Warning: Permanently added '[localhost]:63067' (ECDSA) to the list of known hosts. 2021/07/30 23:53:01 fuzzer started 2021/07/30 23:53:02 dialing manager at localhost:41713 2021/07/30 23:53:02 syscalls: 3634 2021/07/30 23:53:02 code coverage: enabled 2021/07/30 23:53:02 comparison tracing: enabled 2021/07/30 23:53:02 extra coverage: enabled 2021/07/30 23:53:02 setuid sandbox: enabled 2021/07/30 23:53:02 namespace sandbox: enabled 2021/07/30 23:53:02 Android sandbox: enabled 2021/07/30 23:53:02 fault injection: enabled 2021/07/30 23:53:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/07/30 23:53:02 net packet injection: enabled 2021/07/30 23:53:02 net device setup: enabled 2021/07/30 23:53:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/07/30 23:53:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/07/30 23:53:02 USB emulation: enabled 2021/07/30 23:53:02 hci packet injection: enabled 2021/07/30 23:53:02 wifi device emulation: enabled 2021/07/30 23:53:02 802.15.4 emulation: enabled 2021/07/30 23:53:02 fetching corpus: 0, signal 0/2000 (executing program) 2021/07/30 23:53:02 fetching corpus: 50, signal 43091/46889 (executing program) 2021/07/30 23:53:03 fetching corpus: 100, signal 63342/68903 (executing program) 2021/07/30 23:53:04 fetching corpus: 150, signal 82766/89959 (executing program) 2021/07/30 23:53:04 fetching corpus: 200, signal 109523/118158 (executing program) 2021/07/30 23:53:04 fetching corpus: 250, signal 117869/128108 (executing program) 2021/07/30 23:53:04 fetching corpus: 300, signal 138924/150432 (executing program) 2021/07/30 23:53:05 fetching corpus: 350, signal 161501/174171 (executing program) 2021/07/30 23:53:05 fetching corpus: 400, signal 168715/182798 (executing program) 2021/07/30 23:53:05 fetching corpus: 450, signal 175629/191092 (executing program) 2021/07/30 23:53:05 fetching corpus: 500, signal 184970/201685 (executing program) 2021/07/30 23:53:05 fetching corpus: 550, signal 192155/210188 (executing program) [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. 2021/07/30 23:53:06 fetching corpus: 600, signal 200221/219523 (executing program) 2021/07/30 23:53:07 fetching corpus: 650, signal 205414/226033 (executing program) 2021/07/30 23:53:07 fetching corpus: 700, signal 212198/234053 (executing program) 2021/07/30 23:53:07 fetching corpus: 750, signal 220135/243113 (executing program) 2021/07/30 23:53:07 fetching corpus: 800, signal 225797/249962 (executing program) 2021/07/30 23:53:07 fetching corpus: 850, signal 228857/254275 (executing program) Debian GNU/Linux 9 syzkaller ttyS0 2021/07/30 23:53:08 fetching corpus: 900, signal 234242/260811 (executing program) 2021/07/30 23:53:08 fetching corpus: 950, signal 238740/266479 (executing program) 2021/07/30 23:53:08 fetching corpus: 1000, signal 242608/271532 (executing program) 2021/07/30 23:53:08 fetching corpus: 1050, signal 245492/275637 (executing program) 2021/07/30 23:53:08 fetching corpus: 1100, signal 249946/281139 (executing program) 2021/07/30 23:53:08 fetching corpus: 1150, signal 253354/285682 (executing program) 2021/07/30 23:53:08 fetching corpus: 1200, signal 255293/288799 (executing program) 2021/07/30 23:53:09 fetching corpus: 1250, signal 260490/295008 (executing program) 2021/07/30 23:53:09 fetching corpus: 1300, signal 264368/299956 (executing program) 2021/07/30 23:53:09 fetching corpus: 1350, signal 267512/304163 (executing program) 2021/07/30 23:53:09 fetching corpus: 1400, signal 272562/310161 (executing program) 2021/07/30 23:53:10 fetching corpus: 1450, signal 276950/315524 (executing program) 2021/07/30 23:53:10 fetching corpus: 1500, signal 281217/320790 (executing program) syzkaller login: [ 97.690014][ T3400] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.700544][ T3400] ieee802154 phy1 wpan1: encryption failed: -22 2021/07/30 23:53:10 fetching corpus: 1550, signal 284904/325447 (executing program) 2021/07/30 23:53:10 fetching corpus: 1600, signal 287269/328895 (executing program) 2021/07/30 23:53:10 fetching corpus: 1650, signal 290145/332744 (executing program) 2021/07/30 23:53:10 fetching corpus: 1700, signal 292819/336415 (executing program) 2021/07/30 23:53:11 fetching corpus: 1750, signal 296249/340717 (executing program) 2021/07/30 23:53:11 fetching corpus: 1800, signal 300263/345594 (executing program) 2021/07/30 23:53:11 fetching corpus: 1850, signal 305718/351716 (executing program) 2021/07/30 23:53:11 fetching corpus: 1900, signal 310068/356810 (executing program) 2021/07/30 23:53:12 fetching corpus: 1950, signal 313665/361269 (executing program) 2021/07/30 23:53:13 fetching corpus: 2000, signal 318104/366398 (executing