[ OK ] Reached target Timers. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ **] A start job is running for OpenBSD … Shell server (1min 8s / 2min 29s)[ *] A start job is running for OpenBSD … Shell server (1min 9s / 2min 29s)[ **] A start job is running for OpenBSD … Shell server (1min 9s / 2min 29s)[ ***] A start job is running for OpenBSD …Shell server (1min 10s / 2min 40s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2021/09/20 17:58:51 fuzzer started 2021/09/20 17:58:52 dialing manager at 10.128.0.169:42323 2021/09/20 17:59:00 syscalls: 3523 2021/09/20 17:59:00 code coverage: enabled 2021/09/20 17:59:00 comparison tracing: enabled 2021/09/20 17:59:00 extra coverage: enabled 2021/09/20 17:59:00 setuid sandbox: enabled 2021/09/20 17:59:00 namespace sandbox: enabled 2021/09/20 17:59:00 Android sandbox: /sys/fs/selinux/policy does not exist 2021/09/20 17:59:00 fault injection: enabled 2021/09/20 17:59:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/09/20 17:59:00 net packet injection: enabled 2021/09/20 17:59:00 net device setup: enabled 2021/09/20 17:59:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/09/20 17:59:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/09/20 17:59:00 USB emulation: enabled 2021/09/20 17:59:00 hci packet injection: enabled 2021/09/20 17:59:00 wifi device emulation: enabled 2021/09/20 17:59:00 802.15.4 emulation: enabled 2021/09/20 17:59:00 fetching corpus: 0, signal 0/2000 (executing program) 2021/09/20 17:59:01 fetching corpus: 50, signal 16104/19921 (executing program) 2021/09/20 17:59:01 fetching corpus: 100, signal 22690/28286 (executing program) 2021/09/20 17:59:01 fetching corpus: 150, signal 28091/35437 (executing program) 2021/09/20 17:59:01 fetching corpus: 200, signal 33271/42332 (executing program) 2021/09/20 17:59:01 fetching corpus: 250, signal 37691/48394 (executing program) 2021/09/20 17:59:01 fetching corpus: 300, signal 41197/53530 (executing program) 2021/09/20 17:59:01 fetching corpus: 350, signal 45563/59429 (executing program) 2021/09/20 17:59:01 fetching corpus: 400, signal 50747/66030 (executing program) 2021/09/20 17:59:02 fetching corpus: 450, signal 55186/71919 (executing program) 2021/09/20 17:59:02 fetching corpus: 500, signal 58180/76398 (executing program) 2021/09/20 17:59:02 fetching corpus: 550, signal 60531/80244 (executing program) 2021/09/20 17:59:02 fetching corpus: 600, signal 63041/84196 (executing program) 2021/09/20 17:59:02 fetching corpus: 650, signal 66011/88541 (executing program) 2021/09/20 17:59:02 fetching corpus: 700, signal 69177/93075 (executing program) 2021/09/20 17:59:02 fetching corpus: 750, signal 71984/97188 (executing program) 2021/09/20 17:59:02 fetching corpus: 800, signal 74208/100730 (executing program) 2021/09/20 17:59:02 fetching corpus: 850, signal 75798/103718 (executing program) 2021/09/20 17:59:02 fetching corpus: 900, signal 77955/107188 (executing program) 2021/09/20 17:59:03 fetching corpus: 950, signal 80556/111022 (executing program) 2021/09/20 17:59:03 fetching corpus: 1000, signal 82276/114070 (executing program) 2021/09/20 17:59:03 fetching corpus: 1050, signal 84991/117960 (executing program) 2021/09/20 17:59:03 fetching corpus: 1100, signal 86441/120757 (executing program) 2021/09/20 17:59:03 fetching corpus: 1150, signal 88702/124201 (executing program) 2021/09/20 17:59:03 fetching corpus: 1200, signal 89855/126682 (executing program) 2021/09/20 17:59:03 fetching corpus: 1250, signal 91307/129390 (executing program) 2021/09/20 17:59:03 fetching corpus: 1300, signal 92758/132089 (executing program) 2021/09/20 17:59:03 fetching corpus: 1350, signal 94706/135193 (executing program) 2021/09/20 17:59:04 fetching corpus: 1400, signal 95855/137574 (executing program) 2021/09/20 17:59:04 fetching corpus: 1450, signal 97319/140215 (executing program) 2021/09/20 17:59:04 fetching corpus: 1500, signal 98819/142896 (executing program) 2021/09/20 17:59:04 fetching corpus: 1550, signal 100435/145606 (executing program) 2021/09/20 17:59:04 fetching corpus: 1600, signal 101521/147875 (executing program) 2021/09/20 17:59:04 fetching corpus: 1650, signal 102349/149915 (executing program) 2021/09/20 17:59:04 fetching corpus: 1700, signal 103837/152495 (executing program) 2021/09/20 17:59:04 fetching corpus: 1750, signal 105268/155030 (executing program) 2021/09/20 17:59:04 fetching corpus: 1800, signal 106918/157654 (executing program) 2021/09/20 17:59:05 fetching corpus: 1850, signal 108023/159898 (executing program) 2021/09/20 17:59:05 fetching corpus: 1900, signal 109567/162503 (executing program) 2021/09/20 17:59:05 fetching corpus: 1950, signal 111611/165423 (executing program) 2021/09/20 17:59:05 fetching corpus: 2000, signal 113612/168252 (executing program) 2021/09/20 17:59:05 fetching corpus: 2050, signal 114703/170439 (executing program) 2021/09/20 17:59:05 fetching corpus: 2100, signal 115833/172648 (executing program) 2021/09/20 17:59:05 fetching corpus: 2150, signal 116794/174697 (executing program) 2021/09/20 17:59:06 fetching corpus: 2200, signal 117835/176750 (executing program) 2021/09/20 17:59:06 fetching corpus: 2250, signal 118790/178755 (executing program) 2021/09/20 17:59:06 fetching corpus: 2300, signal 119992/180947 (executing program) 2021/09/20 17:59:06 fetching corpus: 2350, signal 121020/183001 (executing program) 2021/09/20 17:59:06 fetching corpus: 2400, signal 122013/185004 (executing program) 2021/09/20 17:59:06 fetching corpus: 2450, signal 122648/186724 (executing program) 2021/09/20 17:59:06 fetching corpus: 2500, signal 123774/188718 (executing program) 2021/09/20 17:59:06 fetching corpus: 2550, signal 124630/190581 (executing program) 2021/09/20 17:59:07 fetching corpus: 2600, signal 125251/192266 (executing program) 2021/09/20 17:59:07 fetching corpus: 2650, signal 125794/193897 (executing program) 2021/09/20 17:59:07 fetching corpus: 2700, signal 126684/195741 (executing program) 2021/09/20 17:59:07 fetching corpus: 2750, signal 127672/197671 (executing program) 2021/09/20 17:59:07 fetching corpus: 2800, signal 128749/199692 (executing program) 2021/09/20 17:59:07 fetching corpus: 2850, signal 129632/201499 (executing program) 2021/09/20 17:59:07 fetching corpus: 2900, signal 130443/203259 (executing program) 2021/09/20 17:59:07 fetching corpus: 2950, signal 134797/207324 (executing program) 2021/09/20 17:59:07 fetching corpus: 3000, signal 136197/209416 (executing program) 2021/09/20 17:59:08 fetching corpus: 3050, signal 137176/211266 (executing program) 2021/09/20 17:59:08 fetching corpus: 3100, signal 138060/212996 (executing program) 2021/09/20 17:59:08 fetching corpus: 3150, signal 138845/214721 (executing program) 2021/09/20 17:59:08 fetching corpus: 3200, signal 139782/216479 (executing program) 2021/09/20 17:59:08 fetching corpus: 3250, signal 140549/218116 (executing program) 2021/09/20 17:59:08 fetching corpus: 3300, signal 141161/219646 (executing program) 2021/09/20 17:59:09 fetching corpus: 3350, signal 142084/221382 (executing program) 2021/09/20 17:59:09 fetching corpus: 3400, signal 143324/223304 (executing program) 2021/09/20 17:59:09 fetching corpus: 3450, signal 144188/225027 (executing program) 2021/09/20 17:59:09 fetching corpus: 3500, signal 145261/226794 (executing program) 2021/09/20 17:59:10 fetching corpus: 3550, signal 146217/228527 (executing program) 2021/09/20 17:59:10 fetching corpus: 3600, signal 147388/230332 (executing program) 2021/09/20 17:59:10 fetching corpus: 3649, signal 148118/231828 (executing program) 2021/09/20 17:59:10 fetching corpus: 3699, signal 148846/233417 (executing program) 2021/09/20 17:59:10 fetching corpus: 3749, signal 149558/234943 (executing program) 2021/09/20 17:59:10 fetching corpus: 3799, signal 150144/236414 (executing program) 2021/09/20 17:59:10 fetching corpus: 3849, signal 150979/238000 (executing program) 2021/09/20 17:59:10 fetching corpus: 3899, signal 151563/239452 (executing program) 2021/09/20 17:59:10 fetching corpus: 3949, signal 152243/240902 (executing program) 2021/09/20 17:59:10 fetching corpus: 3999, signal 153016/242405 (executing program) 2021/09/20 17:59:11 fetching corpus: 4049, signal 154391/244205 (executing program) 2021/09/20 17:59:11 fetching corpus: 4099, signal 155211/245694 (executing program) 2021/09/20 17:59:11 fetching corpus: 4149, signal 155817/247112 (executing program) 2021/09/20 17:59:11 fetching corpus: 4199, signal 156510/248543 (executing program) 2021/09/20 17:59:11 fetching corpus: 4249, signal 157118/249950 (executing program) 2021/09/20 17:59:11 fetching corpus: 4299, signal 157480/251230 (executing program) syzkaller login: [ 141.196024][ T3120] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.205601][ T3120] ieee802154 phy1 wpan1: encryption failed: -22 2021/09/20 17:59:11 fetching corpus: 4349, signal 158257/252649 (executing program) 2021/09/20 17:59:11 fetching corpus: 4399, signal 158849/253992 (executing program) 2021/09/20 17:59:12 fetching corpus: 4449, signal 160264/255725 (executing program) 2021/09/20 17:59:12 fetching corpus: 4499, signal 160871/257082 (executing program) 2021/09/20 17:59:12 fetching corpus: 4549, signal 162184/258803 (executing program) 2021/09/20 17:59:12 fetching corpus: 4599, signal 162688/260057 (executing program) 2021/09/20 17:59:12 fetching corpus: 4648, signal 163171/261319 (executing program) 2021/09/20 17:59:12 fetching corpus: 4698, signal 163694/262618 (executing program) 2021/09/20 17:59:12 fetching corpus: 4748, signal 164476/263994 (executing program) 2021/09/20 17:59:12 fetching corpus: 4798, signal 165097/265257 (executing program) 2021/09/20 17:59:13 fetching corpus: 4848, signal 165759/266539 (executing program) 2021/09/20 17:59:13 fetching corpus: 4898, signal 166566/267884 (executing program) 2021/09/20 17:59:13 fetching corpus: 4948, signal 166996/269052 (executing program) 2021/09/20 17:59:13 fetching corpus: 4998, signal 168304/270604 (executing program) 2021/09/20 17:59:13 fetching corpus: 5048, signal 168961/271924 (executing program) 2021/09/20 17:59:13 fetching corpus: 5098, signal 169792/273238 (executing program) 2021/09/20 17:59:13 fetching corpus: 5148, signal 170564/274517 (executing program) 2021/09/20 17:59:13 fetching corpus: 5198, signal 171254/275787 (executing program) 2021/09/20 17:59:13 fetching corpus: 5248, signal 171839/277025 (executing program) 2021/09/20 17:59:13 fetching corpus: 5298, signal 172374/278240 (executing program) 2021/09/20 17:59:14 fetching corpus: 5348, signal 172959/279502 (executing program) 2021/09/20 17:59:14 fetching corpus: 5398, signal 173353/280602 (executing program) 2021/09/20 17:59:14 fetching corpus: 5448, signal 174371/281975 (executing program) 2021/09/20 17:59:14 fetching corpus: 5498, signal 175123/283214 (executing program) 2021/09/20 17:59:14 fetching corpus: 5548, signal 175863/284428 (executing program) 2021/09/20 17:59:14 fetching corpus: 5598, signal 176237/285551 (executing program) 2021/09/20 17:59:15 fetching corpus: 5648, signal 176791/286725 (executing program) 2021/09/20 17:59:15 fetching corpus: 5698, signal 177685/287948 (executing program) 2021/09/20 17:59:15 fetching corpus: 5748, signal 178187/289064 (executing program) 2021/09/20 17:59:15 fetching corpus: 5798, signal 178856/290214 (executing program) 2021/09/20 17:59:15 fetching corpus: 5848, signal 179508/291408 (executing program) 2021/09/20 17:59:15 fetching corpus: 5898, signal 180157/292558 (executing program) 2021/09/20 17:59:15 fetching corpus: 5948, signal 180589/293710 (executing program) 2021/09/20 17:59:15 fetching corpus: 5998, signal 181057/294804 (executing program) 2021/09/20 17:59:15 fetching corpus: 6048, signal 181823/295995 (executing program) 2021/09/20 17:59:15 fetching corpus: 6098, signal 182357/297124 (executing program) 2021/09/20 17:59:15 fetching corpus: 6148, signal 182934/298273 (executing program) 2021/09/20 17:59:16 fetching corpus: 6198, signal 183557/299397 (executing program) 2021/09/20 17:59:16 fetching corpus: 6248, signal 184720/300580 (executing program) 2021/09/20 17:59:16 fetching corpus: 6298, signal 185545/301710 (executing program) 2021/09/20 17:59:16 fetching corpus: 6348, signal 185980/302757 (executing program) 2021/09/20 17:59:16 fetching corpus: 6397, signal 186799/303878 (executing program) 2021/09/20 17:59:16 fetching corpus: 6447, signal 187489/304954 (executing program) 2021/09/20 17:59:16 fetching corpus: 6497, signal 188708/306102 (executing program) 2021/09/20 17:59:16 fetching corpus: 6547, signal 189163/307062 (executing program) 2021/09/20 17:59:16 fetching corpus: 6597, signal 189738/308089 (executing program) 2021/09/20 17:59:17 fetching corpus: 6647, signal 190148/309056 (executing program) 2021/09/20 17:59:17 fetching corpus: 6697, signal 191057/310113 (executing program) 2021/09/20 17:59:17 fetching corpus: 6747, signal 192061/311188 (executing program) 2021/09/20 17:59:17 fetching corpus: 6796, signal 192424/312123 (executing program) 2021/09/20 17:59:17 fetching corpus: 6846, signal 192936/313083 (executing program) 2021/09/20 17:59:17 fetching corpus: 6896, signal 193512/314035 (executing program) 2021/09/20 17:59:17 fetching corpus: 6946, signal 193953/314973 (executing program) 2021/09/20 17:59:18 fetching corpus: 6996, signal 195095/316083 (executing program) 2021/09/20 17:59:18 fetching corpus: 7045, signal 195432/316968 (executing program) 2021/09/20 17:59:18 fetching corpus: 7095, signal 196451/317975 (executing program) 2021/09/20 17:59:18 fetching corpus: 7145, signal 196943/318937 (executing program) 2021/09/20 17:59:18 fetching corpus: 7195, signal 197384/319874 (executing program) 2021/09/20 17:59:18 fetching corpus: 7245, signal 197861/320782 (executing program) 2021/09/20 17:59:18 fetching corpus: 7295, signal 198406/321669 (executing program) 2021/09/20 17:59:18 fetching corpus: 7345, signal 198939/322576 (executing program) 2021/09/20 17:59:18 fetching corpus: 7395, signal 199565/323479 (executing program) 2021/09/20 17:59:19 fetching corpus: 7445, signal 200118/324386 (executing program) 2021/09/20 17:59:19 fetching corpus: 7495, signal 200631/325312 (executing program) 2021/09/20 17:59:19 fetching corpus: 7545, signal 200957/326196 (executing program) 2021/09/20 17:59:19 fetching corpus: 7595, signal 201327/327093 (executing program) 2021/09/20 17:59:19 fetching corpus: 7645, signal 201823/327961 (executing program) 2021/09/20 17:59:19 fetching corpus: 7695, signal 202251/328858 (executing program) 2021/09/20 17:59:19 fetching corpus: 7745, signal 202636/329696 (executing program) 2021/09/20 17:59:20 fetching corpus: 7795, signal 203182/330556 (executing program) 2021/09/20 17:59:20 fetching corpus: 7845, signal 203519/331396 (executing program) 2021/09/20 17:59:20 fetching corpus: 7895, signal 204048/332253 (executing program) 2021/09/20 17:59:20 fetching corpus: 7945, signal 204445/333092 (executing program) 2021/09/20 17:59:20 fetching corpus: 7995, signal 205032/333916 (executing program) 2021/09/20 17:59:20 fetching corpus: 8045, signal 205434/334747 (executing program) 2021/09/20 17:59:20 fetching corpus: 8095, signal 205912/335585 (executing program) 2021/09/20 17:59:20 fetching corpus: 8145, signal 206524/336381 (executing program) 2021/09/20 17:59:20 fetching corpus: 8195, signal 207239/337211 (executing program) 2021/09/20 17:59:20 fetching corpus: 8245, signal 207952/338065 (executing program) 2021/09/20 17:59:20 fetching corpus: 8295, signal 208451/338812 (executing program) 2021/09/20 17:59:21 fetching corpus: 8345, signal 208875/339622 (executing program) 2021/09/20 17:59:21 fetching corpus: 8395, signal 209230/340394 (executing program) 2021/09/20 17:59:21 fetching corpus: 8445, signal 209780/341186 (executing program) 2021/09/20 17:59:21 fetching