signal 612858/722481 (executing program) 2021/03/05 02:31:01 fetching corpus: 15095, signal 613518/722954 (executing program) 2021/03/05 02:31:02 fetching corpus: 15145, signal 614071/723384 (executing program) 2021/03/05 02:31:02 fetching corpus: 15195, signal 614506/723844 (executing program) 2021/03/05 02:31:02 fetching corpus: 15245, signal 615326/724369 (executing program) 2021/03/05 02:31:02 fetching corpus: 15295, signal 615701/724801 (executing program) 2021/03/05 02:31:02 fetching corpus: 15345, signal 616041/725208 (executing program) 2021/03/05 02:31:02 fetching corpus: 15395, signal 616410/725636 (executing program) 2021/03/05 02:31:02 fetching corpus: 15445, signal 616996/726093 (executing program) 2021/03/05 02:31:02 fetching corpus: 15495, signal 617392/726503 (executing program) 2021/03/05 02:31:02 fetching corpus: 15545, signal 617780/726906 (executing program) 2021/03/05 02:31:02 fetching corpus: 15594, signal 618450/727353 (executing program) 2021/03/05 02:31:02 fetching corpus: 15644, signal 619080/727788 (executing program) 2021/03/05 02:31:02 fetching corpus: 15694, signal 619705/728212 (executing program) 2021/03/05 02:31:02 fetching corpus: 15744, signal 620579/728680 (executing program) 2021/03/05 02:31:02 fetching corpus: 15794, signal 621222/729119 (executing program) 2021/03/05 02:31:03 fetching corpus: 15844, signal 623087/729751 (executing program) 2021/03/05 02:31:03 fetching corpus: 15894, signal 623603/730175 (executing program) 2021/03/05 02:31:03 fetching corpus: 15944, signal 624481/730623 (executing program) 2021/03/05 02:31:03 fetching corpus: 15994, signal 625601/731082 (executing program) 2021/03/05 02:31:03 fetching corpus: 16044, signal 626141/731485 (executing program) 2021/03/05 02:31:03 fetching corpus: 16094, signal 626535/731892 (executing program) 2021/03/05 02:31:03 fetching corpus: 16144, signal 627495/732390 (executing program) 2021/03/05 02:31:03 fetching corpus: 16194, signal 627877/732760 (executing program) 2021/03/05 02:31:03 fetching corpus: 16244, signal 628398/733157 (executing program) 2021/03/05 02:31:03 fetching corpus: 16294, signal 629238/733567 (executing program) 2021/03/05 02:31:04 fetching corpus: 16344, signal 629809/733940 (executing program) 2021/03/05 02:31:04 fetching corpus: 16394, signal 630389/734348 (executing program) 2021/03/05 02:31:04 fetching corpus: 16444, signal 631108/734767 (executing program) 2021/03/05 02:31:04 fetching corpus: 16494, signal 631415/735146 (executing program) 2021/03/05 02:31:04 fetching corpus: 16544, signal 631866/735472 (executing program) 2021/03/05 02:31:04 fetching corpus: 16594, signal 632455/735870 (executing program) 2021/03/05 02:31:04 fetching corpus: 16644, signal 633023/736241 (executing program) 2021/03/05 02:31:04 fetching corpus: 16694, signal 633543/736612 (executing program) 2021/03/05 02:31:04 fetching corpus: 16744, signal 633897/736958 (executing program) 2021/03/05 02:31:04 fetching corpus: 16794, signal 635044/737394 (executing program) 2021/03/05 02:31:04 fetching corpus: 16844, signal 635593/737743 (executing program) 2021/03/05 02:31:04 fetching corpus: 16894, signal 636289/738109 (executing program) 2021/03/05 02:31:04 fetching corpus: 16944, signal 636512/738431 (executing program) 2021/03/05 02:31:05 fetching corpus: 16994, signal 636947/738772 (executing program) 2021/03/05 02:31:05 fetching corpus: 17044, signal 637772/739141 (executing program) 2021/03/05 02:31:05 fetching corpus: 17094, signal 638421/739503 (executing program) 2021/03/05 02:31:05 fetching corpus: 17144, signal 639123/739832 (executing program) 2021/03/05 02:31:05 fetching corpus: 17194, signal 639598/740168 (executing program) 2021/03/05 02:31:05 fetching corpus: 17244, signal 640400/740540 (executing program) 2021/03/05 02:31:05 fetching corpus: 17294, signal 640849/740835 (executing program) 2021/03/05 02:31:05 fetching corpus: 17344, signal 641370/741150 (executing program) 2021/03/05 02:31:05 fetching corpus: 17394, signal 642077/741518 (executing program) 2021/03/05 02:31:05 fetching corpus: 17444, signal 643382/741857 (executing program) 2021/03/05 02:31:05 fetching corpus: 17494, signal 643747/742149 (executing program) 2021/03/05 02:31:06 fetching corpus: 17544, signal 644088/742438 (executing program) 2021/03/05 02:31:06 fetching corpus: 17594, signal 644514/742751 (executing program) 2021/03/05 02:31:06 fetching corpus: 17644, signal 644990/743073 (executing program) 2021/03/05 02:31:06 fetching corpus: 17694, signal 645295/743362 (executing program) 2021/03/05 02:31:06 fetching corpus: 17744, signal 645710/743648 (executing program) 2021/03/05 02:31:06 fetching corpus: 17794, signal 646053/743925 (executing program) 2021/03/05 02:31:06 fetching corpus: 17844, signal 646553/744237 (executing program) 2021/03/05 02:31:06 fetching corpus: 17894, signal 646863/744500 (executing program) 2021/03/05 02:31:06 fetching corpus: 17944, signal 647535/744806 (executing program) 2021/03/05 02:31:06 fetching corpus: 17994, signal 647805/745100 (executing program) 2021/03/05 02:31:06 fetching corpus: 18044, signal 648339/745386 (executing program) 2021/03/05 02:31:07 fetching corpus: 18094, signal 648657/745652 (executing program) 2021/03/05 02:31:07 fetching corpus: 18144, signal 648894/745936 (executing program) 2021/03/05 02:31:07 fetching corpus: 18194, signal 649590/746227 (executing program) 2021/03/05 02:31:07 fetching corpus: 18244, signal 650678/746512 (executing program) 2021/03/05 02:31:08 fetching corpus: 18294, signal 651054/746774 (executing program) 2021/03/05 02:31:08 fetching corpus: 18344, signal 651530/747019 (executing program) 2021/03/05 02:31:08 fetching corpus: 18394, signal 652089/747264 (executing program) 2021/03/05 02:31:08 fetching corpus: 18444, signal 652579/747510 (executing program) 2021/03/05 02:31:08 fetching corpus: 18494, signal 653193/747769 (executing program) 2021/03/05 02:31:08 fetching corpus: 18544, signal 654146/748023 (executing program) 2021/03/05 02:31:08 fetching corpus: 18594, signal 654729/748291 (executing program) 2021/03/05 02:31:08 fetching corpus: 18644, signal 655806/748565 (executing program) 2021/03/05 02:31:08 fetching corpus: 18694, signal 656006/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18744, signal 656248/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18794, signal 656916/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18844, signal 657917/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18894, signal 659440/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18944, signal 660355/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 18994, signal 660628/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19044, signal 661702/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19094, signal 662180/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19144, signal 662771/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19194, signal 663446/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19244, signal 663807/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19294, signal 664712/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19344, signal 665593/748635 (executing program) 2021/03/05 02:31:09 fetching corpus: 19394, signal 665959/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19444, signal 666280/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19494, signal 666735/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19544, signal 667204/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19594, signal 667961/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19644, signal 668288/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19694, signal 668698/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19744, signal 669157/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19794, signal 669621/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19844, signal 669976/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19894, signal 670469/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19944, signal 670746/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 19994, signal 671042/748635 (executing program) 2021/03/05 02:31:10 fetching corpus: 20044, signal 671343/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20094, signal 671741/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20144, signal 672347/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20194, signal 673182/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20244, signal 673458/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20294, signal 673669/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20317, signal 673815/748635 (executing program) 2021/03/05 02:31:11 fetching corpus: 20317, signal 673815/748635 (executing program) 2021/03/05 02:31:13 starting 6 fuzzer processes 02:31:13 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000200)) 02:31:13 executing program 1: keyctl$dh_compute(0x17, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00000006c0)={0x0, &(0x7f00000005c0)="90fffc0618cc3dd306fa3d55ba665a3bd9e4174599ea3ad255c6c7090fa65a2bd3a640409289d5cae593f1137dc1e45cfe5ebb3b52a6e1981d4737db47dc85d0d0", 0x41}) 02:31:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) 02:31:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/102) 02:31:14 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x20}, 0x0) 02:31:14 executing program 5: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50}, 0x50) io_setup(0x0, &(0x7f0000000040)) [ 104.460030][ T8414] IPVS: ftp: loaded support on port[0] = 21 [ 104.640685][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 104.722931][ T8416] IPVS: ftp: loaded support on port[0] = 21 [ 104.886182][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.896083][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.906151][ T8414] device bridge_slave_0 entered promiscuous mode [ 104.941175][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.951907][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.964375][ T8418] IPVS: ftp: loaded support on port[0] = 21 [ 104.974961][ T8414] device bridge_slave_1 entered promiscuous mode [ 105.051410][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.064557][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.081982][ T8416] chnl_net:caif_netlink_parms(): no params data found [ 105.147155][ T8414] team0: Port device team_slave_0 added [ 105.195254][ T8420] IPVS: ftp: loaded support on port[0] = 21 [ 105.197308][ T8414] team0: Port device team_slave_1 added [ 105.269597][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.276575][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.304837][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.391948][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.402580][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.429696][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.462962][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.466977][ T8422] IPVS: ftp: loaded support on port[0] = 21 [ 105.474228][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.488989][ T8416] device bridge_slave_0 entered promiscuous mode [ 105.497968][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.505018][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.513180][ T8416] device bridge_slave_1 entered promiscuous mode [ 105.599881][ T8414] device hsr_slave_0 entered promiscuous mode [ 105.606488][ T8414] device hsr_slave_1 entered promiscuous mode [ 