program) 2021/07/30 23:53:13 fetching corpus: 2050, signal 320706/369881 (executing program) 2021/07/30 23:53:13 fetching corpus: 2100, signal 324261/374258 (executing program) 2021/07/30 23:53:13 fetching corpus: 2150, signal 327013/377894 (executing program) 2021/07/30 23:53:13 fetching corpus: 2200, signal 330561/382218 (executing program) 2021/07/30 23:53:13 fetching corpus: 2250, signal 334225/386582 (executing program) 2021/07/30 23:53:14 fetching corpus: 2300, signal 336317/389585 (executing program) 2021/07/30 23:53:14 fetching corpus: 2350, signal 338743/392867 (executing program) 2021/07/30 23:53:14 fetching corpus: 2400, signal 340774/395782 (executing program) 2021/07/30 23:53:14 fetching corpus: 2450, signal 347319/402655 (executing program) 2021/07/30 23:53:14 fetching corpus: 2500, signal 349989/406069 (executing program) 2021/07/30 23:53:14 fetching corpus: 2550, signal 352723/409535 (executing program) 2021/07/30 23:53:15 fetching corpus: 2600, signal 355391/412909 (executing program) 2021/07/30 23:53:15 fetching corpus: 2650, signal 357428/415729 (executing program) 2021/07/30 23:53:15 fetching corpus: 2700, signal 360472/419406 (executing program) 2021/07/30 23:53:16 fetching corpus: 2750, signal 363927/423428 (executing program) 2021/07/30 23:53:16 fetching corpus: 2800, signal 366728/426901 (executing program) 2021/07/30 23:53:16 fetching corpus: 2850, signal 368720/429626 (executing program) 2021/07/30 23:53:16 fetching corpus: 2900, signal 370705/432407 (executing program) 2021/07/30 23:53:17 fetching corpus: 2950, signal 372391/434865 (executing program) 2021/07/30 23:53:17 fetching corpus: 3000, signal 374221/437497 (executing program) 2021/07/30 23:53:17 fetching corpus: 3050, signal 377768/441524 (executing program) 2021/07/30 23:53:17 fetching corpus: 3100, signal 380312/444704 (executing program) 2021/07/30 23:53:18 fetching corpus: 3150, signal 382140/447246 (executing program) 2021/07/30 23:53:18 fetching corpus: 3200, signal 384593/450238 (executing program) 2021/07/30 23:53:18 fetching corpus: 3250, signal 386279/452655 (executing program) 2021/07/30 23:53:18 fetching corpus: 3300, signal 387699/454823 (executing program) 2021/07/30 23:53:18 fetching corpus: 3350, signal 389839/457604 (executing program) 2021/07/30 23:53:19 fetching corpus: 3400, signal 391130/459686 (executing program) 2021/07/30 23:53:19 fetching corpus: 3450, signal 392104/461475 (executing program) 2021/07/30 23:53:19 fetching corpus: 3500, signal 395836/465457 (executing program) 2021/07/30 23:53:19 fetching corpus: 3550, signal 397301/467666 (executing program) 2021/07/30 23:53:19 fetching corpus: 3600, signal 398721/469761 (executing program) 2021/07/30 23:53:20 fetching corpus: 3650, signal 401278/472813 (executing program) 2021/07/30 23:53:20 fetching corpus: 3700, signal 404178/476137 (executing program) 2021/07/30 23:53:20 fetching corpus: 3750, signal 406068/478603 (executing program) 2021/07/30 23:53:20 fetching corpus: 3800, signal 408220/481256 (executing program) 2021/07/30 23:53:20 fetching corpus: 3850, signal 410292/483886 (executing program) 2021/07/30 23:53:21 fetching corpus: 3900, signal 412011/486161 (executing program) 2021/07/30 23:53:21 fetching corpus: 3950, signal 414051/488676 (executing program) 2021/07/30 23:53:21 fetching corpus: 4000, signal 415474/490782 (executing program) 2021/07/30 23:53:21 fetching corpus: 4050, signal 418100/493845 (executing program) 2021/07/30 23:53:22 fetching corpus: 4100, signal 423087/498730 (executing program) 2021/07/30 23:53:22 fetching corpus: 4150, signal 424457/500732 (executing program) 2021/07/30 23:53:22 fetching corpus: 4200, signal 425761/502650 (executing program) 2021/07/30 23:53:22 fetching corpus: 4250, signal 427399/504834 (executing program) 2021/07/30 23:53:23 fetching corpus: 4300, signal 429902/507682 (executing program) 2021/07/30 23:53:23 fetching corpus: 4350, signal 430913/509357 (executing program) 2021/07/30 23:53:23 fetching corpus: 4400, signal 432648/511695 (executing program) 2021/07/30 23:53:23 fetching corpus: 4450, signal 434004/513624 (executing program) 2021/07/30 23:53:23 fetching corpus: 4500, signal 434906/515211 (executing program) 2021/07/30 23:53:24 fetching corpus: 4550, signal 436588/517401 (executing program) 2021/07/30 23:53:24 fetching corpus: 4600, signal 437830/519210 (executing program) 2021/07/30 23:53:24 fetching corpus: 4650, signal 438987/520938 (executing program) 2021/07/30 23:53:24 fetching corpus: 4700, signal 441032/523337 (executing program) 2021/07/30 23:53:25 fetching corpus: 4750, signal 443600/526105 (executing program) 2021/07/30 23:53:25 