[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2021/03/04 19:29:29 fuzzer started 2021/03/04 19:29:29 dialing manager at 10.128.0.169:39211 2021/03/04 19:29:29 syscalls: 3540 2021/03/04 19:29:29 code coverage: enabled 2021/03/04 19:29:29 comparison tracing: enabled 2021/03/04 19:29:29 extra coverage: enabled 2021/03/04 19:29:29 setuid sandbox: enabled 2021/03/04 19:29:29 namespace sandbox: enabled 2021/03/04 19:29:29 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/04 19:29:29 fault injection: enabled 2021/03/04 19:29:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/04 19:29:29 net packet injection: enabled 2021/03/04 19:29:29 net device setup: enabled 2021/03/04 19:29:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/04 19:29:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/04 19:29:29 USB emulation: enabled 2021/03/04 19:29:29 hci packet injection: enabled 2021/03/04 19:29:29 wifi device emulation: enabled 2021/03/04 19:29:29 802.15.4 emulation: enabled 2021/03/04 19:29:29 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/04 19:29:29 fetching corpus: 50, signal 46456/50271 (executing program) 2021/03/04 19:29:30 fetching corpus: 100, signal 79709/85242 (executing program) 2021/03/04 19:29:30 fetching corpus: 150, signal 99189/106387 (executing program) 2021/03/04 19:29:30 fetching corpus: 200, signal 110228/119112 (executing program) 2021/03/04 19:29:30 fetching corpus: 250, signal 125892/136357 (executing program) 2021/03/04 19:29:30 fetching corpus: 300, signal 133226/145288 (executing program) 2021/03/04 19:29:30 fetching corpus: 350, signal 141864/155516 (executing program) 2021/03/04 19:29:30 fetching corpus: 400, signal 149204/164393 (executing program) 2021/03/04 19:29:30 fetching corpus: 450, signal 156041/172751 (executing program) 2021/03/04 19:29:30 fetching corpus: 500, signal 164469/182643 (executing program) 2021/03/04 19:29:30 fetching corpus: 550, signal 170017/189714 (executing program) 2021/03/04 19:29:31 fetching corpus: 600, signal 175751/196920 (executing program) 2021/03/04 19:29:31 fetching corpus: 650, signal 181069/203725 (executing program) 2021/03/04 19:29:31 fetching corpus: 700, signal 186342/210425 (executing program) 2021/03/04 19:29:31 fetching corpus: 750, signal 193921/219384 (executing program) 2021/03/04 19:29:31 fetching corpus: 800, signal 198417/225289 (executing program) 2021/03/04 19:29:31 fetching corpus: 850, signal 205163/233414 (executing program) 2021/03/04 19:29:31 fetching corpus: 900, signal 210194/239790 (executing program) 2021/03/04 19:29:31 fetching corpus: 950, signal 217040/247899 (executing program) 2021/03/04 19:29:31 fetching corpus: 1000, signal 223251/255354 (executing program) 2021/03/04 19:29:31 fetching corpus: 1050, signal 228753/262112 (executing program) 2021/03/04 19:29:31 fetching corpus: 1100, signal 233784/268420 (executing program) 2021/03/04 19:29:31 fetching corpus: 1150, signal 237302/273278 (executing program) 2021/03/04 19:29:32 fetching corpus: 1200, signal 241876/279100 (executing program) 2021/03/04 19:29:32 fetching corpus: 1250, signal 244729/283279 (executing program) 2021/03/04 19:29:32 fetching corpus: 1300, signal 250001/289761 (executing program) 2021/03/04 19:29:32 fetching corpus: 1350, signal 252817/293897 (executing program) 2021/03/04 19:29:32 fetching corpus: 1400, signal 256646/299003 (executing program) 2021/03/04 19:29:32 fetching corpus: 1450, signal 261578/305120 (executing program) 2021/03/04 19:29:32 fetching corpus: 1500, signal 264594/309377 (executing program) 2021/03/04 19:29:32 fetching corpus: 1550, signal 268112/314110 (executing program) syzkaller login: [ 71.060475][ T3272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.067031][ T3272] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/04 19:29:32 fetching corpus: 1600, signal 272610/319722 (executing program) 2021/03/04 19:29:32 fetching corpus: 1650, signal 276926/325168 (executing program) 2021/03/04 19:29:33 fetching corpus: 1700, signal 279803/329293 (executing program) 2021/03/04 19:29:33 fetching corpus: 1750, signal 282464/333189 (executing program) 2021/03/04 19:29:33 fetching corpus: 1800, signal 286646/338470 (executing program) 2021/03/04 19:29:33 fetching corpus: 1850, signal 291526/344368 (executing program) 2021/03/04 19:29:33 fetching corpus: 1900, signal 296947/350773 (executing program) 2021/03/04 19:29:33 fetching corpus: 1950, signal 303795/358432 (executing program) 2021/03/04 19:29:33 fetching corpus: 2000, signal 306396/362170 (executing program) 2021/03/04 19:29:33 fetching corpus: 2050, signal 311619/368283 (executing program) 2021/03/04 19:29:33 fetching corpus: 2100, signal 315914/373530 (executing program) 2021/03/04 19:29:33 fetching corpus: 2150, signal 318978/377671 (executing program) 2021/03/04 19:29:33 fetching corpus: 2200, signal 324464/383951 (executing program) 2021/03/04 19:29:34 fetching corpus: 2250, signal 326697/387288 (executing program) 2021/03/04 19:29:34 fetching corpus: 2300, signal 328229/389982 (executing program) 2021/03/04 19:29:34 fetching corpus: 2350, signal 332162/394829 (executing program) 2021/03/04 19:29:34 fetching corpus: 2400, signal 336104/399705 (executing program) 2021/03/04 19:29:34 fetching corpus: 2450, signal 340203/404693 (executing program) 2021/03/04 19:29:34 fetching corpus: 2500, signal 344506/409805 (executing program) 2021/03/04 19:29:34 fetching corpus: 2550, signal 346541/412916 (executing program) 2021/03/04 19:29:34 fetching corpus: 2600, signal 349763/417077 (executing program) 2021/03/04 19:29:34 fetching corpus: 2650, signal 352026/420329 (executing program) 2021/03/04 19:29:34 fetching corpus: 2700, signal 355251/424489 (executing program) 2021/03/04 19:29:35 fetching corpus: 2750, signal 360240/430195 (executing program) 2021/03/04 19:29:35 fetching corpus: 2800, signal 361777/432794 (executing program) 2021/03/04 19:29:35 fetching corpus: 2850, signal 364025/435988 (executing program) 2021/03/04 19:29:35 fetching corpus: 2900, signal 366623/439494 (executing program) 2021/03/04 19:29:35 fetching corpus: 2950, signal 369796/443504 (executing program) 2021/03/04 19:29:35 fetching corpus: 3000, signal 373746/448177 (executing program) 2021/03/04 19:29:35 fetching corpus: 3050, signal 377859/452952 (executing program) 2021/03/04 19:29:35 fetching corpus: 3100, signal 379808/455850 (executing program) 2021/03/04 19:29:35 fetching corpus: 3150, signal 381231/458323 (executing program) 2021/03/04 19:29:36 fetching corpus: 3200, signal 384121/461987 (executing program) 2021/03/04 19:29:36 fetching corpus: 3250, signal 386886/465567 (executing program) 2021/03/04 19:29:36 fetching corpus: 3300, signal 388314/467998 (executing program) 2021/03/04 19:29:36 fetching corpus: 3350, signal 389723/470425 (executing program) 2021/03/04 19:29:36 fetching corpus: 3400, signal 391807/473451 (executing program) 2021/03/04 19:29:36 fetching corpus: 3450, signal 394377/476847 (executing program) 2021/03/04 19:29:36 fetching corpus: 3500, signal 396846/480192 (executing program) 2021/03/04 19:29:36 fetching corpus: 3550, signal 399062/483255 (executing program) 2021/03/04 19:29:36 fetching corpus: 3600, signal 401641/486520 (executing program) 2021/03/04 19:29:36 fetching corpus: 3650, signal 403794/489496 (executing program) 2021/03/04 19:29:37 fetching corpus: 3700, signal 404898/491589 (executing program) 2021/03/04 19:29:37 fetching corpus: 3750, signal 406578/494124 (executing program) 2021/03/04 19:29:37 fetching corpus: 3800, signal 409688/497902 (executing program) 2021/03/04 19:29:37 fetching corpus: 3850, signal 410848/500023 (executing program) 2021/03/04 19:29:37 fetching corpus: 3900, signal 412401/502514 (executing program) 2021/03/04 19:29:37 fetching corpus: 3950, signal 414724/505562 (executing program) 2021/03/04 19:29:37 fetching corpus: 4000, signal 416482/508164 (executing program) 2021/03/04 19:29:37 fetching corpus: 4050, signal 419699/511861 (executing program) 2021/03/04 19:29:37 fetching corpus: 4100, signal 421392/514406 (executing program) 2021/03/04 19:29:37 fetching corpus: 4150, signal 424199/517840 (executing program) 2021/03/04 19:29:37 fetching corpus: 4200, signal 425891/520321 (executing program) 2021/03/04 19:29:38 fetching corpus: 4250, signal 428763/523806 (executing program) 2021/03/04 19:29:38 fetching corpus: 4300, signal 430600/526365 (executing program) 2021/03/04 19:29:38 fetching corpus: 4350, signal 431650/528333 (executing program) 2021/03/04 19:29:38 fetching corpus: 4400, signal 433349/530859 (executing program) 2021/03/04 19:29:38 fetching corpus: 4450, signal 434555/532977 (executing program) 2021/03/04 19:29:38 fetching corpus: 4500, signal 436133/535387 (executing program) 2021/03/04 19:29:38 fetching corpus: 4550, signal 438730/538605 (executing program) 2021/03/04 19:29:38 fetching corpus: 4600, signal 440606/541135 (executing program) 2021/03/04 19:29:38 fetching corpus: 4650, signal 442596/543794 (executing program) 2021/03/04 19:29:38 fetching corpus: 4700, signal 444185/546149 (executing program) 2021/03/04 19:29:38 fetching corpus: 4750, signal 448023/550237 (executing program) 2021/03/04 19:29:39 fetching corpus: 4800, signal 450249/553060 (executing program) 2021/03/04 19:29:39 fetching corpus: 4850, signal 452247/555727 (executing program) 2021/03/04 19:29:39 fetching corpus: 4900, signal 453553/557836 (executing program) 2021/03/04 19:29:39 fetching corpus: 4950, signal 455178/560162 (executing program) 2021/03/04 19:29:39 fetching corpus: 5000, signal 456863/562519 (executing program) 2021/03/04 19:29:39 fetching corpus: 5050, signal 458067/564495 (executing program) 2021/03/04 19:29:39 fetching corpus: 5100, signal 459159/566418 (executing program) 2021/03/04 19:29:39 fetching corpus: 5150, signal 460250/568299 (executing program) 2021/03/04 19:29:39 fetching corpus: 5200, signal 461927/570621 (executing program) 2021/03/04 19:29:39 fetching corpus: 5250, signal 463537/572908 (executing program) 2021/03/04 19:29:39 fetching corpus: 5300, signal 465522/575497 (executing program) 2021/03/04 19:29:40 fetching corpus: 5350, signal 466890/577610 (executing program) 2021/03/04 19:29:40 fetching corpus: 5400, signal 467969/579472 (executing program) 2021/03/04 19:29:40 fetching corpus: 5450, signal 468826/581190 (executing program) 2021/03/04 19:29:40 fetching corpus: 5500, signal 471096/584026 (executing program) 2021/03/04 19:29:40 fetching corpus: 5550, signal 472154/585842 (executing program) 2021/03/04 19:29:40 fetching corpus: 5600, signal 473575/587956 (executing program) 2021/03/04 19:29:40 fetching corpus: 5650, signal 474672/589794 (executing program) 2021/03/04 19:29:40 fetching corpus: 5700, signal 475978/591814 (executing program) 2021/03/04 19:29:40 fetching corpus: 5750, signal 477431/593925 (executing program) 2021/03/04 19:29:40 fetching corpus: 5800, signal 478679/595839 (executing program) 2021/03/04 19:29:40 fetching corpus: 5850, signal 479390/597343 (executing program) 2021/03/04 19:29:40 fetching corpus: 5900, signal 480800/599393 (executing program) 2021/03/04 19:29:41 fetching corpus: 5950, signal 481778/601136 (executing program) 2021/03/04 19:29:41 fetching corpus: 6000, signal 483033/603106 (executing program) 2021/03/04 19:29:41 fetching corpus: 6050, signal 485034/605580 (executing program) 2021/03/04 19:29:41 fetching corpus: 6100, signal 486415/607566 (executing program) 2021/03/04 19:29:41 fetching corpus: 6150, signal 487553/609380 (executing program) 2021/03/04 19:29:41 fetching corpus: 6200, signal 491286/613209 (executing program) 2021/03/04 19:29:41 fetching corpus: 6250, signal 492171/614861 (executing program) 2021/03/04 19:29:41 fetching corpus: 6300, signal 493541/616862 (executing program) 2021/03/04 19:29:41 fetching corpus: 6350, signal 496091/619745 (executing program) 2021/03/04 19:29:41 fetching corpus: 6400, signal 497275/621578 (executing program) 2021/03/04 19:29:41 fetching corpus: 6450, signal 498726/623607 (executing program) 2021/03/04 19:29:41 fetching corpus: 6500, signal 499785/625343 (executing program) 2021/03/04 19:29:41 fetching corpus: 6550, signal 500640/626895 (executing program) 2021/03/04 19:29:42 fetching corpus: 6600, signal 501947/628755 (executing program) 2021/03/04 19:29:42 fetching corpus: 6650, signal 503607/630919 (executing program) 2021/03/04 19:29:42 fetching corpus: 6700, signal 504820/632718 (executing program) 2021/03/04 19:29:42 fetching corpus: 6750, signal 505831/634376 (executing program) 2021/03/04 19:29:42 fetching corpus: 6800, signal 507838/636759 (executing program) 2021/03/04 19:29:42 fetching corpus: 6850, signal 509071/638613 (executing program) 2021/03/04 19:29:42 fetching corpus: 6900, signal 510749/640735 (executing program) 2021/03/04 19:29:42 fetching corpus: 6950, signal 512213/642719 (executing program) 2021/03/04 19:29:42 fetching corpus: 7000, signal 513708/644707 (executing program) 2021/03/04 19:29:42 fetching corpus: 7050, signal 515564/646942 (executing program) 2021/03/04 19:29:42 fetching corpus: 7100, signal 516954/648818 (executing program) 2021/03/04 19:29:42 fetching corpus: 7150, signal 517650/650243 (executing program) 2021/03/04 19:29:43 fetching corpus: 7200, signal 518472/651721 (executing program) 2021/03/04 19:29:43 fetching corpus: 7250, signal 519515/653380 (executing program) 2021/03/04 19:29:43 fetching corpus: 7300, signal 520473/654943 (executing program) 2021/03/04 19:29:43 fetching corpus: 7350, signal 521750/656701 (executing program) 2021/03/04 19:29:43 fetching corpus: 7400, signal 524767/659729 (executing program) 2021/03/04 19:29:43 fetching corpus: 7450, signal 526460/661825 (executing program) 2021/03/04 19:29:43 fetching corpus: 7500, signal 528250/663899 (executing program) 2021/03/04 19:29:43 fetching corpus: 7550, signal 529434/665657 (executing program) 2021/03/04 19:29:43 fetching corpus: 7600, signal 530835/667471 (executing program) 2021/03/04 19:29:43 fetching corpus: 7650, signal 532609/669600 (executing program) 2021/03/04 19:29:43 fetching corpus: 7700, signal 533870/671379 (executing program) 2021/03/04 19:29:44 fetching corpus: 7750, signal 535145/673132 (executing program) 2021/03/04 19:29:44 fetching corpus: 7800, signal 536107/674654 (executing program) 2021/03/04 19:29:44 fetching corpus: 7850, signal 538171/676899 (executing program) 2021/03/04 19:29:44 fetching corpus: 7900, signal 538899/678245 (executing program) 2021/03/04 19:29:44 fetching corpus: 7950, signal 540268/680022 (executing program) 2021/03/04 19:29:44 fetching corpus: 8000, signal 542363/682287 (executing program) 2021/03/04 19:29:44 fetching corpus: 8050, signal 543112/683682 (executing program) 2021/03/04 19:29:44 fetching corpus: 8100, signal 544027/685162 (executing program) 2021/03/04 19:29:44 fetching corpus: 8150, signal 545201/686763 (executing program) 2021/03/04 19:29:44 fetching corpus: 8200, signal 545958/688098 (executing program) 2021/03/04 19:29:44 fetching corpus: 8250, signal 547101/689688 (executing program) 2021/03/04 19:29:45 fetching corpus: 8300, signal 548202/691277 (executing program) 2021/03/04 19:29:45 fetching corpus: 8350, signal 549140/692774 (executing program) 2021/03/04 19:29:45 fetching corpus: 8400, signal 550364/694424 (executing program) 2021/03/04 19:29:45 fetching corpus: 8450, signal 551294/695877 (executing program) 2021/03/04 19:29:45 fetching corpus: 8500, signal 553100/697911 (executing program) 2021/03/04 19:29:45 fetching corpus: 8550, signal 553717/699191 (executing program) 2021/03/04 19:29:45 fetching corpus: 8600, signal 554569/700619 (executing program) 2021/03/04 19:29:45 fetching corpus: 8650, signal 555536/702090 (executing program) 2021/03/04 19:29:45 fetching corpus: 8700, signal 556489/703504 (executing program) 2021/03/04 19:29:45 fetching corpus: 8750, signal 557785/705181 (executing program) 2021/03/04 19:29:45 fetching corpus: 8800, signal 558790/706668 (executing program) 2021/03/04 19:29:45 fetching corpus: 8850, signal 559995/708224 (executing program) 2021/03/04 19:29:46 fetching corpus: 8900, signal 561347/709835 (executing program) 2021/03/04 19:29:46 fetching corpus: 8950, signal 562642/711457 (executing program) 2021/03/04 19:29:46 fetching corpus: 9000, signal 563378/712754 (executing program) 2021/03/04 19:29:46 fetching corpus: 9050, signal 564210/714131 (executing program) 2021/03/04 19:29:46 fetching corpus: 9100, signal 564838/715340 (executing program) 2021/03/04 19:29:46 fetching corpus: 9150, signal 565612/716589 (executing program) 2021/03/04 19:29:46 fetching corpus: 9200, signal 566789/718113 (executing program) 2021/03/04 19:29:46 fetching corpus: 9250, signal 567605/719434 (executing program) 2021/03/04 19:29:46 fetching corpus: 9300, signal 568352/720682 (executing program) 2021/03/04 19:29:46 fetching corpus: 9350, signal 569117/721957 (executing program) 2021/03/04 19:29:46 fetching corpus: 9400, signal 570808/723842 (executing program) 2021/03/04 19:29:47 fetching corpus: 9450, signal 572292/725525 (executing program) 2021/03/04 19:29:47 fetching corpus: 9500, signal 572908/726717 (executing program) 2021/03/04 19:29:47 fetching corpus: 9550, signal 573930/728132 (executing program) 2021/03/04 19:29:47 fetching corpus: 9600, signal 575099/729621 (executing program) 2021/03/04 19:29:47 fetching corpus: 9650, signal 576147/731083 (executing program) 2021/03/04 19:29:47 fetching corpus: 9700, signal 576897/732322 (executing program) 2021/03/04 19:29:47 fetching corpus: 9750, signal 577923/733691 (executing program) 2021/03/04 19:29:47 fetching corpus: 9800, signal 579166/735202 (executing program) 2021/03/04 19:29:47 fetching corpus: 9850, signal 580049/736481 (executing program) 2021/03/04 19:29:47 fetching corpus: 9900, signal 580949/737829 (executing program) 2021/03/04 19:29:47 fetching corpus: 9950, signal 581964/739173 (executing program) 2021/03/04 19:29:48 fetching corpus: 10000, signal 583280/740701 (executing program) 2021/03/04 19:29:48 fetching corpus: 10050, signal 584136/741994 (executing program) 2021/03/04 19:29:48 fetching corpus: 10100, signal 585172/743444 (executing program) 2021/03/04 19:29:48 fetching corpus: 10150, signal 586384/744936 (executing program) 2021/03/04 19:29:48 fetching corpus: 10200, signal 587381/746323 (executing program) 2021/03/04 19:29:48 fetching corpus: 10250, signal 588095/747456 (executing program) 2021/03/04 19:29:48 fetching corpus: 10300, signal 589658/749066 (executing program) 2021/03/04 19:29:48 fetching corpus: 10350, signal 590419/750317 (executing program) 2021/03/04 19:29:48 fetching corpus: 10400, signal 591211/751533 (executing program) 2021/03/04 19:29:48 fetching corpus: 10450, signal 592264/752942 (executing program) 2021/03/04 