Warning: Permanently added '[localhost]:37284' (ECDSA) to the list of known hosts. 2020/12/13 22:26:31 fuzzer started 2020/12/13 22:26:32 dialing manager at 10.0.2.10:36159 2020/12/13 22:26:32 syscalls: 3452 2020/12/13 22:26:32 code coverage: enabled 2020/12/13 22:26:32 comparison tracing: enabled 2020/12/13 22:26:32 extra coverage: enabled 2020/12/13 22:26:32 setuid sandbox: enabled 2020/12/13 22:26:32 namespace sandbox: enabled 2020/12/13 22:26:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/13 22:26:32 fault injection: enabled 2020/12/13 22:26:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/13 22:26:32 net packet injection: enabled 2020/12/13 22:26:32 net device setup: enabled 2020/12/13 22:26:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/13 22:26:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/13 22:26:32 USB emulation: enabled 2020/12/13 22:26:32 hci packet injection: enabled 2020/12/13 22:26:32 wifi device emulation: enabled 22:28:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006517ffff"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:28:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x19, 0x0, 0x0) 22:28:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@func]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000006640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x2f, 0xc1, 0xe1, 0x100, 0x6b, @private2, @ipv4={[], [], @remote}, 0x7, 0x80, 0x1ff, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) accept4(r1, &(0x7f0000000640)=@l2tp, &(0x7f0000000100)=0x80, 0x80800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "811ca37e6bd5ddc33802b4b9f668a81c7b25571c4a5915ae4c5acbfff1aa44e1e209f7bb2f30b19b20b671d4a271b3030b23d1ae87bc3aefd1894936f68f2d7d63d82c738b69d34659e3538d2438876850e445d855b35c48d394afe318fa96d9b9d56ecf852a5882bea33096bec66665494e8f54fb1b80b6bb5913de5cbeb680ef87fd1f4b28e88b423feafc1399cc8926e9dc03f1ef65942dc39f03068e4aef0114a0db872b46a65daae407ce91cd8b0a7190375d30cd9f56e852108f3b7d043969d0e44bfde530f7982d14c57c6b5aa8361919ed4b816746715a68dd798cfbfe2c8a54"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x29, 0x6, 0x0, 0x0, 0x0, @remote, @private2, 0x7, 0x700, 0x7}}) 22:28:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f00000000c0)=""/249, 0x0, 0x0, [0x70], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syzkaller login: [ 252.005882][ T9196] IPVS: ftp: loaded support on port[0] = 21 [ 252.113897][ T9196] chnl_net:caif_netlink_parms(): no params data found [ 252.117420][ T9198] IPVS: ftp: loaded support on port[0] = 21 [ 252.183098][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.199947][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.219186][ T9196] device bridge_slave_0 entered promiscuous mode [ 252.242460][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.259648][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.277920][ T9196] device bridge_slave_1 entered promiscuous mode [ 252.309034][ T9196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.334960][ T9196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.375524][ T9196] team0: Port device team_slave_0 added [ 252.396644][ T9200] IPVS: ftp: loaded support on port[0] = 21 [ 252.398186][ T9196] team0: Port device team_slave_1 added [ 252.460949][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.479870][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.569186][ T9196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.606266][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.625158][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.693847][ T9196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.723177][ T9198] chnl_net:caif_netlink_parms(): no params data found [ 252.757463][ T9202] IPVS: ftp: loaded support on port[0] = 21 [ 252.781013][ T9196] device hsr_slave_0 entered promiscuous mode [ 252.799442][ T9196] device hsr_slave_1 entered promiscuous mode [ 252.889907][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.907189][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.925577][ T9198] device bridge_slave_0 entered promiscuous mode [ 252.945663][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.964606][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.983023][ T9198] device bridge_slave_1 entered promiscuous mode [ 253.040612][ T9200] chnl_net:caif_netlink_parms(): no params data found [ 253.079867][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.122314][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.164143][ T9198] team0: Port device team_slave_0 added [ 253.196220][ T9198] team0: Port device team_slave_1 added [ 253.236758][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.254970][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.317014][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.365408][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.383886][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.404340][ T9200] device bridge_slave_0 entered promiscuous mode [ 253.422072][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.440711][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.505943][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.568379][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.608693][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.641685][ T9200] device bridge_slave_1 entered promiscuous mode [ 253.669425][ T9198] device hsr_slave_0 entered promiscuous mode [ 253.685732][ T9198] device hsr_slave_1 entered promiscuous mode [ 253.705450][ T9198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.725445][ T9198] Cannot create hsr debugfs directory [ 253.761943][ T9202] chnl_net:caif_netlink_parms(): no params data found [ 253.799605][ T9200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.835031][ T9200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.892500][ T9200] team0: Port device team_slave_0 added [ 253.912674][ T9200] team0: Port device team_slave_1 added [ 253.966672][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.989376][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.994199][ T68] Bluetooth: hci0: command 0x0409 tx timeout [ 254.057658][ T9200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.102894][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.126117][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.203657][ T3342] Bluetooth: hci1: command 0x0409 tx timeout [ 254.213577][ T9200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.292207][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.319617][ T3342] Bluetooth: hci2: command 0x0409 tx timeout [ 254.322954][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.361579][ T9202] device bridge_slave_0 entered promiscuous mode [ 254.381195][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.399204][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.416008][ T9202] device bridge_slave_1 entered promiscuous mode [ 254.439386][ T9200] device hsr_slave_0 entered promiscuous mode [ 254.454897][ T9200] device hsr_slave_1 entered promiscuous mode [ 254.470984][ T9200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.490085][ T9200] Cannot create hsr debugfs directory [ 254.534340][ T9202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.553750][ T3080] Bluetooth: hci3: command 0x0409 tx timeout [ 254.570343][ T9202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.603025][ T9196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.626053][ T9202] team0: Port device team_slave_0 added [ 254.640104][ T9202] team0: Port device team_slave_1 added [ 254.652584][ T9196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.673708][ T9196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.707809][ T9196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.776500][ T9202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.793660][ T9202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.854354][ T9202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.887001][ T9202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.902798][ T9202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.962264][ T9202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.022314][ T9198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.056191][ T9198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.115252][ T9202] device hsr_slave_0 entered promiscuous mode [ 255.135114][ T9202] device hsr_slave_1 entered promiscuous mode [ 255.160317][ T9202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.188536][ T9202] Cannot create hsr debugfs directory [ 255.208376][ T9198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.245719][ T9198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.329307][ T9200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.358280][ T9200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.378169][ T9200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.409164][ T9200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.483025][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.536747][ T9196] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.557598][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.576683][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.604123][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.625729][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.646680][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.665318][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.688264][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.714371][ T9202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.734900][ T9202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.754632][ T9202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.774443][ T9202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.820019][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.840336][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.860390][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.878106][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.896724][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.920956][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.964074][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.991078][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.009443][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.028725][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.049218][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.068567][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.083750][ T3080] Bluetooth: hci0: command 0x041b tx timeout [ 256.088285][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.125450][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.149918][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.170813][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.192352][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.211639][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.239948][ T9200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.240044][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 256.260217][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.303783][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.327153][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.345042][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.367448][ T9200] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.393447][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 256.395407][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.431615][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.451921][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.470225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.489516][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.510853][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.531431][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.548684][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.568031][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.586847][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.621438][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.633515][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 256.641004][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.686900][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.712652][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.734754][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.753348][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.772531][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.796000][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.819114][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.843589][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.863037][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.884609][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.906783][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.931994][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.964677][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.986588][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.010423][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.033957][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.055309][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.078633][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.102867][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.126654][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.151222][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.179362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.212452][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.240604][ T9202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.263747][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.285622][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.317734][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.337467][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.358574][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.389640][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.410401][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.431257][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.450433][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.478815][ T9202] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.508262][ T9200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.527689][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.548173][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.568257][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.587918][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.606705][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.627002][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.646974][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.663664][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.680870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.701428][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.722254][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.740919][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.760199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.778435][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.800834][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.835820][ T9196] device veth0_vlan entered promiscuous mode [ 257.856009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.876212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.896042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.916483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.939988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.960442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.984435][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.007483][ T9196] device veth1_vlan entered promiscuous mode [ 258.028316][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.047819][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.066111][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.085308][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.104395][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.124235][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.144997][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.163807][ T3080] Bluetooth: hci0: command 0x040f tx timeout [ 258.192040][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.213954][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.235967][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.255817][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.273769][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.293974][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.317217][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.323884][ T3080] Bluetooth: hci1: command 0x040f tx timeout [ 258.354560][ T9198] device veth0_vlan entered promiscuous mode [ 258.375765][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.395267][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.414127][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.435693][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.456686][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.478317][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.483632][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 258.502590][ T9202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.542208][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.571856][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.592899][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.627421][ T9198] device veth1_vlan entered promiscuous mode [ 258.655361][ T9200] device veth0_vlan entered promiscuous mode [ 258.672798][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.695047][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.717383][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.723796][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 258.737697][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.774745][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.794589][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.818034][ T9196] device veth0_macvtap entered promiscuous mode [ 258.838646][ T9196] device veth1_macvtap entered promiscuous mode [ 258.859072][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.883563][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.909036][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.927859][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.960624][ T9200] device veth1_vlan entered promiscuous mode [ 258.980213][ T9202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.013791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.032663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.051079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.073661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.100364][ T9198] device veth0_macvtap entered promiscuous mode [ 259.121992][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.144435][ T9198] device veth1_macvtap entered promiscuous mode [ 259.162321][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.181195][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.199739][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.218850][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.249505][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.275375][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.299756][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.319758][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.338636][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.363100][ T9196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.384760][ T9196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.404925][ T9196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.427758][ T9196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.464233][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.483867][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.511581][ T9200] device veth0_macvtap entered promiscuous mode [ 259.531331][ T9198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.556338][ T9198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.580331][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.616478][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.634428][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.652846][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.675130][ T9198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.699579][ T9198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.724275][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.741021][ T9200] device veth1_macvtap entered promiscuous mode [ 259.760948][ T9202] device veth0_vlan entered promiscuous mode [ 259.776636][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.794318][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.810905][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.830233][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.848253][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.865686][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.886272][ T9198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.914631][ T9198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.934558][ T9198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.955493][ T9198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.989501][ T9202] device veth1_vlan entered promiscuous mode [ 