fetching corpus: 4800, signal 444809/527900 (executing program) 2021/07/30 23:53:25 fetching corpus: 4850, signal 446212/529760 (executing program) 2021/07/30 23:53:25 fetching corpus: 4900, signal 448122/532036 (executing program) 2021/07/30 23:53:25 fetching corpus: 4950, signal 449476/533861 (executing program) 2021/07/30 23:53:26 fetching corpus: 5000, signal 450819/535700 (executing program) 2021/07/30 23:53:26 fetching corpus: 5050, signal 451944/537300 (executing program) 2021/07/30 23:53:26 fetching corpus: 5100, signal 453300/539152 (executing program) 2021/07/30 23:53:26 fetching corpus: 5150, signal 457782/543252 (executing program) 2021/07/30 23:53:26 fetching corpus: 5200, signal 458874/544877 (executing program) 2021/07/30 23:53:27 fetching corpus: 5250, signal 460736/546984 (executing program) 2021/07/30 23:53:27 fetching corpus: 5300, signal 461785/548539 (executing program) 2021/07/30 23:53:27 fetching corpus: 5350, signal 463316/550485 (executing program) 2021/07/30 23:53:27 fetching corpus: 5400, signal 465329/552673 (executing program) 2021/07/30 23:53:27 fetching corpus: 5450, signal 466484/554302 (executing program) 2021/07/30 23:53:27 fetching corpus: 5500, signal 467262/555634 (executing program) 2021/07/30 23:53:28 fetching corpus: 5550, signal 468638/557429 (executing program) 2021/07/30 23:53:28 fetching corpus: 5600, signal 469622/558882 (executing program) 2021/07/30 23:53:28 fetching corpus: 5650, signal 471082/560709 (executing program) 2021/07/30 23:53:28 fetching corpus: 5700, signal 472499/562473 (executing program) 2021/07/30 23:53:28 fetching corpus: 5750, signal 473723/564132 (executing program) 2021/07/30 23:53:28 fetching corpus: 5800, signal 475583/566199 (executing program) 2021/07/30 23:53:29 fetching corpus: 5850, signal 477958/568648 (executing program) 2021/07/30 23:53:29 fetching corpus: 5900, signal 479704/570679 (executing program) 2021/07/30 23:53:29 fetching corpus: 5950, signal 481293/572561 (executing program) 2021/07/30 23:53:29 fetching corpus: 6000, signal 482757/574312 (executing program) 2021/07/30 23:53:29 fetching corpus: 6050, signal 485292/576797 (executing program) 2021/07/30 23:53:30 fetching corpus: 6100, signal 486571/578452 (executing program) 2021/07/30 23:53:30 fetching corpus: 6150, signal 487703/579950 (executing program) 2021/07/30 23:53:30 fetching corpus: 6200, signal 488885/581493 (executing program) 2021/07/30 23:53:30 fetching corpus: 6250, signal 489972/582963 (executing program) 2021/07/30 23:53:30 fetching corpus: 6300, signal 490999/584416 (executing program) 2021/07/30 23:53:31 fetching corpus: 6350, signal 492270/586001 (executing program) 2021/07/30 23:53:31 fetching corpus: 6400, signal 493913/587829 (executing program) 2021/07/30 23:53:31 fetching corpus: 6450, signal 495181/589384 (executing program) 2021/07/30 23:53:31 fetching corpus: 6500, signal 496230/590800 (executing program) 2021/07/30 23:53:31 fetching corpus: 6550, signal 497757/592545 (executing program) 2021/07/30 23:53:31 fetching corpus: 6600, signal 499288/594260 (executing program) 2021/07/30 23:53:32 fetching corpus: 6650, signal 500203/595577 (executing program) 2021/07/30 23:53:32 fetching corpus: 6700, signal 501523/597178 (executing program) 2021/07/30 23:53:32 fetching corpus: 6750, signal 502927/598822 (executing program) 2021/07/30 23:53:33 fetching corpus: 6800, signal 504406/600514 (executing program) 2021/07/30 23:53:33 fetching corpus: 6850, signal 506245/602401 (executing program) 2021/07/30 23:53:33 fetching corpus: 6900, signal 507039/603634 (executing program) 2021/07/30 23:53:33 fetching corpus: 6950, signal 508391/605220 (executing program) 2021/07/30 23:53:33 fetching corpus: 7000, signal 509319/606500 (executing program) 2021/07/30 23:53:33 fetching corpus: 7050, signal 510385/607867 (executing program) 2021/07/30 23:53:34 fetching corpus: 7100, signal 511752/609418 (executing program) 2021/07/30 23:53:34 fetching corpus: 7150, signal 513065/610947 (executing program) 2021/07/30 23:53:34 fetching corpus: 7200, signal 515892/613312 (executing program) 2021/07/30 23:53:34 fetching corpus: 7250, signal 517686/615109 (executing program) 2021/07/30 23:53:35 fetching corpus: 7300, signal 519214/616738 (executing program) 2021/07/30 23:53:35 fetching corpus: 7350, signal 520783/618374 (executing program) 2021/07/30 23:53:35 fetching corpus: 7400, signal 521529/619482 (executing program) 2021/07/30 23:53:35 fetching corpus: 7450, signal 523251/621189 (executing program) 2021/07/30 23:53:35 fetching corpus: 7500, signal 524382/622531 (executing program) 2021/07/30 23:53:36 fetching corpus: 7550, signal 