105.624334][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.636516][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.649370][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 105.725251][ T8416] team0: Port device team_slave_0 added [ 105.774591][ T8416] team0: Port device team_slave_1 added [ 105.938310][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.945282][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.987019][ T8416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.006415][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.015799][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.031761][ T8418] device bridge_slave_0 entered promiscuous mode [ 106.042087][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.050413][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.060394][ T8418] device bridge_slave_1 entered promiscuous mode [ 106.088128][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.095124][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.121758][ T8416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.161953][ T8573] IPVS: ftp: loaded support on port[0] = 21 [ 106.194289][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.214820][ T8416] device hsr_slave_0 entered promiscuous mode [ 106.222953][ T8416] device hsr_slave_1 entered promiscuous mode [ 106.230562][ T8416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.239058][ T8416] Cannot create hsr debugfs directory [ 106.262680][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 106.276712][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.323795][ T8414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.356537][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 106.388798][ T8414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.421946][ T8418] team0: Port device team_slave_0 added [ 106.428432][ T3505] Bluetooth: hci0: command 0x0409 tx timeout [ 106.444414][ T8418] team0: Port device team_slave_1 added [ 106.451840][ T8414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.481488][ T8414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.553027][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.561076][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.587961][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.601458][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.609151][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.635733][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.675459][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.677088][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 106.686203][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.697792][ T8420] device bridge_slave_0 entered promiscuous mode [ 106.710057][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.717113][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.726649][ T8420] device bridge_slave_1 entered promiscuous mode [ 106.759128][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.774247][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.812248][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.825876][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.837145][ T8422] device bridge_slave_0 entered promiscuous mode [ 106.888982][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.896070][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.905403][ T8422] device bridge_slave_1 entered promiscuous mode [ 106.912112][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 106.944973][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 106.956210][ T8420] team0: Port device team_slave_0 added [ 106.969420][ T8418] device hsr_slave_0 entered promiscuous mode [ 106.978537][ T8418] device hsr_slave_1 entered promiscuous mode [ 106.986290][ T8418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.996421][ T8418] Cannot create hsr debugfs directory [ 107.028918][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.039780][ T8420] team0: Port device team_slave_1 added [ 107.046823][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.125068][ T8422] team0: Port device team_slave_0 added [ 107.150724][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 107.178172][ T8422] team0: Port device team_slave_1 added [ 107.192997][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.205321][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.232864][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.246791][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.254136][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.281023][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.360177][ T8420] device hsr_slave_0 entered promiscuous mode [ 107.369291][ T8420] device hsr_slave_1 entered promiscuous mode [ 107.375896][ T8420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.385567][ T8420] Cannot create hsr debugfs directory [ 107.395007][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.403093][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 107.410047][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.436593][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.450507][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.458010][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.485226][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.522033][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.530393][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.541702][ T8573] device bridge_slave_0 entered promiscuous mode [ 107.556110][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.564707][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.574023][ T8573] device bridge_slave_1 entered promiscuous mode [ 107.608247][ T8422] device hsr_slave_0 entered promiscuous mode [ 107.614929][ T8422] device hsr_slave_1 entered promiscuous mode [ 107.622908][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.632154][ T8422] Cannot create hsr debugfs directory [ 107.707855][ T8416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.751514][ T8416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.765979][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.788058][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.810513][ T8416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.823665][ T8416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.905277][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.922609][ T8573] team0: Port device team_slave_0 added [ 107.949336][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 107.964549][ T8573] team0: Port device team_slave_1 added [ 108.020319][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.044539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.059827][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.069125][ T8418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.087941][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.094911][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.122301][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.133942][ T8418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.143609][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.156756][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.166113][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.173535][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.182555][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.208946][ T8418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.218999][ T8418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.234474][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.243866][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.270452][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.286587][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.297567][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.306014][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.313122][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.321509][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.331037][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.348114][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.358232][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.366751][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.376242][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.388791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.428086][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.446644][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.464415][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.476644][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.489254][ T8420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.507271][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 108.516448][ T8420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.535549][ T8420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.546032][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.569537][ T8573] device hsr_slave_0 entered promiscuous mode [ 108.576163][ T8573] device hsr_slave_1 entered promiscuous mode [ 108.583279][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.592771][ T8573] Cannot create hsr debugfs directory [ 108.612827][ T8420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.661904][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.672572][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.731158][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.742882][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.750312][ T9608] Bluetooth: hci1: command 0x041b tx timeout [ 108.771347][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.790622][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.799938][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.829741][ T8422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.846247][ T8422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.888886][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.899071][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.907557][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.914599][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.924693][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.934634][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.943749][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.950886][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.958683][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.967491][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.977535][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.988433][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 108.998430][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.016707][ T8422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.057851][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.066468][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.081013][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.091647][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.101912][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.118595][ T8422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.182476][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.192670][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.202444][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.211991][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.221429][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.231028][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.246636][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.248292][ T19] Bluetooth: hci3: command 0x041b tx timeout [ 109.273389][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.284958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.295252][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.303642][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.313339][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.322316][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.331920][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.340990][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.348110][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.356047][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.364573][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.373009][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.384978][ T8414] device veth0_vlan entered promiscuous mode [ 109.399289][ T8416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.434290][ T8414] device veth1_vlan entered promiscuous mode [ 109.441749][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.453151][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.462666][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.473018][ T9696] Bluetooth: hci4: command 0x041b tx timeout [ 109.480679][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.509874][ T8416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.516898][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.525501][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.540227][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.549910][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.557051][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.564779][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.574414][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.583099][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.591773][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.598926][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.606632][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.614188][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.655275][ T8414] device veth0_macvtap entered promiscuous mode [ 109.682241][ T8573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.691662][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.701832][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.711271][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.721042][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.731203][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.740506][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.749639][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.756744][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.764974][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.774200][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.783333][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.793370][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.801847][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.817794][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.836590][ T8414] device veth1_macvtap entered promiscuous mode [ 109.861652][ T8573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.900672][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.908703][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.917704][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.926383][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.936469][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.945664][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.954453][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.965668][ T8573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.987936][ T8573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.005935][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.023997][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.032415][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.046297][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.056214][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.071133][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.081072][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.090393][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.099828][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.108869][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.117379][ T36] Bluetooth: hci5: command 0x041b tx timeout [ 110.135172][ T8420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.146134][ T8420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.160894][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.172404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.181631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.190707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.199864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.209156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.218152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.228636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.239981][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.277983][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.285752][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.296337][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.306595][ T8414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.316545][ T8414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.325388][ T8414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.334190][ T8414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.354270][ T8416] device veth0_vlan entered promiscuous mode [ 110.382787][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.392361][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.402357][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.412242][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.428473][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.439866][ T8416] device veth1_vlan entered promiscuous mode [ 110.447561][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.455291][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.469884][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.505508][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.560704][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.570672][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.581658][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.587612][ T9608] Bluetooth: hci0: command 0x040f tx timeout [ 110.591556][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.602808][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.612410][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.621773][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.630733][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.637873][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.645658][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.653930][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.661591][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.671173][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.701864][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.710591][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.721503][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.731403][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.740222][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.750419][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.759641][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.799175][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.827488][ T9518] Bluetooth: hci1: command 0x040f tx timeout [ 110.840581][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.858368][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.872468][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.881603][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.891103][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.913343][ T8416] device veth0_macvtap entered promiscuous mode [ 110.932021][ T8422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.952506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.966039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.976466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.020894][ T8416] device veth1_macvtap entered promiscuous mode [ 111.046347][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.056679][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.066005][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.075882][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 111.104636][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 111.115804][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.130196][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.142894][ T8416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.154895][ T8416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.166762][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.182190][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.193408][ T8418] device veth0_vlan entered promiscuous mode [ 111.200674][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.228085][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.236035][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.247099][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.255733][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.266489][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.275674][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.285245][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.294429][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.303467][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.307180][ T9518] Bluetooth: hci3: command 0x040f tx timeout [ 111.317147][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.325046][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.335661][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.343933][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.394425][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.405438][ T8416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.416325][ T8416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.430165][ T8416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.439098][ T8416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.458382][ T8420] device veth0_vlan entered promiscuous mode [ 111.479302][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.490019][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.510723][ T8418] device veth1_vlan entered promiscuous mode [ 111.532494][ T8420] device veth1_vlan entered promiscuous mode [ 111.547557][ T9608] Bluetooth: hci4: command 0x040f tx timeout [ 111.549091][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.563160][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.572345][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.581264][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.589124][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.598204][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.606508][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.613613][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.640099][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.654758][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.665014][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.682730][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.692171][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.709792][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.718487][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.727778][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.736494][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.743622][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.752673][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.761117][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.795185][ T8420] device veth0_macvtap entered promiscuous mode [ 111.821586][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.834371][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.843988][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.854246][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.863916][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.915324][ T8418] device veth0_macvtap entered promiscuous mode [ 111.935507][ T8420] device veth1_macvtap entered promiscuous mode [ 111.954037][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 02:31:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000009b40)={0x9, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x6}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 111.974554][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.012381][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.049622][ T8418] device veth1_macvtap entered promiscuous mode [ 112.119869][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.139703][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.175617][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.202299][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.237027][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.257414][ T3505] Bluetooth: hci5: command 0x040f tx timeout [ 112.305545][ T8573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.324782][ T8573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.339581][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.351048][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.362220][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.378077][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.388719][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.398738][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.410959][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.434670][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.448989][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.460229][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.472909][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.486646][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.538484][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.546524][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.548150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.572172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.582939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.594362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.613621][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.624275][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.633506][ T3178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.643433][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.659662][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.671316][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.676954][ T9287] Bluetooth: hci0: command 0x0419 tx timeout [ 112.683116][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.699597][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.711455][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.724454][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.736034][ T8422] device veth0_vlan entered promiscuous mode [ 112.776976][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.788247][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.806489][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.825073][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.844020][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.855418][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.873888][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.891799][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.905615][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 02:31:23 executing program 0: socketpair(0x31, 0x0, 0x0, &(0x7f0000000040)) [ 112.918613][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.929374][ T9273] Bluetooth: hci1: command 0x0419 tx timeout [ 112.940544][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.952411][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.963987][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.974434][ T8418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.985916][ T8418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.008745][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.024863][ T8422] device veth1_vlan entered promiscuous mode 02:31:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='5', 0x1}], 0x1}, 0x8014) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="06", 0xfffffdef}], 0x1}, 0x0) [ 113.048276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.058549][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.066607][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.077946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.088422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.102460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.144841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.158020][ T9722] Bluetooth: hci2: command 0x0419 tx timeout [ 113.168527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.179965][ T8420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.194377][ T8420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.211387][ T8420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.223618][ T8420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.251738][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.276279][ T8418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 02:31:23 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000340)) [ 113.302641][ T8418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.323392][ T8418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.341342][ T8418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.387828][ T3505] Bluetooth: hci3: command 0x0419 tx timeout [ 113.459747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.475038][ T9791] can: request_module (can-proto-0) failed. [ 113.483258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.526991][ T9791] can: request_module (can-proto-0) failed. [ 113.551078][ T8422] device veth0_macvtap entered promiscuous mode 02:31:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f000000a140)={0xf}, 0x40) [ 113.626096][ T8422] device veth1_macvtap entered promiscuous mode [ 113.637947][ T9696] Bluetooth: hci4: command 0x0419 tx timeout 02:31:23 executing program 0: socketpair(0x18, 0x0, 0x3, &(0x7f0000000040)) [ 113.697242][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.705303][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.766441][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.790210][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 02:31:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f00000029c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000002a00)=""/252, 0x2a, 0xfc, 0x1}, 0x20) [ 113.815252][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.872115][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.887884][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.905245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 02:31:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="27707fb078fa", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @empty, @link_local, @multicast2}}}}, 0x0) [ 113.929688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.962039][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.973275][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.998804][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.018714][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.038829][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.054828][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.073684][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.084199][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.095397][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.118115][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.149448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.165012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.192211][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.219049][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.230236][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.241303][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.251683][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.263736][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.275540][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.286934][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.302484][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.319446][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.347302][ T3505] Bluetooth: hci5: command 0x0419 tx timeout [ 114.351643][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.354390][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.368708][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.384770][ T8422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.404049][ T8422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.413416][ T8422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.433411][ T8422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.463030][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.477874][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.485929][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.490347][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.517675][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.537211][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.545414][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.555489][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.565364][ T8573] device veth0_vlan entered promiscuous mode [ 114.631323][ T8573] device veth1_vlan entered promiscuous mode [ 114.742940][ T8573] device veth0_macvtap entered promiscuous mode [ 114.777524][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 02:31:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x200, 0x4) 02:31:24 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') [ 114.797640][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.816397][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.850222][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.889197][ T8573] device veth1_macvtap entered promiscuous mode [ 