260.040712][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.065024][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.088442][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.114719][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.142523][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.174407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.198852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.221895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.242045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.271431][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 260.276313][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.276348][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.347222][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.366158][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.393709][ T3080] Bluetooth: hci1: command 0x0419 tx timeout [ 260.398015][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.440506][ T9200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.468826][ T9200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.496660][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.520186][ T9200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.539891][ T9200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.557893][ T3080] Bluetooth: hci2: command 0x0419 tx timeout [ 260.572123][ T9200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.592340][ T9200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.616743][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.636099][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.670094][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.680948][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.692954][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.693797][ T9224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.693820][ T9224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.710117][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.784624][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.801619][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.811416][ T9233] Bluetooth: hci3: command 0x0419 tx timeout [ 260.823937][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.878756][ T9202] device veth0_macvtap entered promiscuous mode [ 260.908399][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.928676][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.948127][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.978793][ T9196] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 260.982189][ T9202] device veth1_macvtap entered promiscuous mode [ 261.029336][ T9224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.048908][ T9224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.061251][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.091879][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.115219][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.139730][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.161965][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.186397][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.216389][ T9202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.242658][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.260855][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.279704][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.300366][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.330376][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.372626][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.402012][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.444649][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.485564][ T9202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.525377][ T9202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.581863][ T9202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.632909][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.634322][ T9224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.659140][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.693303][ T9224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.737100][ T9202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.757688][ T9202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 22:28:35 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000001c0)={0x0, 0x0, "113c5a4a98719882654508eee0f14f2553d548d92213cc8d"}) [ 261.797503][ T9202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.821065][ T9202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.845987][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:28:35 executing program 1: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 22:28:35 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x5, "e2d34b139dbc85080bffc0a2bbb2080000000000000012dba00f51417c72d272"}) [ 261.976401][ T9224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 22:28:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) [ 261.991137][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.999361][ T9224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.018059][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.033946][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.066322][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:28:35 executing program 0: socket(0x11, 0x3, 0x300) 22:28:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 22:28:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000040)="8a", 0x1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x0, @empty}, 0x2000105c) 22:28:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000008c0)='cdg\x00', 0x4) 22:28:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@func]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000006640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x2f, 0xc1, 0xe1, 0x100, 0x6b, @private2, @ipv4={[], [], @remote}, 0x7, 0x80, 0x1ff, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) accept4(r1, &(0x7f0000000640)=@l2tp, &(0x7f0000000100)=0x80, 0x80800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "811ca37e6bd5ddc33802b4b9f668a81c7b25571c4a5915ae4c5acbfff1aa44e1e209f7bb2f30b19b20b671d4a271b3030b23d1ae87bc3aefd1894936f68f2d7d63d82c738b69d34659e3538d2438876850e445d855b35c48d394afe318fa96d9b9d56ecf852a5882bea33096bec66665494e8f54fb1b80b6bb5913de5cbeb680ef87fd1f4b28e88b423feafc1399cc8926e9dc03f1ef65942dc39f03068e4aef0114a0db872b46a65daae407ce91cd8b0a7190375d30cd9f56e852108f3b7d043969d0e44bfde530f7982d14c57c6b5aa8361919ed4b816746715a68dd798cfbfe2c8a54"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x29, 0x6, 0x0, 0x0, 0x0, @remote, @private2, 0x7, 0x700, 0x7}}) 22:28:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 22:28:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 22:28:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}}, 0x0) 22:28:35 executing program 3: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x0, 0x12f}, 0x20) 22:28:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x36, 0x0, 0x0) 22:28:35 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:28:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{}, 'port1\x00'}) 22:28:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@func]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000006640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x2f, 0xc1, 0xe1, 0x100, 0x6b, @private2, @ipv4={[], [], @remote}, 0x7, 0x80, 0x1ff, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) accept4(r1, &(0x7f0000000640)=@l2tp, &(0x7f0000000100)=0x80, 