525586/623889 (executing program) 2021/07/30 23:53:36 fetching corpus: 7600, signal 526544/625115 (executing program) 2021/07/30 23:53:36 fetching corpus: 7650, signal 530071/627851 (executing program) 2021/07/30 23:53:36 fetching corpus: 7700, signal 531381/629276 (executing program) 2021/07/30 23:53:36 fetching corpus: 7750, signal 532306/630464 (executing program) 2021/07/30 23:53:37 fetching corpus: 7800, signal 534609/632452 (executing program) 2021/07/30 23:53:37 fetching corpus: 7850, signal 535663/633660 (executing program) 2021/07/30 23:53:37 fetching corpus: 7900, signal 537796/635545 (executing program) 2021/07/30 23:53:38 fetching corpus: 7950, signal 538897/636786 (executing program) 2021/07/30 23:53:38 fetching corpus: 8000, signal 540027/638067 (executing program) 2021/07/30 23:53:38 fetching corpus: 8050, signal 542222/639955 (executing program) 2021/07/30 23:53:38 fetching corpus: 8100, signal 543093/641071 (executing program) 2021/07/30 23:53:38 fetching corpus: 8150, signal 544072/642233 (executing program) 2021/07/30 23:53:39 fetching corpus: 8200, signal 544681/643233 (executing program) 2021/07/30 23:53:39 fetching corpus: 8250, signal 545573/644316 (executing program) 2021/07/30 23:53:39 fetching corpus: 8300, signal 546745/645582 (executing program) 2021/07/30 23:53:39 fetching corpus: 8350, signal 549039/647501 (executing program) 2021/07/30 23:53:39 fetching corpus: 8400, signal 550344/648807 (executing program) 2021/07/30 23:53:39 fetching corpus: 8450, signal 551933/650267 (executing program) 2021/07/30 23:53:40 fetching corpus: 8500, signal 553307/651618 (executing program) 2021/07/30 23:53:40 fetching corpus: 8550, signal 554370/652825 (executing program) 2021/07/30 23:53:40 fetching corpus: 8600, signal 555965/654321 (executing program) 2021/07/30 23:53:40 fetching corpus: 8650, signal 557584/655772 (executing program) 2021/07/30 23:53:41 fetching corpus: 8700, signal 558724/656931 (executing program) 2021/07/30 23:53:41 fetching corpus: 8750, signal 559617/657989 (executing program) 2021/07/30 23:53:41 fetching corpus: 8800, signal 560847/659230 (executing program) 2021/07/30 23:53:41 fetching corpus: 8850, signal 562149/660497 (executing program) 2021/07/30 23:53:42 fetching corpus: 8900, signal 563200/661619 (executing program) 2021/07/30 23:53:42 fetching corpus: 8950, signal 564219/662729 (executing program) 2021/07/30 23:53:42 fetching corpus: 9000, signal 565265/663859 (executing program) 2021/07/30 23:53:42 fetching corpus: 9050, signal 566253/664967 (executing program) 2021/07/30 23:53:42 fetching corpus: 9100, signal 567542/666246 (executing program) 2021/07/30 23:53:43 fetching corpus: 9150, signal 568635/667374 (executing program) 2021/07/30 23:53:43 fetching corpus: 9200, signal 569845/668581 (executing program) 2021/07/30 23:53:44 fetching corpus: 9250, signal 570772/669594 (executing program) 2021/07/30 23:53:44 fetching corpus: 9300, signal 572263/670954 (executing program) 2021/07/30 23:53:44 fetching corpus: 9350, signal 574148/672457 (executing program) 2021/07/30 23:53:44 fetching corpus: 9400, signal 575133/673438 (executing program) 2021/07/30 23:53:45 fetching corpus: 9450, signal 575849/674325 (executing program) 2021/07/30 23:53:45 fetching corpus: 9500, signal 576863/675320 (executing program) 2021/07/30 23:53:46 fetching corpus: 9550, signal 578220/676558 (executing program) 2021/07/30 23:53:46 fetching corpus: 9600, signal 579037/677485 (executing program) 2021/07/30 23:53:46 fetching corpus: 9650, signal 579637/678280 (executing program) 2021/07/30 23:53:46 fetching corpus: 9700, signal 580824/679368 (executing program) 2021/07/30 23:53:47 fetching corpus: 9750, signal 582006/680484 (executing program) 2021/07/30 23:53:47 fetching corpus: 9800, signal 582845/681383 (executing program) 2021/07/30 23:53:47 fetching corpus: 9850, signal 584037/682443 (executing program) 2021/07/30 23:53:47 fetching corpus: 9900, signal 584776/683307 (executing program) 2021/07/30 23:53:47 fetching corpus: 9950, signal 585645/684226 (executing program) 2021/07/30 23:53:48 fetching corpus: 10000, signal 586442/685093 (executing program) 2021/07/30 23:53:48 fetching corpus: 10050, signal 587197/685913 (executing program) 2021/07/30 23:53:48 fetching corpus: 10100, signal 587907/686761 (executing program) 2021/07/30 23:53:48 fetching corpus: 10150, signal 589149/687848 (executing program) 2021/07/30 23:53:48 fetching corpus: 10200, signal 590200/688841 (executing program) 2021/07/30 23:53:48 fetching corpus: 10250, signal 591161/689773 (executing program) 2021/07/30 23:53:49 fetching corpus: 10300, signal 592388/690803 (executing