114.920444][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.934588][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.963303][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.977701][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.985827][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.048566][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.061143][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.072481][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.084437][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.095021][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.108230][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.118691][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.129807][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.141170][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.154785][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.179566][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.202332][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.228056][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.277934][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.338912][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.354128][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.425371][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.452336][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.468555][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.479017][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.489979][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.500885][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.511988][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.524439][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.536029][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.545153][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.545635][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.566199][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.579760][ T8573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.591246][ T8573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.600033][ T8573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.610992][ T8573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.624207][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:31:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) [ 115.757392][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.765806][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.811460][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.829483][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.842434][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.867160][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:31:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 02:31:26 executing program 0: r0 = epoll_create1(0x0) r1 = eventfd(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 02:31:26 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1ff) 02:31:26 executing program 2: r0 = gettid() rt_sigqueueinfo(r0, 0x12, &(0x7f0000000340)) 02:31:26 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="2715852c6765", @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @private}, @address_request}}}}, 0x0) 02:31:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x6c}}, 0x0) 02:31:26 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 02:31:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000c, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x200000b, 0x4d032, 0xffffffffffffffff, 0x0) 02:31:26 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000006640)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "a844aa", 0x10, 0x21, 0x0, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a46d45", 0x0, "10d0b7"}}}}}}}, 0x0) 02:31:26 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r0, 0x0) 02:31:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x2009, 0x20000000000001, 0x0, 0x1}, 0x12) 02:31:26 executing program 4: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc0002006}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 02:31:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 02:31:26 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) 02:31:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 02:31:26 executing program 2: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_open_procfs$namespace(r0, 0x0) 02:31:26 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r0, 0x0) 02:31:26 executing program 4: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0xa0000014}) 02:31:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 02:31:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 02:31:26 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="06", 0xffffff1f}], 0x1}, 0x0) 02:31:26 executing program 0: syz_emit_ethernet(0xaa, &(0x7f00000012c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xb, 0x0, [@remote, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast2}, {@local}, {}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "fc"}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eb43af1953d4e3d6e5990cee4b5403742dfa51c0d5819b66", "5a7d2886194426f83cf56a805ef5bd09c8cceb42e17d8244b1e1d5caff69fd56"}}}}}}, 0x0) 02:31:26 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r0, 0x0) 02:31:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 02:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0002017}) epoll_pwait(r1, &(0x7f00000003c0)=[{}], 0x1, 0xe6, 0x0, 0x0) 02:31:27 executing program 2: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_open_procfs$namespace(r0, 0x0) 02:31:27 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r0, 0x0) 02:31:27 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x81}) 02:31:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_pwait(r1, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff, 0x0, 0x0) 02:31:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000004d00)="d2", 0x1, 0x40000894, &(0x7f0000004a40)={0x2, 0x4e20, @empty}, 0x10) 02:31:27 executing program 5: r0 = openat$tun(0xffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, 0x0) 02:31:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x38}}, 0x0) 02:31:27 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 02:31:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x894a, 0x0) 02:31:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) 02:31:27 executing program 5: r0 = fork() rt_sigqueueinfo(r0, 0x1b, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) 02:31:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x38}}, 0x0) 02:31:28 executing program 2: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_open_procfs$namespace(r0, 0x0) 02:31:28 executing program 1: r0 = socket(0x2, 0x3, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x965, 0x4) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:31:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000000)={'veth1\x00', @ifru_mtu}) 02:31:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:31:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x38}}, 0x0) 02:31:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101}, 0x14}}, 0x0) 02:31:28 executing program 1: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 117.969335][T10039] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 02:31:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 02:31:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x38}}, 0x0) 02:31:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0xffffffff, 0x4) 02:31:28 executing program 1: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 02:31:28 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0xfffffffd, &(0x7f0000000340)={0x0, 0x0, 0xffffffff}) 02:31:29 executing program 2: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_open_procfs$namespace(r0, 0x0) 02:31:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d4000000010803"], 0xd4}}, 0x0) 02:31:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) 02:31:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1, 0x5, "1ac5396bd54668a35f3dd79f8e2da3c345503d"}) 02:31:29 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)) 02:31:29 executing program 4: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xffffffff}) 02:31:29 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000340)) 02:31:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2tp={0x2, 0x0, @multicast1}, @ethernet, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='ip6gretap0\x00'}) 02:31:29 executing program 5: r0 = memfd_create(&(0x7f0000000600)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xe5\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\x95\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O\x88\x8a_\vLM\xc3\"\xb9\x95\xbd\vr\x8f\xcf\xc9q_s\xca\xd6\xb1\x14>SJ\xfeg\xa3\x98K\xc2\xe2\x94B#uk=\x92\xbf\xec\x9bn\x82\xb1=\x90f\xbc\xbf\x90\xda\xf5u\xd1\xffo{?\xa9\xediK\xd4\x1ee\x01\x03\xd5\x16\xf5\xbeW\x8f\xe8\x1e\xef\xfdCn\x8d{n\x17\xad\x00\x00\x00\x00\xb5\xc2 \x01J\x88\xe3\xb2\xf0\x82\x89p{\xd0\xe1O\xael+we\xe6M\xc8$\xf8s\xe6\x84\xb9A\xa0\xf4\xa8k\ru5[>mKv\xc5\x80Lz\x1fqv%z\x90W\x02T\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x89\xb9I\x95\x00\x00\xeb\xbe\xaf\xb7@\xd4\x97S\xa9*\xdaE\x9a\xcfw\xbd\x1f\xf71}J\x911;\xf2\x12\x12\xe5\x9e=D\nt{\x1d\x8f\xcf\x03.\xc0\x97{\x90A\xfd\xfb\xbd\x8f\xbb\xee\xebT\x1e8\xd8\xe6\x97\xbe\xdd\xd4\xa8\x9c\xb4\xde\x91\x8b\xc5\v\xbc/\xcb\x11C8\xf8\x83\x14\x15\xf8;\xf6\x1d\xff\xdb\xf5\x04\xd0(\x04-\xbb\xe7\xd4\xcf\x92\xb3\xffk\x96\xf6\x80\x94\xc9\x85\x8f\x92n_\x03Q<\xb7\xec\"oh\xca\xe7.\xb2\'\xaf\x0e\x97\xb3L0\xd3\xe1\x9c,.\xd8\xfa\xa6\xca\xc7N\xdaYi\xb1RI\\\xceJ}F\xfe\x97\xb8\xaen\xf6\xa6d\x90\xd58\x01ic\xad\xe1\xa1\x00_X\xa2s\x01\xf2$\\\x8cZ$\xdf\x04\x9cxD_\tx\xd8\x89%v\x12\xecp\xad\x12\f9\xca\xfd\xbb}v\x17W\xda2\x96x4\xdf\xa5-\xf4\x9bP\x9fN^F\xae\x9d`\xd9\x00\xaac\x80L\x17\x11m\xf46\x9d\xc7\x12\x03TXR\xa3\xcb\x0f\xd7+w<\xe1W\x06\xf6\x17\x1cF:_\xf6\xe4t\xb2\x7f9\xc1\xf5\x8c/\xcd\xe26k\xf4Ou\xe0\xc4\x97\xcf%\x98\xe3\x94@?Jc\xb9~\xbc=\xaa\x80\x96\xe4UY\x8aS\xfdyc\x91\xe5z\x9e\xd3\x0e\x80\x00\x00\x00\x00\x00\x00\x00g\xf5\x1a\xa2\xec\x03+T,\x84\xae\xad+1#\xe7_Y\xf3)\xb9\xd4:#??\xd5]\'\x1f]C\x19\xc9\x1d\r~\xfd\x95\xf9\v&\xc6B\xab\x00A\x16\x1f\xa7\xca \x03\x1a\xb8\xa4\x99\xb4\x1aNK\xec\xef\xde\x1fi\xc3\xf0\xedk\x03\x99%\xef\xc1vy\xf6\xb3\xf9(\xdd;\xefH\xd9G\xef\x8d\x9e\x9c\xd8t\x18U<\x16\x1a\xe8\xfc\n\x98\x15I\x82\xbd\xc5\xc5.\x96)\xae\xe7[\xf5\xce\'\xe9\xb4\x01P{\xad\x87c\x9d\xd1F\x8fU\xf8vo\xad\xc4\xf6;\xf2\x91\x10\xaf\xc8YK\xfb\xe6!&\x1c}\xf0W\xc0\x91\x97D\x8a\xbe\xa4%\x82\x92\xfa\x81\xbaE\xa0\xede\x95\x9c(\xd1\xb0\xee\xed\xab0\xda\x87\xdb\xef \xe4^YSP\\^\x8e\x05\xa0\x85(\x8d\xdb\xef\xb8\xf7/t\xcf\x8esMyP\xda\x8b\x8d\xfc\x8d\xde\xe9G\x9e\xb8\xf2p\x02\x17y\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x86\xebz>@\xb6\r\xcdh\xea\t_\xab\xb1\x97\x9a\xb7\xbb\vC\xd0#\x94\v\xd7\f\x10!\x91\x1c\x00\x7f\x92\xa1`\xc5\x9a\x82\xc5\xa1\ndG\x92\x1aO\xb1\xd0\xa14>W\xb5N\xbe{Hv\xf9\xac\xcd\xb5U\xbdR~n\f\x18s\x06\x84\xba\x1a/\x01\xb1\x12^\x82/L\x19\xd0s!\"\xbb\xd0\xad\xdd\xe7Q\x80S_\xa64\x92m$o\xfc\x96\xd6\xb4?\x9a\xfcV\af', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 02:31:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) 02:31:29 executing program 0: syz_emit_ethernet(0x105, 0x0, 0x0) 02:31:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r0, r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @broadcast}, @ax25={0x3, @bcast}, @phonet, 0x34}) 02:31:29 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') setns(r0, 0x0) 02:31:29 executing program 5: r0 = memfd_create(&(0x7f0000000600)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xe5\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\x95\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O\x88\x8a_\vLM\xc3\"\xb9\x95\xbd\vr\x8f\xcf\xc9q_s\xca\xd6\xb1\x14>SJ\xfeg\xa3\x98K\xc2\xe2\x94B#uk=\x92\xbf\xec\x9bn\x82\xb1=\x90f\xbc\xbf\x90\xda\xf5u\xd1\xffo{?