corpus: 8495, signal 210055/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8545, signal 210467/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8595, signal 210840/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8645, signal 211231/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8695, signal 211652/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8744, signal 212000/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8794, signal 212404/341801 (executing program) 2021/09/20 17:59:21 fetching corpus: 8844, signal 212826/341801 (executing program) 2021/09/20 17:59:22 fetching corpus: 8894, signal 213306/341801 (executing program) 2021/09/20 17:59:22 fetching corpus: 8944, signal 213806/341801 (executing program) 2021/09/20 17:59:22 fetching corpus: 8994, signal 214277/341808 (executing program) 2021/09/20 17:59:22 fetching corpus: 9044, signal 214686/341820 (executing program) 2021/09/20 17:59:22 fetching corpus: 9093, signal 215169/341820 (executing program) 2021/09/20 17:59:22 fetching corpus: 9143, signal 215699/341820 (executing program) 2021/09/20 17:59:22 fetching corpus: 9193, signal 216173/341820 (executing program) 2021/09/20 17:59:22 fetching corpus: 9243, signal 216533/341828 (executing program) 2021/09/20 17:59:22 fetching corpus: 9293, signal 217313/341828 (executing program) 2021/09/20 17:59:22 fetching corpus: 9343, signal 217872/341828 (executing program) 2021/09/20 17:59:23 fetching corpus: 9393, signal 218361/341828 (executing program) 2021/09/20 17:59:23 fetching corpus: 9443, signal 218757/341828 (executing program) 2021/09/20 17:59:23 fetching corpus: 9493, signal 219144/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9543, signal 219585/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9593, signal 220039/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9643, signal 220334/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9693, signal 220758/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9743, signal 221071/341843 (executing program) 2021/09/20 17:59:23 fetching corpus: 9792, signal 221546/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 9842, signal 221819/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 9892, signal 222229/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 9942, signal 222665/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 9992, signal 223115/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 10042, signal 223675/341843 (executing program) 2021/09/20 17:59:24 fetching corpus: 10092, signal 224042/341846 (executing program) 2021/09/20 17:59:24 fetching corpus: 10142, signal 224364/341846 (executing program) 2021/09/20 17:59:24 fetching corpus: 10192, signal 224757/341846 (executing program) 2021/09/20 17:59:24 fetching corpus: 10242, signal 225114/341846 (executing program) 2021/09/20 17:59:24 fetching corpus: 10292, signal 225465/341846 (executing program) 2021/09/20 17:59:24 fetching corpus: 10342, signal 225761/341846 (executing program) 2021/09/20 17:59:25 fetching corpus: 10392, signal 226045/341846 (executing program) 2021/09/20 17:59:25 fetching corpus: 10441, signal 226546/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10491, signal 227284/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10541, signal 227728/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10591, signal 228247/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10641, signal 228556/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10691, signal 229034/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10741, signal 229406/341859 (executing program) 2021/09/20 17:59:25 fetching corpus: 10791, signal 229712/341862 (executing program) 2021/09/20 17:59:25 fetching corpus: 10841, signal 230180/341862 (executing program) 2021/09/20 17:59:26 fetching corpus: 10891, signal 230549/341862 (executing program) 2021/09/20 17:59:26 fetching corpus: 10941, signal 230831/341864 (executing program) 2021/09/20 17:59:26 fetching corpus: 10991, signal 231170/341864 (executing program) 2021/09/20 17:59:26 fetching corpus: 11041, signal 231783/341864 (executing program) 2021/09/20 17:59:26 fetching corpus: 11091, signal 232142/341883 (executing program) 2021/09/20 17:59:26 fetching corpus: 11141, signal 232651/341883 (executing program) 2021/09/20 17:59:26 fetching corpus: 11191, signal 233080/341883 (executing program) 2021/09/20 17:59:26 fetching corpus: 11241, signal 233503/341883 (executing program) 2021/09/20 17:59:26 fetching corpus: 11291, signal 233989/341883 (executing program) 2021/09/20 17:59:26 fetching corpus: 11341, signal 234479/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11391, signal 234892/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11441, signal 235285/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11490, signal 235602/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11539, signal 236223/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11589, signal 236530/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11639, signal 236798/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11689, signal 237139/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11739, signal 237376/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11789, signal 237762/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11839, signal 238308/341883 (executing program) 2021/09/20 17:59:27 fetching corpus: 11889, signal 239681/341883 (executing program) 2021/09/20 17:59:28 fetching corpus: 11939, signal 239982/341883 (executing program) 2021/09/20 17:59:28 fetching corpus: 11989, signal 240244/341883 (executing program) 2021/09/20 17:59:28 fetching corpus: 12039, signal 240585/341883 (executing program) 2021/09/20 17:59:28 fetching corpus: 12089, signal 241307/341883 (executing program) 2021/09/20 17:59:28 fetching corpus: 12139, signal 241651/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12189, signal 242026/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12239, signal 242260/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12289, signal 242634/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12339, signal 242983/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12389, signal 243302/341900 (executing program) 2021/09/20 17:59:28 fetching corpus: 12439, signal 243641/341901 (executing program) 2021/09/20 17:59:28 fetching corpus: 12489, signal 243975/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12539, signal 244204/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12589, signal 244479/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12639, signal 244755/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12689, signal 245337/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12739, signal 245571/341901 (executing program) 2021/09/20 17:59:29 fetching corpus: 12789, signal 245885/341903 (executing program) 2021/09/20 17:59:29 fetching corpus: 12839, signal 246152/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 12889, signal 246432/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 12939, signal 246743/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 12989, signal 247104/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 13039, signal 247574/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 13089, signal 247814/341917 (executing program) 2021/09/20 17:59:29 fetching corpus: 13139, signal 248229/341917 (executing program) 2021/09/20 17:59:30 fetching corpus: 13189, signal 248534/341917 (executing program) 2021/09/20 17:59:30 fetching corpus: 13239, signal 248827/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13289, signal 249207/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13338, signal 249427/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13388, signal 249714/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13437, signal 250248/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13487, signal 250712/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13537, signal 250979/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13587, signal 251332/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13637, signal 251570/341924 (executing program) 2021/09/20 17:59:30 fetching corpus: 13687, signal 251914/341924 (executing program) 2021/09/20 17:59:31 fetching corpus: 13737, signal 252279/341924 (executing program) 2021/09/20 17:59:31 fetching corpus: 13787, signal 252545/341924 (executing program) 2021/09/20 17:59:31 fetching corpus: 13837, signal 253146/341924 (executing program) 2021/09/20 17:59:31 fetching corpus: 13887, signal 253402/341924 (executing program) 2021/09/20 17:59:31 fetching corpus: 13937, signal 253677/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 13987, signal 253980/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 14037, signal 254265/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 14087, signal 254574/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 14137, signal 254847/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 14187, signal 255101/341928 (executing program) 2021/09/20 17:59:31 fetching corpus: 14237, signal 255510/341928 (executing program) 2021/09/20 17:59:32 fetching corpus: 14287, signal 255847/341931 (executing program) 2021/09/20 17:59:32 fetching corpus: 14337, signal 256159/341931 (executing program) 2021/09/20 17:59:32 fetching corpus: 14387, signal 256571/341931 (executing program) 2021/09/20 17:59:32 fetching corpus: 14437, signal 256875/341933 (executing program) 2021/09/20 17:59:32 fetching corpus: 14487, signal 257130/341933 (executing program) 2021/09/20 17:59:32 fetching corpus: 14537, signal 257388/341947 (executing program) 2021/09/20 17:59:32 fetching corpus: 14587, signal 257725/341947 (executing program) 2021/09/20 17:59:32 fetching corpus: 14637, signal 258040/341947 (executing program) 2021/09/20 17:59:32 fetching corpus: 14687, signal 258389/341947 (executing program) 2021/09/20 17:59:32 fetching corpus: 14737, signal 258562/341950 (executing program) 2021/09/20 17:59:32 fetching corpus: 14787, signal 258999/341950 (executing program) 2021/09/20 17:59:32 fetching corpus: 14837, signal 259241/341950 (executing program) 2021/09/20 17:59:32 fetching corpus: 14887, signal 259555/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 14937, signal 260042/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 14987, signal 260337/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15037, signal 260696/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15086, signal 261111/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15136, signal 261371/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15186, signal 261832/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15236, signal 262053/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15286, signal 262301/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15336, signal 262612/341950 (executing program) 2021/09/20 17:59:33 fetching corpus: 15386, signal 263067/341950 (executing program) 2021/09/20 17:59:34 fetching corpus: 15436, signal 263355/341950 (executing program) 2021/09/20 17:59:34 fetching corpus: 15486, signal 263620/342047 (executing program) 2021/09/20 17:59:34 fetching corpus: 15536, signal 263886/342047 (executing program) 2021/09/20 17:59:34 fetching corpus: 15586, signal 264185/342047 (executing program) 2021/09/20 17:59:34 fetching corpus: 15636, signal 264569/342047 (executing program) 2021/09/20 17:59:34 fetching corpus: 15686, signal 264818/342047 (executing program) 2021/09/20 17:59:34 fetching corpus: 15736, signal 265186/342050 (executing program) 2021/09/20 17:59:34 fetching corpus: 15786, signal 265425/342050 (executing program) 2021/09/20 17:59:34 fetching corpus: 15836, signal 265696/342050 (executing program) 2021/09/20 17:59:34 fetching corpus: 15886, signal 265966/342050 (executing program) 2021/09/20 17:59:34 fetching corpus: 15936, signal 266439/342050 (executing program) 2021/09/20 17:59:34 fetching corpus: 15986, signal 266692/342050 (executing program) 2021/09/20 17:59:35 fetching corpus: 16036, signal 266986/342050 (executing program) 2021/09/20 17:59:35 fetching corpus: 16086, signal 267340/342050 (executing program) 2021/09/20 17:59:35 fetching corpus: 16136, signal 267631/342054 (executing program) 2021/09/20 17:59:35 fetching corpus: 16186, signal 267826/342054 (executing program) 2021/09/20 17:59:35 fetching corpus: 16236, signal 268120/342054 (executing program) 2021/09/20 17:59:35 fetching corpus: 16286, signal 268397/342054 (executing program) 2021/09/20 17:59:35 fetching corpus: 16336, signal 268584/342067 (executing program) 2021/09/20 17:59:35 fetching corpus: 16386, signal 268777/342067 (executing program) 2021/09/20 17:59:35 fetching corpus: 16436, signal 269032/342067 (executing program) 2021/09/20 17:59:35 fetching corpus: 16486, signal 269310/342067 (executing program) 2021/09/20 17:59:35 fetching corpus: 16536, signal 269593/342067 (executing program) 2021/09/20 17:59:35 fetching corpus: 16586, signal 269912/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16636, signal 270140/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16686, signal 270469/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16736, signal 270687/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16786, signal 270951/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16836, signal 271298/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16886, signal 271635/342067 (executing program) 2021/09/20 17:59:36 fetching corpus: 16936, signal 271875/342070 (executing program) 2021/09/20 17:59:36 fetching corpus: 16986, signal 272107/342070 (executing program) 2021/09/20 17:59:36 fetching corpus: 17036, signal 272484/342070 (executing program) 2021/09/20 17:59:36 fetching corpus: 17086, signal 272800/342070 (executing program) 2021/09/20 17:59:36 fetching corpus: 17135, signal 273213/342074 (executing program) 2021/09/20 17:59:36 fetching corpus: 17185, signal 273457/342074 (executing program) 2021/09/20 17:59:36 fetching corpus: 17235, signal 273631/342074 (executing program) 2021/09/20 17:59:36 fetching corpus: 17285, signal 273814/342074 (executing program) 2021/09/20 17:59:37 fetching corpus: 17335, signal 274127/342074 (executing program) 2021/09/20 17:59:37 fetching corpus: 17385, signal 274357/342074 (executing program) 2021/09/20 17:59:37 fetching corpus: 17435, signal 274871/342074 (executing program) 2021/09/20 17:59:37 fetching corpus: 17485, signal 275094/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17535, signal 275326/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17585, signal 275632/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17635, signal 275863/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17685, signal 276456/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17735, signal 276658/342075 (executing program) 2021/09/20 17:59:37 fetching corpus: 17785, signal 276916/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 17835, signal 277151/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 17885, signal 277494/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 17935, signal 277724/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 17985, signal 277963/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 18035, signal 278187/342075 (executing program) 2021/09/20 17:59:38 fetching corpus: 18085, signal 278398/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18135, signal 278626/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18185, signal 278827/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18235, signal 279132/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18285, signal 279408/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18335, signal 279694/342092 (executing program) 2021/09/20 17:59:38 fetching corpus: 18385, signal 279943/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18435, signal 280163/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18485, signal 280537/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18535, signal 280764/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18585, signal 280980/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18635, signal 281247/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18685, signal 281462/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18735, signal 281779/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18785, signal 281997/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18835, signal 282328/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18885, signal 282716/342092 (executing program) 2021/09/20 17:59:39 fetching corpus: 18935, signal 282944/342092 (executing program) 2021/09/20 17:59:40 fetching corpus: 18985, signal 283246/342099 (executing program) 2021/09/20 17:59:40 fetching corpus: 19035, signal 283445/342099 (executing program) 2021/09/20 17:59:40 fetching corpus: 19085, signal 283660/342099 (executing program) 2021/09/20 17:59:40 fetching corpus: 19135, signal 283892/342099 (executing program) 2021/09/20 17:59:40 fetching corpus: 19185, signal 284206/342099 (executing program) 2021/09/20 17:59:40 fetching corpus: 19235, signal 284402/342109 (executing program) 2021/09/20 17:59:40 fetching corpus: 19285, signal 284612/342109 (executing program) 2021/09/20 17:59:40 fetching corpus: 19335, signal 284969/342109 (executing program) 2021/09/20 17:59:40 fetching corpus: 19384, signal 285280/342109 (executing program) 2021/09/20 17:59:40 fetching corpus: 19434, signal 285510/342109 (executing program) 2021/09/20 17:59:40 fetching corpus: 19484, signal 285764/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19534, signal 286011/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19584, signal 286297/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19634, signal 286597/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19684, signal 286828/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19734, signal 287021/342109 (executing program) 2021/09/20 17:59:41 fetching corpus: 19784, signal 287461/342113 (executing program) 2021/09/20 17:59:41 fetching corpus: 19834, signal 287719/342125 (executing program) 2021/09/20 17:59:41 fetching corpus: 19884, signal 287888/342125 (executing program) 2021/09/20 17:59:41 fetching corpus: 19934, signal 288179/342125 (executing program) 2021/09/20 17:59:41 fetching corpus: 19984, signal 288388/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20034, signal 288792/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20084, signal 288972/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20134, signal 289551/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20184, signal 289793/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20234, signal 290082/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20284, signal 290295/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20334, signal 290604/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20384, signal 290858/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20434, signal 291154/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20484, signal 291442/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20534, signal 291723/342125 (executing program) 2021/09/20 17:59:42 fetching corpus: 20584, signal 292011/342136 (executing program) 2021/09/20 17:59:42 fetching corpus: 20634, signal 292249/342136 (executing program) 2021/09/20 17:59:42 fetching corpus: 20684, signal 292431/342136 (executing program) 2021/09/20 17:59:43 fetching corpus: 20734, signal 292834/342136 (executing program) 2021/09/20 17:59:43 fetching corpus: 20784, signal 293173/342136 (executing program) 2021/09/20 17:59:43 fetching corpus: 20834, signal 293888/342136 (executing program) 2021/09/20 17:59:43 fetching corpus: 20884, signal 294088/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 20934, signal 294318/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 20984, signal 294523/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 21034, signal 294847/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 21084, signal 295019/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 21133, signal 295224/342138 (executing program) 2021/09/20 17:59:43 fetching corpus: 21183, signal 295607/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21233, signal 295868/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21283, signal 296068/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21333, signal 296251/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21383, signal 296477/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21433, signal 296719/342138 (executing program) 2021/09/20 17:59:44 fetching corpus: 21483, signal 297095/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21533, signal 297263/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21583, signal 297695/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21633, signal 297930/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21683, signal 298185/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21733, signal 298456/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21783, signal 298667/342147 (executing program) 2021/09/20 17:59:44 fetching corpus: 21833, signal 298885/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 21883, signal 299125/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 21933, signal 299363/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 21983, signal 299572/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22033, signal 299757/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22083, signal 299934/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22133, signal 300206/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22183, signal 300437/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22233, signal 300642/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22283, signal 300948/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22333, signal 301131/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22383, signal 301339/342147 (executing program) 2021/09/20 17:59:45 fetching corpus: 22433, signal 301518/342147 (executing program) 2021/09/20 17:59:46 fetching corpus: 22483, signal 301833/342153 (executing program) 2021/09/20 17:59:46 fetching corpus: 22533, signal 302016/342153 (executing program) 2021/09/20 17:59:46 fetching corpus: 22583, signal 302338/342153 (executing program) 2021/09/20 17:59:46 fetching corpus: 22633, signal 302577/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22682, signal 302885/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22732, signal 303069/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22782, signal 303578/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22832, signal 303735/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22882, signal 304030/342184 (executing program) 2021/09/20 17:59:46 fetching corpus: 22932, signal 304318/342184 (executing program) 2021/09/20 17:59:47 fetching corpus: 22982, signal 304604/342184 (executing program) 2021/09/20 17:59:47 fetching corpus: 23032, signal 304833/342184 (executing program) 2021/09/20 17:59:47 fetching corpus: 23082, signal 305041/342184 (executing program) 2021/09/20 17:59:47 fetching corpus: 23132, signal 305327/342184 (executing program) 2021/09/20 17:59:47 fetching corpus: 23182, signal 305515/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23232, signal 305827/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23282, signal 306048/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23332, signal 306265/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23382, signal 306636/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23432, signal 306853/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23482, signal 307082/342187 (executing program) 2021/09/20 17:59:47 fetching corpus: 23532, signal 307383/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23582, signal 307598/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23632, signal 307826/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23682, signal 308057/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23732, signal 308213/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23782, signal 308454/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23832, signal 308624/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23882, signal 308896/342187 (executing program) 2021/09/20 17:59:48 fetching corpus: 23932, signal 309232/342200 (executing program) 2021/09/20 17:59:48 fetching corpus: 23982, signal 309474/342200 (executing program) 2021/09/20 17:59:48 fetching corpus: 24032, signal 309689/342200 (executing program) 2021/09/20 17:59:48 fetching corpus: 24082, signal 309860/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24132, signal 310042/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24182, signal 310273/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24232, signal 310442/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24282, signal 310701/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24332, signal 310987/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24382, signal 311126/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24432, signal 311311/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24482, signal 311501/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24532, signal 311885/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24582, signal 312128/342200 (executing program) 2021/09/20 17:59:49 fetching corpus: 24632, signal 312332/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24682, signal 312580/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24732, signal 312829/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24782, signal 313049/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24832, signal 313301/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24882, signal 313526/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24932, signal 313721/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 24982, signal 313948/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 25032, signal 314101/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 25082, signal 314327/342200 (executing program) 2021/09/20 17:59:50 fetching corpus: 25132, signal 314582/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25182, signal 314824/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25232, signal 314994/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25282, signal 315160/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25332, signal 315364/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25382, signal 315524/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25432, signal 315725/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25482, signal 315957/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25532, signal 316380/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25582, signal 316593/342200 (executing program) 2021/09/20 17:59:51 fetching corpus: 25632, signal 316769/342200 (executing program) 2021/09/20 17:59:52 fetching corpus: 25682, signal 316948/342200 (executing program) 2021/09/20 17:59:52 fetching corpus: 25732, signal 317186/342200 (executing program) 2021/09/20 17:59:52 fetching corpus: 25782, signal 317391/342200 (executing program) 2021/09/20 17:59:52 fetching corpus: 25832, signal 317608/342200 (executing program) 2021/09/20 17:59:52 fetching corpus: 25882, signal 317780/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 25932, signal 317988/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 25982, signal 318301/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 26032, signal 318541/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 26082, signal 318741/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 26132, signal 319010/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 26182, signal 319202/342206 (executing program) 2021/09/20 17:59:52 fetching corpus: 26231, signal 319423/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26281, signal 319549/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26331, signal 319724/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26381, signal 319931/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26431, signal 320155/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26481, signal 320378/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26531, signal 320652/342206 (executing program) 2021/09/20 17:59:53 fetching corpus: 26581, signal 320995/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26631, signal 321386/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26681, signal 321585/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26731, signal 321768/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26781, signal 321944/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26831, signal 322132/342212 (executing program) 2021/09/20 17:59:53 fetching corpus: 26881, signal 322336/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 26931, signal 322498/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 26981, signal 322743/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27031, signal 323044/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27081, signal 323978/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27131, signal 324192/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27181, signal 324356/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27231, signal 324642/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27281, signal 324865/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27331, signal 325063/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27381, signal 325299/342212 (executing program) 2021/09/20 17:59:54 fetching corpus: 27431, signal 325554/342212 (executing program) 2021/09/20 17:59:55 fetching corpus: 27481, signal 325722/342212 (executing program) 2021/09/20 17:59:55 fetching corpus: 27531, signal 325887/342212 (executing program) 2021/09/20 17:59:55 fetching corpus: 27581, signal 326078/342212 (executing program) 2021/09/20 17:59:55 fetching corpus: 27631, signal 326313/342212 (executing program) 2021/09/20 17:59:55 fetching corpus: 27681, signal 326618/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27731, signal 326776/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27781, signal 326969/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27831, signal 327141/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27881, signal 327366/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27931, signal 327508/342240 (executing program) 2021/09/20 17:59:55 fetching corpus: 27981, signal 327712/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28031, signal 327844/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28081, signal 328044/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28131, signal 328250/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28181, signal 328436/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28231, signal 328658/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28281, signal 328848/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28297, signal 328901/342240 (executing program) 2021/09/20 17:59:56 fetching corpus: 28297, signal 328901/342240 (executing program) 2021/09/20 17:59:58 starting 6 fuzzer processes 18:00:02 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) [ 193.548165][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 