program) 2021/07/30 23:53:49 fetching corpus: 10350, signal 593236/691674 (executing program) 2021/07/30 23:53:49 fetching corpus: 10400, signal 594459/692681 (executing program) 2021/07/30 23:53:49 fetching corpus: 10450, signal 595339/693533 (executing program) 2021/07/30 23:53:50 fetching corpus: 10500, signal 597071/694730 (executing program) 2021/07/30 23:53:50 fetching corpus: 10550, signal 598222/695717 (executing program) 2021/07/30 23:53:50 fetching corpus: 10600, signal 599363/696714 (executing program) 2021/07/30 23:53:50 fetching corpus: 10650, signal 600179/697538 (executing program) 2021/07/30 23:53:50 fetching corpus: 10700, signal 601089/698380 (executing program) 2021/07/30 23:53:51 fetching corpus: 10750, signal 602021/699213 (executing program) 2021/07/30 23:53:51 fetching corpus: 10800, signal 603656/700401 (executing program) 2021/07/30 23:53:51 fetching corpus: 10850, signal 604591/701228 (executing program) 2021/07/30 23:53:51 fetching corpus: 10900, signal 605305/702010 (executing program) 2021/07/30 23:53:52 fetching corpus: 10950, signal 605864/702697 (executing program) 2021/07/30 23:53:52 fetching corpus: 11000, signal 606662/703481 (executing program) 2021/07/30 23:53:52 fetching corpus: 11050, signal 608153/704553 (executing program) 2021/07/30 23:53:52 fetching corpus: 11100, signal 608426/705108 (executing program) 2021/07/30 23:53:52 fetching corpus: 11150, signal 609137/705853 (executing program) 2021/07/30 23:53:53 fetching corpus: 11200, signal 610227/706725 (executing program) 2021/07/30 23:53:53 fetching corpus: 11250, signal 611438/707638 (executing program) 2021/07/30 23:53:53 fetching corpus: 11300, signal 612241/708391 (executing program) 2021/07/30 23:53:53 fetching corpus: 11350, signal 613131/709191 (executing program) 2021/07/30 23:53:54 fetching corpus: 11400, signal 614141/710021 (executing program) 2021/07/30 23:53:54 fetching corpus: 11450, signal 615086/710848 (executing program) 2021/07/30 23:53:54 fetching corpus: 11500, signal 616718/711902 (executing program) 2021/07/30 23:53:54 fetching corpus: 11550, signal 617558/712695 (executing program) 2021/07/30 23:53:55 fetching corpus: 11600, signal 618410/713493 (executing program) 2021/07/30 23:53:55 fetching corpus: 11650, signal 619533/714390 (executing program) 2021/07/30 23:53:56 fetching corpus: 11700, signal 620810/715299 (executing program) 2021/07/30 23:53:56 fetching corpus: 11750, signal 621595/716029 (executing program) 2021/07/30 23:53:56 fetching corpus: 11800, signal 622219/716662 (executing program) 2021/07/30 23:53:56 fetching corpus: 11850, signal 623094/717393 (executing program) 2021/07/30 23:53:56 fetching corpus: 11900, signal 624110/718160 (executing program) 2021/07/30 23:53:57 fetching corpus: 11950, signal 625825/719206 (executing program) 2021/07/30 23:53:57 fetching corpus: 12000, signal 626690/719967 (executing program) 2021/07/30 23:53:57 fetching corpus: 12050, signal 627545/720631 (executing program) 2021/07/30 23:53:57 fetching corpus: 12100, signal 628344/721324 (executing program) 2021/07/30 23:53:58 fetching corpus: 12150, signal 629005/721947 (executing program) 2021/07/30 23:53:58 fetching corpus: 12200, signal 629568/722516 (executing program) 2021/07/30 23:53:58 fetching corpus: 12250, signal 630014/723059 (executing program) 2021/07/30 23:53:58 fetching corpus: 12300, signal 630937/723758 (executing program) 2021/07/30 23:53:58 fetching corpus: 12350, signal 631599/724362 (executing program) 2021/07/30 23:53:58 fetching corpus: 12400, signal 632309/724979 (executing program) 2021/07/30 23:53:58 fetching corpus: 12450, signal 632890/725535 (executing program) 2021/07/30 23:53:59 fetching corpus: 12500, signal 633536/726130 (executing program) 2021/07/30 23:53:59 fetching corpus: 12550, signal 633974/726678 (executing program) 2021/07/30 23:53:59 fetching corpus: 12600, signal 634771/727336 (executing program) 2021/07/30 23:53:59 fetching corpus: 12650, signal 635710/727981 (executing program) 2021/07/30 23:53:59 fetching corpus: 12700, signal 636537/728664 (executing program) 2021/07/30 23:53:59 fetching corpus: 12750, signal 636910/729156 (executing program) 2021/07/30 23:54:00 fetching corpus: 12800, signal 637607/729754 (executing program) 2021/07/30 23:54:00 fetching corpus: 12850, signal 638201/730294 (executing program) 2021/07/30 23:54:00 fetching corpus: 12900, signal 639024/730910 (executing program) 2021/07/30 23:54:00 fetching corpus: 12950, signal 639858/731570 (executing program) 2021/07/30 23:54:00 fetching corpus: 13000, signal 640520/732188 (executing program) 2021/07/30 23:54:01 fetching corpus: 13050, signal 