\xa9\xediK\xd4\x1ee\x01\x03\xd5\x16\xf5\xbeW\x8f\xe8\x1e\xef\xfdCn\x8d{n\x17\xad\x00\x00\x00\x00\xb5\xc2 \x01J\x88\xe3\xb2\xf0\x82\x89p{\xd0\xe1O\xael+we\xe6M\xc8$\xf8s\xe6\x84\xb9A\xa0\xf4\xa8k\ru5[>mKv\xc5\x80Lz\x1fqv%z\x90W\x02T\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x89\xb9I\x95\x00\x00\xeb\xbe\xaf\xb7@\xd4\x97S\xa9*\xdaE\x9a\xcfw\xbd\x1f\xf71}J\x911;\xf2\x12\x12\xe5\x9e=D\nt{\x1d\x8f\xcf\x03.\xc0\x97{\x90A\xfd\xfb\xbd\x8f\xbb\xee\xebT\x1e8\xd8\xe6\x97\xbe\xdd\xd4\xa8\x9c\xb4\xde\x91\x8b\xc5\v\xbc/\xcb\x11C8\xf8\x83\x14\x15\xf8;\xf6\x1d\xff\xdb\xf5\x04\xd0(\x04-\xbb\xe7\xd4\xcf\x92\xb3\xffk\x96\xf6\x80\x94\xc9\x85\x8f\x92n_\x03Q<\xb7\xec\"oh\xca\xe7.\xb2\'\xaf\x0e\x97\xb3L0\xd3\xe1\x9c,.\xd8\xfa\xa6\xca\xc7N\xdaYi\xb1RI\\\xceJ}F\xfe\x97\xb8\xaen\xf6\xa6d\x90\xd58\x01ic\xad\xe1\xa1\x00_X\xa2s\x01\xf2$\\\x8cZ$\xdf\x04\x9cxD_\tx\xd8\x89%v\x12\xecp\xad\x12\f9\xca\xfd\xbb}v\x17W\xda2\x96x4\xdf\xa5-\xf4\x9bP\x9fN^F\xae\x9d`\xd9\x00\xaac\x80L\x17\x11m\xf46\x9d\xc7\x12\x03TXR\xa3\xcb\x0f\xd7+w<\xe1W\x06\xf6\x17\x1cF:_\xf6\xe4t\xb2\x7f9\xc1\xf5\x8c/\xcd\xe26k\xf4Ou\xe0\xc4\x97\xcf%\x98\xe3\x94@?Jc\xb9~\xbc=\xaa\x80\x96\xe4UY\x8aS\xfdyc\x91\xe5z\x9e\xd3\x0e\x80\x00\x00\x00\x00\x00\x00\x00g\xf5\x1a\xa2\xec\x03+T,\x84\xae\xad+1#\xe7_Y\xf3)\xb9\xd4:#??\xd5]\'\x1f]C\x19\xc9\x1d\r~\xfd\x95\xf9\v&\xc6B\xab\x00A\x16\x1f\xa7\xca \x03\x1a\xb8\xa4\x99\xb4\x1aNK\xec\xef\xde\x1fi\xc3\xf0\xedk\x03\x99%\xef\xc1vy\xf6\xb3\xf9(\xdd;\xefH\xd9G\xef\x8d\x9e\x9c\xd8t\x18U<\x16\x1a\xe8\xfc\n\x98\x15I\x82\xbd\xc5\xc5.\x96)\xae\xe7[\xf5\xce\'\xe9\xb4\x01P{\xad\x87c\x9d\xd1F\x8fU\xf8vo\xad\xc4\xf6;\xf2\x91\x10\xaf\xc8YK\xfb\xe6!&\x1c}\xf0W\xc0\x91\x97D\x8a\xbe\xa4%\x82\x92\xfa\x81\xbaE\xa0\xede\x95\x9c(\xd1\xb0\xee\xed\xab0\xda\x87\xdb\xef \xe4^YSP\\^\x8e\x05\xa0\x85(\x8d\xdb\xef\xb8\xf7/t\xcf\x8esMyP\xda\x8b\x8d\xfc\x8d\xde\xe9G\x9e\xb8\xf2p\x02\x17y\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x86\xebz>@\xb6\r\xcdh\xea\t_\xab\xb1\x97\x9a\xb7\xbb\vC\xd0#\x94\v\xd7\f\x10!\x91\x1c\x00\x7f\x92\xa1`\xc5\x9a\x82\xc5\xa1\ndG\x92\x1aO\xb1\xd0\xa14>W\xb5N\xbe{Hv\xf9\xac\xcd\xb5U\xbdR~n\f\x18s\x06\x84\xba\x1a/\x01\xb1\x12^\x82/L\x19\xd0s!\"\xbb\xd0\xad\xdd\xe7Q\x80S_\xa64\x92m$o\xfc\x96\xd6\xb4?\x9a\xfcV\af', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 02:31:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1, 0x5, "1ac5396bd54668a35f3dd79f8e2da3c345503d"}) 02:31:29 executing program 0: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@link_local, @empty, @void, {@mpls_mc}}, 0x0) 02:31:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 02:31:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$apparmor_task_current(0xffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r1, r0) 02:31:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tcp_congestion(r0, 0x0, 0x0) 02:31:29 executing program 5: r0 = memfd_create(&(0x7f0000000600)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xe5\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\x95\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O\x88\x8a_\vLM\xc3\"\xb9\x95\xbd\vr\x8f\xcf\xc9q_s\xca\xd6\xb1\x14>SJ\xfeg\xa3\x98K\xc2\xe2\x94B#uk=\x92\xbf\xec\x9bn\x82\xb1=\x90f\xbc\xbf\x90\xda\xf5u\xd1\xffo{?\xa9\xediK\xd4\x1ee\x01\x03\xd5\x16\xf5\xbeW\x8f\xe8\x1e\xef\xfdCn\x8d{n\x17\xad\x00\x00\x00\x00\xb5\xc2 \x01J\x88\xe3\xb2\xf0\x82\x89p{\xd0\xe1O\xael+we\xe6M\xc8$\xf8s\xe6\x84\xb9A\xa0\xf4\xa8k\ru5[>mKv\xc5\x80Lz\x1fqv%z\x90W\x02T\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x89\xb9I\x95\x00\x00\xeb\xbe\xaf\xb7@\xd4\x97S\xa9*\xdaE\x9a\xcfw\xbd\x1f\xf71}J\x911;\xf2\x12\x12\xe5\x9e=D\nt{\x1d\x8f\xcf\x03.\xc0\x97{\x90A\xfd\xfb\xbd\x8f\xbb\xee\xebT\x1e8\xd8\xe6\x97\xbe\xdd\xd4\xa8\x9c\xb4\xde\x91\x8b\xc5\v\xbc/\xcb\x11C8\xf8\x83\x14\x15\xf8;\xf6\x1d\xff\xdb\xf5\x04\xd0(\x04-\xbb\xe7\xd4\xcf\x92\xb3\xffk\x96\xf6\x80\x94\xc9\x85\x8f\x92n_\x03Q<\xb7\xec\"oh\xca\xe7.\xb2\'\xaf\x0e\x97\xb3L0\xd3\xe1\x9c,.\xd8\xfa\xa6\xca\xc7N\xdaYi\xb1RI\\\xceJ}F\xfe\x97\xb8\xaen\xf6\xa6d\x90\xd58\x01ic\xad\xe1\xa1\x00_X\xa2s\x01\xf2$\\\x8cZ$\xdf\x04\x9cxD_\tx\xd8\x89%v\x12\xecp\xad\x12\f9\xca\xfd\xbb}v\x17W\xda2\x96x4\xdf\xa5-\xf4\x9bP\x9fN^F\xae\x9d`\xd9\x00\xaac\x80L\x17\x11m\xf46\x9d\xc7\x12\x03TXR\xa3\xcb\x0f\xd7+w<\xe1W\x06\xf6\x17\x1cF:_\xf6\xe4t\xb2\x7f9\xc1\xf5\x8c/\xcd\xe26k\xf4Ou\xe0\xc4\x97\xcf%\x98\xe3\x94@?Jc\xb9~\xbc=\xaa\x80\x96\xe4UY\x8aS\xfdyc\x91\xe5z\x9e\xd3\x0e\x80\x00\x00\x00\x00\x00\x00\x00g\xf5\x1a\xa2\xec\x03+T,\x84\xae\xad+1#\xe7_Y\xf3)\xb9\xd4:#??\xd5]\'\x1f]C\x19\xc9\x1d\r~\xfd\x95\xf9\v&\xc6B\xab\x00A\x16\x1f\xa7\xca \x03\x1a\xb8\xa4\x99\xb4\x1aNK\xec\xef\xde\x1fi\xc3\xf0\xedk\x03\x99%\xef\xc1vy\xf6\xb3\xf9(\xdd;\xefH\xd9G\xef\x8d\x9e\x9c\xd8t\x18U<\x16\x1a\xe8\xfc\n\x98\x15I\x82\xbd\xc5\xc5.\x96)\xae\xe7[\xf5\xce\'\xe9\xb4\x01P{\xad\x87c\x9d\xd1F\x8fU\xf8vo\xad\xc4\xf6;\xf2\x91\x10\xaf\xc8YK\xfb\xe6!&\x1c}\xf0W\xc0\x91\x97D\x8a\xbe\xa4%\x82\x92\xfa\x81\xbaE\xa0\xede\x95\x9c(\xd1\xb0\xee\xed\xab0\xda\x87\xdb\xef \xe4^YSP\\^\x8e\x05\xa0\x85(\x8d\xdb\xef\xb8\xf7/t\xcf\x8esMyP\xda\x8b\x8d\xfc\x8d\xde\xe9G\x9e\xb8\xf2p\x02\x17y\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x86\xebz>@\xb6\r\xcdh\xea\t_\xab\xb1\x97\x9a\xb7\xbb\vC\xd0#\x94\v\xd7\f\x10!\x91\x1c\x00\x7f\x92\xa1`\xc5\x9a\x82\xc5\xa1\ndG\x92\x1aO\xb1\xd0\xa14>W\xb5N\xbe{Hv\xf9\xac\xcd\xb5U\xbdR~n\f\x18s\x06\x84\xba\x1a/\x01\xb1\x12^\x82/L\x19\xd0s!\"\xbb\xd0\xad\xdd\xe7Q\x80S_\xa64\x92m$o\xfc\x96\xd6\xb4?\x9a\xfcV\af', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 02:31:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1, 0x5, "1ac5396bd54668a35f3dd79f8e2da3c345503d"}) 02:31:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) dup2(r1, r0) 02:31:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) 02:31:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe277b57560e1494b) 02:31:29 executing program 2: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 02:31:29 executing program 5: r0 = memfd_create(&(0x7f0000000600)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xe5\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\x95\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O\x88\x8a_\vLM\xc3\"\xb9\x95\xbd\vr\x8f\xcf\xc9q_s\xca\xd6\xb1\x14>SJ\xfeg\xa3\x98K\xc2\xe2\x94B#uk=\x92\xbf\xec\x9bn\x82\xb1=\x90f\xbc\xbf\x90\xda\xf5u\xd1\xffo{?\xa9\xediK\xd4\x1ee\x01\x03\xd5\x16\xf5\xbeW\x8f\xe8\x1e\xef\xfdCn\x8d{n\x17\xad\x00\x00\x00\x00\xb5\xc2 \x01J\x88\xe3\xb2\xf0\x82\x89p{\xd0\xe1O\xael+we\xe6M\xc8$\xf8s\xe6\x84\xb9A\xa0\xf4\xa8k\ru5[>mKv\xc5\x80Lz\x1fqv%z\x90W\x02T\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x89\xb9I\x95\x00\x00\xeb\xbe\xaf\xb7@\xd4\x97S\xa9*\xdaE\x9a\xcfw\xbd\x1f\xf71}J\x911;\xf2\x12\x12\xe5\x9e=D\nt{\x1d\x8f\xcf\x03.\xc0\x97{\x90A\xfd\xfb\xbd\x8f\xbb\xee\xebT\x1e8\xd8\xe6\x97\xbe\xdd\xd4\xa8\x9c\xb4\xde\x91\x8b\xc5\v\xbc/\xcb\x11C8\xf8\x83\x14\x15\xf8;\xf6\x1d\xff\xdb\xf5\x04\xd0(\x04-\xbb\xe7\xd4\xcf\x92\xb3\xffk\x96\xf6\x80\x94\xc9\x85\x8f\x92n_\x03Q<\xb7\xec\"oh\xca\xe7.\xb2\'\xaf\x0e\x97\xb3L0\xd3\xe1\x9c,.\xd8\xfa\xa6\xca\xc7N\xdaYi\xb1RI\\\xceJ}F\xfe\x97\xb8\xaen\xf6\xa6d\x90\xd58\x01ic\xad\xe1\xa1\x00_X\xa2s\x01\xf2$\\\x8cZ$\xdf\x04\x9cxD_\tx\xd8\x89%v\x12\xecp\xad\x12\f9\xca\xfd\xbb}v\x17W\xda2\x96x4\xdf\xa5-\xf4\x9bP\x9fN^F\xae\x9d`\xd9\x00\xaac\x80L\x17\x11m\xf46\x9d\xc7\x12\x03TXR\xa3\xcb\x0f\xd7+w<\xe1W\x06\xf6\x17\x1cF:_\xf6\xe4t\xb2\x7f9\xc1\xf5\x8c/\xcd\xe26k\xf4Ou\xe0\xc4\x97\xcf%\x98\xe3\x94@?Jc\xb9~\xbc=\xaa\x80\x96\xe4UY\x8aS\xfdyc\x91\xe5z\x9e\xd3\x0e\x80\x00\x00\x00\x00\x00\x00\x00g\xf5\x1a\xa2\xec\x03+T,\x84\xae\xad+1#\xe7_Y\xf3)\xb9\xd4:#??\xd5]\'\x1f]C\x19\xc9\x1d\r~\xfd\x95\xf9\v&\xc6B\xab\x00A\x16\x1f\xa7\xca \x03\x1a\xb8\xa4\x99\xb4\x1aNK\xec\xef\xde\x1fi\xc3\xf0\xedk\x03\x99%\xef\xc1vy\xf6\xb3\xf9(\xdd;\xefH\xd9G\xef\x8d\x9e\x9c\xd8t\x18U<\x16\x1a\xe8\xfc\n\x98\x15I\x82\xbd\xc5\xc5.\x96)\xae\xe7[\xf5\xce\'\xe9\xb4\x01P{\xad\x87c\x9d\xd1F\x8fU\xf8vo\xad\xc4\xf6;\xf2\x91\x10\xaf\xc8YK\xfb\xe6!&\x1c}\xf0W\xc0\x91\x97D\x8a\xbe\xa4%\x82\x92\xfa\x81\xbaE\xa0\xede\x95\x9c(\xd1\xb0\xee\xed\xab0\xda\x87\xdb\xef \xe4^YSP\\^\x8e\x05\xa0\x85(\x8d\xdb\xef\xb8\xf7/t\xcf\x8esMyP\xda\x8b\x8d\xfc\x8d\xde\xe9G\x9e\xb8\xf2p\x02\x17y\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x86\xebz>@\xb6\r\xcdh\xea\t_\xab\xb1\x97\x9a\xb7\xbb\vC\xd0#\x94\v\xd7\f\x10!\x91\x1c\x00\x7f\x92\xa1`\xc5\x9a\x82\xc5\xa1\ndG\x92\x1aO\xb1\xd0\xa14>W\xb5N\xbe{Hv\xf9\xac\xcd\xb5U\xbdR~n\f\x18s\x06\x84\xba\x1a/\x01\xb1\x12^\x82/L\x19\xd0s!\"\xbb\xd0\xad\xdd\xe7Q\x80S_\xa64\x92m$o\xfc\x96\xd6\xb4?\x9a\xfcV\af', 0x5) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 02:31:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1, 0x5, "1ac5396bd54668a35f3dd79f8e2da3c345503d"}) 02:31:30 executing program 4: r0 = fork() rt_sigqueueinfo(r0, 0xd, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) waitid(0x1, r0, &(0x7f0000000200), 0x4, &(0x7f0000000100)) 02:31:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0) 02:31:30 executing program 0: perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x846}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:31:30 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') setns(r0, 0x0) 02:31:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:31:30 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) pipe(0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) 02:31:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0) 02:31:30 executing program 2: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 02:31:30 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff, 0x0, 0x0) 02:31:30 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) pipe(0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) 02:31:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 02:31:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 02:31:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0) 02:31:30 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) pipe(0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) 02:31:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 02:31:30 executing program 2: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 02:31:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) 02:31:30 executing program 2: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 02:31:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0) 02:31:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 02:31:31 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1698}}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000001340)="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", 0x425, 0x41, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 02:31:31 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) pipe(0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) 02:31:31 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 02:31:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 02:31:31 executing program 2: r0 = epoll_create1(0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 02:31:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000340)=0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) 02:31:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x25}}], 0x18}}], 0x1, 0x0) 02:31:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r0, r1) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x4140) 02:31:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2tp={0x2, 0x0, @multicast1}, @ethernet, 0x1ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='ip6gretap0\x00'}) 02:31:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000250003"], 0x14}}, 0x0) 02:31:31 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @link_local, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @remote}}}}, 0x0) 02:31:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000100)={'macvlan1\x00', @ifru_ivalue}) 02:31:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab3d, 0x0, 0x0, 0x0) 02:31:32 executing program 3: syz_emit_ethernet(0xe81, &(0x7f0000000040)={@multicast, @empty, @val={@void}, {@llc_tr={0x11, {@llc={0x0, 0x0, "99", "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"}}}}}, 0x0) 02:31:32 executing program 5: r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) 02:31:32 executing program 4: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc3400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 02:31:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003e00)=ANY=[@ANYBLOB="40160000070a01"], 0x1640}}, 0x0) 02:31:32 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x6}) 02:31:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 02:31:32 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0xe6, 0x0, 0x0) 02:31:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) [ 122.270748][T10248] netlink: 5676 bytes leftover after parsing attributes in process `syz-executor.2'. 