193.818620][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.826236][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.835315][ T8242] device bridge_slave_0 entered promiscuous mode [ 193.851959][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.859510][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.868505][ T8242] device bridge_slave_1 entered promiscuous mode [ 193.916115][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.932538][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.976923][ T8242] team0: Port device team_slave_0 added [ 193.988189][ T8242] team0: Port device team_slave_1 added [ 194.028811][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.036320][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.062911][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.078469][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.085809][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.112056][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.167029][ T8242] device hsr_slave_0 entered promiscuous mode [ 194.177146][ T8242] device hsr_slave_1 entered promiscuous mode [ 194.382288][ T8242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.412150][ T8242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.441861][ T8242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.461393][ T8242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.639245][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.666869][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.675794][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.694939][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.715574][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.725456][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.734790][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.742112][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.785791][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.795142][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.804783][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.813954][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.821378][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.830186][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.840558][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.851020][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.860955][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.872736][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.890011][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.899960][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.938556][ T8242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.949266][ T8242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.966054][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.975645][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.985427][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.994846][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.015294][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.047466][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.055354][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.081543][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.115998][ T3088] Bluetooth: hci0: command 0x0409 tx timeout [ 195.131935][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.141826][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.188266][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.197744][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.216602][ T8242] device veth0_vlan entered promiscuous mode [ 195.225813][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.234654][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.258122][ T8242] device veth1_vlan entered promiscuous mode [ 195.317201][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.326372][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.335510][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.345164][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.362989][ T8242] device veth0_macvtap entered promiscuous mode [ 195.379616][ T8242] device veth1_macvtap entered promiscuous mode [ 195.423042][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.432802][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.441939][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.451157][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.460797][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.480739][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.495609][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.505571][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.517234][ T8242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.526508][ T8242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.535540][ T8242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.544526][ T8242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.973817][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.982336][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.991049][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.056951][ T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.065279][ T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.073583][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:00:06 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) 18:00:07 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) 18:00:07 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) 18:00:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="20b637cb4f0078"], 0x20}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 18:00:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="20b637cb4f0078"], 0x20}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) [ 197.196266][ T3088] Bluetooth: hci0: command 0x041b tx timeout 18:00:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="20b637cb4f0078"], 0x20}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 18:00:08 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="20b637cb4f0078"], 0x20}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "7a7925e639"}, 0x9) 18:00:08 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="02010f0000000a000000ff45ac000000000063000000060000000000024000ffe6cb60953357e52900008877007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 198.198607][ T8527] loop0: detected capacity change from 0 to 1 [ 198.256585][ T8527] loop0: p1 < > p2 p3 p4 [ 198.261006][ T8527] loop0: partition table partially beyond EOD, truncated [ 198.268736][ T8527] loop0: p1 start 10 is beyond EOD, truncated [ 198.275179][ T8527] loop0: p2 start 6 is beyond EOD, truncated [ 198.281266][ T8527] loop0: p3 start 10725 is beyond EOD, truncated [ 198.287857][ T8527] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:00:08 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="02010f0000000a000000ff45ac000000000063000000060000000000024000ffe6cb60953357e52900008877007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 198.704140][ T8537] loop0: detected capacity change from 0 to 1 [ 198.748440][ T8537] loop0: p1 < > p2 p3 p4 [ 198.753414][ T8537] loop0: partition table partially beyond EOD, truncated [ 198.761055][ T8537] loop0: p1 start 10 is beyond EOD, truncated [ 198.767499][ T8537] loop0: p2 start 6 is beyond EOD, truncated [ 198.773589][ T8537] loop0: p3 start 10725 is beyond EOD, truncated [ 198.780130][ T8537] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:00:09 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="02010f0000000a000000ff45ac000000000063000000060000000000024000ffe6cb60953357e52900008877007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 199.066995][ T8545] loop0: detected capacity change from 0 to 1 [ 199.115990][ T8545] loop0: p1 < > p2 p3 p4 [ 199.120410][ T8545] loop0: partition table partially beyond EOD, truncated [ 199.128087][ T8545] loop0: p1 start 10 is beyond EOD, truncated [ 199.134502][ T8545] loop0: p2 start 6 is beyond EOD, truncated [ 199.140592][ T8545] loop0: p3 start 10725 is beyond EOD, truncated [ 199.147139][ T8545] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:00:09 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="02010f0000000a000000ff45ac000000000063000000060000000000024000ffe6cb60953357e52900008877007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 199.274422][ T3088] Bluetooth: hci0: command 0x040f tx timeout [ 199.470206][ T8556] loop0: detected capacity change from 0 to 1 [ 199.534506][ T8556] loop0: p1 < > p2 p3 p4 [ 199.538990][ T8556] loop0: partition table partially beyond EOD, truncated [ 199.546576][ T8556] loop0: p1 start 10 is beyond EOD, truncated [ 199.552777][ T8556] loop0: p2 start 6 is beyond EOD, truncated [ 199.559044][ T8556] loop0: p3 start 10725 is beyond EOD, truncated [ 199.565598][ T8556] loop0: p4 size 3657465856 extends beyond EOD, truncated 18:00:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x1b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:00:10 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000c04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0), 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 201.367593][ T3088] Bluetooth: hci0: command 0x0419 tx timeout [ 202.263950][ T8568] chnl_net:caif_netlink_parms(): no params data found 18:00:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b000000003f001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 202.469384][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.476799][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.485889][ T8568] device bridge_slave_0 entered promiscuous mode [ 202.528304][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.536136][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.557202][ T8568] device bridge_slave_1 entered promiscuous mode [ 202.587481][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.649522][ T3120] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.656061][ T3120] ieee802154 phy1 wpan1: encryption failed: -22 18:00:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b000000003f001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 202.696314][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.732716][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.782001][ T8568] team0: Port device team_slave_0 added [ 202.794472][ T8568] team0: Port device team_slave_1 added [ 202.832393][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.839554][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.866860][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.883113][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.890355][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.916588][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.982595][ T8568] device hsr_slave_0 entered promiscuous mode [ 203.007891][ T8568] device hsr_slave_1 entered promiscuous mode [ 203.025584][ T8568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.033233][ T8568] Cannot create hsr debugfs directory [ 203.051119][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.076749][ T8774] bond2 (uninitialized): Released all slaves 18:00:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b000000003f001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 203.413609][ T8568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.429404][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.454778][ T8822] bond2 (uninitialized): Released all slaves [ 203.462880][ T8568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.485258][ T8568] netdevsim netdevsim1 netdevsim2: renamed from eth2 18:00:14 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b000000003f001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 203.515531][ T8568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.781343][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.827485][ T8829] bond2 (uninitialized): Released all slaves [ 203.834660][ T3088] Bluetooth: hci1: command 0x0409 tx timeout 18:00:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000002000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000008000010", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000000040)="ffff", 0x2, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013200)="ed41000000080000d2f4655fd2f4655fd2f4655f00000000000002000400000000000800030000000af3010004000000000000000000000001000000200000000000000000000000000000000000000000000000000000000000000000000000000000003ad464bc000000000000000000000000000000000000000000000000ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000024000000000000000000000000000000000000000000000000000000000000000000000000000000831f2e05000000000000000000000000000000000000000000000000ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3833303138383932382f66696c65302f66696c653000000000000000000000000000000000000000000000790726b3000000000000000000000000000000000000000000000000ed8100000a000000d2f4655fd2f4655fd2f4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000025000000000000000000000000000000000000000000000000000000000000000000000000000000a32dcc89210000000000000000000000000000000000000000000000ed81", 0x202, 0x11580}], 0x0, &(0x7f00000000c0)) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x8, 0x8, 0x7, 0x4, 0x0, 0x6, 0x40248, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x2b, 0x80000000}, 0x1, 0x0, 0x7, 0x2, 0xc5, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000002c0)={0x0, 0xfb, 0x7e, 0x1, 0xff, "529666ed7908658e7e97600c44d36f40", "8c7ec246e7641f9512f59adce41416cd01e9d11f650be22df1af32e84330f05961d1f3e47aee7b5f01432dbb93332e93f9c1f165494fd8117e3e81676c65e2341cb0df2961db05049f6bcd9c49f25383751d9584e53865decf027af9fa83707c40eeffb38d0a9578c8"}, 0x7e, 0x2) [ 203.932192][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.018998][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.027889][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.046862][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.056524][ T8833] loop0: detected capacity change from 0 to 264192 [ 204.081300][ T8833] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 204.101134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.110896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.116795][ T8833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.120086][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.132664][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.145320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.155600][ T8833] Quota error (device loop0): write_blk: dquota write failed [ 204.163135][ T8833] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 204.175171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.185536][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.194736][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.202079][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.216379][ T8833] Quota error (device loop0): write_blk: dquota write failed [ 204.224068][ T8833] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 204.248124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.258707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.269226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.279206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.289246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.299121][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.309148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.312873][ T8833] Quota error (device loop0): write_blk: dquota write failed [ 204.318388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.324885][ T8833] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 204.342747][ T8833] EXT4-fs (loop0): 1 