641719/732922 (executing program) 2021/07/30 23:54:01 fetching corpus: 13100, signal 642617/733530 (executing program) 2021/07/30 23:54:01 fetching corpus: 13150, signal 643163/734056 (executing program) 2021/07/30 23:54:01 fetching corpus: 13200, signal 643823/734609 (executing program) 2021/07/30 23:54:01 fetching corpus: 13250, signal 644909/735289 (executing program) 2021/07/30 23:54:02 fetching corpus: 13300, signal 645628/735863 (executing program) 2021/07/30 23:54:02 fetching corpus: 13350, signal 647535/736727 (executing program) 2021/07/30 23:54:02 fetching corpus: 13400, signal 648845/737472 (executing program) 2021/07/30 23:54:02 fetching corpus: 13450, signal 649638/738043 (executing program) 2021/07/30 23:54:03 fetching corpus: 13500, signal 650090/738506 (executing program) 2021/07/30 23:54:03 fetching corpus: 13550, signal 650940/739072 (executing program) 2021/07/30 23:54:03 fetching corpus: 13600, signal 651765/739667 (executing program) 2021/07/30 23:54:03 fetching corpus: 13650, signal 652889/740319 (executing program) 2021/07/30 23:54:03 fetching corpus: 13700, signal 653315/740753 (executing program) 2021/07/30 23:54:03 fetching corpus: 13750, signal 654018/741268 (executing program) 2021/07/30 23:54:04 fetching corpus: 13800, signal 654805/741834 (executing program) 2021/07/30 23:54:04 fetching corpus: 13850, signal 655341/742291 (executing program) 2021/07/30 23:54:04 fetching corpus: 13900, signal 656068/742820 (executing program) 2021/07/30 23:54:04 fetching corpus: 13950, signal 656981/743413 (executing program) 2021/07/30 23:54:04 fetching corpus: 14000, signal 658079/744011 (executing program) 2021/07/30 23:54:05 fetching corpus: 14050, signal 659912/744798 (executing program) 2021/07/30 23:54:05 fetching corpus: 14100, signal 660375/745227 (executing program) 2021/07/30 23:54:05 fetching corpus: 14150, signal 661087/745674 (executing program) 2021/07/30 23:54:05 fetching corpus: 14200, signal 662375/746352 (executing program) 2021/07/30 23:54:05 fetching corpus: 14250, signal 663207/746842 (executing program) 2021/07/30 23:54:06 fetching corpus: 14300, signal 663831/747317 (executing program) 2021/07/30 23:54:06 fetching corpus: 14350, signal 664430/747780 (executing program) 2021/07/30 23:54:06 fetching corpus: 14400, signal 665680/748380 (executing program) 2021/07/30 23:54:06 fetching corpus: 14450, signal 666334/748841 (executing program) 2021/07/30 23:54:06 fetching corpus: 14500, signal 667686/749453 (executing program) 2021/07/30 23:54:07 fetching corpus: 14550, signal 668230/749867 (executing program) 2021/07/30 23:54:07 fetching corpus: 14600, signal 668655/750260 (executing program) 2021/07/30 23:54:07 fetching corpus: 14650, signal 669410/750718 (executing program) 2021/07/30 23:54:07 fetching corpus: 14700, signal 669732/751055 (executing program) 2021/07/30 23:54:07 fetching corpus: 14750, signal 670182/751433 (executing program) 2021/07/30 23:54:07 fetching corpus: 14800, signal 670609/751821 (executing program) 2021/07/30 23:54:07 fetching corpus: 14850, signal 671097/752189 (executing program) 2021/07/30 23:54:08 fetching corpus: 14900, signal 671673/752583 (executing program) 2021/07/30 23:54:08 fetching corpus: 14950, signal 672264/753015 (executing program) 2021/07/30 23:54:08 fetching corpus: 15000, signal 672848/753416 (executing program) 2021/07/30 23:54:08 fetching corpus: 15050, signal 673369/753782 (executing program) 2021/07/30 23:54:09 fetching corpus: 15100, signal 674183/754235 (executing program) 2021/07/30 23:54:09 fetching corpus: 15150, signal 674472/754538 (executing program) 2021/07/30 23:54:09 fetching corpus: 15200, signal 674832/754879 (executing program) 2021/07/30 23:54:09 fetching corpus: 15250, signal 675598/755273 (executing program) 2021/07/30 23:54:09 fetching corpus: 15300, signal 676275/755674 (executing program) 2021/07/30 23:54:09 fetching corpus: 15350, signal 676662/755993 (executing program) 2021/07/30 23:54:09 fetching corpus: 15400, signal 677044/756308 (executing program) 2021/07/30 23:54:10 fetching corpus: 15450, signal 677558/756686 (executing program) 2021/07/30 23:54:10 fetching corpus: 15500, signal 678203/757062 (executing program) 2021/07/30 23:54:10 fetching corpus: 15550, signal 678591/757400 (executing program) 2021/07/30 23:54:10 fetching corpus: 15600, signal 679164/757779 (executing program) 2021/07/30 23:54:10 fetching corpus: 15650, signal 679723/758130 (executing program) 2021/07/30 23:54:10 fetching corpus: 15700, signal 680293/758475 (executing program) 2021/07/30 23:54:10 fetching corpus: 15750, signal 680920/758836 (executing program) 2021/07/30 23:54:11 