19:29:48 fetching corpus: 10500, signal 593015/754130 (executing program) 2021/03/04 19:29:48 fetching corpus: 10550, signal 593632/755229 (executing program) 2021/03/04 19:29:49 fetching corpus: 10600, signal 594456/756449 (executing program) 2021/03/04 19:29:49 fetching corpus: 10650, signal 595182/757585 (executing program) 2021/03/04 19:29:49 fetching corpus: 10700, signal 595728/758620 (executing program) 2021/03/04 19:29:49 fetching corpus: 10750, signal 596551/759829 (executing program) 2021/03/04 19:29:49 fetching corpus: 10800, signal 597183/760917 (executing program) 2021/03/04 19:29:49 fetching corpus: 10850, signal 598372/762339 (executing program) 2021/03/04 19:29:49 fetching corpus: 10900, signal 599891/763963 (executing program) 2021/03/04 19:29:49 fetching corpus: 10950, signal 600557/765031 (executing program) 2021/03/04 19:29:49 fetching corpus: 11000, signal 601579/766299 (executing program) 2021/03/04 19:29:49 fetching corpus: 11050, signal 602564/767524 (executing program) 2021/03/04 19:29:50 fetching corpus: 11100, signal 603591/768819 (executing program) 2021/03/04 19:29:50 fetching corpus: 11150, signal 604433/770012 (executing program) 2021/03/04 19:29:50 fetching corpus: 11200, signal 605048/771104 (executing program) 2021/03/04 19:29:50 fetching corpus: 11250, signal 605994/772356 (executing program) 2021/03/04 19:29:50 fetching corpus: 11300, signal 607132/773699 (executing program) 2021/03/04 19:29:50 fetching corpus: 11350, signal 608167/775063 (executing program) 2021/03/04 19:29:50 fetching corpus: 11400, signal 609479/776451 (executing program) 2021/03/04 19:29:50 fetching corpus: 11450, signal 609933/777427 (executing program) 2021/03/04 19:29:50 fetching corpus: 11500, signal 610926/778678 (executing program) 2021/03/04 19:29:50 fetching corpus: 11550, signal 611834/779855 (executing program) 2021/03/04 19:29:51 fetching corpus: 11600, signal 612436/780841 (executing program) 2021/03/04 19:29:51 fetching corpus: 11650, signal 614208/782442 (executing program) 2021/03/04 19:29:51 fetching corpus: 11700, signal 614844/783475 (executing program) 2021/03/04 19:29:51 fetching corpus: 11750, signal 615753/784630 (executing program) 2021/03/04 19:29:51 fetching corpus: 11800, signal 616410/785718 (executing program) 2021/03/04 19:29:51 fetching corpus: 11850, signal 617182/786855 (executing program) 2021/03/04 19:29:51 fetching corpus: 11900, signal 621114/789552 (executing program) 2021/03/04 19:29:51 fetching corpus: 11950, signal 622213/790825 (executing program) 2021/03/04 19:29:51 fetching corpus: 12000, signal 622821/791811 (executing program) 2021/03/04 19:29:51 fetching corpus: 12050, signal 623557/792801 (executing program) 2021/03/04 19:29:51 fetching corpus: 12100, signal 624879/794165 (executing program) 2021/03/04 19:29:51 fetching corpus: 12150, signal 625628/795233 (executing program) 2021/03/04 19:29:51 fetching corpus: 12200, signal 627294/796776 (executing program) 2021/03/04 19:29:52 fetching corpus: 12250, signal 627812/797743 (executing program) 2021/03/04 19:29:52 fetching corpus: 12300, signal 629177/799105 (executing program) 2021/03/04 19:29:52 fetching corpus: 12350, signal 629872/800102 (executing program) 2021/03/04 19:29:52 fetching corpus: 12400, signal 631284/801444 (executing program) 2021/03/04 19:29:52 fetching corpus: 12450, signal 632130/802574 (executing program) 2021/03/04 19:29:52 fetching corpus: 12500, signal 632717/803568 (executing program) 2021/03/04 19:29:52 fetching corpus: 12550, signal 633705/804704 (executing program) 2021/03/04 19:29:52 fetching corpus: 12600, signal 634199/805625 (executing program) 2021/03/04 19:29:52 fetching corpus: 12650, signal 634895/806608 (executing program) 2021/03/04 19:29:52 fetching corpus: 12700, signal 635543/807558 (executing program) 2021/03/04 19:29:52 fetching corpus: 12750, signal 636477/808673 (executing program) 2021/03/04 19:29:53 fetching corpus: 12800, signal 637037/809604 (executing program) 2021/03/04 19:29:53 fetching corpus: 12850, signal 637690/810580 (executing program) 2021/03/04 19:29:53 fetching corpus: 12900, signal 638182/811449 (executing program) 2021/03/04 19:29:53 fetching corpus: 12950, signal 638767/812387 (executing program) 2021/03/04 19:29:53 fetching corpus: 13000, signal 639779/813528 (executing program) 2021/03/04 19:29:53 fetching corpus: 13050, signal 640318/814399 (executing program) 2021/03/04 19:29:53 fetching corpus: 13100, signal 641487/815603 (executing program) 2021/03/04 19:29:53 fetching corpus: 13150, signal 642099/816539 (executing program) 2021/03/04 19:29:53 fetching corpus: 13200, signal 642997/817607 (executing program) 2021/03/04 19:29:53 fetching corpus: 13250, signal 643560/818526 (executing program) 2021/03/04 19:29:53 fetching corpus: 13300, signal 649157/821687 (executing program) 2021/03/04 19:29:53 fetching corpus: 13350, signal 649800/822606 (executing program) 2021/03/04 19:29:54 fetching corpus: 13400, signal 650635/823609 (executing program) 2021/03/04 19:29:54 fetching corpus: 13450, signal 651082/824439 (executing program) 2021/03/04 19:29:54 fetching corpus: 13500, signal 652601/825774 (executing program) 2021/03/04 19:29:54 fetching corpus: 13550, signal 653068/826597 (executing program) 2021/03/04 19:29:54 fetching corpus: 13600, signal 653745/827496 (executing program) 2021/03/04 19:29:54 fetching corpus: 13650, signal 654307/828368 (executing program) 2021/03/04 19:29:54 fetching corpus: 13700, signal 654839/829234 (executing program) 2021/03/04 19:29:54 fetching corpus: 13750, signal 655589/830185 (executing program) 2021/03/04 19:29:54 fetching corpus: 13800, signal 656080/831042 (executing program) 2021/03/04 19:29:54 fetching corpus: 13850, signal 656758/831951 (executing program) 2021/03/04 19:29:54 fetching corpus: 13900, signal 657443/832854 (executing program) 2021/03/04 19:29:54 fetching corpus: 13950, signal 658040/833711 (executing program) 2021/03/04 19:29:54 fetching corpus: 14000, signal 658568/834542 (executing program) 2021/03/04 19:29:55 fetching corpus: 14050, signal 658948/835321 (executing program) 2021/03/04 19:29:55 fetching corpus: 14100, signal 659795/836316 (executing program) 2021/03/04 19:29:55 fetching corpus: 14150, signal 660104/837095 (executing program) 2021/03/04 19:29:55 fetching corpus: 14200, signal 661242/838172 (executing program) 2021/03/04 19:29:55 fetching corpus: 14250, signal 663233/839630 (executing program) 2021/03/04 19:29:55 fetching corpus: 14300, signal 664612/840781 (executing program) 2021/03/04 19:29:55 fetching corpus: 14350, signal 667021/842372 (executing program) 2021/03/04 19:29:55 fetching corpus: 14400, signal 667787/843299 (executing program) 2021/03/04 19:29:55 fetching corpus: 14450, signal 668563/844202 (executing program) 2021/03/04 19:29:55 fetching corpus: 14500, signal 669312/845105 (executing program) 2021/03/04 19:29:55 fetching corpus: 14550, signal 669871/845900 (executing program) 2021/03/04 19:29:55 fetching corpus: 14600, signal 670460/846750 (executing program) 2021/03/04 19:29:56 fetching corpus: 14650, signal 671192/847670 (executing program) 2021/03/04 19:29:56 fetching corpus: 14700, signal 671757/848515 (executing program) 2021/03/04 19:29:56 fetching corpus: 14750, signal 672071/849193 (executing program) 2021/03/04 19:29:56 fetching corpus: 14800, signal 673051/850138 (executing program) 2021/03/04 19:29:56 fetching corpus: 14850, signal 673481/850890 (executing program) 2021/03/04 19:29:56 fetching corpus: 14900, signal 674452/851852 (executing program) 2021/03/04 19:29:56 fetching corpus: 14950, signal 675055/852677 (executing program) 2021/03/04 19:29:56 fetching corpus: 15000, signal 675889/853573 (executing program) 2021/03/04 19:29:56 fetching corpus: 15050, signal 676616/854413 (executing program) 2021/03/04 19:29:57 fetching corpus: 15100, signal 677691/855400 (executing program) 2021/03/04 19:29:57 fetching corpus: 15150, signal 678382/856242 (executing program) 2021/03/04 19:29:57 fetching corpus: 15200, signal 679063/857051 (executing program) 2021/03/04 19:29:57 fetching corpus: 15250, signal 679978/858016 (executing program) 2021/03/04 19:29:57 fetching corpus: 15300, signal 680774/858866 (executing program) 2021/03/04 19:29:57 fetching corpus: 15350, signal 681222/859595 (executing program) 2021/03/04 19:29:57 fetching corpus: 15400, signal 681751/860379 (executing program) 2021/03/04 19:29:57 fetching corpus: 15450, signal 682129/861114 (executing program) 2021/03/04 19:29:57 fetching corpus: 15500, signal 682856/861885 (executing program) 2021/03/04 19:29:57 fetching corpus: 15550, signal 683802/862804 (executing program) 2021/03/04 19:29:57 fetching corpus: 15600, signal 684470/863618 (executing program) 2021/03/04 19:29:58 fetching corpus: 15650, signal 684886/864337 (executing program) 2021/03/04 19:29:58 fetching corpus: 15700, signal 685689/865154 (executing program) 2021/03/04 19:29:58 fetching corpus: 15750, signal 686210/865876 (executing program) 2021/03/04 19:29:58 fetching corpus: 15800, signal 686783/866602 (executing program) 2021/03/04 19:29:58 fetching corpus: 15850, signal 687528/867419 (executing program) 2021/03/04 19:29:58 fetching corpus: 15900, signal 688210/868201 (executing program) 2021/03/04 19:29:58 fetching corpus: 15950, signal 688706/868916 (executing program) 2021/03/04 19:29:58 fetching corpus: 16000, signal 689296/869694 (executing program) 2021/03/04 19:29:58 fetching corpus: 16050, signal 690024/870473 (executing program) 2021/03/04 19:29:58 fetching corpus: 16100, signal 690743/871273 (executing program) 2021/03/04 19:29:58 fetching corpus: 16150, signal 691355/872048 (executing program) 2021/03/04 19:29:58 fetching corpus: 16200, signal 692320/872865 (executing program) 2021/03/04 19:29:59 fetching corpus: 16250, signal 692769/873584 (executing program) 2021/03/04 19:29:59 fetching corpus: 16300, signal 693156/874254 (executing program) 2021/03/04 19:29:59 fetching corpus: 16350, signal 693988/875072 (executing program) 2021/03/04 19:29:59 fetching corpus: 16400, signal 694226/875695 (executing program) 2021/03/04 19:29:59 fetching corpus: 16450, signal 694795/876430 (executing program) 2021/03/04 19:29:59 fetching corpus: 16500, signal 695830/877298 (executing program) 2021/03/04 19:29:59 fetching corpus: 16550, signal 696254/877954 (executing program) 2021/03/04 19:29:59 fetching corpus: 16600, signal 696675/878614 (executing program) 2021/03/04 19:29:59 fetching corpus: 16650, signal 697352/879378 (executing program) 2021/03/04 19:29:59 fetching corpus: 16700, signal 697990/880101 (executing program) 2021/03/04 19:29:59 fetching corpus: 16750, signal 698416/880778 (executing program) 2021/03/04 19:30:00 fetching corpus: 16800, signal 699021/881505 (executing program) 2021/03/04 19:30:00 fetching corpus: 16850, signal 700415/882455 (executing program) 2021/03/04 19:30:00 fetching corpus: 16900, signal 700771/883127 (executing program) 2021/03/04 19:30:00 fetching corpus: 16950, signal 701799/883911 (executing program) 2021/03/04 19:30:00 fetching corpus: 17000, signal 702866/884787 (executing program) 2021/03/04 19:30:00 fetching corpus: 17050, signal 703626/885527 (executing program) 2021/03/04 19:30:00 fetching corpus: 17100, signal 704260/886232 (executing program) 2021/03/04 19:30:00 fetching corpus: 17150, signal 705004/886956 (executing program) 2021/03/04 19:30:00 fetching corpus: 17200, signal 705309/887554 (executing program) 2021/03/04 19:30:00 fetching corpus: 17250, signal 705924/888216 (executing program) 2021/03/04 19:30:01 fetching corpus: 17300, signal 706443/888865 (executing program) 2021/03/04 19:30:01 fetching corpus: 17350, signal 707270/889586 (executing program) 2021/03/04 19:30:01 fetching corpus: 17400, signal 708430/890384 (executing program) 2021/03/04 19:30:01 fetching corpus: 17450, signal 709200/891116 (executing program) 2021/03/04 19:30:01 fetching corpus: 17500, signal 709884/891826 (executing program) 2021/03/04 19:30:01 fetching corpus: 17550, signal 710280/892440 (executing program) 2021/03/04 19:30:01 fetching corpus: 17600, signal 711388/893252 (executing program) 2021/03/04 19:30:01 fetching corpus: 17650, signal 711775/893836 (executing program) 2021/03/04 19:30:01 fetching corpus: 17700, signal 712412/894470 (executing program) 2021/03/04 19:30:01 fetching corpus: 17750, signal 713341/895176 (executing program) 2021/03/04 19:30:02 fetching corpus: 17800, signal 713836/895798 (executing program) 2021/03/04 19:30:02 fetching corpus: 17850, signal 714304/896435 (executing program) 2021/03/04 19:30:02 fetching corpus: 17900, signal 714948/897076 (executing program) 2021/03/04 19:30:02 fetching corpus: 17950, signal 715531/897738 (executing program) 2021/03/04 19:30:02 fetching corpus: 18000, signal 715952/898330 (executing program) 2021/03/04 19:30:02 fetching corpus: 18050, signal 716564/898996 (executing program) 2021/03/04 19:30:02 fetching corpus: 18100, signal 717210/899622 (executing program) 2021/03/04 19:30:02 fetching corpus: 18150, signal 717979/900325 (executing program) 2021/03/04 19:30:02 fetching corpus: 18200, signal 718484/900930 (executing program) 2021/03/04 19:30:02 fetching corpus: 18250, signal 718971/901546 (executing program) 2021/03/04 19:30:02 fetching corpus: 18300, signal 719443/902133 (executing program) 2021/03/04 19:30:02 fetching corpus: 18350, signal 720272/902783 (executing program) 2021/03/04 19:30:03 fetching corpus: 18400, signal 720910/903440 (executing program) 2021/03/04 19:30:03 fetching corpus: 18450, signal 721188/903951 (executing program) 2021/03/04 19:30:03 fetching corpus: 18500, signal 721475/904523 (executing program) 2021/03/04 19:30:03 fetching corpus: 18550, signal 722001/905124 (executing program) 2021/03/04 19:30:03 fetching corpus: 18600, signal 722316/905678 (executing program) 2021/03/04 19:30:03 fetching corpus: 18650, signal 722930/906310 (executing program) 2021/03/04 19:30:03 fetching corpus: 18700, signal 723301/906894 (executing program) 2021/03/04 19:30:03 fetching corpus: 18750, signal 723622/907468 (executing program) 2021/03/04 19:30:03 fetching corpus: 18800, signal 724149/908080 (executing program) 2021/03/04 19:30:03 fetching corpus: 18850, signal 724481/908610 (executing program) 2021/03/04 19:30:03 fetching corpus: 18900, signal 724855/909159 (executing program) 2021/03/04 19:30:04 fetching corpus: 18950, signal 725583/909775 (executing program) 2021/03/04 19:30:04 fetching corpus: 19000, signal 726055/910357 (executing program) 2021/03/04 19:30:04 fetching corpus: 19050, signal 726342/910918 (executing program) 2021/03/04 19:30:04 fetching corpus: 19100, signal 726994/911519 (executing program) 2021/03/04 19:30:04 fetching corpus: 19150, signal 727464/912112 (executing program) 2021/03/04 19:30:04 fetching corpus: 19200, signal 727724/912641 (executing program) 2021/03/04 19:30:04 fetching corpus: 19250, signal 728181/913238 (executing program) 2021/03/04 19:30:04 fetching corpus: 19300, signal 729086/913840 (executing program) 2021/03/04 19:30:04 fetching corpus: 19350, signal 729714/914445 (executing program) 2021/03/04 19:30:04 fetching corpus: 19400, signal 730256/914991 (executing program) 2021/03/04 19:30:04 fetching corpus: 19450, signal 730612/915499 (executing program) 2021/03/04 19:30:04 fetching corpus: 19500, signal 731130/916064 (executing program) 2021/03/04 19:30:05 fetching corpus: 19550, signal 731432/916593 (executing program) 2021/03/04 19:30:05 fetching corpus: 19600, signal 732307/917214 (executing program) 2021/03/04 19:30:05 fetching corpus: 19650, signal 732548/917732 (executing program) 2021/03/04 19:30:05 fetching corpus: 19700, signal 733074/918303 (executing program) 2021/03/04 19:30:05 fetching corpus: 19750, signal 733436/918846 (executing program) 2021/03/04 19:30:05 fetching corpus: 19800, signal 734619/919525 (executing program) 2021/03/04 19:30:05 fetching corpus: 19850, signal 735207/920113 (executing program) 2021/03/04 19:30:05 fetching corpus: 19900, signal 735889/920706 (executing program) 2021/03/04 19:30:05 fetching corpus: 19950, signal 736616/921290 (executing program) 2021/03/04 19:30:05 fetching corpus: 20000, signal 737072/921822 (executing program) 2021/03/04 19:30:06 fetching corpus: 20050, signal 737480/922350 (executing program) 2021/03/04 19:30:06 fetching corpus: 20100, signal 738049/922933 (executing program) 2021/03/04 19:30:06 fetching corpus: 20150, signal 739110/923613 (executing program) 2021/03/04 19:30:06 fetching corpus: 20200, signal 739558/924133 (executing program) 2021/03/04 19:30:06 fetching corpus: 20250, signal 739905/924620 (executing program) 2021/03/04 19:30:06 fetching corpus: 20300, signal 740683/925217 (executing program) 2021/03/04 19:30:06 fetching corpus: 20350, signal 741380/925745 (executing program) 2021/03/04 19:30:06 fetching corpus: 20400, signal 741884/926271 (executing program) 2021/03/04 19:30:06 fetching corpus: 20450, signal 742242/926783 (executing program) 2021/03/04 19:30:06 fetching corpus: 20500, signal 742558/927280 (executing program) 2021/03/04 19:30:06 fetching corpus: 20550, signal 743591/927916 (executing program) 2021/03/04 19:30:06 fetching corpus: 20600, signal 743896/928414 (executing program) 2021/03/04 19:30:07 fetching corpus: 20650, signal 744539/928942 (executing program) 2021/03/04 19:30:07 fetching corpus: 20700, signal 745215/929503 (executing program) 2021/03/04 19:30:07 fetching corpus: 20750, signal 745541/929989 (executing program) 2021/03/04 19:30:07 fetching corpus: 20800, signal 745915/930477 (executing program) 2021/03/04 19:30:07 fetching corpus: 20850, signal 746777/931053 (executing program) 2021/03/04 19:30:07 fetching corpus: 20900, signal 747252/931560 (executing program) 2021/03/04 19:30:07 fetching corpus: 20950, signal 747935/932090 (executing program) 2021/03/04 19:30:07 fetching corpus: 21000, signal 748318/932570 (executing program) 2021/03/04 19:30:07 fetching corpus: 21050, signal 748747/933023 (executing program) 2021/03/04 19:30:07 fetching corpus: 21100, signal 749053/933503 (executing program) 2021/03/04 19:30:08 fetching corpus: 21150, signal 749881/934015 (executing program) 2021/03/04 19:30:08 fetching corpus: 21200, signal 750545/934516 (executing program) 2021/03/04 19:30:08 fetching corpus: 21250, signal 751185/935029 (executing program) 2021/03/04 19:30:08 fetching corpus: 21300, signal 751813/935525 (executing program) 2021/03/04 19:30:08 fetching corpus: 21350, signal 752283/936033 (executing program) 2021/03/04 19:30:08 fetching corpus: 21400, signal 753099/936538 (executing program) 2021/03/04 19:30:08 fetching corpus: 21450, signal 753515/936986 (executing program) 2021/03/04 19:30:08 fetching corpus: 21500, signal 754064/937475 (executing