0x80800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "811ca37e6bd5ddc33802b4b9f668a81c7b25571c4a5915ae4c5acbfff1aa44e1e209f7bb2f30b19b20b671d4a271b3030b23d1ae87bc3aefd1894936f68f2d7d63d82c738b69d34659e3538d2438876850e445d855b35c48d394afe318fa96d9b9d56ecf852a5882bea33096bec66665494e8f54fb1b80b6bb5913de5cbeb680ef87fd1f4b28e88b423feafc1399cc8926e9dc03f1ef65942dc39f03068e4aef0114a0db872b46a65daae407ce91cd8b0a7190375d30cd9f56e852108f3b7d043969d0e44bfde530f7982d14c57c6b5aa8361919ed4b816746715a68dd798cfbfe2c8a54"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x29, 0x6, 0x0, 0x0, 0x0, @remote, @private2, 0x7, 0x700, 0x7}}) 22:28:35 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc008561b, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:35 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) 22:28:35 executing program 0: socketpair(0x25, 0x1, 0x8001, &(0x7f0000000040)) 22:28:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@func]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xe9, &(0x7f0000000300)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000006640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x2f, 0xc1, 0xe1, 0x100, 0x6b, @private2, @ipv4={[], [], @remote}, 0x7, 0x80, 0x1ff, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) accept4(r1, &(0x7f0000000640)=@l2tp, &(0x7f0000000100)=0x80, 0x80800) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}}, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "811ca37e6bd5ddc33802b4b9f668a81c7b25571c4a5915ae4c5acbfff1aa44e1e209f7bb2f30b19b20b671d4a271b3030b23d1ae87bc3aefd1894936f68f2d7d63d82c738b69d34659e3538d2438876850e445d855b35c48d394afe318fa96d9b9d56ecf852a5882bea33096bec66665494e8f54fb1b80b6bb5913de5cbeb680ef87fd1f4b28e88b423feafc1399cc8926e9dc03f1ef65942dc39f03068e4aef0114a0db872b46a65daae407ce91cd8b0a7190375d30cd9f56e852108f3b7d043969d0e44bfde530f7982d14c57c6b5aa8361919ed4b816746715a68dd798cfbfe2c8a54"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x29, 0x6, 0x0, 0x0, 0x0, @remote, @private2, 0x7, 0x700, 0x7}}) 22:28:35 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) 22:28:35 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfe, 0x0) 22:28:35 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 22:28:35 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) 22:28:35 executing program 0: syz_emit_ethernet(0x11, &(0x7f0000000040)={@local, @local, @void, {@x25}}, 0x0) 22:28:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 'client1\x00', 0x0, "6cc2a5a6b925687d", "c2f3295a59003d31a55026936824123b621b7a4e4564aa5561ba5a0ffe4b27b5"}) 22:28:36 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0xb5150c9490c5ce6d) 22:28:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) 22:28:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100), 0x4) 22:28:36 executing program 2: getitimer(0x2, &(0x7f0000000380)) 22:28:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000680)=""/165, 0x28, 0xa5, 0x1}, 0x20) 22:28:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d433e46f"}, 0x0, 0x0, @fd, 0x1}) 22:28:36 executing program 0: syz_emit_ethernet(0xa6, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x3}, @timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "8d1d"}]}, @ra={0x94, 0x4}]}}}}}}, 0x0) 22:28:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) 22:28:36 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x3, 0x97}, @ra={0x94, 0x4}]}}}}}}, 0x0) 22:28:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000100), 0x4) 22:28:36 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x1000000, 0x0, 0x0, [], 0x0}) 22:28:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 22:28:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 22:28:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000100)=0x1000, 0x4) 22:28:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa6b, 0x4) 22:28:36 executing program 3: setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0), 0xfffffffffffffd31) 22:28:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) 22:28:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}}) 22:28:36 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 22:28:36 executing program 2: pselect6(0x53, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 22:28:36 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0xc020660b, 0x0) 22:28:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x2, 0x2}) 22:28:37 executing program 1: r0 = socket(0xb, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x6, 0x3}, &(0x7f0000000080)=0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sequencer(r1, &(0x7f0000000100)=[@generic={0x84}, @e={0xff, 0x9, 0x1, 0x4, @SEQ_CONTROLLER, 0x1, 0x9, 0x1}], 0x9) sysfs$2(0x2, 0x80, &(0x7f0000000140)=""/72) unshare(0x40000000) 22:28:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x0, 0x12f}, 0x20) [ 263.858639][ T9412] IPVS: ftp: loaded support on port[0] = 21 22:28:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)) 22:28:37 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) 22:28:37 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 22:28:37 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x5450, 0x0) 22:28:37 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5f, &(0x7f0000001740)=ANY=[], 0x78}, 0x0) 22:28:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0305615, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:37 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0xa0200) 22:28:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)) 22:28:38 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) 22:28:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000040)) 22:28:38 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5f, &(0x7f0000001740)=ANY=[], 0x78}, 0x0) 22:28:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000200)) 22:28:38 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xb, 0x5, 0x8) pipe2(&(0x7f00000000c0), 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) sysfs$2(0x2, 0x0, 0x0) unshare(0x40000000) 22:28:38 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:38 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5f, &(0x7f0000001740)=ANY=[], 0x78}, 0x0) 22:28:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) 22:28:38 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044d76, 0x0) [ 264.853721][ T9462] IPVS: ftp: loaded support on port[0] = 21 22:28:38 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5f, &(0x7f0000001740)=ANY=[], 0x78}, 0x0) 22:28:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{}, 'port1\x00'}) 22:28:38 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:38 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xb, 0x5, 0x8) pipe2(&(0x7f00000000c0), 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) sysfs$2(0x2, 0x0, 0x0) unshare(0x40000000) 22:28:38 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8000000}) 22:28:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x24, 0x0, 0x0) 22:28:38 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc008561c, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) [ 265.040179][ T9489] IPVS: ftp: loaded support on port[0] = 21 22:28:38 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 22:28:38 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x0, 0x3, 