fetching corpus: 15800, signal 681455/759192 (executing program) 2021/07/30 23:54:11 fetching corpus: 15850, signal 682133/759546 (executing program) [ 159.124953][ T3400] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.133342][ T3400] ieee802154 phy1 wpan1: encryption failed: -22 2021/07/30 23:54:11 fetching corpus: 15900, signal 683143/759959 (executing program) 2021/07/30 23:54:11 fetching corpus: 15950, signal 683596/760271 (executing program) 2021/07/30 23:54:12 fetching corpus: 16000, signal 683981/760589 (executing program) 2021/07/30 23:54:12 fetching corpus: 16050, signal 684514/760925 (executing program) 2021/07/30 23:54:12 fetching corpus: 16100, signal 685281/761281 (executing program) 2021/07/30 23:54:12 fetching corpus: 16150, signal 686369/761728 (executing program) 2021/07/30 23:54:13 fetching corpus: 16200, signal 687476/762099 (executing program) 2021/07/30 23:54:13 fetching corpus: 16250, signal 687917/762400 (executing program) 2021/07/30 23:54:13 fetching corpus: 16300, signal 688312/762697 (executing program) 2021/07/30 23:54:13 fetching corpus: 16350, signal 688860/763036 (executing program) 2021/07/30 23:54:13 fetching corpus: 16400, signal 689413/763355 (executing program) 2021/07/30 23:54:13 fetching corpus: 16450, signal 689972/763649 (executing program) 2021/07/30 23:54:13 fetching corpus: 16500, signal 690561/763940 (executing program) 2021/07/30 23:54:14 fetching corpus: 16550, signal 691265/764265 (executing program) 2021/07/30 23:54:14 fetching corpus: 16600, signal 691610/764516 (executing program) 2021/07/30 23:54:14 fetching corpus: 16650, signal 692731/764883 (executing program) 2021/07/30 23:54:14 fetching corpus: 16700, signal 693160/765140 (executing program) 2021/07/30 23:54:14 fetching corpus: 16750, signal 693644/765462 (executing program) 2021/07/30 23:54:15 fetching corpus: 16800, signal 694544/765809 (executing program) 2021/07/30 23:54:15 fetching corpus: 16850, signal 695204/766086 (executing program) 2021/07/30 23:54:15 fetching corpus: 16900, signal 695586/766330 (executing program) 2021/07/30 23:54:15 fetching corpus: 16950, signal 696667/766654 (executing program) 2021/07/30 23:54:15 fetching corpus: 17000, signal 697305/766930 (executing program) 2021/07/30 23:54:16 fetching corpus: 17050, signal 697806/767194 (executing program) 2021/07/30 23:54:16 fetching corpus: 17100, signal 698668/767508 (executing program) 2021/07/30 23:54:16 fetching corpus: 17150, signal 699340/767760 (executing program) 2021/07/30 23:54:16 fetching corpus: 17200, signal 700064/768033 (executing program) 2021/07/30 23:54:17 fetching corpus: 17250, signal 700740/768304 (executing program) 2021/07/30 23:54:17 fetching corpus: 17300, signal 701508/768579 (executing program) 2021/07/30 23:54:17 fetching corpus: 17350, signal 701799/768834 (executing program) 2021/07/30 23:54:17 fetching corpus: 17400, signal 702335/769081 (executing program) 2021/07/30 23:54:17 fetching corpus: 17450, signal 702843/769324 (executing program) 2021/07/30 23:54:18 fetching corpus: 17500, signal 703307/769556 (executing program) 2021/07/30 23:54:18 fetching corpus: 17550, signal 703853/769816 (executing program) 2021/07/30 23:54:18 fetching corpus: 17600, signal 704925/770111 (executing program) 2021/07/30 23:54:18 fetching corpus: 17650, signal 705370/770310 (executing program) 2021/07/30 23:54:19 fetching corpus: 17700, signal 706005/770547 (executing program) 2021/07/30 23:54:19 fetching corpus: 17750, signal 706459/770760 (executing program) 2021/07/30 23:54:19 fetching corpus: 17800, signal 706875/770974 (executing program) 2021/07/30 23:54:19 fetching corpus: 17850, signal 707442/771200 (executing program) 2021/07/30 23:54:19 fetching corpus: 17900, signal 707756/771403 (executing program) 2021/07/30 23:54:19 fetching corpus: 17950, signal 709295/771659 (executing program) 2021/07/30 23:54:20 fetching corpus: 18000, signal 709991/771885 (executing program) 2021/07/30 23:54:20 fetching corpus: 18050, signal 710447/772097 (executing program) 2021/07/30 23:54:20 fetching corpus: 18100, signal 710900/772295 (executing program) 2021/07/30 23:54:20 fetching corpus: 18150, signal 711715/772524 (executing program) 2021/07/30 23:54:21 fetching corpus: 18200, signal 712571/772732 (executing program) 2021/07/30 23:54:21 fetching corpus: 18250, signal 713057/772942 (executing program) 2021/07/30 23:54:21 fetching corpus: 18300, signal 713921/773134 (executing program) 2021/07/30 23:54:22 fetching corpus: 18350, signal 714700/773317 (executing program) 2021/07/30 23:54:22 fetching corpus: 18400, signal 715290/773535 (executing program) 2021/07/30 23:54:22 fetching