02:31:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) [ 122.336405][T10248] netlink: 5676 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.350561][T10252] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:31:32 executing program 2: syz_emit_ethernet(0x30, &(0x7f0000000080)={@link_local, @empty, @val={@void}, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@current, @random="6a6c8fb0d511"}, {@broadcast, @broadcast}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @val={@void, {0x8100, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev, @private0, @empty, @mcast1}}}}, 0x0) 02:31:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0505609, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dacb2af1"}, 0x0, 0x0, @planes=0x0}) 02:31:32 executing program 1: openat$vcsu(0xffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0xa0343, 0x0) 02:31:32 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0505609, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dacb2af1"}, 0x0, 0x0, @planes=0x0}) 02:31:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) 02:31:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001000)=""/14) 02:31:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 02:31:32 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/76) 02:31:32 executing program 1: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 02:31:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) 02:31:33 executing program 0: r0 = socket(0x18, 0x2, 0x0) getsockname$inet6(r0, 0x0, 0x0) 02:31:33 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)="9c", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100007e00) 02:31:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001000)=""/14) 02:31:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 02:31:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 02:31:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) 02:31:33 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x145004) 02:31:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 123.046965][T10300] loop0: detected capacity change from 0 to 132104 [ 123.077413][T10308] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 02:31:33 executing program 4: setrlimit(0x8, &(0x7f00000000c0)={0x0, 0x100000}) 02:31:33 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 02:31:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = getpid() fcntl$setown(r0, 0x6, r1) fcntl$setown(r0, 0x6, 0x0) 02:31:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:33 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) [ 123.290000][T10315] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:34 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)="9c", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100007e00) 02:31:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) 02:31:34 executing program 4: r0 = semget(0x1, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0x3, 0x0) 02:31:34 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x10004) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x1) 02:31:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000040)=0x10) 02:31:34 executing program 5: socket$inet6(0x18, 0x3, 0x0) 02:31:34 executing program 0: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000000)=""/212) 02:31:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) [ 123.581754][T10326] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:34 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) sendto(r0, 0x0, 0x200000, 0x0, &(0x7f0000000200)=@in6={0x18, 0x1}, 0xc) [ 124.087388][T10341] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A [ 124.230441][T10346] loop0: detected capacity change from 0 to 132104 02:31:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 124.346431][T10349] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 02:31:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 02:31:35 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000280)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11\x00'/140, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)="9c", 0x1}], 0x1, 0x4081002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100007e00) 02:31:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="c1308b89b3fcca1a1881ade16622435c043ebfc12660a4ca3c0747f575e7282ae59b9fc80c626c9107cf081cfc303bbea10d6fc1d4ae8ecb77c33407f42f2cd39e0aff44988588eb7a25f1b530dc0513484dedc20d6eef17f4bbb3", 0x5b}, {&(0x7f0000000140)="800991fc7c25c53698eb8fea8579fe0fcca8eb2de49a1a5ac8d377f873d7e7430fa3a5a9d8ca2fdb32aa56d3adcb90562abbcce1bd19", 0x36}], 0x2}, 0x408) 02:31:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 02:31:35 executing program 2: setrlimit(0x0, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000000040)) 02:31:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:35 executing program 4: open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 124.641547][T10362] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:35 executing program 2: setrlimit(0x0, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000000040)) 02:31:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) fcntl$getflags(r0, 0x3) [ 125.486909][T10382] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A [ 125.496017][T10383] loop0: detected capacity change from 0 to 132104 [ 125.597639][T10386] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 02:31:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) 02:31:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) 02:31:36 executing program 2: setrlimit(0x0, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000000040)) 02:31:37 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x101840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 02:31:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:37 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800001, 0x12, r0, 0x0) 02:31:37 executing program 4: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x8, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:31:37 executing program 2: setrlimit(0x0, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000000040)) 02:31:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000200)) [ 125.948644][T10396] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:37 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80247008, &(0x7f0000000100)) [ 127.102160][T10418] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A [ 127.117394][ C1] hrtimer: interrupt took 50726 ns 02:31:37 executing program 3: r0 = getpid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000080), 0x0) 02:31:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0xec4}}, 0x0) 02:31:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 02:31:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 127.506493][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 02:31:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x160, 0x0, 0x160, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "cb6f"}}, @common=@ah={{0x30, 'ah\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 02:31:37 executing program 4: syz_emit_ethernet(0x105, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@empty, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ef7d8e", 0x9c, 0x11, 0x0, @local, @loopback, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f1cc455f7b75f8a17d2c8e8d618e1e8b1837fd596588058be2ff307041fa864d", "43fbe48d9b5f85ff90876dd5400cdf0cb34d823a67903189a1c7ddd42cefb5cb275774c8cf6a6bbf92b4fc012782e269", "8df695c169776704a2f760d269670a14aecb95cd7be617856302320e", {"8b864aa35f6a8fb55e52e14a3aeed66a", "8cc1c0c317c3b69753aa7e3fa4ea966f"}}}}}}}}, 0x0) 02:31:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000004c0)={[{@norecovery='norecovery'}]}) 02:31:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) [ 127.823476][T10451] x_tables: duplicate underflow at hook 2 02:31:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}, 0x9}, 0x1c, 0x0}, 0x0) [ 127.887374][T10454] XFS (loop3): no-recovery mounts must be read-only. 02:31:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000003c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "e9e2ac3fb11e1b34"}}, 0x48}}, 0x0) [ 128.081729][T10454] XFS (loop3): no-recovery mounts must be read-only. 02:31:38 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)) 02:31:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030009009e40f086dd1fffffe100000900632f77fbac141412e4000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42459416a2e10c91196b1fd38f20b33", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffd4e, 0x3f, &(0x7f00000003c0)="72f96c45dbbfc718cb63c344dc932c35b23ac7a55a84b29e1150c8c6d937a55799784a2898bcba36e772a1"}, 0x28) [ 128.297208][T10477] fs-verity: sha512 using implementation "sha512-avx2" 02:31:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:38 executing program 4: syz_open_dev$mouse(&(0x7f0000002bc0)='/dev/input/mouse#\x00', 0x0, 0x0) 02:31:38 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)) 02:31:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000003c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "e9e2ac3fb11e1b34"}}, 0x48}}, 0x0) 02:31:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000008030000760000343200000000002790950000b4e4135584583c431deb4bab8e5eff0300000067f3b0d342624499787c8a6197d433bbf98399722daa1c1893d0db54920f74415fa26b09fae3f926483ea9ed245ecaf25eb7915921eb7ebe228808e545211544"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)=0x1000000000039) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000100000000000600000095501b6960278964540dc50018000000", @ANYRES32=r4, @ANYBLOB="0000000000000000ca73500010000000b5b18000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x2}, 0x10, 0x0, r0}, 0x78) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000d80)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1d}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000380)='FROZEN\x00', 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x19, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, [@generic={0x2, 0x0, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @ldst={0x3, 0x3, 0x1, 0x2, 0x3, 0x0, 