program) 2021/03/04 19:30:08 fetching corpus: 21550, signal 754662/937958 (executing program) 2021/03/04 19:30:08 fetching corpus: 21600, signal 755227/938436 (executing program) 2021/03/04 19:30:08 fetching corpus: 21650, signal 755719/938919 (executing program) 2021/03/04 19:30:08 fetching corpus: 21700, signal 756154/939407 (executing program) 2021/03/04 19:30:09 fetching corpus: 21750, signal 756559/939878 (executing program) 2021/03/04 19:30:09 fetching corpus: 21800, signal 756998/940341 (executing program) 2021/03/04 19:30:09 fetching corpus: 21850, signal 757324/940758 (executing program) 2021/03/04 19:30:09 fetching corpus: 21900, signal 757703/941186 (executing program) 2021/03/04 19:30:09 fetching corpus: 21950, signal 758108/941616 (executing program) 2021/03/04 19:30:09 fetching corpus: 22000, signal 758605/942046 (executing program) 2021/03/04 19:30:09 fetching corpus: 22050, signal 758990/942478 (executing program) 2021/03/04 19:30:09 fetching corpus: 22100, signal 759328/942909 (executing program) 2021/03/04 19:30:09 fetching corpus: 22150, signal 759696/943326 (executing program) 2021/03/04 19:30:10 fetching corpus: 22200, signal 760492/943800 (executing program) 2021/03/04 19:30:10 fetching corpus: 22250, signal 760952/944262 (executing program) 2021/03/04 19:30:10 fetching corpus: 22300, signal 761342/944718 (executing program) 2021/03/04 19:30:10 fetching corpus: 22350, signal 761819/945157 (executing program) 2021/03/04 19:30:10 fetching corpus: 22400, signal 762321/945620 (executing program) 2021/03/04 19:30:10 fetching corpus: 22450, signal 762912/946053 (executing program) 2021/03/04 19:30:11 fetching corpus: 22500, signal 763289/946488 (executing program) 2021/03/04 19:30:11 fetching corpus: 22550, signal 764097/946928 (executing program) 2021/03/04 19:30:11 fetching corpus: 22600, signal 765205/947394 (executing program) 2021/03/04 19:30:11 fetching corpus: 22650, signal 765606/947796 (executing program) 2021/03/04 19:30:11 fetching corpus: 22700, signal 766043/948245 (executing program) 2021/03/04 19:30:11 fetching corpus: 22750, signal 766745/948664 (executing program) 2021/03/04 19:30:11 fetching corpus: 22800, signal 767257/949084 (executing program) 2021/03/04 19:30:11 fetching corpus: 22850, signal 767434/949514 (executing program) 2021/03/04 19:30:11 fetching corpus: 22900, signal 768324/949934 (executing program) 2021/03/04 19:30:11 fetching corpus: 22950, signal 768652/950376 (executing program) 2021/03/04 19:30:11 fetching corpus: 23000, signal 769065/950757 (executing program) 2021/03/04 19:30:12 fetching corpus: 23050, signal 769570/951193 (executing program) 2021/03/04 19:30:12 fetching corpus: 23100, signal 770064/951606 (executing program) 2021/03/04 19:30:12 fetching corpus: 23150, signal 770733/952026 (executing program) 2021/03/04 19:30:12 fetching corpus: 23200, signal 771197/952435 (executing program) 2021/03/04 19:30:12 fetching corpus: 23250, signal 771889/952815 (executing program) 2021/03/04 19:30:12 fetching corpus: 23300, signal 772235/953221 (executing program) 2021/03/04 19:30:12 fetching corpus: 23350, signal 772582/953602 (executing program) 2021/03/04 19:30:12 fetching corpus: 23400, signal 773492/953959 (executing program) 2021/03/04 19:30:13 fetching corpus: 23450, signal 773768/954353 (executing program) 2021/03/04 19:30:13 fetching corpus: 23500, signal 774199/954737 (executing program) 2021/03/04 19:30:13 fetching corpus: 23550, signal 774511/955148 (executing program) 2021/03/04 19:30:13 fetching corpus: 23600, signal 774907/955533 (executing program) 2021/03/04 19:30:13 fetching corpus: 23650, signal 775171/955932 (executing program) 2021/03/04 19:30:13 fetching corpus: 23700, signal 775782/956323 (executing program) 2021/03/04 19:30:13 fetching corpus: 23750, signal 776422/956702 (executing program) 2021/03/04 19:30:13 fetching corpus: 23800, signal 776801/957068 (executing program) 2021/03/04 19:30:13 fetching corpus: 23850, signal 777116/957452 (executing program) 2021/03/04 19:30:13 fetching corpus: 23900, signal 777476/957772 (executing program) 2021/03/04 19:30:13 fetching corpus: 23950, signal 778017/957772 (executing program) 2021/03/04 19:30:13 fetching corpus: 24000, signal 778651/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24050, signal 779090/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24100, signal 779471/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24150, signal 780162/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24200, signal 780639/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24250, signal 781049/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24300, signal 781465/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24350, signal 782197/957772 (executing program) 2021/03/04 19:30:14 fetching corpus: 24400, signal 782744/957773 (executing program) 2021/03/04 19:30:14 fetching corpus: 24450, signal 783068/957773 (executing program) 2021/03/04 19:30:14 fetching corpus: 24500, signal 783500/957773 (executing program) 2021/03/04 19:30:14 fetching corpus: 24550, signal 783893/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24600, signal 784956/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24650, signal 785639/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24700, signal 786284/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24750, signal 786572/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24800, signal 786812/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24850, signal 787261/957773 (executing program) 2021/03/04 19:30:15 fetching corpus: 24900, signal 787602/957791 (executing program) 2021/03/04 19:30:15 fetching corpus: 24950, signal 787918/957791 (executing program) 2021/03/04 19:30:15 fetching corpus: 25000, signal 788403/957791 (executing program) 2021/03/04 19:30:15 fetching corpus: 25050, signal 788786/957793 (executing program) 2021/03/04 19:30:15 fetching corpus: 25100, signal 789284/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25150, signal 790035/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25200, signal 790385/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25250, signal 790926/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25300, signal 791279/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25350, signal 791686/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25400, signal 792671/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25450, signal 793082/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25500, signal 793639/957793 (executing program) 2021/03/04 19:30:16 fetching corpus: 25550, signal 794007/957854 (executing program) 2021/03/04 19:30:16 fetching corpus: 25600, signal 794802/957854 (executing program) 2021/03/04 19:30:16 fetching corpus: 25650, signal 795196/957854 (executing program) 2021/03/04 19:30:16 fetching corpus: 25700, signal 795555/957854 (executing program) 2021/03/04 19:30:16 fetching corpus: 25750, signal 795908/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 25800, signal 796474/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 25850, signal 796854/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 25900, signal 797321/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 25950, signal 798346/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26000, signal 798955/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26050, signal 799460/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26100, signal 800075/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26150, signal 800431/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26200, signal 800780/957858 (executing program) 2021/03/04 19:30:17 fetching corpus: 26250, signal 801830/957858 (executing program) 2021/03/04 19:30:18 fetching corpus: 26300, signal 802565/957858 (executing program) 2021/03/04 19:30:18 fetching corpus: 26350, signal 802971/957860 (executing program) 2021/03/04 19:30:18 fetching corpus: 26400, signal 803164/957860 (executing program) 2021/03/04 19:30:18 fetching corpus: 26450, signal 803596/957860 (executing program) 2021/03/04 19:30:18 fetching corpus: 26500, signal 803956/957860 (executing program) 2021/03/04 19:30:18 fetching corpus: 26550, signal 804355/957861 (executing program) 2021/03/04 19:30:18 fetching corpus: 26600, signal 804571/957861 (executing program) 2021/03/04 19:30:18 fetching corpus: 26650, signal 804882/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26700, signal 805202/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26750, signal 805720/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26800, signal 805998/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26850, signal 806367/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26900, signal 807100/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 26950, signal 807970/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27000, signal 808673/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27050, signal 809113/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27100, signal 809412/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27150, signal 810580/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27200, signal 810718/957861 (executing program) 2021/03/04 19:30:19 fetching corpus: 27250, signal 811113/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27300, signal 811490/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27350, signal 811826/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27400, signal 812083/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27450, signal 812567/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27500, signal 812970/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27550, signal 813910/957861 (executing program) 2021/03/04 19:30:20 fetching corpus: 27600, signal 814190/957862 (executing program) 2021/03/04 19:30:20 fetching corpus: 27650, signal 814705/957862 (executing program) 2021/03/04 19:30:20 fetching corpus: 27700, signal 814957/957862 (executing program) 2021/03/04 19:30:20 fetching corpus: 27750, signal 815283/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 27800, signal 815594/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 27850, signal 815995/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 27900, signal 816343/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 27950, signal 816801/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 28000, signal 817429/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 28050, signal 817840/957862 (executing program) 2021/03/04 19:30:21 fetching corpus: 28100, signal 818077/957863 (executing program) 2021/03/04 19:30:21 fetching corpus: 28150, signal 818389/957863 (executing program) 2021/03/04 19:30:21 fetching corpus: 28200, signal 818684/957863 (executing program) 2021/03/04 19:30:21 fetching corpus: 28250, signal 819066/957863 (executing program) 2021/03/04 19:30:21 fetching corpus: 28300, signal 819293/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28350, signal 819492/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28400, signal 819998/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28450, signal 820310/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28500, signal 820782/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28550, signal 821607/957863 (executing program) 2021/03/04 19:30:22 fetching corpus: 28600, signal 821906/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28650, signal 822240/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28700, signal 822486/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28750, signal 822910/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28800, signal 823179/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28850, signal 823451/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28900, signal 823748/957870 (executing program) 2021/03/04 19:30:22 fetching corpus: 28950, signal 824262/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29000, signal 824638/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29050, signal 825202/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29100, signal 825393/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29150, signal 825617/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29200, signal 825935/957870 (executing program) 2021/03/04 19:30:23 fetching corpus: 29250, signal 826452/957877 (executing program) 2021/03/04 19:30:23 fetching corpus: 29300, signal 826757/957877 (executing program) 2021/03/04 19:30:23 fetching corpus: 29350, signal 827036/957877 (executing program) 2021/03/04 19:30:23 fetching corpus: 29400, signal 827327/957877 (executing program) 2021/03/04 19:30:23 fetching corpus: 29450, signal 827959/957877 (executing program) 2021/03/04 19:30:23 fetching corpus: 29500, signal 828230/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29550, signal 828626/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29600, signal 828870/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29650, signal 829307/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29700, signal 829629/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29750, signal 829897/957877 (executing program) 2021/03/04 19:30:24 fetching corpus: 29800, signal 830129/957878 (executing program) 2021/03/04 19:30:24 fetching corpus: 29850, signal 830357/957878 (executing program) 2021/03/04 19:30:24 fetching corpus: 29900, signal 830708/957878 (executing program) 2021/03/04 19:30:24 fetching corpus: 29950, signal 830943/957881 (executing program) 2021/03/04 19:30:24 fetching corpus: 30000, signal 831246/957896 (executing program) 2021/03/04 19:30:24 fetching corpus: 30050, signal 831458/957896 (executing program) 2021/03/04 19:30:24 fetching corpus: 30100, signal 832018/957896 (executing program) 2021/03/04 19:30:24 fetching corpus: 30150, signal 832342/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30200, signal 832893/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30250, signal 833181/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30300, signal 833802/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30350, signal 834355/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30400, signal 834811/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30450, signal 835209/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30500, signal 835822/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30550, signal 836261/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30600, signal 836599/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30650, signal 836938/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30700, signal 837187/957900 (executing program) 2021/03/04 19:30:25 fetching corpus: 30750, signal 837477/957900 (executing program) 2021/03/04 19:30:26 fetching corpus: 30800, signal 837700/957900 (executing program) 2021/03/04 19:30:26 fetching corpus: 30850, signal 837958/957900 (executing program) 2021/03/04 19:30:26 fetching corpus: 30900, signal 838504/957902 (executing program) 2021/03/04 19:30:26 fetching corpus: 30950, signal 838947/957902 (executing program) 2021/03/04 19:30:26 fetching corpus: 31000, signal 839291/957902 (executing program) 2021/03/04 19:30:26 fetching corpus: 31050, signal 839525/957908 (executing program) 2021/03/04 19:30:26 fetching corpus: 31100, signal 839722/957908 (executing program) 2021/03/04 19:30:26 fetching corpus: 31150, signal 840006/957908 (executing program) 2021/03/04 19:30:26 fetching corpus: 31200, signal 841123/957908 (executing program) 2021/03/04 19:30:27 fetching corpus: 31250, signal 841517/957908 (executing program) 2021/03/04 19:30:27 fetching corpus: 31300, signal 841982/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31350, signal 842332/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31400, signal 842757/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31450, signal 843088/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31500, signal 843392/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31550, signal 843817/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31600, signal 844088/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31650, signal 844618/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31700, signal 844923/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31750, signal 845498/957911 (executing program) 2021/03/04 19:30:27 fetching corpus: 31800, signal 845755/957911 (executing program) 2021/03/04 19:30:28 fetching corpus: 31850, signal 845984/957911 (executing program) 2021/03/04 19:30:28 fetching corpus: 31900, signal 846416/957911 (executing program) 2021/03/04 19:30:28 fetching corpus: 31950, signal 846689/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32000, signal 847034/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32050, signal 847298/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32100, signal 847693/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32150, signal 848519/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32200, signal 848852/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32250, signal 849071/957912 (executing program) 2021/03/04 19:30:28 fetching corpus: 32300, signal 849484/957916 (executing program) 2021/03/04 19:30:28 fetching corpus: 32350, signal 849670/957916 (executing program) 2021/03/04 19:30:28 fetching corpus: 32400, signal 849953/957916 (executing program) 2021/03/04 19:30:28 fetching corpus: 32450, signal 850204/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32500, signal 850453/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32550, signal 851047/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32600, signal 851644/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32650, signal 851846/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32700, signal 852135/957916 (executing program) 2021/03/04 19:30:29 fetching corpus: 32750, signal 852642/957917 (executing program) 2021/03/04 19:30:29 fetching corpus: 32800, signal 853128/957917 (executing program) 2021/03/04 19:30:29 fetching corpus: 32850, signal 853401/957917 (executing program) 2021/03/04 19:30:30 fetching corpus: 32900, signal 853864/957918 (executing program) 2021/03/04 19:30:30 fetching corpus: 32950, signal 854191/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33000, signal 854439/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33050, signal 854731/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33100, signal 854905/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33150, signal 855415/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33200, signal 855847/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33250, signal 