0x0, "557f0ba75c9f12b6d108ac44ebb915d6ff33c6c93e489e0751bfc1673bd37b5b"}) 22:28:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETS2(r2, 0x4b31, &(0x7f0000000040)) 22:28:38 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 22:28:38 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xb, 0x5, 0x8) pipe2(&(0x7f00000000c0), 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) sysfs$2(0x2, 0x0, 0x0) unshare(0x40000000) 22:28:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000100), 0x4) 22:28:38 executing program 1: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 22:28:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0xffffffff, "e900a59773d7bf3627ccaa0ed02f087791e41569ba64db340f5876633f04ed4c"}) 22:28:38 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/141, 0x1000000, 0x8d, 0x1}, 0x20) [ 265.245951][ T9512] IPVS: ftp: loaded support on port[0] = 21 22:28:38 executing program 1: setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x4}, 0x8) 22:28:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x330f, 0x0) 22:28:38 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xb, 0x5, 0x8) pipe2(&(0x7f00000000c0), 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) sysfs$2(0x2, 0x0, 0x0) unshare(0x40000000) [ 265.405658][ T9527] sctp: [Deprecated]: syz-executor.1 (pid 9527) Use of struct sctp_assoc_value in delayed_ack socket option. 22:28:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x330f, 0x0) [ 265.405658][ T9527] Use struct sctp_sack_info instead [ 265.431706][ T9529] IPVS: ftp: loaded support on port[0] = 21 22:28:38 executing program 1: socket(0x0, 0x300, 0x0) 22:28:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x330f, 0x0) 22:28:38 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/141, 0x1000000, 0x8d, 0x1}, 0x20) 22:28:38 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@t={0x81, 0x1}, @v={0x93, 0x0, 0xa0}], 0x10) 22:28:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x330f, 0x0) 22:28:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3d77ef92"}}) 22:28:38 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xa, 0xffffffffffffffff, 0x4) 22:28:39 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000001780)="eb44", 0x2) 22:28:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4620, 0x0, @dev, 0x8}, 0x1c) 22:28:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x77, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) 22:28:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/141, 0x1000000, 0x8d, 0x1}, 0x20) 22:28:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/141, 0x12f, 0x8d, 0x1}, 0x20) 22:28:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 22:28:39 executing program 0: r0 = mq_open(&(0x7f0000000040)='{\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 22:28:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4620, 0x0, @dev, 0x8}, 0x1c) 22:28:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x400}, 0x1c) 22:28:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 22:28:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4620, 0x0, @dev, 0x8}, 0x1c) 22:28:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/141, 0x1000000, 0x8d, 0x1}, 0x20) 22:28:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 22:28:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4620, 0x0, @dev, 0x8}, 0x1c) 22:28:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 22:28:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 22:28:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000080)) 22:28:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0), 0x8) 22:28:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x40085618, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:39 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], &(0x7f0000000040)=""/159, 0x12f, 0x2a}, 0x75) 22:28:39 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, [], @p_u16=0x0}}) 22:28:39 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x3a1102, 0x0) 22:28:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x40085618, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100), 0x4) 22:28:39 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x80885659, 0x0) 22:28:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x40085618, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000700)) 22:28:40 executing program 3: syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x10, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 22:28:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0x40085618, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 22:28:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x20000010) 22:28:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x90) 22:28:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10) 22:28:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010102}}}, 0x90) 22:28:40 executing program 0: pipe2(0x0, 0x4000) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) unshare(0x40000000) 22:28:40 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3d77ef92"}}) 22:28:40 executing program 2: socket(0x1d, 0x0, 0x2d) [ 267.465639][ T9669] IPVS: ftp: loaded support on port[0] = 21 22:28:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x14, 0x0, 0x0) 22:28:40 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 22:28:40 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0xc0044dff, &(0x7f0000000080)) 22:28:40 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) 22:28:40 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0xc0044dff, &(0x7f0000000080)) [ 267.565972][ T9679] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0x0) 22:28:41 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0xc0044dff, &(0x7f0000000080)) 22:28:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x24}}, 0x0) 22:28:41 executing program 0: pipe2(0x0, 0x4000) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) unshare(0x40000000) 22:28:41 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0xc0044dff, &(0x7f0000000080)) 22:28:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x2, [], &(0x7f0000000040)}) 22:28:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000100)=0x4ff, 0x4) [ 267.742966][ T9701] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 2: socket(0x23, 0x0, 0x81) 22:28:41 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x5451, 0x0) 22:28:41 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x17d, "b4ef615292caf210324f360513f47e56e0d15c8c800a6b962892aeec03ba7397"}) 22:28:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000100)=0x1000, 0x4) 22:28:41 executing program 0: pipe2(0x0, 0x4000) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) unshare(0x40000000) 22:28:41 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 22:28:41 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x17d, "b4ef615292caf210324f360513f47e56e0d15c8c800a6b962892aeec03ba7397"}) 22:28:41 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0045878, 0x0) 22:28:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 22:28:41 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x17d, "b4ef615292caf210324f360513f47e56e0d15c8c800a6b962892aeec03ba7397"}) 22:28:41 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "084abbbe"}, 0x0, 0x0, @planes=0x0}) [ 268.001390][ T9735] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x17d, "b4ef615292caf210324f360513f47e56e0d15c8c800a6b962892aeec03ba7397"}) [ 268.070777][ T9739] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 22:28:41 executing program 2: mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 22:28:41 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) 22:28:41 executing program 0: pipe2(0x0, 0x4000) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) unshare(0x40000000) 22:28:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x8001, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3e8405ed"}}) [ 268.115128][ T9739] EXT4-fs error (device loop3): ext4_validate_block_bitmap:398: comm syz-executor.3: bg 0: block 2: invalid block bitmap [ 268.182319][ T9758] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 22:28:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 22:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) 22:28:41 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000840)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b9448fcf"}}) 22:28:41 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xb, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x6, 0x3}, &(0x7f0000000080)=0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sequencer(r1, &(0x7f0000000100)=[@l={0x92, 0x8, 0xd0, 0x1d, 0x6, 0x40, 0x5}, @generic={0x84}, @e={0xff, 0x9, 0x1, 0x4, @SEQ_CONTROLLER, 0x1, 0x9, 0x1}], 0x11) sysfs$2(0x2, 0x0, &(0x7f0000000140)=""/72) unshare(0x40000000) 22:28:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x7f}}) [ 268.373644][ T9777] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100), 0x4) 22:28:41 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x4020940d, &(0x7f0000000080)) [ 268.397829][ T9772] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 22:28:41 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x5}) [ 268.441336][ T9792] EXT4-fs error (device loop3): ext4_validate_block_bitmap:398: comm syz-executor.3: bg 0: block 2: invalid block bitmap [ 268.488912][ T9795] IPVS: ftp: loaded support on port[0] = 21 22:28:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 22:28:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) 22:28:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 22:28:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffda, 0x0, 0x0, 0x1, 0x7, &(0x7f00000000c0)='g'}) 22:28:41 executing program 1: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{@none}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0xffffffff, 0x7, 0x0, 'queue0\x00', 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='fsi_master_acf_cmd_rel_addr\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000380)={0x8, 0x1, 0xfff, {0x8, 0x9}, 0x401, 0xd06}) socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x3) 22:28:41 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xb, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x6, 0x3}, &(0x7f0000000080)=0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sequencer(r1, &(0x7f0000000100)=[@l={0x92, 0x8, 0xd0, 0x1d, 0x6, 0x40, 0x5}, @generic={0x84}, @e={0xff, 0x9, 0x1, 0x4, @SEQ_CONTROLLER, 0x1, 0x9, 0x1}], 0x11) sysfs$2(0x2, 0x0, &(0x7f0000000140)=""/72) unshare(0x40000000) [ 268.665291][ T9810] binder: 9808:9810 ioctl c0306201 20000040 returned -14 [ 268.679861][ T9809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 268.688633][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 22:28:42 executing program 0: socket(0xb, 0x0, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) [ 268.735391][ T9817] vhci_hcd: connection closed [ 268.741463][ T9821] IPVS: ftp: loaded support on port[0] = 21 [ 268.743759][ T9823] IPVS: ftp: loaded support on port[0] = 21 [ 268.748204][ T9224] vhci_hcd: stop threads [ 268.748391][ T9224] vhci_hcd: release socket [ 268.748469][ T9224] vhci_hcd: disconnect device 22:28:42 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xb, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x6, 0x3}, &(0x7f0000000080)=0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sequencer(r1, &(0x7f0000000100)=[@l={0x92, 0x8, 0xd0, 0x1d, 0x6, 0x40, 0x5}, @generic={0x84}, @e={0xff, 0x9, 0x1, 0x4, @SEQ_CONTROLLER, 0x1, 0x9, 0x1}], 0x11) sysfs$2(0x2, 0x0, &(0x7f0000000140)=""/72) unshare(0x40000000) [ 268.751638][ T9813] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 268.774258][ T9813] EXT4-fs error (device loop3): ext4_validate_block_bitmap:398: comm syz-executor.3: bg 0: block 2: invalid block bitmap [ 268.837457][ T9825] IPVS: ftp: loaded support on port[0] = 21 [ 268.870384][ T9828] IPVS: ftp: loaded support on port[0] = 21 22:28:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 22:28:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000240)="0cbd06328af0e1b6ee9d", 0xa) 22:28:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x1, 0x0, &(0x7f0000000100)="f9"}) 22:28:42 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xb, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x6, 0x3}, &(0x7f0000000080)=0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sequencer(r1, &(0x7f0000000100)=[@l={0x92, 0x8, 0xd0, 0x1d, 0x6, 0x40, 0x5}, @generic={0x84}, @e={0xff, 0x9, 0x1, 0x4, @SEQ_CONTROLLER, 0x1, 0x9, 0x1}], 0x11) sysfs$2(0x2, 0x0, &(0x7f0000000140)=""/72) unshare(0x40000000) [ 269.031893][ T9848] IPVS: ftp: loaded support on port[0] = 21 [ 269.054910][ T9850] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 269.109786][ T9850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:398: comm syz-executor.3: bg 0: block 2: invalid block bitmap [ 269.252276][ T9809] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(3) [ 269.261851][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 22:28:42 executing program 1: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{@none}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0xffffffff, 0x7, 0x0, 'queue0\x00', 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='fsi_master_acf_cmd_rel_addr\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000380)={0x8, 0x1, 0xfff, {0x8, 0x9}, 0x401, 0xd06}) socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x3) 22:28:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x1, 0x0, &(0x7f0000000100)="f9"}) 22:28:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000080)) 22:28:42 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 22:28:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x1, 0x0, &(0x7f0000000100)="f9"}) 22:28:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) [ 269.342965][ T9869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) 22:28:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfe, &(0x7f0000000080)) [ 269.343417][ T9869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.387827][ T9872] vhci_hcd: connection closed [ 269.388507][ T9224] vhci_hcd: stop threads [ 269.413957][ T9224] vhci_hcd: release socket [ 269.427883][ T9224] vhci_hcd: disconnect device 22:28:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfe, &(0x7f0000000080)) [ 269.573705][ T9841] usb 15-2: new high-speed USB device number 2 using vhci_hcd [ 269.595065][ T9859] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 269.611598][ T9] ================================================================== [ 269.620431][ T9] BUG: KASAN: null-ptr-deref in kthread_stop+0x90/0x720 [ 269.643698][ T9] Write