orphan inode deleted [ 204.355827][ T8568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.368193][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.427159][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.442342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.452584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.459756][ T8833] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.461991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.480882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.488755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.602688][ T8568] device veth0_vlan entered promiscuous mode [ 204.619108][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.628989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.638648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 18:00:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000002000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000008000010", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000000040)="ffff", 0x2, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013200)="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", 0x202, 0x11580}], 0x0, &(0x7f00000000c0)) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x8, 0x8, 0x7, 0x4, 0x0, 0x6, 0x40248, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x2b, 0x80000000}, 0x1, 0x0, 0x7, 0x2, 0xc5, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000002c0)={0x0, 0xfb, 0x7e, 0x1, 0xff, "529666ed7908658e7e97600c44d36f40", "8c7ec246e7641f9512f59adce41416cd01e9d11f650be22df1af32e84330f05961d1f3e47aee7b5f01432dbb93332e93f9c1f165494fd8117e3e81676c65e2341cb0df2961db05049f6bcd9c49f25383751d9584e53865decf027af9fa83707c40eeffb38d0a9578c8"}, 0x7e, 0x2) [ 204.647844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.666265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.675153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.723460][ T8568] device veth1_vlan entered promiscuous mode [ 204.852743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.862030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.871549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.881192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.928001][ T8568] device veth0_macvtap entered promiscuous mode [ 204.952708][ T8568] device veth1_macvtap entered promiscuous mode [ 205.059223][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 205.070308][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.082898][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.091012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.094884][ T8845] loop0: detected capacity change from 0 to 264192 [ 205.100248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.114073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.124116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.179810][ T8845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 205.195118][ T8845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 205.211543][ T8845] Quota error (device loop0): write_blk: dquota write failed [ 205.219322][ T8845] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 205.239366][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 205.250200][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.262814][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.273468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.283213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.314045][ T8568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.318109][ T8845] Quota error (device loop0): write_blk: dquota write failed [ 205.323178][ T8568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.330623][ T8845] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 205.339400][ T8568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.358946][ T8568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.392229][ T8845] EXT4-fs (loop0): 1 orphan inode deleted [ 205.399515][ T8845] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:00:16 executing program 0: syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_secctx_to_secid\x00') [ 205.915183][ T3088] Bluetooth: hci1: command 0x041b tx timeout 18:00:16 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) write$binfmt_misc(r3, &(0x7f00000002c0)={'syz1', "e6f58d1216c2fd90aff56642810409dc081fa1eb8f5f9ccc5611b000554e2246588b90abdcaebbf6a315e2e882a2078a9d16cee725f7154d3d5c4d92d742f6b4e95f8376c30201944c7b7a7663c786ac5082b4243e1990f3c7528857d530f7f58d7520ff37a292be755446e3e27def66bb0c396da8fbce898e73589c56c61d033d618f4e5f765a38b2c92c82a1a28c8d348f8a2ecefad388d853c0ff90bf8285337f36c333481018e1d235798fc38d846976f32ba6e5be03a5c973342d8e3019f7e59ffb12ed78"}, 0xcb) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 206.314327][ C1] hrtimer: interrupt took 70316 ns [ 206.367252][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.375364][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.383151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.590332][ T731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.598727][ T731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.615190][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:00:17 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) write$binfmt_misc(r3, &(0x7f00000002c0)={'syz1', "e6f58d1216c2fd90aff56642810409dc081fa1eb8f5f9ccc5611b000554e2246588b90abdcaebbf6a315e2e882a2078a9d16cee725f7154d3d5c4d92d742f6b4e95f8376c30201944c7b7a7663c786ac5082b4243e1990f3c7528857d530f7f58d7520ff37a292be755446e3e27def66bb0c396da8fbce898e73589c56c61d033d618f4e5f765a38b2c92c82a1a28c8d348f8a2ecefad388d853c0ff90bf8285337f36c333481018e1d235798fc38d846976f32ba6e5be03a5c973342d8e3019f7e59ffb12ed78"}, 0xcb) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 18:00:17 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000c04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0), 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 18:00:18 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000c04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0), 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 18:00:18 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) write$binfmt_misc(r3, &(0x7f00000002c0)={'syz1', "e6f58d1216c2fd90aff56642810409dc081fa1eb8f5f9ccc5611b000554e2246588b90abdcaebbf6a315e2e882a2078a9d16cee725f7154d3d5c4d92d742f6b4e95f8376c30201944c7b7a7663c786ac5082b4243e1990f3c7528857d530f7f58d7520ff37a292be755446e3e27def66bb0c396da8fbce898e73589c56c61d033d618f4e5f765a38b2c92c82a1a28c8d348f8a2ecefad388d853c0ff90bf8285337f36c333481018e1d235798fc38d846976f32ba6e5be03a5c973342d8e3019f7e59ffb12ed78"}, 0xcb) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 18:00:18 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000c04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0), 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) [ 207.995981][ T59] Bluetooth: hci1: command 0x040f tx timeout 18:00:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4e4a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x22040880) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'veth1_to_batadv\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb83f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}}, 0xc0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79c}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x4800) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = accept4$netrom(r1, &(0x7f0000000100)={{}, [@bcast, @null, @remote, @null, @rose, @netrom, @remote, @default]}, &(0x7f00000001c0)=0x48, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@buf) 18:00:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) r6 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x101, @mcast2, 0x8}, 0x1c) open(&(0x7f0000000340)='./file0\x00', 0x202, 0xa1) 18:00:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) r6 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x101, @mcast2, 0x8}, 0x1c) open(&(0x7f0000000340)='./file0\x00', 0x202, 0xa1) 18:00:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) r6 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x101, @mcast2, 0x8}, 0x1c) open(&(0x7f0000000340)='./file0\x00', 0x202, 0xa1) 18:00:20 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4e4a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x22040880) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'veth1_to_batadv\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb83f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}}, 0xc0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79c}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x4800) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = accept4$netrom(r1, &(0x7f0000000100)={{}, [@bcast, @null, @remote, @null, @rose, @netrom, @remote, @default]}, &(0x7f00000001c0)=0x48, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@buf) 18:00:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) r6 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x101, @mcast2, 0x8}, 0x1c) open(&(0x7f0000000340)='./file0\x00', 0x202, 0xa1) 18:00:20 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) r6 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x101, @mcast2, 0x8}, 0x1c) [ 210.084814][ T59] Bluetooth: hci1: command 0x0419 tx timeout 18:00:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x0) 18:00:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) sendto$inet6(r2, &(0x7f0000000240)="044396ca5e4ccca11ef1598f5eb3447c", 0x10, 0x200c000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @local, 0x800}, 0x1c) 18:00:21 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) 18:00:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) 18:00:22 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) getdents(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000440)={0x20, 0x2, 0x4, 0x800, 0x1, {r3, r4/1000+10000}, {0x1, 0xc, 0x99, 0x1, 0xc7, 0x0, "b6a40492"}, 0x9, 0x4, @offset, 0xf0, 0x0, r5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:22 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)) openat$vcsu(0xffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) clock_gettime(0x0, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:23 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 18:00:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x59) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:24 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 18:00:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0xffffffff, @mcast2, 0x8de}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ftruncate(r1, 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:25 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) 18:00:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "c4826453ea4975d6804638da01ac937449259a27147ea1d54212d0337e76be38"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:25 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:26 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) getpgrp(r1) syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) io_setup(0x1d41, &(0x7f0000002380)) 18:00:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x10001}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:26 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) getpgrp(r1) syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) io_setup(0x1d41, &(0x7f0000002380)) 18:00:26 executing program 1: socket$inet6(0xa, 0x2, 0x5) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:27 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) getpgrp(r1) syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) io_setup(0x1d41, &(0x7f0000002380)) 18:00:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:27 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:27 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:27 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:27 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:28 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:28 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:28 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:29 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:29 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:29 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:30 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:30 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:31 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) [ 221.780605][ T9182] chnl_net:caif_netlink_parms(): no params data found [ 222.150129][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.157751][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.166866][ T9182] device bridge_slave_0 entered promiscuous mode [ 222.180483][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.188136][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.197202][ T9182] device bridge_slave_1 entered promiscuous mode [ 222.241712][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.260250][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.306207][ T9182] team0: Port device team_slave_0 added [ 222.318935][ T9182] team0: Port device team_slave_1 added [ 222.356376][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.363411][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.389768][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.408443][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.415599][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.441812][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.495268][ T9182] device hsr_slave_0 entered promiscuous mode [ 222.504786][ T9182] device hsr_slave_1 entered promiscuous mode [ 222.515710][ T9182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.523356][ T9182] Cannot create hsr debugfs directory [ 222.760500][ T9182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.778911][ T9182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.806000][ T9182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.831591][ T9182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.033883][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.066428][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.075510][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.094751][ T9182] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.117430][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.128215][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.137514][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.144888][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.196575][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.205785][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.215387][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.224698][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.231952][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.240825][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.251432][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.261950][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.271956][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.314044][ T9182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.324678][ T9182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.376063][ T55] Bluetooth: hci2: command 0x0409 tx timeout [ 