856121/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33300, signal 856625/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33350, signal 857117/957920 (executing program) 2021/03/04 19:30:30 fetching corpus: 33400, signal 857387/957921 (executing program) 2021/03/04 19:30:30 fetching corpus: 33450, signal 857705/957921 (executing program) 2021/03/04 19:30:30 fetching corpus: 33500, signal 858422/957921 (executing program) 2021/03/04 19:30:30 fetching corpus: 33516, signal 858696/957921 (executing program) 2021/03/04 19:30:30 fetching corpus: 33517, signal 858697/957921 (executing program) 2021/03/04 19:30:30 fetching corpus: 33517, signal 858697/957921 (executing program) 2021/03/04 19:30:32 starting 6 fuzzer processes 19:30:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 19:30:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20040801) 19:30:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={0x0}}, 0x0) 19:30:33 executing program 3: syz_io_uring_setup(0x245b, &(0x7f0000000680)={0x0, 0x338}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d5e000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9c4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, 0x0) 19:30:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x1c) 19:30:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x20}, {0x8, 0x0, 0x0, 0x8}]}) [ 132.495364][ T3272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.501727][ T3272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.582285][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 132.792785][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 132.920222][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 133.073444][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 133.150740][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.171399][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.181636][ T8427] device bridge_slave_0 entered promiscuous mode [ 133.193328][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.200922][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.210339][ T8427] device bridge_slave_1 entered promiscuous mode [ 133.286872][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 133.309887][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.380244][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 133.392341][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.424065][ T8427] team0: Port device team_slave_0 added [ 133.451673][ T8427] team0: Port device team_slave_1 added [ 133.574927][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.582956][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.609471][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.629219][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.636522][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.644750][ T8429] device bridge_slave_0 entered promiscuous mode [ 133.653626][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.661481][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.670675][ T8429] device bridge_slave_1 entered promiscuous mode [ 133.686920][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.693906][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.720616][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.745906][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.757410][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.790145][ T8435] IPVS: ftp: loaded support on port[0] = 21 [ 133.844430][ T8427] device hsr_slave_0 entered promiscuous mode [ 133.851102][ T8427] device hsr_slave_1 entered promiscuous mode [ 133.863786][ T8429] team0: Port device team_slave_0 added [ 133.879712][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 133.893259][ T8429] team0: Port device team_slave_1 added [ 133.961880][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.971028][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.997356][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.107763][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.126308][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.162285][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.182616][ T8565] IPVS: ftp: loaded support on port[0] = 21 [ 134.277664][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.284994][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.292966][ T8431] device bridge_slave_0 entered promiscuous mode [ 134.318695][ T8429] device hsr_slave_0 entered promiscuous mode [ 134.326423][ T8429] device hsr_slave_1 entered promiscuous mode [ 134.332894][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.340979][ T8429] Cannot create hsr debugfs directory [ 134.353281][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 134.369156][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.376857][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.385596][ T8431] device bridge_slave_1 entered promiscuous mode [ 134.498207][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.510629][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.583954][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 134.635152][ T8431] team0: Port device team_slave_0 added [ 134.646587][ T8431] team0: Port device team_slave_1 added [ 134.671908][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 134.769502][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.776973][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.786099][ T8433] device bridge_slave_0 entered promiscuous mode [ 134.802130][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.809302][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.817385][ T19] Bluetooth: hci1: command 0x0409 tx timeout [ 134.827804][ T8433] device bridge_slave_1 entered promiscuous mode [ 134.858761][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.866073][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.894346][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.910196][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.917375][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.943774][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.988355][ T8435] chnl_net:caif_netlink_parms(): no params data found [ 135.037864][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.049612][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.058903][ T3657] Bluetooth: hci2: command 0x0409 tx timeout [ 135.065115][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.072183][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.081037][ T8565] device bridge_slave_0 entered promiscuous mode [ 135.099271][ T8431] device hsr_slave_0 entered promiscuous mode [ 135.107695][ T8431] device hsr_slave_1 entered promiscuous mode [ 135.116402][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.124245][ T8431] Cannot create hsr debugfs directory [ 135.158456][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.166892][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.175678][ T8565] device bridge_slave_1 entered promiscuous mode [ 135.201973][ T8433] team0: Port device team_slave_0 added [ 135.256215][ T8433] team0: Port device team_slave_1 added [ 135.283557][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.294298][ T19] Bluetooth: hci3: command 0x0409 tx timeout [ 135.306511][ T8427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.342758][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.359245][ T8427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.371679][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.380823][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.406922][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.419900][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.427651][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.453623][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.486312][ T8427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.523597][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.533887][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.542067][ T9510] Bluetooth: hci4: command 0x0409 tx timeout [ 135.542352][ T8435] device bridge_slave_0 entered promiscuous mode [ 135.558658][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.565999][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.573742][ T8435] device bridge_slave_1 entered promiscuous mode [ 135.581507][ T8427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.601716][ T8565] team0: Port device team_slave_0 added [ 135.609665][ T8429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.642361][ T8433] device hsr_slave_0 entered promiscuous mode [ 135.649894][ T8433] device hsr_slave_1 entered promiscuous mode [ 135.657276][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.665208][ T8433] Cannot create hsr debugfs directory [ 135.676089][ T8565] team0: Port device team_slave_1 added [ 135.685857][ T8429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.700649][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.713571][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.747617][ T8429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.793344][ T8429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.818164][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.828792][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.861587][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.874894][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.881853][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.910218][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.925727][ T8435] team0: Port device team_slave_0 added [ 135.936193][ T8435] team0: Port device team_slave_1 added [ 136.011251][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.019093][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.047971][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.063520][ T8565] device hsr_slave_0 entered promiscuous mode [ 136.073014][ T8565] device hsr_slave_1 entered promiscuous mode [ 136.081034][ T8565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.091530][ T8565] Cannot create hsr debugfs directory [ 136.097614][ T9482] Bluetooth: hci5: command 0x0409 tx timeout [ 136.127116][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.134328][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.161557][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.237387][ T8435] device hsr_slave_0 entered promiscuous mode [ 136.244142][ T8435] device hsr_slave_1 entered promiscuous mode [ 136.250723][ T8435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.259246][ T8435] Cannot create hsr debugfs directory [ 136.333553][ T8431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.349569][ T8431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.408807][ T8431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.421281][ T8431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.534281][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.556718][ T8433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.583731][ T8433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.635354][ T8433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.649410][ T8433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.654426][ T9482] Bluetooth: hci0: command 0x041b tx timeout [ 136.707429][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.717740][ T8565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.734700][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.743357][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.771915][ T8565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.782038][ T8565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.808747][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.817137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.827375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.836926][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.844382][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.870221][ T8565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.895092][ T3657] Bluetooth: hci1: command 0x041b tx timeout [ 136.903331][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.914370][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.922991][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.937971][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.945100][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.955112][ T9718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.983099][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.992359][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.002099][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.010899][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.020012][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.037365][ T8435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.048277][ T8435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.066796][ T8435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.088818][ T8435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.101276][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.110023][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.118855][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.128550][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.133984][ T9738] Bluetooth: hci2: command 0x041b tx timeout [ 137.137757][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.151878][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.175879][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.206250][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.219630][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.228954][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.238544][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.247510][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.254617][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.262277][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.271839][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.280945][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.288097][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.296140][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.308379][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.345873][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.358596][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.367196][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.375645][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.383269][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.392572][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.402269][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.411178][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.420189][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.428995][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.436167][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.444894][ T3657] Bluetooth: hci3: command 0x041b tx timeout [ 137.474082][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.482049][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.490909][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.500577][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.510084][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.517207][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.546232][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.574624][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.589546][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.598066][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.611252][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.620317][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.628171][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.635776][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.644588][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.653134][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.662702][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.671857][ T35] Bluetooth: hci4: command 0x041b tx timeout [ 137.676305][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.693586][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.720641][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.728579][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.737752][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.791615][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.806363][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.815819][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.825497][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.835273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.843546][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.852015][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.860254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.870132][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.899717][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.911550][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.931378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.940966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.968935][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.983204][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.999615][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.021934][ T8427] device veth0_vlan entered promiscuous mode [ 138.056315][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.069329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.079548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.088375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.108178][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.127411][ T8429] device veth0_vlan entered promiscuous mode [ 138.142736][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.153576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.166897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.174163][ T35] Bluetooth: hci5: command 0x041b tx timeout [ 138.181490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.189646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.197623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.206837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.218252][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.244774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.252472][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.266269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.277191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.285833][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.292888][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.300592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.309571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.318109][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.325264][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.334899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.344964][ T8427] device veth1_vlan entered promiscuous mode [ 138.360497][ T8429] device veth1_vlan entered promiscuous mode [ 138.402029][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.412229][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.424514][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.433307][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.450840][ T8431] device veth0_vlan entered promiscuous mode [ 138.467311][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.495838][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.507829][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.516853][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.526461][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.535047][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.544447][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.553013][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.562100][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.571842][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.581339][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.589933][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.598492][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.606962][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.615508][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.651352][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.659219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.668140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.678482][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.685759][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.694014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.702381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.711520][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.720820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.730108][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.734361][ T9739] Bluetooth: hci0: command 0x040f tx timeout [ 138.737233][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.752836][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.761525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.770126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.780908][ T8431] device veth1_vlan entered promiscuous mode [ 138.792265][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.826046][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.838421][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.847362][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.856511][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.866259][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.877535][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.887605][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.905635][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.914175][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.940880][ T8429] device veth0_macvtap entered promiscuous mode [ 138.968723][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.979342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.988282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.997426][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.004588][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.012522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.021381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.030217][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.037531][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.045884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.055684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.064601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.072976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.082058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.090709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.099500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.116761][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 139.122089][ T8431] device veth0_macvtap entered promiscuous mode [ 139.152363][ T8427] device veth0_macvtap entered promiscuous mode [ 139.184305][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.192227][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.216384][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.230909][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.239582][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.248199][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.259125][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.269549][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.279211][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.289193][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.298359][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.307435][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.327265][ T8431] device veth1_macvtap entered promiscuous mode [ 139.334115][ T9681] Bluetooth: hci2: command 0x040f tx timeout [ 139.341818][ T8429] device veth1_macvtap entered promiscuous mode [ 139.353110][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.363120][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.371829][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.387534][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.397096][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.409849][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.419614][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.434025][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.446639][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.455458][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.464361][ T3190] Bluetooth: hci3: command 0x040f tx timeout [ 139.484771][ T8427] device veth1_macvtap entered promiscuous mode [ 139.499459][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.518791][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.529083][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.541814][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.554931][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.575821][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.586204][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.603312][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.612626][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.626458][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.641836][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.653371][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.665495][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.676561][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.687949][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.698865][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.704894][ T9730] Bluetooth: hci4: command 0x040f tx timeout [ 139.710668][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.727101][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.738036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.754316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.763176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.777522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.788509][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.798032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.810536][ T8431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.820121][ T8431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.829579][ T8431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.839367][ T8431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.857075][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.868859][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.878849][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.889504][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.900704][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.917754][ T8429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.931194][ T8429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.940972][ T8429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.950787][ T8429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.977970][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.990652][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.000404][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.009117][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.021464][ T8427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.030490][ T8427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.041851][ T8427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.056496][ T8427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.100587][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.183600][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.191140][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.215587][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.224854][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.238603][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.257395][ T9718] Bluetooth: hci5: command 0x040f tx timeout [ 140.402421][ T8435] device veth0_vlan entered promiscuous mode [ 140.442094][ T9482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.458122][ T9482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.526068][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.531574][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.548758][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.554194][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.573219][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.582857][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.592062][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.608831][ T8433] device veth0_vlan entered promiscuous mode [ 140.624562][ T8435] device veth1_vlan entered promiscuous mode [ 140.654758][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.662986][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.673233][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.684494][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.692255][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.704761][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.712894][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.757784][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.780557][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.785749][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.789827][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.807274][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.816095][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.824138][ T3190] Bluetooth: hci0: command 0x0419 tx timeout [ 140.825489][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.879553][ T8433] device veth1_vlan entered promiscuous mode [ 140.891086][ T8435] device veth0_macvtap entered promiscuous mode [ 140.911834][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.922954][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.932838][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.951657][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.968118][ T8435] device veth1_macvtap entered promiscuous mode [ 141.004108][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.012143][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.021967][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.065966][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.075091][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.093183][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.099945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.110786][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.119590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.140235][ T8565] device veth0_vlan entered promiscuous mode [ 141.141241][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 141.171833][ T8433] device veth0_macvtap entered promiscuous mode [ 141.191358][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.207980][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.219782][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.231539][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.241918][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.255625][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.268869][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.281178][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.283099][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.302737][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.303940][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.322653][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.333565][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.343810][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.354362][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.368295][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.378701][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.388145][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.388714][ T3190] Bluetooth: hci2: command 0x0419 tx timeout [ 141.404604][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.414929][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.424854][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.432806][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.444404][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.464154][ T8433] device veth1_macvtap entered promiscuous mode [ 141.476816][ T8435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 19:30:43 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x890c, &(0x7f0000000000)={0x3, @bcast, 0xee00}) [ 141.528490][ T8435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.544357][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 141.571521][ T8435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.595392][ T8435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.633008][ T8565] device veth1_vlan entered promiscuous mode [ 141.663613][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.672651][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.690788][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 19:30:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d2"], 0x74}}, 0x0) [ 141.755253][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.775839][ T9681] Bluetooth: hci4: command 0x0419 tx timeout [ 141.784459][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.842350][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.874170][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 19:30:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) connect$packet(r0, 0x0, 0x0) [ 141.890613][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.923427][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.972610][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.982737][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.993738][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.003853][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.015395][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.028087][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 19:30:43 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) [ 142.067877][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.090671][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.094680][ T9833] binder: 9831:9833 ioctl 40046205 0 returned -22 19:30:43 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) [ 142.165736][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.217878][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.229282][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.240313][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.250831][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.263692][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.274788][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.285861][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.300379][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 19:30:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x5411, &(0x7f0000000480)) [ 142.332169][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.345531][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.353183][ T9681] Bluetooth: hci5: command 0x0419 tx timeout [ 142.374479][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 19:30:44 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x6b, 0x0, 0x0) 19:30:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x400448e7, 0x0) [ 142.405849][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.459536][ T8565] device veth0_macvtap entered promiscuous mode 19:30:44 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 142.505610][ T8433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.523981][ T8433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.566215][ T8433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.591114][ T8433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.645810][ T8565] device veth1_macvtap entered promiscuous mode [ 142.674529][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.682670][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.737701][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.770680][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.782390][ T9510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.827062][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.838278][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.884844][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.908416][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.922622][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.947448][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.960308][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.991152][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.002661][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.021776][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.031989][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.060055][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.080834][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.092720][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.102341][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.112446][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.166472][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.195286][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.227591][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.251933][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.266333][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.288383][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.299342][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.310376][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.321138][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.332153][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.354468][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.374422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.438305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.456193][ T8565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.465369][ T8565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.474857][ T8565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.493632][ T8565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.515304][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.535883][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.572039][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.610070][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.632121][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.693703][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.780525][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.792791][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.809200][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.865754][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.876602][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.922143][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:30:45 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) readv(r0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/241, 0xf1}], 0x1) 19:30:45 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c9bb7119934718, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:30:45 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0), 0x4) 19:30:45 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x17, 0x0, 0x0) 19:30:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="a44641024bcb5f72534dc200fd785cbb6b5117b2cb0824619c4c1315d459fdd254041024", 0x24, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x20) 19:30:45 executing program 2: r0 = socket(0x11, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000001640)) 19:30:45 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000480)) 19:30:45 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 19:30:45 executing program 3: write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 19:30:45 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0), 0x4) 19:30:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)='\r'}) 19:30:45 executing program 0: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x20}, &(0x7f0000000280)={0x0, r0+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) 19:30:45 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0), 0x4) 19:30:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0, 0xf0ff7f}, {0x0}, {&(0x7f0000000500)=""/76, 0x4c}], 0x3}}], 0x1, 0x0, 0x0) 19:30:46 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'exec ', '\x00'}, 0x6) [ 144.335693][ T9945] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:30:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 19:30:46 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20083, 0x0) 19:30:46 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000084c0)={0x10, 0xffffffffffffffda, r1}, 0x10) 19:30:46 executing program 5: socketpair(0x2b, 0x0, 0x0, &(0x7f00000000c0)) 19:30:46 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0), 0x4) 19:30:46 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045006, 0x0) 19:30:46 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2, 0x2}, 0x0, &(0x7f0000000100)={r0, r1/1000+60000}) 19:30:46 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r0, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@mesh_id={0x72, 0x6}, @preq={0x82, 0x20, @ext={{}, 0x0, 0x0, 0x0, @broadcast, 0x0, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e2bf94c4d0e4"}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x64}}, 0x0) 19:30:46 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 19:30:46 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee00}) 19:30:46 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000080)) 19:30:46 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x4e, 0x3e, 0xf1, 0x40, 0x8ca, 0x2022, 0xccd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa, 0xb8}}]}}]}}, 0x0) [ 145.382988][ T9740] usb 6-1: new high-speed USB device number 2 using dummy_hcd 19:30:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "0ee275b45bece0ed27124fe5c3da1c1a0c0dac5b86c5a4926e10ca10fc7564c40191763e5baea633e3e87e94886fb75e3eef4b7e26b32d58004fa7f506840434"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0xfffffffffffffffb) 19:30:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc800) 19:30:47 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x40045010, 0x0) 19:30:47 executing program 1: r0 = getpgid(0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:30:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000080)) 19:30:47 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x23, 0x0, 0x0) 19:30:47 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000080)) 19:30:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) 19:30:47 executing program 0: syz_io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0x5e81, 0x8, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x626c, &(0x7f0000000100), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 19:30:47 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) 19:30:47 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80044d76, 0x0) [ 145.913247][ T9740] usb 6-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=cc.d9 [ 145.940900][ T9740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.982851][ T9740] usb 6-1: Product: syz [ 145.987078][ T9740] usb 6-1: Manufacturer: syz [ 145.991688][ T9740] usb 6-1: SerialNumber: syz [ 146.014605][ T9740] usb 6-1: config 0 descriptor?? [ 146.064844][ T9740] gspca_main: sunplus-2.14.0 probing 08ca:2022 [ 146.282978][ T9740] gspca_sunplus: reg_r err -71 [ 146.288013][ T9740] sunplus: probe of 6-1:0.0 failed with error -71 [ 146.309644][ T9740] usb 6-1: USB disconnect, device number 2 [ 147.042774][ T9739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.562864][ T9739] usb 6-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=cc.d9 [ 147.572042][ T9739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.580369][ T9739] usb 6-1: Product: syz [ 147.584638][ T9739] usb 6-1: Manufacturer: syz [ 147.589282][ T9739] usb 6-1: SerialNumber: syz [ 147.597050][ T9739] usb 6-1: config 0 descriptor?? [ 147.635813][ T9739] gspca_main: sunplus-2.14.0 probing 08ca:2022 19:30:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 19:30:49 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000080)) 19:30:49 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x77, 0x0, 0x0) 19:30:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, 0x0) 19:30:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 19:30:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0x0) [ 147.853015][ T9739] gspca_sunplus: reg_r err -71 [ 147.857961][ T9739] sunplus: probe of 6-1:0.0 failed with error -71 [ 147.874617][ T9739] usb 6-1: USB disconnect, device number 3 19:30:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="86"}) 19:30:49 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) 19:30:49 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x201, 0x0) 19:30:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 19:30:49 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f}}, 0x0) 19:30:49 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 19:30:49 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0xa, 0x0) 19:30:49 executing program 3: r0 = io_uring_setup(0x686a, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 19:30:49 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 19:30:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 19:30:49 executing program 1: mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xf7897600421fe6bb, 0xffffffffffffffff, 0x0) 19:30:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp, @func, @ldst, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @exit], &(0x7f0000000140)='GPL\x00', 0x3, 0x86, &(0x7f00000001c0)=""/134, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:30:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x14, 0x1, 0x1, 0x301}, 0x14}}, 0x0) 19:30:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 19:30:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x5, 0x0) 19:30:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0xffffffffffffffff, 0x0) 19:30:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000002dc0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/213, 0xd5}}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x10000, 0x0) 19:30:50 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r1) dup2(r0, r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000fc0)={&(0x7f0000000000), 0xc, &(0x7f0000000f80)={0x0}}, 0x40840) 19:30:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x500}, 0x0) 19:30:50 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x32, 0x0, &(0x7f0000000080)) 19:30:50 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='-\'%\x02', &(0x7f0000000340)='G\xbe\x9ee\x98\xebr\x84\xaa\xb7?8\x86~Z#\x10\x10q\xcdj\xc1C\xf3\xa30\xf8u\xacm\xc3\x1a\xfb\x11kr\fg\x13KppH\x01\xb8M\xaa\xb48\x14\xf1\xd1\x03\xf1\x91\xf4\x92\x1eI\xb0\xe6[\xa1\xc8\xa0\x90\x8a\xbd.\xd8\x98*\x10\x9ef\xe7G!\x13\x80\xd0\x94\x1d\xa7\xf6', 0x0) 19:30:50 executing program 1: r0 = add_key$keyring(&(0x7f0000003240)='keyring\x00', &(0x7f0000003280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000002200)='fscrypt-provisioning\x00', 0x0, &(0x7f0000002280)={0x0, 0x0, @d='abcdefghijklmnop'}, 0x18, r0) 19:30:50 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x545d, 0x0) 19:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x38}}, 0x0) 19:30:51 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x400800, 0x0) 19:30:51 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', r0) 19:30:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x801) mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x11, r0, 0x0) 19:30:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "a9b6abf9"}]}, 0x2c}}, 0x0) 19:30:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 19:30:51 executing program 2: r0 = socket(0x2, 0x3, 0x20) sendmsg$SOCK_DESTROY(r0, &(0x7f00000018c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001880)={0x0, 0x178}}, 0x0) 19:30:51 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 19:30:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8936, &(0x7f0000000340)={'wlan0\x00'}) 19:30:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000044c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000004580)={&(0x7f0000004480), 0xc, &(0x7f0000000240)={&(0x7f0000004500)={0x14, r1, 0x1}, 0x14}}, 0x0) 19:30:51 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qrtr-tun\x00', 0x200000) signalfd(r0, &(0x7f00000001c0), 0x8) 19:30:51 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000580)={'erspan0\x00'}) 19:30:51 executing program 2: bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 19:30:51 executing program 0: fsopen(&(0x7f0000000300)='virtiofs\x00', 0x0) 19:30:51 executing program 1: select(0x40, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)={0x21d, 0x6, 0x6}, &(0x7f0000002540)={0x0, 0x2710}) 19:30:51 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:30:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x18}, 0x40) 19:30:51 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x2, 0x0, 0x8000000) 19:30:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) dup2(r0, r1) 19:30:51 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, 0x0, 0x0, [@default, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @default]}) 19:30:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004c40)={0x14, r1, 0x1}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0, 0xffffff7f00000000}, {&(0x7f0000000b00)=""/214, 0xd6}, {&(0x7f0000000c00)=""/170, 0xaa}], 0x3}}], 0x2, 0x0, 0x0) 19:30:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5422, 0x0) 19:30:51 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 19:30:51 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x40a, 0x0) 19:30:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12002, 0x1, 0x11, r0, 0x0) 19:30:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) dup2(r0, r1) 19:30:52 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x40305829, 0xffffffffffffffff) 19:30:52 executing program 4: r0 = syz_io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0x5e81, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x626c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2cf, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 19:30:52 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f00000001c0)=""/4096, 0x1000) 19:30:52 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0xc0045004, 0x0) 19:30:52 executing program 3: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)) 19:30:52 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) 19:30:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) dup2(r0, r1) 19:30:52 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$phonet(0x23, 0x2, 0x1) 19:30:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'wlan1\x00', @ifru_flags}) 19:30:52 executing program 0: r0 = socket(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x40, 0x0, 0x300) 19:30:52 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0xc0045005, 0x0) 19:30:52 executing program 1: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x12, 0x0, &(0x7f0000000080)) 19:30:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) dup2(r0, r1) 19:30:52 executing program 3: mq_open(&(0x7f0000000380)='/dev/vcsu#\x00', 0x0, 0x0, 0x0) 19:30:52 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) 19:30:52 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x2) 19:30:52 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 19:30:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 19:30:52 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:30:52 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, r0, 0x3) 19:30:52 executing program 5: r0 = socket$inet(0x2, 0x803, 0x2) recvmsg$can_j1939(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 19:30:52 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 19:30:52 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x1100, 0x3, 0x0, 0x0) 19:30:52 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x2, 0x0, 0x8) 19:30:52 executing program 3: r0 = socket(0xa, 0x6, 0x0) bind$can_j1939(r0, &(0x7f0000000000), 0x18) 19:30:52 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000001c0)=0xffffffff, 0x4) 19:30:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000007a"], 0x84}}, 0x0) 19:30:53 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000040)=0x81, 0x4) 19:30:53 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00}}) 19:30:53 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x5421, &(0x7f0000000000)={0x3, @bcast, 0xee00}) [ 151.432708][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 151.832690][ T5] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 151.842921][ T5] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 151.861819][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.032748][ T5] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.041856][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.072428][ T5] usb 3-1: Product: syz [ 152.076652][ T5] usb 3-1: Manufacturer: syz [ 152.081264][ T5] usb 3-1: SerialNumber: syz [ 152.442431][ T5] usb 3-1: 0:2 : does not exist [ 152.484128][ T5] usb 3-1: USB disconnect, device number 2 [ 153.142317][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.512306][ T5] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 153.521079][ T5] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 153.531297][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.752592][ T5] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.762578][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.770615][ T5] usb 3-1: Product: syz [ 153.775068][ T5] usb 3-1: Manufacturer: syz [ 153.779783][ T5] usb 3-1: SerialNumber: syz 19:30:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, 0x0) 19:30:55 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e0, &(0x7f0000000000)) 19:30:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 19:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) clock_gettime(0x0, &(0x7f0000005940)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000005680)=""/31, 0x1f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000040, &(0x7f0000005980)={0x0, r2+10000000}) 19:30:55 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x20040001) 19:30:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000009c0)={&(0x7f00000008c0), 0x200008cc, &(0x7f0000000980)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) [ 154.112303][ T5] usb 3-1: 0:2 : does not exist 19:30:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xf0ff7f00000000}}, 0x0) 19:30:55 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 19:30:55 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100)={[0x2b]}, 0x8) [ 154.139313][ T5] usb 3-1: USB disconnect, device number 3 19:30:55 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @default}, 0x1c) 19:30:55 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000002680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "31a164d580cefd8a885ac14d2fab8679495ad938"}, 0x15, 0x0) 19:30:56 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5441, 0x0) 19:30:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001b"], 0x84}}, 0x0) 19:30:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100)={[0x2b]}, 0x8) 19:30:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x400448dc, 0x0) 19:30:56 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f00000000c0)=0x80000000) 19:30:56 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x40305828, 0xffffffffffffffff) 19:30:56 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 19:30:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100)={[0x2b]}, 0x8) [ 154.582915][T10345] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. 