of size 4 at addr 000000000000001c by task kworker/u16:0/9 [ 269.643698][ T9] [ 269.643698][ T9] CPU: 3 PID: 9 Comm: kworker/u16:0 Not tainted 5.10.0-rc7-syzkaller #0 [ 269.688917][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 269.713922][ T9] Workqueue: usbip_event event_handler [ 269.713922][ T9] Call Trace: [ 269.713922][ T9] dump_stack+0x107/0x163 [ 269.713922][ T9] ? kthread_stop+0x90/0x720 [ 269.713922][ T9] ? kthread_stop+0x90/0x720 [ 269.713922][ T9] kasan_report.cold+0x5/0x37 [ 269.789264][ T9] ? kthread_stop+0x90/0x720 [ 269.789264][ T9] check_memory_region+0x13d/0x180 [ 269.816132][ T9] kthread_stop+0x90/0x720 [ 269.816132][ T9] vhci_shutdown_connection+0x9d/0x340 [ 269.816132][ T9] ? event_handler+0x14c/0x4f0 [ 269.816132][ T9] ? kfree+0xdb/0x360 [ 269.816132][ T9] event_handler+0x1f0/0x4f0 [ 269.816132][ T9] process_one_work+0x933/0x15a0 [ 269.816132][ T9] ? lock_release+0x710/0x710 [ 269.816132][ T9] ? pwq_dec_nr_in_flight+0x320/0x320 [ 269.898605][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 269.918723][ T9] ? _raw_spin_lock_irq+0x41/0x50 [ 269.918723][ T9] worker_thread+0x64c/0x1120 [ 269.918723][ T9] ? process_one_work+0x15a0/0x15a0 [ 269.918723][ T9] kthread+0x3b1/0x4a0 [ 269.918723][ T9] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 269.918723][ T9] ret_from_fork+0x1f/0x30 [ 269.918723][ T9] ================================================================== [ 269.918723][ T9] Disabling lock debugging due to kernel taint 22:28:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000140)) 22:28:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x1, 0x0, &(0x7f0000000100)="f9"}) 22:28:43 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfe, &(0x7f0000000080)) 22:28:43 executing program 1: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{@none}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0xffffffff, 0x7, 0x0, 'queue0\x00', 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='fsi_master_acf_cmd_rel_addr\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000380)={0x8, 0x1, 0xfff, {0x8, 0x9}, 0x401, 0xd06}) socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x3) [ 270.041252][ T9] Kernel panic - not syncing: panic_on_warn set ... 22:28:43 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfe, &(0x7f0000000080)) [ 270.049308][ T9] CPU: 3 PID: 9 Comm: kworker/u16:0 Tainted: G B 5.10.0-rc7-syzkaller #0 22:28:43 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4001, 0x0) 22:28:43 executing program 0: socket(0xa, 0x0, 0x800) [ 270.049308][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 270.049308][ T9] Workqueue: usbip_event event_handler [ 270.049308][ T9] Call Trace: [ 270.049308][ T9] dump_stack+0x107/0x163 [ 270.049308][ T9] ? kthread_associate_blkcg+0x6e0/0x700 [ 270.049308][ T9] panic+0x306/0x73d [ 270.049308][ T9] ? __warn_printk+0xf3/0xf3 [ 270.049308][ T9] ? preempt_schedule_common+0x59/0xc0 [ 270.049308][ T9] ? kthread_stop+0x90/0x720 [ 270.049308][ T9] ? preempt_schedule_thunk+0x16/0x18 [ 270.049308][ T9] ? trace_hardirqs_on+0x51/0x1c0 [ 270.049308][ T9] ? kthread_stop+0x90/0x720 [ 270.049308][ T9] ? kthread_stop+0x90/0x720 [ 270.049308][ T9] end_report+0x58/0x5e [ 270.049308][ T9] kasan_report.cold+0xd/0x37 [ 270.049308][ T9] ? kthread_stop+0x90/0x720 [ 270.049308][ T9] check_memory_region+0x13d/0x180 [ 270.049308][ T9] kthread_stop+0x90/0x720 [ 270.049308][ T9] vhci_shutdown_connection+0x9d/0x340 [ 270.049308][ T9] ? event_handler+0x14c/0x4f0 [ 270.049308][ T9] ? kfree+0xdb/0x360 [ 270.049308][ T9] event_handler+0x1f0/0x4f0 [ 270.049308][ T9] process_one_work+0x933/0x15a0 [ 270.049308][ T9] ? lock_release+0x710/0x710 [ 270.049308][ T9] ? pwq_dec_nr_in_flight+0x320/0x320 [ 270.049308][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 270.049308][ T9] ? _raw_spin_lock_irq+0x41/0x50 [ 270.049308][ T9] worker_thread+0x64c/0x1120 [ 270.049308][ T9] ? process_one_work+0x15a0/0x15a0 [ 270.049308][ T9] kthread+0x3b1/0x4a0 [ 270.049308][ T9] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 270.049308][ T9] ret_from_fork+0x1f/0x30 [ 270.049308][ T9] Kernel Offset: disabled [ 270.049308][ T9] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:28:44 Registers: info registers vcpu 0 RAX=00000000000e4551 RBX=ffffffff8b09af80 RCX=ffffffff88e56de0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=fffffbfff16135f0 RSP=ffffffff8b007e40 R8 =0000000000000001 R9 =ffff88802cc358ab R10=ffffed1005986b15 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8cecaec8 R15=0000000000000000 RIP=ffffffff88e7be8e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001399fd8 CR3=000000001393f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=205b5d3530373337352e39363220205b XMM01=726f727265006463685f696368762067 XMM02=2d353120627375205d3134383954205b XMM03=656570732d686769682077656e203a32 XMM04=6d756e20656369766564204253552064 XMM05=6963687620676e697375203220726562 XMM06=726f727265006463685f696368762067 XMM07=6c61766e69203a32206b636f6c62203a XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000a95f1 RBX=ffff888010862180 RCX=ffffffff88e56de0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed100210c430 RSP=ffffc900003ffdf8 R8 =0000000000000001 R9 =ffff88802cd358ab R10=ffffed10059a6b15 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8cecaec8 R15=0000000000000000 RIP=ffffffff88e7be8e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001399fd0 CR3=000000006e664000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff0000000000ff0000ff000000000000 XMM01=ffffffff000000ffffffffff00000000 XMM02=00000000000000000000000000000000 XMM03=000000ff0000000000000000ff000000 XMM04=75722f766564752f62696c2f002f2a2f XMM05=5b6d626974627c2a5d392d305b646d7c XMM06=2d305b6d626974627c2a5d392d305b64 XMM07=2d63707276633a3174633a554d45516e XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=00000000000ae217 RBX=ffff888010864300 RCX=ffffffff88e56de0 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffed100210c860 RSP=ffffc9000040fdf8 R8 =0000000000000001 R9 =ffff88802ce358ab R10=ffffed10059c6b15 R11=0000000000000000 R12=0000000000000002 R13=0000000000000002 R14=ffffffff8cecaec8 R15=0000000000000000 RIP=ffffffff88e7be8e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ce00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000815e1d0 CR3=0000000070b72000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff8127eb00ffffffff8127ead0 XMM01=ffffffff8127eb00ffffffff8127eb00 XMM02=ffffffff8130c41affffffff8130c41a XMM03=ffffffff8130c432ffffffff8130c432 XMM04=ffffffff8130c3f4ffffffff8127eb00 XMM05=ffffffff8130c41affffffff8130c3f4 XMM06=ffffffff8130c432ffffffff8130c41a XMM07=ffffffff8130c47affffffff8130c432 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000057 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff840e8e31 RDI=ffffffff8fadbae0 RBP=ffffffff8fadbaa0 RSP=ffffc900003af798 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000000 R12=0000000000000057 R13=0000000000000057 R14=ffffffff8fadbaa0 R15=dffffc0000000000 RIP=ffffffff840e8e88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cf00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffec55d9f88 CR3=0000000064690000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000008 XMM02=00000080000000000000000200000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000