0xfffffffffffffffc}, @exit, @map_val, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000005c0)='GPL\x00', 0x77a, 0xe4, &(0x7f00000008c0)=""/228, 0x41100, 0xf, [], 0x0, 0x1, r2, 0x8, &(0x7f0000002700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002740)={0x1, 0xe, 0x1f, 0x7}, 0x10, 0x0, r2}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:31:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 128.542152][T10487] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 02:31:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000000), 0x54) 02:31:38 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000003c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "e9e2ac3fb11e1b34"}}, 0x48}}, 0x0) 02:31:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0xfffffffd}, 0x40) 02:31:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:39 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 02:31:39 executing program 4: socketpair(0x68c3d0dd2ce964ee, 0x0, 0x0, &(0x7f0000000680)) 02:31:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000008030000760000343200000000002790950000b4e4135584583c431deb4bab8e5eff0300000067f3b0d342624499787c8a6197d433bbf98399722daa1c1893d0db54920f74415fa26b09fae3f926483ea9ed245ecaf25eb7915921eb7ebe228808e545211544"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)=0x1000000000039) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000100000000000600000095501b6960278964540dc50018000000", @ANYRES32=r4, @ANYBLOB="0000000000000000ca73500010000000b5b18000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x2}, 0x10, 0x0, r0}, 0x78) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000d80)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1d}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000380)='FROZEN\x00', 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x19, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, [@generic={0x2, 0x0, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @ldst={0x3, 0x3, 0x1, 0x2, 0x3, 0x0, 0xfffffffffffffffc}, @exit, @map_val, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000005c0)='GPL\x00', 0x77a, 0xe4, &(0x7f00000008c0)=""/228, 0x41100, 0xf, [], 0x0, 0x1, r2, 0x8, &(0x7f0000002700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002740)={0x1, 0xe, 0x1f, 0x7}, 0x10, 0x0, r2}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 02:31:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:39 executing program 4: r0 = socket$unix(0x2, 0xa, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 02:31:39 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 02:31:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, '!EH'}) 02:31:40 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) 02:31:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:40 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) [ 129.024427][T10518] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000500)=0x10) 02:31:40 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) 02:31:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 129.753119][T10550] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A 02:31:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x102) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r1, r2], 0x3) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000500)={0x0, 0x8, @start={0x0, 0x1, "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", "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"}, [0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xe000000, 0xf281, 0x6, 0x101, 0x8279, 0x0, 0x8c4a, 0xb622, 0x40, 0x80, 0x3, 0xc0, 0x0, 0x1, 0x5, 0x5, 0x0, 0xfff, 0x7, 0x1000, 0x0, 0x0, 0x101, 0x68fd, 0x100000000, 0x8001, 0x71e, 0x34, 0xff, 0x80000000, 0x401, 0x7ff, 0x6, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffc00, 0x8d0a, 0xe16, 0x1000, 0x6, 0x100000001, 0x8, 0x8, 0xfffffffffffffffe, 0x7, 0x81, 0x1, 0x8000, 0xffffffff, 0x5, 0x2, 0x3f, 0x8, 0x1, 0x3ff, 0x3]}) r3 = io_uring_setup(0x5c0a, &(0x7f0000000f40)={0x0, 0x0, 0x2, 0x0, 0x339, 0x0, r1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000fc0)={"3c1e322c55a20292190cdd1959b6f885", 0x0, 0x0, {0x3}, {0x1119, 0x7}, 0x6, [0x87d8, 0x80000000, 0x7fff, 0xff, 0x6, 0x4, 0x7, 0x10001, 0xfb, 0xff, 0x7, 0x0, 0xfffffffffffff800, 0x48b, 0x8]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001140)={{r3}, r4, 0x1a, @inherit={0x60, &(0x7f00000010c0)={0x1, 0x3, 0x3, 0x3, {0x0, 0x0, 0x1f, 0x40, 0x8001}, [0xedc7, 0x4, 0x1]}}, @subvolid=0x4}) io_getevents(0x0, 0x5, 0x5, &(0x7f00000021c0)=[{}, {}, {}, {}, {}], &(0x7f0000002280)={0x0, 0x3938700}) 02:31:41 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) 02:31:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 02:31:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 02:31:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) 02:31:41 executing program 2: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) 02:31:41 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000001a40)) [ 130.537407][T10572] ptrace attach of "/root/syz-executor.1"[8416] was attempted by "$H HU H9\x0c Ml$HU IT$L$ I9i\x0c ID$HIHH$ HHIHH EH2\x09ID$@\x07\x0c M\x0b H\x0b Ht$Hw\x0b D€ I HH@ HL$ H9 HU I9M\x0b M$IT$H$ MI=\x07 HU H9\x0b IT$ID$H$ H\x0b H$ hq5E2\x09= 1HD$ R=:2\x09 %=22\x09 HD$ It!LH5\x0a H=\x0a 1ȉ\x0dfHD$H\x09 L$ H L$ L$  H)H@ 1HH׉D$0$ D$0$ $ HD$`I$HD$(  IHè I\x0a IiǨ { D|$4HkH\x5c$(HD$@uC1@B D{H޿ C C   < =0\x09 wLAd   L`R \x22)~ 8\x0b  2 ; A\x0c H$ HHL\x22? uL \x0dHcD$4L$ L$ Hi A [ 131.234612][T10596] ================================================================== [ 131.330772][T10596] BUG: KASAN: use-after-free in __mutex_unlock_slowpath+0x8e/0x610 [ 131.339872][T10596] Read of size 8 at addr ffff88802de74808 by task iou-sqp-10587/10596 [ 131.348046][T10596] [ 131.350392][T10596] CPU: 1 PID: 10596 Comm: iou-sqp-10587 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 131.360299][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.370633][T10596] Call Trace: [ 131.373932][T10596] dump_stack+0xfa/0x151 [ 131.378203][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.383779][T10596] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 131.390842][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.396530][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.402112][T10596] kasan_report.cold+0x7c/0xd8 [ 131.406919][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.412500][T10596] kasan_check_range+0x13d/0x180 [ 131.417465][T10596] __mutex_unlock_slowpath+0x8e/0x610 [ 131.422864][T10596] ? preempt_schedule_common+0x59/0xc0 [ 131.428352][T10596] ? wait_for_completion_io+0x270/0x270 02:31:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) [ 131.433932][T10596] io_sq_thread+0x1292/0x1a50 [ 131.438646][T10596] ? io_submit_sqes+0x6320/0x6320 [ 131.443696][T10596] ? lock_release+0x3bb/0x710 [ 131.448391][T10596] ? ret_from_fork+0x8/0x30 [ 131.452923][T10596] ? finish_wait+0x260/0x260 [ 131.457535][T10596] ? rwlock_bug.part.0+0x90/0x90 [ 131.462562][T10596] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.467781][T10596] ? io_submit_sqes+0x6320/0x6320 [ 131.472827][T10596] ret_from_fork+0x1f/0x30 [ 131.477274][T10596] [ 131.479600][T10596] Allocated by task 10587: [ 131.484011][T10596] kasan_save_stack+0x1b/0x40 [ 131.488886][T10596] __kasan_kmalloc+0x99/0xc0 [ 131.494151][T10596] io_uring_setup+0x1621/0x2950 [ 131.499218][T10596] do_syscall_64+0x2d/0x70 [ 131.503654][T10596] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.509564][T10596] [ 131.511891][T10596] Freed by task 10587: [ 131.515960][T10596] kasan_save_stack+0x1b/0x40 [ 131.520650][T10596] kasan_set_track+0x1c/0x30 [ 131.525252][T10596] kasan_set_free_info+0x20/0x30 [ 131.530201][T10596] __kasan_slab_free+0xf5/0x130 [ 131.535077][T10596] slab_free_freelist_hook+0x72/0x1b0 [ 131.540467][T10596] kfree+0xe5/0x7b0 [ 131.544283][T10596] io_sq_thread_finish+0x3af/0x480 [ 131.549408][T10596] io_uring_setup+0x228f/0x2950 [ 131.554273][T10596] do_syscall_64+0x2d/0x70 [ 131.558970][T10596] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 131.564884][T10596] [ 131.567210][T10596] The buggy address belongs to the object at ffff88802de74800 [ 131.567210][T10596] which belongs to the cache kmalloc-1k of size 1024 [ 131.581280][T10596] The buggy address is located 8 bytes inside of [ 131.581280][T10596] 1024-byte region [ffff88802de74800, ffff88802de74c00) [ 131.594477][T10596] The buggy address belongs to the page: [ 131.600457][T10596] page:000000005d265e28 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2de70 [ 131.610622][T10596] head:000000005d265e28 order:3 compound_mapcount:0 compound_pincount:0 [ 131.619045][T10596] flags: 0xfff00000010200(slab|head) [ 131.624355][T10596] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888010841dc0 [ 131.632952][T10596] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 131.641539][T10596] page dumped because: kasan: bad access detected [ 131.647959][T10596] [ 131.650721][T10596] Memory state around the buggy address: [ 131.656357][T10596] ffff88802de74700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.664511][T10596] ffff88802de74780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.672585][T10596] >ffff88802de74800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.680648][T10596] ^ 02:31:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) [ 131.684985][T10596] ffff88802de74880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.693062][T10596] ffff88802de74900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.701127][T10596] ================================================================== [ 131.709192][T10596] Disabling lock debugging due to kernel taint 02:31:42 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 02:31:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) [ 131.785416][ T36] Bluetooth: hci0: command 0x0401 tx timeout [ 131.808196][T10596] Kernel panic - not syncing: panic_on_warn set ... [ 131.814811][T10596] CPU: 1 PID: 10596 Comm: iou-sqp-10587 Tainted: G B 5.12.0-rc1-next-20210304-syzkaller #0 [ 131.826097][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.836154][T10596] Call Trace: [ 131.839438][T10596] dump_stack+0xfa/0x151 [ 131.843696][T10596] panic+0x306/0x73d [ 131.847813][T10596] ? __warn_printk+0xf3/0xf3 [ 131.852419][T10596] ? preempt_schedule_common+0x59/0xc0 [ 131.857905][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.863473][T10596] ? preempt_schedule_thunk+0x16/0x18 [ 131.868947][T10596] ? trace_hardirqs_on+0x38/0x1c0 [ 131.873987][T10596] ? trace_hardirqs_on+0x51/0x1c0 [ 131.879026][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.884579][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.890137][T10596] end_report.cold+0x5a/0x5a [ 131.894746][T10596] kasan_report.cold+0x6a/0xd8 [ 131.899527][T10596] ? __mutex_unlock_slowpath+0x8e/0x610 [ 131.905087][T10596] kasan_check_range+0x13d/0x180 [ 131.910037][T10596] __mutex_unlock_slowpath+0x8e/0x610 [ 131.915425][T10596] ? preempt_schedule_common+0x59/0xc0 [ 131.920895][T10596] ? wait_for_completion_io+0x270/0x270 [ 131.926457][T10596] io_sq_thread+0x1292/0x1a50 [ 131.931149][T10596] ? io_submit_sqes+0x6320/0x6320 [ 131.936184][T10596] ? lock_release+0x3bb/0x710 [ 131.940872][T10596] ? ret_from_fork+0x8/0x30 [ 131.945385][T10596] ? finish_wait+0x260/0x260 [ 131.949978][T10596] ? rwlock_bug.part.0+0x90/0x90 [ 131.954925][T10596] ? _raw_spin_unlock_irq+0x1f/0x40 [ 131.960130][T10596] ? io_submit_sqes+0x6320/0x6320 [ 131.965168][T10596] ret_from_fork+0x1f/0x30 [ 131.970225][T10596] Kernel Offset: disabled [ 131.974577][T10596] Rebooting in 86400 seconds..