19:30:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x400448dc, 0x0) 19:30:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000002) 19:30:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) [ 154.624098][T10351] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 19:30:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100)={[0x2b]}, 0x8) 19:30:56 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000025c0)) 19:30:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x400448dc, 0x0) 19:30:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x400448dc, 0x0) 19:30:56 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0xc0189436, 0xffffffffffffffff) 19:30:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)={0x1060, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "5e024fc1b587703a5bbd20d99cd303dcdb04d6578fe6533519f7d9ab9f4fd52c", "e6616f4d3eab8dd0ac723407cb06a44007079fb6051247232eae372e1fcf4bf6", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}}}, {{0x254, 0x1, {{0x1, 0x800}, 0x1, 0x3, 0x3ff, 0x100, 0x1, 'syz0\x00', "ddde78671d3d9226ce729c5ad89825d40fb88e900d4f94331e8c06263a0125f5", "7188b40044f630c78380eef7cef911ad08c22553ce1d51c23bcb8d10bf0431ae", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x3}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xca}, {0x1, 0x9, {0x3, 0xffff}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "9f41b33f6191af15e985813f132fd2aea0026680c1e41d42d70919fd4e666f66", "41b9fcbafef9047114024ae56a1eede2a81ff5ade3b5779c79f4e58aa740ec72", [{0x40, 0x8, {0x2, 0x1}}, {0x7f, 0x4d9f, {0x1, 0x4a41}}, {0xffff, 0x343, {0x1}}, {0x8, 0x7fff, {0x2, 0x7}}, {0x9, 0x4, {0x1, 0x4}}, {0x2, 0x1000, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "1cf2f4f201046c9c8f1a91c15f5ae8be8abb97f14778d2c26e5a8567f4b00afb", "20c1911b7e7cede7373122c54b001b2eaf71077d00066b9aaf8d7388766c45aa"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "cabf1c1235b29fe559d21d0fb7584bbb84c9980927d20fe7721f10de1a8d380f", "074e314e2efdc3bfba7a86bdfc8047fdab86127884c299c3fb72be021b38c35b", [{}, {}, {}, {}, {0x46b}, {0x0, 0x1, {0x1, 0x3e9}}, {0x6, 0x1, {0x1, 0x5}}, {0x7, 0x7, {0x0, 0xff}}, {0xd8c4, 0x0, {0x0, 0x3}}, {0x8001, 0xffff, {0x0, 0x8}}, {0x1, 0x1000, {0x0, 0x3}}, {0xff80, 0x0, {0x3, 0x3f}}, {0x3ff, 0xc7e, {0x0, 0x3}}, {0x9, 0x80, {0x0, 0x8}}, {0xff00, 0xee, {0x3, 0x7ff}}, {0x4, 0xcc07, {0x1}}, {0x0, 0x0, {0x0, 0x80}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0xf588}, {0x0, 0x2, {0x2, 0x36}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "f533c8c7ec2de70df3e5469b02ea54991f4bccab04100a09309eaa97c814cc98", "2a819f7ffba6b9359a1abbce81b9a340c9367eb1d66012917541fadefee0d87a"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "2620fccc1afec75887b5b0a53153fdda7eaec3fe0f94e2ffe99a07e40b48e15d", "49b3a58399e4cd96d889e346af3bd7a238886b2e5e5d35eeb95130d5aecf6d9a", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}}]}, 0x1060}}, 0x0) 19:30:56 executing program 3: r0 = socket(0x2, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x2, 0x0, 0xffffffff, @hyper}, 0x10) getsockname(r0, 0x0, &(0x7f0000000000)) 19:30:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee00}) 19:30:57 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x3, 0x0, 0x0) 19:30:57 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1134c0, 0x0) 19:30:57 executing program 3: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 19:30:57 executing program 0: setrlimit(0x0, &(0x7f0000000000)) sync() syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00', 0xffffffffffffffff) 19:30:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 19:30:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 19:30:57 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3ee2b12e644871f145b96d228aab32da3f433f45", "4c0015e9cf07bea5a2c7c86a1597e89f430ca9a2"}) 19:30:57 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 19:30:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200c, 0x4) 19:30:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 19:30:57 executing program 0: getgroups(0x1, &(0x7f00000014c0)=[0x0]) 19:30:57 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') 19:30:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000006a80)=[{{&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x80, 0x0}}], 0x1, 0x0) 19:30:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 19:30:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200c, 0x4) 19:30:57 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) 19:30:57 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0), 0x4) 19:30:57 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x6000, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) 19:30:57 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r1) 19:30:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200c, 0x4) 19:30:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x51d, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 19:30:57 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000001c0), 0x4) 19:30:57 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000440)) 19:30:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:30:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x2}, 0xc, &(0x7f0000000980)={0x0}}, 0x0) 19:30:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x200c, 0x4) 19:30:57 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 19:30:57 executing program 4: getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) 19:30:58 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 19:30:58 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @remote}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "37bfe1", 0x0, "db61ea"}}}}}}, 0x0) 19:30:58 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x6, 0x0) 19:30:58 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000003300)='TIPC\x00', 0xffffffffffffffff) 19:30:58 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5412, 0x0) 19:30:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 19:30:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x4}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:30:58 executing program 3: bpf$MAP_CREATE(0x23, &(0x7f0000002640), 0x40) 19:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x1c8, 0x98, 0x1c8, 0x0, 0x1c8, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'veth0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 19:30:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x9, 0xc79c, 0xfff, 0x0, 0x1}, 0x40) [ 156.837456][T10477] x_tables: duplicate underflow at hook 1 19:30:59 executing program 0: r0 = epoll_create(0x7) r1 = epoll_create1(0x0) dup2(r0, r1) 19:30:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000004740)={0x0, 0x0, 'T3{'}) 19:30:59 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snd/timer\x00', 0x8840) 19:30:59 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 19:30:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0) 19:30:59 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = dup2(r0, r0) recvmsg$can_raw(r1, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 19:30:59 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff4e, 0x0}, 0x0) 19:30:59 executing program 2: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000080)="ff", 0x1, 0xffffffffffffffff) 19:30:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x0) 19:30:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2, 0x0, 0x7}}) 19:30:59 executing program 4: add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 19:30:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 19:30:59 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) 19:30:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8919, &(0x7f0000000140)={'batadv_slave_1\x00'}) 19:30:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)=0x2) 19:30:59 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x5452, 0xffffffffffffffff) 19:30:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) 19:30:59 executing program 0: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000003600)='}}-!*{$)${-\x00', 0x0) 19:30:59 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)={0x0, 0x0, 0x18}, 0x10) 19:30:59 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 19:30:59 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) 19:30:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250b00000006000a00a1aa00000c00060003000000000000000c000600010000000100000006000a005c5500000c000600030000000300000006", @ANYRES32=0x0, @ANYBLOB='\b'], 0x74}}, 0xbae2e419378d7292) 19:30:59 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 19:30:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 19:30:59 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x40b, 0x0) 19:30:59 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x5016, 0x0) [ 158.094606][T10538] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 19:30:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x1}, 0x6e) 19:30:59 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x10) [ 158.142102][T10542] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 19:30:59 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x5000, 0x0) 19:30:59 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 19:30:59 executing program 4: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 19:31:00 executing program 2: socket$inet6(0xa, 0x0, 0x1ff) 19:31:00 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:31:00 executing program 1: r0 = epoll_create(0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000006}) 19:31:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x2, 0x4) 19:31:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 19:31:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000005c0)=0xae, 0x4) 19:31:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0xf, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 19:31:00 executing program 0: r0 = socket(0x2a, 0x2, 0x0) connect$l2tp6(r0, 0x0, 0x0) 19:31:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xc000}}, 0x0) 19:31:00 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 19:31:00 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x10, 0x0) 19:31:00 executing program 4: r0 = socket(0x25, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) 19:31:00 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8}) 19:31:00 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) bind$packet(r0, 0x0, 0x0) 19:31:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000c00)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) 19:31:00 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x7d, 0x0, 0x0) 19:31:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 19:31:00 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x40049409) 19:31:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000007e"], 0x84}}, 0x0) 19:31:00 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:31:00 executing program 5: r0 = socket(0x2, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 19:31:00 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x42, 0x0) 19:31:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 19:31:00 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80044df9, 0x0) [ 159.144706][T10612] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. 19:31:00 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) [ 159.223391][T10612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:31:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x8916, 0x0) 19:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000007e"], 0x84}}, 0x0) 19:31:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$invalidate(0x15, r0) 19:31:01 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x83, 0x0, 0x0) 19:31:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_misc(r0, 0x0, 0x0) 19:31:01 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000080)) 19:31:01 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0xc0045003, 0x0) 19:31:01 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000100)) [ 159.523763][T10635] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. 19:31:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x19, 0x4) 19:31:01 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'syzkaller1\x00'}}, 0x1e) [ 159.567831][T10635] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000007e"], 0x84}}, 0x0) 19:31:01 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 19:31:01 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) recvmsg(r0, 0x0, 0x0) 19:31:01 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r0, 0x0, 0x500) 19:31:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250b00000006000a00a1aa00000c00060003000000000000000c00060001"], 0x74}}, 0x0) 19:31:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x803}, 0x14}}, 0x0) [ 159.850070][T10653] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. 19:31:01 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x454d02, 0x0) [ 159.892959][T10653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:31:01 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x10, 0x0, 0x0) 19:31:01 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xc4400, 0x0) 19:31:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000007e"], 0x84}}, 0x0) [ 159.978766][T10661] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.033182][T10664] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 19:31:01 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0xffffffffffffffff) 19:31:01 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x407, 0x0) 19:31:01 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) 19:31:01 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x78, 0xdc, 0x4, 0x40, 0x19d2, 0x1125, 0x2861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x0, 0x3, 0x20}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) 19:31:01 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x210400, 0x0) [ 160.195108][T10674] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.228267][T10674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:31:01 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000003140)) 19:31:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) 19:31:02 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4615a178"}}) 19:31:02 executing program 0: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) 19:31:02 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 19:31:02 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x409, 0x0) [ 160.451875][T10690] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:31:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 19:31:02 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0xa, 0x2800) 19:31:02 executing program 4: r0 = syz_io_uring_setup(0x21f, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/4096, 0x1000}, {0x0}], 0x2) 19:31:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6, 0x0) connect$802154_dgram(r0, 0x0, 0x0) [ 160.611831][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.995202][ T5] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 161.167848][ T5] usb 4-1: New USB device found, idVendor=19d2, idProduct=1125, bcdDevice=28.61 [ 161.184356][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.209103][ T5] usb 4-1: Product: syz [ 161.219340][ T5] usb 4-1: Manufacturer: syz [ 161.230398][ T5] usb 4-1: SerialNumber: syz [ 161.244774][ T5] usb 4-1: config 0 descriptor?? [ 161.553083][ T5] option 4-1:0.0: GSM modem (1-port) converter detected [ 161.621988][ T5] usb 4-1: USB disconnect, device number 2 [ 161.651765][ T5] option 4-1:0.0: device disconnected [ 162.522419][ T9739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.891655][ T9739] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 163.081693][ T9739] usb 4-1: New USB device found, idVendor=19d2, idProduct=1125, bcdDevice=28.61 [ 163.090847][ T9739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.099861][ T9739] usb 4-1: Product: syz [ 163.104813][ T9739] usb 4-1: Manufacturer: syz [ 163.110300][ T9739] usb 4-1: SerialNumber: syz [ 163.117483][ T9739] usb 4-1: config 0 descriptor?? 