223.382648][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.392173][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.402111][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.412055][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.421458][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.431320][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.440729][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.450083][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.457940][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.470857][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.494676][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.549921][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.559858][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.609836][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.619271][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.638778][ T9182] device veth0_vlan entered promiscuous mode [ 223.647386][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.656335][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.682218][ T9182] device veth1_vlan entered promiscuous mode [ 223.725435][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.734709][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.766109][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.775889][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.792268][ T9182] device veth0_macvtap entered promiscuous mode [ 223.813951][ T9182] device veth1_macvtap entered promiscuous mode [ 223.860083][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.871084][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.881251][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.891991][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.904990][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.913769][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.923155][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.932589][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.942361][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.960901][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.972626][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.982802][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.993531][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.006424][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.018505][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.028231][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.059896][ T9182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.069129][ T9182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.078240][ T9182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.087224][ T9182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.525421][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.533352][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.549960][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.648128][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.656310][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.665422][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:00:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:35 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:35 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) [ 225.438138][ T55] Bluetooth: hci2: command 0x041b tx timeout 18:00:36 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:36 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:36 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:36 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:37 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:37 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:37 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:37 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:37 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:38 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) [ 227.518192][ T55] Bluetooth: hci2: command 0x040f tx timeout 18:00:38 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:38 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:38 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:38 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:39 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:39 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 18:00:39 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:40 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) [ 229.594812][ T55] Bluetooth: hci2: command 0x0419 tx timeout 18:00:40 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:40 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:40 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:41 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:41 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x0, 0x2, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:42 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)=0x0) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) io_submit(r5, 0x2, &(0x7f0000002540)=[&(0x7f0000002480)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f00000023c0)="d6be0c1e9030c28e720851a51fcb289929c6263fb13d370ac215b00d79d9184ec10d613ec1569020633f12d72ffcb58494e7d045fc348df09ed9201fcb1fef300dbac30639c97e40e031679043fb9d1f7ff7161e582bc2866ec854ea98a98354b0b5248a5fdd39c40ac8c61aa1ee1fed3009a07dafbc96ec36ecf74f79af54021b8d7f712ce94a2b8d405c53451b48c5fc4d167e5b78bdf02cf44d1749bdddef734c823be3e06baadd79f3f764f17b8f", 0xb0, 0x1f, 0x0, 0x1, r6}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x8, 0x6000, r0, &(0x7f00000024c0), 0x0, 0xffff, 0x0, 0x2, r3}]) 18:00:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a", 0x32344d59}) 18:00:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:42 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x602, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 18:00:42 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:42 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:43 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 232.711866][ T9606] FAULT_INJECTION: forcing a failure. [ 232.711866][ T9606] name failslab, interval 1, probability 0, space 0, times 1 [ 232.726250][ T9606] CPU: 0 PID: 9606 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 232.734731][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.744892][ T9606] Call Trace: [ 232.748279][ T9606] dump_stack+0x25a/0x2f6 [ 232.752755][ T9606] should_fail+0x8bc/0x9c0 [ 232.757333][ T9606] __should_failslab+0x223/0x2b0 [ 232.762443][ T9606] should_failslab+0x29/0x70 [ 232.767198][ T9606] __kmalloc+0x1a6/0x1160 [ 232.771662][ T9606] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 232.777625][ T9606] ? tomoyo_realpath_from_path+0x152/0xc30 [ 232.783598][ T9606] ? rcu_read_unlock_strict+0x9/0x10 [ 232.789054][ T9606] ? kmsan_get_metadata+0x11b/0x180 [ 232.794423][ T9606] tomoyo_realpath_from_path+0x152/0xc30 [ 232.800196][ T9606] ? kmsan_get_metadata+0x11b/0x180 [ 232.805565][ T9606] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 232.811557][ T9606] ? __srcu_read_lock+0x93/0x100 [ 232.816658][ T9606] tomoyo_path_number_perm+0x2c1/0xb00 [ 232.822275][ T9606] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 232.828538][ T9606] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 232.834769][ T9606] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 232.840923][ T9606] tomoyo_file_ioctl+0x72/0x90 [ 232.845851][ T9606] ? tomoyo_inode_getattr+0x60/0x60 [ 232.851209][ T9606] security_file_ioctl+0x10a/0x210 [ 232.856493][ T9606] __se_compat_sys_ioctl+0x175/0x1150 [ 232.862063][ T9606] ? kmsan_get_metadata+0x11b/0x180 [ 232.867423][ T9606] __ia32_compat_sys_ioctl+0xd9/0x110 [ 232.872940][ T9606] __do_fast_syscall_32+0x96/0xe0 [ 232.878108][ T9606] do_fast_syscall_32+0x3c/0x80 [ 232.883100][ T9606] do_SYSENTER_32+0x1b/0x20 [ 232.887734][ T9606] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 232.894208][ T9606] RIP: 0023:0xf6f4c549 [ 232.898368][ T9606] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.918105][ T9606] RSP: 002b:00000000f45465fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 232.926661][ T9606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 232.934742][ T9606] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.942818][ T9606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.950884][ T9606] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 232.958958][ T9606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.967377][ T9606] ERROR: Out of memory at tomoyo_realpath_from_path. 18:00:43 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(0x0, 0x0) io_setup(0x1d41, &(0x7f0000002380)) 18:00:43 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) r4 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 18:00:44 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(0x0, 0x0) io_setup(0x1d41, &(0x7f0000002380)) 18:00:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:44 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(0x0, 0x0) io_setup(0x1d41, &(0x7f0000002380)) 18:00:44 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) 18:00:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:45 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 236.137858][ T9629] chnl_net:caif_netlink_parms(): no params data found [ 236.307956][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.315676][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.324874][ T9629] device bridge_slave_0 entered promiscuous mode [ 236.339468][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.346932][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.356048][ T9629] device bridge_slave_1 entered promiscuous mode [ 236.406002][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.428215][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.476786][ T9629] team0: Port device team_slave_0 added [ 236.488409][ T9629] team0: Port device team_slave_1 added [ 236.524169][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.531857][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.558096][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.580512][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.588630][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.614850][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.671513][ T9629] device hsr_slave_0 entered promiscuous mode [ 236.685564][ T9629] device hsr_slave_1 entered promiscuous mode [ 236.693920][ T9629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.701861][ T9629] Cannot create hsr debugfs directory [ 236.969450][ T9629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.995653][ T9629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.023478][ T9629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.055873][ T9629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.272635][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.302185][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.311145][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.331800][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.354259][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.364238][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.373585][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.381066][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.426709][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.435906][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.445491][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.454743][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.462015][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.470773][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.481213][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.491733][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.501741][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.545419][ T9629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.555998][ T9629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.605302][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.615044][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.625069][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.635123][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.644520][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.654585][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.663908][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.673281][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.675704][ T55] Bluetooth: hci3: command 0x0409 tx timeout [ 237.681158][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.706991][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.803523][ T9629] device veth0_vlan entered promiscuous mode [ 237.813971][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.822910][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.832623][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.842235][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.851507][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.871609][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.880998][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.909027][ T9629] device veth1_vlan entered promiscuous mode [ 237.985493][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.995107][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.004201][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.013915][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.032900][ T9629] device veth0_macvtap entered promiscuous mode [ 238.058369][ T9629] device veth1_macvtap entered promiscuous mode [ 238.106495][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.117428][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.127490][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.138147][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.148607][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.159353][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.172209][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.180153][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.189302][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.198407][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.208143][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.229471][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.240181][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.250297][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.260990][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.271075][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.282735][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.296119][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.312653][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.322621][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.350613][ T9629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.359637][ T9629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.368755][ T9629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.377758][ T9629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.895565][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.903496][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.911492][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.009356][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.017507][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.028322][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.225069][ T9893] FAULT_INJECTION: forcing a failure. [ 239.225069][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 239.237948][ T9893] CPU: 1 PID: 9893 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 239.246400][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.256546][ T9893] Call Trace: [ 239.259895][ T9893] dump_stack+0x25a/0x2f6 [ 239.264400][ T9893] should_fail+0x8bc/0x9c0 [ 239.269012][ T9893] __should_failslab+0x223/0x2b0 [ 239.274141][ T9893] should_failslab+0x29/0x70 [ 239.278940][ T9893] __kmalloc+0x1a6/0x1160 [ 239.283397][ T9893] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 239.289361][ T9893] ? tomoyo_realpath_from_path+0x152/0xc30 [ 239.295408][ T9893] ? rcu_read_unlock_strict+0x9/0x10 [ 239.300912][ T9893] ? kmsan_get_metadata+0x11b/0x180 [ 239.306275][ T9893] tomoyo_realpath_from_path+0x152/0xc30 [ 239.312084][ T9893] ? kmsan_get_metadata+0x11b/0x180 [ 239.317432][ T9893] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 239.323403][ T9893] ? __srcu_read_lock+0x93/0x100 [ 239.328484][ T9893] tomoyo_path_number_perm+0x2c1/0xb00 [ 239.334097][ T9893] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 239.340348][ T9893] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 239.346580][ T9893] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 239.352728][ T9893] tomoyo_file_ioctl+0x72/0x90 [ 239.357650][ T9893] ? tomoyo_inode_getattr+0x60/0x60 [ 239.363001][ T9893] security_file_ioctl+0x10a/0x210 [ 239.368336][ T9893] __se_compat_sys_ioctl+0x175/0x1150 [ 239.373875][ T9893] ? kmsan_get_metadata+0x11b/0x180 [ 239.379236][ T9893] __ia32_compat_sys_ioctl+0xd9/0x110 [ 239.384754][ T9893] __do_fast_syscall_32+0x96/0xe0 [ 239.389918][ T9893] do_fast_syscall_32+0x3c/0x80 [ 239.394900][ T9893] do_SYSENTER_32+0x1b/0x20 [ 239.399526][ T9893] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 239.406073][ T9893] RIP: 0023:0xf6ef0549 [ 239.410241][ T9893] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.429993][ T9893] RSP: 002b:00000000f44ea5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 239.438545][ T9893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 239.446626][ T9893] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.454694][ T9893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.462759][ T9893] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 239.470826][ T9893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.480468][ T9893] ERROR: Out of memory at tomoyo_realpath_from_path. 18:00:50 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:50 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:50 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) 18:00:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 239.755935][ T55] Bluetooth: hci3: command 0x041b tx timeout 18:00:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 240.028498][ T9905] FAULT_INJECTION: forcing a failure. [ 240.028498][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 240.041725][ T9905] CPU: 0 PID: 9905 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 240.050200][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.060358][ T9905] Call Trace: [ 240.063709][ T9905] dump_stack+0x25a/0x2f6 [ 240.068182][ T9905] should_fail+0x8bc/0x9c0 [ 240.072753][ T9905] __should_failslab+0x223/0x2b0 [ 240.077871][ T9905] should_failslab+0x29/0x70 [ 240.082618][ T9905] __kmalloc+0x1a6/0x1160 [ 240.087078][ T9905] ? tomoyo_encode2+0x629/0xa70 [ 240.092072][ T9905] ? kmsan_get_metadata+0x11b/0x180 [ 240.097422][ T9905] tomoyo_encode2+0x629/0xa70 [ 240.102258][ T9905] tomoyo_realpath_from_path+0xb15/0xc30 [ 240.108067][ T9905] tomoyo_path_number_perm+0x2c1/0xb00 [ 240.113717][ T9905] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 240.119945][ T9905] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 240.126096][ T9905] tomoyo_file_ioctl+0x72/0x90 [ 240.131017][ T9905] ? tomoyo_inode_getattr+0x60/0x60 [ 240.136352][ T9905] security_file_ioctl+0x10a/0x210 [ 240.141613][ T9905] __se_compat_sys_ioctl+0x175/0x1150 [ 240.147131][ T9905] ? kmsan_get_metadata+0x11b/0x180 [ 240.152482][ T9905] __ia32_compat_sys_ioctl+0xd9/0x110 [ 240.157986][ T9905] __do_fast_syscall_32+0x96/0xe0 [ 240.163174][ T9905] do_fast_syscall_32+0x3c/0x80 [ 240.168164][ T9905] do_SYSENTER_32+0x1b/0x20 [ 240.172812][ T9905] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 240.179293][ T9905] RIP: 0023:0xf6ef0549 [ 240.183458][ T9905] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.203204][ T9905] RSP: 002b:00000000f44ea5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 240.211756][ T9905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 240.219838][ T9905] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.227912][ T9905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.235981][ T9905] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 240.244037][ T9905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.255142][ T9905] ERROR: Out of memory at tomoyo_realpath_from_path. 18:00:50 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:50 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) [ 240.590964][ T9911] FAULT_INJECTION: forcing a failure. [ 240.590964][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 240.604002][ T9911] CPU: 1 PID: 9911 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 240.612480][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.622645][ T9911] Call Trace: [ 240.626000][ T9911] dump_stack+0x25a/0x2f6 [ 240.630468][ T9911] should_fail+0x8bc/0x9c0 [ 240.635047][ T9911] __should_failslab+0x223/0x2b0 [ 240.640157][ T9911] should_failslab+0x29/0x70 [ 240.644909][ T9911] kmem_cache_alloc_trace+0x102/0xfb0 [ 240.652411][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.657778][ T9911] ? tomoyo_init_log+0x1d1/0x3b50 [ 240.662936][ T9911] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 240.669357][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.674705][ T9911] tomoyo_init_log+0x1d1/0x3b50 [ 240.679692][ T9911] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 240.686100][ T9911] ? __msan_poison_alloca+0x15a/0x1a0 [ 240.691625][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.696985][ T9911] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 240.703300][ T9911] ? format_decode+0x413/0x1910 [ 240.708401][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.713760][ T9911] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 240.719726][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.725073][ T9911] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 240.731034][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.736397][ T9911] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 240.742394][ T9911] ? tomoyo_domain_quota_is_ok+0x67b/0x890 [ 240.748378][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.753748][ T9911] tomoyo_supervisor+0x8bd/0x2820 [ 240.758925][ T9911] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 240.764896][ T9911] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 240.771310][ T9911] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 240.777295][ T9911] tomoyo_path_number_perm+0x8be/0xb00 [ 240.782950][ T9911] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 240.789182][ T9911] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 240.795343][ T9911] tomoyo_file_ioctl+0x72/0x90 [ 240.800274][ T9911] ? tomoyo_inode_getattr+0x60/0x60 [ 240.805636][ T9911] security_file_ioctl+0x10a/0x210 [ 240.810917][ T9911] __se_compat_sys_ioctl+0x175/0x1150 [ 240.816453][ T9911] ? kmsan_get_metadata+0x11b/0x180 [ 240.821816][ T9911] __ia32_compat_sys_ioctl+0xd9/0x110 [ 240.827322][ T9911] __do_fast_syscall_32+0x96/0xe0 [ 240.832494][ T9911] do_fast_syscall_32+0x3c/0x80 [ 240.837486][ T9911] do_SYSENTER_32+0x1b/0x20 [ 240.842123][ T9911] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 240.848597][ T9911] RIP: 0023:0xf6ef0549 [ 240.852763][ T9911] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.872602][ T9911] RSP: 002b:00000000f44ea5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 240.881158][ T9911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 18:00:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 240.889250][ T9911] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.897340][ T9911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.905419][ T9911] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 240.913499][ T9911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 18:00:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:51 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:51 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:51 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 241.596278][ T9929] FAULT_INJECTION: forcing a failure. [ 241.596278][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 241.609239][ T9929] CPU: 0 PID: 9929 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 241.617703][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.627870][ T9929] Call Trace: [ 241.631229][ T9929] dump_stack+0x25a/0x2f6 [ 241.635690][ T9929] should_fail+0x8bc/0x9c0 [ 241.640274][ T9929] __should_failslab+0x223/0x2b0 [ 241.645375][ T9929] should_failslab+0x29/0x70 [ 241.650118][ T9929] __kmalloc+0x1a6/0x1160 [ 241.654571][ T9929] ? tomoyo_init_log+0x3398/0x3b50 [ 241.659823][ T9929] ? kmsan_get_metadata+0x11b/0x180 [ 241.665189][ T9929] tomoyo_init_log+0x3398/0x3b50 [ 241.670320][ T9929] tomoyo_supervisor+0x8bd/0x2820 [ 241.675510][ T9929] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 241.681490][ T9929] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 241.687901][ T9929] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 241.693885][ T9929] tomoyo_path_number_perm+0x8be/0xb00 [ 241.699531][ T9929] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 241.705770][ T9929] ? __msan_instrument_asm_store+0x18a/0x1c0 [ 241.711914][ T9929] tomoyo_file_ioctl+0x72/0x90 [ 241.716839][ T9929] ? tomoyo_inode_getattr+0x60/0x60 [ 241.722191][ T9929] security_file_ioctl+0x10a/0x210 [ 241.727468][ T9929] __se_compat_sys_ioctl+0x175/0x1150 [ 241.732987][ T9929] ? kmsan_get_metadata+0x11b/0x180 [ 241.738347][ T9929] __ia32_compat_sys_ioctl+0xd9/0x110 [ 241.743861][ T9929] __do_fast_syscall_32+0x96/0xe0 [ 241.749033][ T9929] do_fast_syscall_32+0x3c/0x80 [ 241.754023][ T9929] do_SYSENTER_32+0x1b/0x20 [ 241.758663][ T9929] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 241.765144][ T9929] RIP: 0023:0xf6ef0549 [ 241.769310][ T9929] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 241.789049][ T9929] RSP: 002b:00000000f44ea5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 241.797601][ T9929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 241.805683][ T9929] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.813762][ T9929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.821829][ T9929] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 241.829897][ T9929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.860251][ T55] Bluetooth: hci3: command 0x040f tx timeout 18:00:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) r3 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x101, 0x54e02) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1, {r3}}, 0x58) 18:00:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:52 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:53 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) 18:00:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:54 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:54 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:00:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 243.916520][ T4686] Bluetooth: hci3: command 0x0419 tx timeout 18:00:54 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:54 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:00:55 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:55 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:55 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:56 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:00:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40046602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:56 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40086602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:57 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) 18:00:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)}, 0x58) io_setup(0x1d41, &(0x7f0000002380)) 18:00:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x0, &(0x7f0000002380)) 18:00:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:57 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) 18:00:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x401c5820, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x0, &(0x7f0000002380)) 18:00:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:58 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) 18:00:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x0, &(0x7f0000002380)) 18:00:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:58 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = gettid() r2 = getpgrp(r1) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r2], 0x1}, 0x58) 18:00:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5828, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:59 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, 0x0) 18:00:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:59 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:00:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5829, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:00:59 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, 0x0) 18:00:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c582a, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:00 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600008, 0x8) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002280)=[0x0], 0x1}, 0x58) io_setup(0x1d41, 0x0) 18:01:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c582b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:00 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5839, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800}) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80046601, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40046602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:02 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086601, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40086602, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x801c581f, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:02 executing program 1: r0 = gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:02 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x802c560a, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 1: r0 = gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80785659, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x401c5820, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:03 executing program 1: r0 = gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:04 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:04 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:04 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:04 executing program 1: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:04 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:05 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:05 executing program 1: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185648, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, 0x0) [ 257.070033][T10202] chnl_net:caif_netlink_parms(): no params data found [ 257.208035][T10202] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.215785][T10202] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.225047][T10202] device bridge_slave_0 entered promiscuous mode [ 257.242937][T10202] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.250409][T10202] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.259670][T10202] device bridge_slave_1 entered promiscuous mode [ 257.312558][T10202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.337085][T10202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.384668][T10202] team0: Port device team_slave_0 added [ 257.401021][T10202] team0: Port device team_slave_1 added [ 257.452121][T10202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.459473][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.485799][T10202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.507647][T10202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.514941][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.542422][T10202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.598523][T10202] device hsr_slave_0 entered promiscuous mode [ 257.615824][T10202] device hsr_slave_1 entered promiscuous mode [ 257.624034][T10202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.633050][T10202] Cannot create hsr debugfs directory [ 257.898670][T10202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.913897][T10202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.933231][T10202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.953387][T10202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.028863][T10202] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.036273][T10202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.044006][T10202] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.051477][T10202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.083431][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.097994][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.241979][T10202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.271649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.280544][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.299642][T10202] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.325023][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.334794][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.343921][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.351469][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.395704][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.405686][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.415012][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.422267][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.431067][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.441666][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.492940][T10202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.503783][T10202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.525295][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.535597][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.545575][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.555643][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.565687][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.575187][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.585208][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.594725][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.607110][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.616553][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.636960][ T18] Bluetooth: hci4: command 0x0409 tx timeout [ 258.673682][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.681651][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.711900][T10202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.875043][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.884985][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.935763][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.945250][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.966962][T10202] device veth0_vlan entered promiscuous mode [ 258.975787][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.984725][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.020797][T10202] device veth1_vlan entered promiscuous mode [ 259.083040][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.092420][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.101620][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.111302][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.130161][T10202] device veth0_macvtap entered promiscuous mode [ 259.147181][T10202] device veth1_macvtap entered promiscuous mode [ 259.203629][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.214644][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.224696][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.235403][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.245489][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.256148][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.266225][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.276998][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.290163][T10202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.298228][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.307600][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.317381][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.347789][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.358803][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.368865][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.379544][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.389623][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.400318][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.410404][T10202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.421099][T10202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.434231][T10202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.442418][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.452193][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.487695][T10202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.496985][T10202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.506027][T10202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.515105][T10202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.000983][ T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.009049][ T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.030439][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.109705][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.117963][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.127252][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:01:11 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:11 executing program 1: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5828, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185649, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, 0x0) 18:01:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 260.715368][ T18] Bluetooth: hci4: command 0x041b tx timeout 18:01:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5829, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, 0x0) 18:01:11 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x0, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c582a, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:11 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c582b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:12 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:12 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:01:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x402c5839, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:13 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 262.794819][ T18] Bluetooth: hci4: command 0x040f tx timeout 18:01:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80046601, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0245628, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:13 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:01:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:14 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0245629, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:14 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[0x0], 0x1}, 0x58) 18:01:14 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086601, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) [ 264.080529][ T3120] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.087078][ T3120] ieee802154 phy1 wpan1: encryption failed: -22 18:01:14 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:14 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x801c581f, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffd}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x40090) r1 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:15 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) [ 264.877055][ T18] Bluetooth: hci4: command 0x0419 tx timeout 18:01:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x802c560a, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405604, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffffffff, 0x4], 0x2, 0x800}) r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:16 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:16 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80785659, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405607, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:16 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405619, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:16 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:16 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:16 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:17 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405667, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:17 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:17 executing program 4: getpgrp(0x0) clone3(0x0, 0x0) 18:01:17 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0445609, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:18 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:18 executing program 4: getpgrp(0x0) clone3(0x0, 0x0) 18:01:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc044560f, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:18 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0) 18:01:18 executing program 4: getpgrp(0x0) clone3(0x0, 0x0) 18:01:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0445611, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0) 18:01:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:18 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:19 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc044565d, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0) 18:01:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc04c5609, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:19 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:19 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc04c560f, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:20 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185648, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc04c5611, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:20 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc04c561a, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0185649, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:21 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) 18:01:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc04c565d, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:21 executing program 4: r0 = getpgrp(0x0) clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r0], 0x1}, 0x58) 18:01:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x0, 0x0, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x1f, 0x1, 0x0, "efc87db9b995bc88d140aa34faa6f93a388909dac9de947aa334f4976a7a4e4a"}) 18:01:22 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) r1 = getpgrp(r0) clone3(&(0x7f0000002300)={0xc000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/4096, &(0x7f0000002280)=[r1], 0x1}, 0x58) [ 271.661686][T10685] ===================================================== [ 271.668787][T10685] BUG: KMSAN: uninit-value in video_usercopy+0x137b/0x3ad0 [ 271.676010][T10685] video_usercopy+0x137b/0x3ad0 [ 271.680886][T10685] video_ioctl2+0x9f/0xb0 [ 271.685236][T10685] v4l2_ioctl+0x263/0x290 [ 271.689581][T10685] v4l2_compat_ioctl32+0x2e0/0x390 [ 271.694778][T10685] __se_compat_sys_ioctl+0x876/0x1150 [ 271.700171][T10685] __ia32_compat_sys_ioctl+0xd9/0x110 [ 271.705537][T10685] __do_fast_syscall_32+0x96/0xe0 [ 271.710559][T10685] do_fast_syscall_32+0x3c/0x80 [ 271.715407][T10685] do_SYSENTER_32+0x1b/0x20 [ 271.719904][T10685] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 271.726232][T10685] [ 271.728542][T10685] Local variable ----sbuf@video_usercopy created at: [ 271.735196][T10685] video_usercopy+0xa8/0x3ad0 [ 271.739877][T10685] video_ioctl2+0x9f/0xb0 [ 271.744204][T10685] ===================================================== [ 271.751122][T10685] Disabling lock debugging due to kernel taint [ 271.757259][T10685] Kernel panic - not syncing: panic_on_kmsan set ... [ 271.763920][T10685] CPU: 0 PID: 10685 Comm: syz-executor.2 Tainted: G B 5.13.0-syzkaller #0 [ 271.773732][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.783780][T10685] Call Trace: [ 271.787055][T10685] dump_stack+0x25a/0x2f6 [ 271.791385][T10685] panic+0x4c7/0xe98 [ 271.795354][T10685] ? add_taint+0x187/0x210 [ 271.799805][T10685] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 271.805965][T10685] kmsan_report+0x2ee/0x300 [ 271.810476][T10685] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 271.816549][T10685] ? __msan_warning+0xd7/0x150 [ 271.821311][T10685] ? video_usercopy+0x137b/0x3ad0 [ 271.826345][T10685] ? video_ioctl2+0x9f/0xb0 [ 271.830850][T10685] ? v4l2_ioctl+0x263/0x290 [ 271.835357][T10685] ? v4l2_compat_ioctl32+0x2e0/0x390 [ 271.840650][T10685] ? __se_compat_sys_ioctl+0x876/0x1150 [ 271.846195][T10685] ? __ia32_compat_sys_ioctl+0xd9/0x110 [ 271.851741][T10685] ? __do_fast_syscall_32+0x96/0xe0 [ 271.856939][T10685] ? do_fast_syscall_32+0x3c/0x80 [ 271.861964][T10685] ? do_SYSENTER_32+0x1b/0x20 [ 271.866638][T10685] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 271.873150][T10685] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 271.879397][T10685] __msan_warning+0xd7/0x150 [ 271.883989][T10685] video_usercopy+0x137b/0x3ad0 [ 271.888848][T10685] ? video_ioctl2+0xb0/0xb0 [ 271.893371][T10685] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 271.899201][T10685] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 271.905281][T10685] ? tomoyo_path_number_perm+0xa28/0xb00 [ 271.910933][T10685] video_ioctl2+0x9f/0xb0 [ 271.915272][T10685] ? trace_v4l2_qbuf+0x150/0x150 [ 271.920213][T10685] v4l2_ioctl+0x263/0x290 [ 271.924546][T10685] v4l2_compat_ioctl32+0x2e0/0x390 [ 271.929667][T10685] ? v4l2_poll+0x4c0/0x4c0 [ 271.934090][T10685] ? v4l2_compat_put_array_args+0x16a0/0x16a0 [ 271.940180][T10685] __se_compat_sys_ioctl+0x876/0x1150 [ 271.945560][T10685] ? kmsan_get_metadata+0x11b/0x180 [ 271.950771][T10685] __ia32_compat_sys_ioctl+0xd9/0x110 [ 271.956156][T10685] __do_fast_syscall_32+0x96/0xe0 [ 271.961190][T10685] do_fast_syscall_32+0x3c/0x80 [ 271.966053][T10685] do_SYSENTER_32+0x1b/0x20 [ 271.970558][T10685] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 271.976894][T10685] RIP: 0023:0xf6f4c549 [ 271.980966][T10685] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 272.000585][T10685] RSP: 002b:00000000f45465fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 272.009011][T10685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0505609 [ 272.017075][T10685] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.025045][T10685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.033017][T10685] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 272.040983][T10685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.049213][T10685] Kernel Offset: disabled [ 272.053525][T10685] Rebooting in 86400 seconds..