19:31:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)={0x1060, 0x0, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x1, 0x1ff}, 0xf9, 0x9, 0x1, 0x7ff, 0x9, 'syz1\x00', "5e024fc1b587703a5bbd20d99cd303dcdb04d6578fe6533519f7d9ab9f4fd52c", "e6616f4d3eab8dd0ac723407cb06a44007079fb6051247232eae372e1fcf4bf6", [{0x2, 0xfff, {0x2, 0x10000}}, {0xae4b, 0x9, {0x0, 0x8}}, {0xf8b6, 0x800, {0x3, 0x8}}, {0xfff7, 0x0, {0x0, 0x45}}, {0x3, 0x5, {0x0, 0x2}}, {0x4, 0x1, {0x3, 0x2}}, {0x101, 0x6, {0x1, 0x200}}, {0x401, 0xffff, {0x1, 0xb62e}}, {0x3, 0x100, {0x3, 0x6}}, {0x4, 0x400}, {0x3, 0x6, {0x2, 0x5}}, {0x20, 0x6, {0x1, 0x101}}, {0x1ff, 0x6, {0x3, 0x8}}, {0x5, 0x5}, {0x200, 0x9, {0x3, 0x1}}, {0x2676, 0x7, {0x1, 0x1}}, {0xffff, 0xf000, {0x2, 0x7}}, {0xffff, 0x3f, {0x3, 0x7}}, {0xffae, 0x1, {0x1, 0x9}}, {0x0, 0x3, {0x1, 0x8}}, {0x8eee, 0x6, {0x1, 0x3f}}, {0xfd9, 0x3, {0x2, 0x3ff}}, {0x7, 0x5, {0x1, 0x57}}, {0x0, 0x8, {0x3, 0xfffff146}}, {0x6, 0xf236, {0x3, 0x100}}, {0x2, 0x7fff, {0x0, 0x1}}, {0x5, 0x800, {0x2, 0x8000}}, {0x1, 0xffff, {0x1, 0x400}}, {0x401, 0x2, {0x3, 0x400}}, {0x7f, 0x0, {0x1, 0x3f}}, {0x6a, 0x6, {0x0, 0x62}}, {0x8, 0x8, {0x1, 0x7ff}}, {0x3, 0x9, {0x3}}, {0x85, 0x4, {0x3, 0x8}}, {0xffff, 0x8, {0x3, 0x4}}, {0x6, 0x5, {0x2}}, {0xfff7, 0x800, {0x2, 0x10000}}, {0x7, 0x5, {0x0, 0x80000001}}, {0x4, 0x3ff, {0x0, 0x6}}, {0xe7, 0x2, {0x0, 0xfffffffd}}]}}}, {{0x254, 0x1, {{0x1, 0x800}, 0x1, 0x3, 0x3ff, 0x100, 0x1, 'syz0\x00', "ddde78671d3d9226ce729c5ad89825d40fb88e900d4f94331e8c06263a0125f5", "7188b40044f630c78380eef7cef911ad08c22553ce1d51c23bcb8d10bf0431ae", [{0xff, 0x7, {0x3, 0x2}}, {0x8, 0xffb, {0x1, 0x5}}, {0xfda1, 0xa1, {0x1, 0x8}}, {0x9, 0x7, {0x2}}, {0x1, 0x400, {0x2, 0x1000}}, {0xfffe, 0xb0, {0x0, 0x1}}, {0x6, 0x80, {0x1, 0x1}}, {0x1, 0xffff, {0x0, 0xecdc}}, {0x6, 0x963f, {0x0, 0x6}}, {0x8, 0x7, {0x1, 0x80000000}}, {0x8, 0x665, {0x2, 0x7fff}}, {0x1, 0xade8, {0x1, 0xfffffffb}}, {0x81, 0x4, {0x2, 0x1}}, {0x101, 0x1, {0x2, 0x7}}, {0xc2, 0x0, {0x3, 0x28ffee2f}}, {0x6, 0x6, {0x0, 0x7f}}, {0x6, 0x4, {0x0, 0x3}}, {0x0, 0x5, {0x3, 0xe99e}}, {0x2, 0xe92a, {0x2, 0xfed}}, {0x9, 0x1, {0x3, 0x3}}, {0x400, 0x93, {0x3, 0x4}}, {0x9, 0x2, {0x1, 0x3}}, {0x81, 0x2, {0x1, 0x7ff}}, {0x3, 0x5, {0x2, 0xc6}}, {0xfc3d, 0x839, {0x2, 0x6}}, {0xffff, 0x4fd2, {0x0, 0xffffffff}}, {0x8, 0x8, {0x2, 0x7}}, {0x1, 0x838, {0x0, 0x2}}, {0xfffe, 0xcd6, {0x2}}, {0xdb, 0x46, {0x0, 0x552}}, {0x0, 0x2, {0x2, 0xfffffffb}}, {0x0, 0xb39, {0x2, 0x4080}}, {0xfff9, 0xffff, {0x3, 0xca}}, {0x8, 0x139d, {0x1, 0x5}}, {0x0, 0x7, {0x3, 0xfffffff7}}, {0xed9, 0x6, {0x3, 0x6}}, {0x200, 0x6, {0x1, 0xec}}, {0x7f, 0x8, {0x0, 0x6}}, {0xca, 0x5c32, {0x0, 0x26c8f52e}}, {0x1, 0x9, {0x3, 0xffff}}]}}}, {{0x254, 0x1, {{0x1, 0x80000001}, 0x0, 0x4, 0x9, 0xfbff, 0x10, 'syz0\x00', "9f41b33f6191af15e985813f132fd2aea0026680c1e41d42d70919fd4e666f66", "41b9fcbafef9047114024ae56a1eede2a81ff5ade3b5779c79f4e58aa740ec72", [{0x40, 0x8, {0x2, 0x1}}, {0x7f, 0x4d9f, {0x1, 0x4a41}}, {0xffff, 0x343, {0x1}}, {0x8, 0x7fff, {0x2, 0x7}}, {0x9, 0x4, {0x1, 0x4}}, {0x2, 0x1000, {0x2, 0x8001}}, {0xfff, 0x0, {0x0, 0x2}}, {0x3, 0x4, {0x1, 0x2}}, {0x0, 0x8, {0x3}}, {0x7, 0x1, {0x1, 0x4}}, {0x1, 0x9, {0x3, 0x4}}, {0x2, 0x8, {0x3, 0x8}}, {0x9, 0x4, {0x2, 0x40}}, {0x4, 0x97, {0x1, 0x3}}, {0x36b, 0x2, {0x0, 0x9}}, {0x3, 0x6, {0x1, 0x1}}, {0x3, 0x40, {0x3, 0xc7}}, {0x9, 0x7, {0x2, 0x4}}, {0x200, 0x1, {0x2, 0x7f}}, {0x1, 0x8000, {0x0, 0x1}}, {0x8, 0x3, {0x1, 0x400}}, {0x1, 0x4, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x7}}, {0x1f, 0x4, {0x1, 0xb6}}, {0x5, 0x7fff, {0x2, 0x9}}, {0x7, 0x5, {0x0, 0x2}}, {0x3, 0x3f, {0x3, 0x7}}, {0x6, 0x0, {0x2, 0x7}}, {0x0, 0x400, {0x3, 0xffffffff}}, {0x4, 0x101, {0x3, 0x9}}, {0x8, 0xfff, {0x1, 0x7f}}, {0x7, 0x1ff, {0x2, 0x400}}, {0x0, 0xf801, {0x2, 0x8}}, {0x63, 0x2, {0x2, 0x10000}}, {0x1ff, 0x1, {0x2, 0x5}}, {0x7fff, 0x5, {0x1, 0x1}}, {0x6, 0x57, {0x1, 0x3}}, {0x53, 0xffff, {0x0, 0x1}}, {0x0, 0x20, {0x60b62be8a2ad2adc, 0x1}}, {0xf68, 0x9, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xc985}, 0x3f, 0x3, 0xffff, 0x2bf, 0x15, 'syz0\x00', "1cf2f4f201046c9c8f1a91c15f5ae8be8abb97f14778d2c26e5a8567f4b00afb", "20c1911b7e7cede7373122c54b001b2eaf71077d00066b9aaf8d7388766c45aa", [{0x8001, 0x7f9, {0x0, 0x6}}, {0x3f, 0x1, {0x0, 0x3}}, {0xc394, 0x400, {0x2, 0x8}}, {0x649, 0x6, {0x3}}, {0x5, 0xc0, {0x3, 0x10200000}}, {0x1, 0xfff, {0x3, 0xea8}}, {0xb9a9, 0x82, {0x3, 0x3}}, {0xfff, 0x9, {0x3, 0x10001}}, {0x40, 0x5, {0x3, 0xbeb}}, {0x3f, 0x1, {0x3, 0x30}}, {0x5, 0x1, {0x0, 0x1}}, {0x2, 0x8, {0x0, 0x1}}, {0x1, 0x6, {0x2, 0x5}}, {0x3, 0x0, {0x2, 0x8}}, {0x7ff, 0x7, {0x3, 0x3}}, {0x4, 0x9, {0x0, 0x9}}, {0x2355, 0x6cc5, {0x1, 0x3f}}, {0x0, 0x20, {0x3, 0x4e}}, {0x1, 0x5, {0x3, 0x5}}, {0x3ff, 0x7, {0x0, 0xffffffe0}}, {0x8, 0xfff7, {0x1, 0x7f}}, {0x7, 0x101, {0x0, 0x5}}, {0x1ff, 0x101, {0x0, 0x10000}}, {0xff, 0x6, {0x3, 0x80}}, {0x8, 0x1ff, {0x0, 0x6}}, {0x1, 0x5, {0x0, 0xffffffff}}, {0x3, 0x1000, {0x0, 0x5}}, {0x12ed, 0x1, {0x3, 0xd43}}, {0x6, 0x4, {0x0, 0x1}}, {0x2, 0x4, {0x2, 0x9}}, {0xfffd, 0x9ee, {0x1, 0x10001}}, {0x2, 0xffff, {0x1, 0x9}}, {0x324, 0xfe01, {0x2, 0x40}}, {0x8000, 0x9000, {0x1, 0x1}}, {0x6, 0x1, {0x3, 0x1000}}, {0x40, 0x8, {0x0, 0x7}}, {0xfffb, 0x2, {0x2, 0x3ff}}, {0x4, 0xb8f, {0x0, 0x6}}, {0x8, 0x3, {0x2, 0x7}}, {0x3, 0x1231, {0x0, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x47}, 0x9, 0x2, 0x7, 0x97, 0x3, 'syz0\x00', "cabf1c1235b29fe559d21d0fb7584bbb84c9980927d20fe7721f10de1a8d380f", "074e314e2efdc3bfba7a86bdfc8047fdab86127884c299c3fb72be021b38c35b", [{0x101, 0x0, {0x3, 0x1}}, {0xbcb8, 0x1, {0x2, 0x3}}, {0x7f, 0x6, {0x3, 0x479}}, {0xad7, 0x4, {0x0, 0x82}}, {0x46b, 0x1, {0x3, 0x5}}, {0x0, 0x1, {0x1, 0x3e9}}, {0x6, 0x1, {0x1, 0x5}}, {0x7, 0x7, {0x0, 0xff}}, {0xd8c4, 0x0, {0x0, 0x3}}, {0x8001, 0xffff, {0x0, 0x8}}, {0x1, 0x1000, {0x0, 0x3}}, {0xff80, 0x0, {0x3, 0x3f}}, {0x3ff, 0xc7e, {0x0, 0x3}}, {0x9, 0x80, {0x0, 0x8}}, {0xff00, 0xee, {0x3, 0x7ff}}, {0x4, 0xcc07, {0x1}}, {0xf2a6, 0x3, {0x1, 0x80}}, {0x5, 0x0, {0x2, 0x8001}}, {0x5, 0x1, {0x2}}, {0x6, 0x8070, {0x1, 0x1f2}}, {0x31fe, 0x7, {0x2, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x0, 0x1, {0x3, 0xc24}}, {0xbba0, 0x400, {0x2, 0x6}}, {0xff, 0x0, {0x0, 0x8}}, {0x9, 0x1, {0x0, 0x101}}, {0x8, 0xb9, {0x2, 0xdb5}}, {0x1, 0x200, {0x1, 0x200}}, {0x1, 0x821, {0x3, 0x7}}, {0x73f3, 0x81, {0x1, 0x2}}, {0x9, 0xfff8, {0x2, 0x6}}, {0x8001, 0x7587, {0x2, 0x1}}, {0x2, 0x6, {0x2}}, {0x1e, 0xb3, {0x0, 0x40}}, {0x6, 0x7b59, {0x0, 0xfff}}, {0xff, 0x5, {0x1, 0x5}}, {0xffff, 0x4, {0x1, 0x5}}, {0x1ff, 0x9, {0x2, 0x5}}, {0x9, 0xf588, {0x3, 0x7f}}, {0x800, 0x2, {0x2, 0x36}}]}}}, {{0x254, 0x1, {{0x0, 0x100}, 0x2, 0x0, 0x1, 0x9, 0x7, 'syz0\x00', "f533c8c7ec2de70df3e5469b02ea54991f4bccab04100a09309eaa97c814cc98", "2a819f7ffba6b9359a1abbce81b9a340c9367eb1d66012917541fadefee0d87a", [{0x348, 0x5, {0x2, 0x6}}, {0x3, 0x3c76, {0x2}}, {0x7, 0x4e, {0x3, 0x8}}, {0x1000, 0x8, {0x3, 0x2}}, {0x520, 0x7, {0x0, 0x80000000}}, {0x5, 0x84, {0x2, 0x4}}, {0x7f, 0x9886, {0x3, 0x3}}, {0x5, 0xd773, {0x2, 0x9}}, {0x5, 0x400, {0x3, 0x7}}, {0x3f, 0x8, {0x0, 0x1}}, {0x0, 0x5, {0x0, 0xf844}}, {0x3f, 0x7f, {0x0, 0x3f}}, {0x1, 0xf568, {0x3, 0x2ca}}, {0x2, 0x1dc, {0x0, 0x7}}, {0x4, 0x18, {0x3, 0x1}}, {0x9, 0x6c7, {0x1, 0x80000000}}, {0x7fff, 0x7e, {0x3}}, {0x5, 0xeac2, {0x0, 0xae}}, {0x0, 0x3ff, {0x3, 0xfff}}, {0x6, 0x8001, {0x0, 0x800}}, {0x0, 0x800, {0x1, 0xffffffff}}, {0x4e72, 0x53, {0x3, 0xa726}}, {0x100, 0x0, {0x0, 0x7}}, {0x1, 0x6, {0x2, 0x3}}, {0x5, 0xfc, {0x3, 0x2}}, {0x5, 0x7, {0x0, 0x800}}, {0x401, 0xff, {0x1, 0x3}}, {0x8a7, 0x7, {0x3, 0x8}}, {0x9, 0x1, {0x2, 0xffff}}, {0x49, 0x4, {0x2, 0x5}}, {0x1ff, 0x9}, {0xffff, 0x1, {0x3}}, {0x0, 0x3, {0x0, 0x8}}, {0x3240, 0x7, {0x1, 0x7fffffff}}, {0x9, 0x4, {0x3, 0x80}}, {0x2aeb, 0x80, {0x2, 0x7}}, {0x70f5, 0x5, {0x0, 0x80000000}}, {0x1ff, 0x800, {0x0, 0x7f}}, {0x0, 0x3f, {0x3, 0x7}}, {0x8, 0xe000, {0x2, 0x6670}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "2620fccc1afec75887b5b0a53153fdda7eaec3fe0f94e2ffe99a07e40b48e15d", "49b3a58399e4cd96d889e346af3bd7a238886b2e5e5d35eeb95130d5aecf6d9a", [{0x3, 0x5, {0x1, 0x23}}, {0x3, 0xda39, {0x932772ebfefd3dcd, 0x9}}, {0x2, 0x4, {0x1, 0x4}}, {0x1, 0xf94e, {0x1, 0xfe}}, {0x8, 0x8, {0x1, 0x1}}, {0x9, 0x2, {0x2, 0x9}}, {0x2, 0x81, {0x1, 0x5e3}}, {0x8001, 0x1, {0x2, 0xa7}}, {0x8, 0xf9f, {0x5, 0x4}}, {0x4, 0xfffa}, {0x1, 0x3, {0x2}}, {0x4, 0x7fff, {0x2, 0x6}}, {0x9, 0x8, {0x0, 0x2}}, {0x81, 0x20, {0x2, 0x9}}, {0x8, 0x2, {0x1, 0x3}}, {0xfff8, 0x2, {0x1, 0x3}}, {0x8, 0x0, {0x3, 0x7}}, {0xa478, 0x2fd5, {0x3, 0x5}}, {0xffaa, 0x800, {0x2, 0x6}}, {0x3a94, 0x2, {0x0, 0x4}}, {0x19f5, 0xe4a, {0x2, 0x3ff}}, {0x401, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x2, 0xff}}, {0x4, 0x447b, {0x3, 0x1}}, {0xff, 0x7ff, {0x0, 0x3}}, {0x1, 0xd2c9, {0x3, 0x1}}, {0x3, 0xfff, {0x2, 0x7}}, {0xfff7, 0x0, {0x0, 0x781d2be}}, {0x6, 0x0, {0x3, 0x4}}, {0x400, 0xfffe, {0x1, 0x9}}, {0x20, 0x7b, {0x1, 0x7}}, {0x6, 0x1, {0x0, 0x9}}, {0x0, 0x0, {0x0, 0x7}}]}}}]}, 0x1060}}, 0x4000000) 19:31:04 executing program 1: memfd_create(&(0x7f0000000000)='C(%&{-\xe0(\x00', 0x0) 19:31:04 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 19:31:04 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x84, 0x0, 0x0) 19:31:04 executing program 5: mq_open(&(0x7f0000000140)='\x00', 0x0, 0x0, &(0x7f00000001c0)) 19:31:04 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f00000001c0), 0x4) [ 163.282757][ T9739] option 4-1:0.0: GSM modem (1-port) converter detected 19:31:05 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x40e, 0x0) 19:31:05 executing program 1: bpf$MAP_CREATE(0xc, &(0x7f0000002640), 0x40) [ 163.344293][ T9739] usb 4-1: USB disconnect, device number 3 [ 163.351091][ T9739] option 4-1:0.0: device disconnected 19:31:05 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 19:31:05 executing program 4: r0 = io_uring_setup(0x686a, &(0x7f0000000200)) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) 19:31:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) 19:31:05 executing program 3: syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xffffffffffffffff, 0xea0380) [ 163.560724][T10774] tipc: Enabling of bearer rejected, failed to enable media 19:31:05 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 19:31:05 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) 19:31:05 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x11, 0x0, 0x0) [ 163.601850][T10780] tipc: Enabling of bearer rejected, failed to enable media 19:31:05 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth1\x00'}}, 0x1e) 19:31:05 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x402, 0x2800) 19:31:05 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/147}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/195}, {&(0x7f0000000680)=""/20}, {&(0x7f00000006c0)=""/4096}, {&(0x7f00000016c0)=""/205}, {&(0x7f0000001a00)=""/216}], 0x0, &(0x7f0000001940)=""/3}}], 0x1, 0x0, 0x0) 19:31:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 19:31:05 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x300, 0x0) 19:31:05 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x7b, 0x0, 0x0) 19:31:05 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, &(0x7f0000004ec0)=ANY=[], 0x1140}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002700)="c7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 19:31:05 executing program 4: syz_io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0x5e81}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x39a7, &(0x7f0000000280), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 19:31:05 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 19:31:05 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$tipc(r0, 0x0, 0xb) 19:31:05 executing program 2: semctl$GETALL(0x0, 0x0, 0x13, &(0x7f0000002a80)=""/57) 19:31:05 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$xdp(r0, &(0x7f00000005c0), 0x10) 19:31:05 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x14, 0x0, 0x0) 19:31:05 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000001c0)=0xffffffff, 0x4) 19:31:05 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x6e, 0x0, 0x0) 19:31:05 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x119, 0x4, 0x0, 0x4) 19:31:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x13}}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}]}, 0x2c}}, 0x0) 19:31:05 executing program 2: socket(0x2b, 0x1, 0xe2) 19:31:05 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xffffffffffffffd6) 19:31:06 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 19:31:06 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x492083, 0x0) 19:31:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) [ 164.408402][T10836] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 19:31:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003540)={'gre0\x00', 0x0}) [ 164.453740][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:31:06 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x20, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 164.507848][T10845] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 19:31:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) [ 164.556379][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:31:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) 19:31:06 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8004500f, 0x0) 19:31:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 19:31:06 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0xffffffffffffffff) 19:31:06 executing program 3: socketpair(0xf, 0x3, 0x0, &(0x7f0000000200)) 19:31:06 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 19:31:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) 19:31:06 executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x312a, &(0x7f0000000600)={0x0, 0x403e, 0x2, 0x1, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x1) 19:31:06 executing program 3: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x0}) 19:31:06 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$packet_drop_memb(r0, 0x84, 0x76, 0x0, 0x0) [ 164.952881][ T5] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.040206][T10884] ================================================================== [ 165.048616][T10884] BUG: KASAN: use-after-free in __mutex_unlock_slowpath+0x8e/0x610 [ 165.056567][T10884] Read of size 8 at addr ffff88814197e008 by task iou-sqp-10876/10884 [ 165.064738][T10884] [ 165.067072][T10884] CPU: 1 PID: 10884 Comm: iou-sqp-10876 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 165.076977][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.087055][T10884] Call Trace: [ 165.090352][T10884] dump_stack+0xfa/0x151 [ 165.094624][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.100193][T10884] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 165.107254][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.112833][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.118405][T10884] kasan_report.cold+0x7c/0xd8 [ 165.123202][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.128778][T10884] kasan_check_range+0x13d/0x180 [ 165.133745][T10884] __mutex_unlock_slowpath+0x8e/0x610 [ 165.139149][T10884] ? preempt_schedule_common+0x59/0xc0 [ 165.144637][T10884] ? wait_for_completion_io+0x270/0x270 [ 165.150219][T10884] io_sq_thread+0x1292/0x1a50 [ 165.154929][T10884] ? io_submit_sqes+0x6320/0x6320 [ 165.159978][T10884] ? lock_release+0x3bb/0x710 [ 165.164784][T10884] ? ret_from_fork+0x8/0x30 [ 165.169313][T10884] ? finish_wait+0x260/0x260 [ 165.173925][T10884] ? rwlock_bug.part.0+0x90/0x90 [ 165.178908][T10884] ? _raw_spin_unlock_irq+0x1f/0x40 [ 165.184128][T10884] ? io_submit_sqes+0x6320/0x6320 [ 165.189181][T10884] ret_from_fork+0x1f/0x30 [ 165.193639][T10884] [ 165.195968][T10884] Allocated by task 10876: [ 165.200387][T10884] kasan_save_stack+0x1b/0x40 [ 165.205084][T10884] __kasan_kmalloc+0x99/0xc0 [ 165.209693][T10884] io_uring_setup+0x1621/0x2950 [ 165.214564][T10884] do_syscall_64+0x2d/0x70 [ 165.219002][T10884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.224916][T10884] [ 165.227250][T10884] Freed by task 10876: [ 165.231326][T10884] kasan_save_stack+0x1b/0x40 [ 165.236015][T10884] kasan_set_track+0x1c/0x30 [ 165.240626][T10884] kasan_set_free_info+0x20/0x30 [ 165.245584][T10884] __kasan_slab_free+0xf5/0x130 [ 165.250455][T10884] slab_free_freelist_hook+0x72/0x1b0 [ 165.255853][T10884] kfree+0xe5/0x7b0 [ 165.259679][T10884] io_sq_thread_finish+0x3af/0x480 [ 165.264808][T10884] io_uring_setup+0x228f/0x2950 [ 165.269681][T10884] do_syscall_64+0x2d/0x70 [ 165.274119][T10884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.280029][T10884] [ 165.282356][T10884] Last potentially related work creation: [ 165.288073][T10884] kasan_save_stack+0x1b/0x40 [ 165.292773][T10884] kasan_record_aux_stack+0xe5/0x110 [ 165.298080][T10884] call_rcu+0xb1/0x720 [ 165.302170][T10884] qdisc_put+0xcd/0xe0 [ 165.306257][T10884] taprio_destroy+0x2b4/0x4d0 [ 165.310955][T10884] qdisc_create+0xb7a/0x12f0 [ 165.311618][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 165.315553][T10884] tc_modify_qdisc+0x4c8/0x1a50 [ 165.315596][T10884] rtnetlink_rcv_msg+0x44e/0xad0 [ 165.338200][T10884] netlink_rcv_skb+0x153/0x420 [ 165.342985][T10884] netlink_unicast+0x533/0x7d0 [ 165.347763][T10884] netlink_sendmsg+0x856/0xd90 [ 165.352542][T10884] sock_sendmsg+0xcf/0x120 [ 165.357086][T10884] ____sys_sendmsg+0x6e8/0x810 [ 165.361869][T10884] ___sys_sendmsg+0xf3/0x170 [ 165.366481][T10884] __sys_sendmsg+0xe5/0x1b0 [ 165.370998][T10884] do_syscall_64+0x2d/0x70 [ 165.375432][T10884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.381343][T10884] [ 165.383673][T10884] The buggy address belongs to the object at ffff88814197e000 [ 165.383673][T10884] which belongs to the cache kmalloc-1k of size 1024 [ 165.397739][T10884] The buggy address is located 8 bytes inside of [ 165.397739][T10884] 1024-byte region [ffff88814197e000, ffff88814197e400) [ 165.410950][T10884] The buggy address belongs to the page: [ 165.416590][T10884] page:000000008b79be79 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141978 [ 165.426854][T10884] head:000000008b79be79 order:3 compound_mapcount:0 compound_pincount:0 [ 165.435198][T10884] flags: 0x57ff00000010200(slab|head) [ 165.440687][T10884] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888010841dc0 [ 165.449299][T10884] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 165.457898][T10884] page dumped because: kasan: bad access detected [ 165.464318][T10884] [ 165.466657][T10884] Memory state around the buggy address: [ 165.472303][T10884] ffff88814197df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.480379][T10884] ffff88814197df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.488455][T10884] >ffff88814197e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.496525][T10884] ^ [ 165.500863][T10884] ffff88814197e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.501545][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.508930][T10884] ffff88814197e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.526013][T10884] ================================================================== [ 165.534082][T10884] Disabling lock debugging due to kernel taint [ 165.539232][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.569843][ T5] usb 6-1: Product: syz [ 165.586936][T10884] Kernel panic - not syncing: panic_on_warn set ... [ 165.587348][ T5] usb 6-1: Manufacturer: syz [ 165.593556][T10884] CPU: 1 PID: 10884 Comm: iou-sqp-10876 Tainted: G B 5.12.0-rc1-next-20210304-syzkaller #0 [ 165.593578][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.593589][T10884] Call Trace: [ 165.593595][T10884] dump_stack+0xfa/0x151 [ 165.593623][T10884] panic+0x306/0x73d [ 165.593642][T10884] ? __warn_printk+0xf3/0xf3 [ 165.593663][T10884] ? preempt_schedule_common+0x59/0xc0 [ 165.593690][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.621154][ T5] usb 6-1: SerialNumber: syz [ 165.622840][T10884] ? preempt_schedule_thunk+0x16/0x18 [ 165.656399][T10884] ? trace_hardirqs_on+0x38/0x1c0 [ 165.661442][T10884] ? trace_hardirqs_on+0x51/0x1c0 [ 165.666483][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.672041][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.677604][T10884] end_report.cold+0x5a/0x5a [ 165.682210][T10884] kasan_report.cold+0x6a/0xd8 [ 165.686997][T10884] ? __mutex_unlock_slowpath+0x8e/0x610 [ 165.692557][T10884] kasan_check_range+0x13d/0x180 [ 165.697507][T10884] __mutex_unlock_slowpath+0x8e/0x610 [ 165.702899][T10884] ? preempt_schedule_common+0x59/0xc0 [ 165.708384][T10884] ? wait_for_completion_io+0x270/0x270 [ 165.714052][T10884] io_sq_thread+0x1292/0x1a50 [ 165.718750][T10884] ? io_submit_sqes+0x6320/0x6320 [ 165.723788][T10884] ? lock_release+0x3bb/0x710 [ 165.728474][T10884] ? ret_from_fork+0x8/0x30 [ 165.732990][T10884] ? finish_wait+0x260/0x260 [ 165.737594][T10884] ? rwlock_bug.part.0+0x90/0x90 [ 165.742551][T10884] ? _raw_spin_unlock_irq+0x1f/0x40 [ 165.747758][T10884] ? io_submit_sqes+0x6320/0x6320 [ 165.752798][T10884] ret_from_fork+0x1f/0x30 [ 165.757855][T10884] Kernel Offset: disabled [ 165.762172][T10884] Rebooting in 86400 seconds..