corpus: 18450, signal 716039/773730 (executing program) 2021/07/30 23:54:22 fetching corpus: 18500, signal 716889/773957 (executing program) 2021/07/30 23:54:23 fetching corpus: 18550, signal 717651/774142 (executing program) 2021/07/30 23:54:23 fetching corpus: 18600, signal 718429/774319 (executing program) 2021/07/30 23:54:23 fetching corpus: 18650, signal 718962/774494 (executing program) 2021/07/30 23:54:23 fetching corpus: 18700, signal 719513/774687 (executing program) 2021/07/30 23:54:23 fetching corpus: 18750, signal 719889/774848 (executing program) 2021/07/30 23:54:24 fetching corpus: 18800, signal 720328/775005 (executing program) 2021/07/30 23:54:24 fetching corpus: 18850, signal 720924/775171 (executing program) 2021/07/30 23:54:24 fetching corpus: 18900, signal 721537/775334 (executing program) 2021/07/30 23:54:24 fetching corpus: 18950, signal 722158/775479 (executing program) 2021/07/30 23:54:25 fetching corpus: 19000, signal 722806/775633 (executing program) 2021/07/30 23:54:25 fetching corpus: 19050, signal 723350/775783 (executing program) 2021/07/30 23:54:25 fetching corpus: 19100, signal 723646/775911 (executing program) 2021/07/30 23:54:25 fetching corpus: 19150, signal 724098/776076 (executing program) 2021/07/30 23:54:26 fetching corpus: 19200, signal 724758/776230 (executing program) 2021/07/30 23:54:26 fetching corpus: 19250, signal 725360/776364 (executing program) 2021/07/30 23:54:26 fetching corpus: 19300, signal 726139/776517 (executing program) 2021/07/30 23:54:26 fetching corpus: 19350, signal 727045/776648 (executing program) 2021/07/30 23:54:27 fetching corpus: 19400, signal 727489/776688 (executing program) 2021/07/30 23:54:27 fetching corpus: 19450, signal 728499/776688 (executing program) 2021/07/30 23:54:27 fetching corpus: 19500, signal 728887/776688 (executing program) 2021/07/30 23:54:27 fetching corpus: 19550, signal 729510/776688 (executing program) 2021/07/30 23:54:27 fetching corpus: 19600, signal 730016/776688 (executing program) 2021/07/30 23:54:28 fetching corpus: 19650, signal 730638/776688 (executing program) 2021/07/30 23:54:28 fetching corpus: 19700, signal 730976/776688 (executing program) 2021/07/30 23:54:28 fetching corpus: 19750, signal 731336/776688 (executing program) 2021/07/30 23:54:28 fetching corpus: 19800, signal 731648/776688 (executing program) 2021/07/30 23:54:29 fetching corpus: 19850, signal 732131/776688 (executing program) 2021/07/30 23:54:29 fetching corpus: 19900, signal 732717/776698 (executing program) 2021/07/30 23:54:29 fetching corpus: 19950, signal 733060/776700 (executing program) 2021/07/30 23:54:29 fetching corpus: 20000, signal 733335/776700 (executing program) 2021/07/30 23:54:30 fetching corpus: 20050, signal 733650/776706 (executing program) 2021/07/30 23:54:30 fetching corpus: 20100, signal 734129/776706 (executing program) 2021/07/30 23:54:30 fetching corpus: 20150, signal 734683/776708 (executing program) 2021/07/30 23:54:30 fetching corpus: 20200, signal 735053/776723 (executing program) 2021/07/30 23:54:30 fetching corpus: 20250, signal 735465/776723 (executing program) 2021/07/30 23:54:31 fetching corpus: 20300, signal 735989/776723 (executing program) 2021/07/30 23:54:31 fetching corpus: 20350, signal 736442/776724 (executing program) 2021/07/30 23:54:31 fetching corpus: 20400, signal 737049/776724 (executing program) 2021/07/30 23:54:31 fetching corpus: 20450, signal 737504/776724 (executing program) 2021/07/30 23:54:31 fetching corpus: 20500, signal 737947/776724 (executing program) 2021/07/30 23:54:32 fetching corpus: 20550, signal 738432/776724 (executing program) 2021/07/30 23:54:32 fetching corpus: 20600, signal 738768/776746 (executing program) 2021/07/30 23:54:32 fetching corpus: 20650, signal 739369/776746 (executing program) 2021/07/30 23:54:32 fetching corpus: 20700, signal 739841/776746 (executing program) 2021/07/30 23:54:33 fetching corpus: 20750, signal 740582/776746 (executing program) 2021/07/30 23:54:33 fetching corpus: 20800, signal 741314/776748 (executing program) 2021/07/30 23:54:33 fetching corpus: 20850, signal 741788/776748 (executing program) 2021/07/30 23:54:33 fetching corpus: 20900, signal 742635/776748 (executing program) 2021/07/30 23:54:34 fetching corpus: 20950, signal 743178/776748 (executing program) 2021/07/30 23:54:34 fetching corpus: 21000, signal 743464/776748 (executing program) 2021/07/30 23:54:34 fetching corpus: 21050, signal 743978/776748 (executing program) 2021/07/30 23:54:34 fetching corpus: 21100, signal 744500/776748 (executing program) 2021/07/30 23:54:35 fetching corpus: 21150, signal 745049/776748 (executing program) 2021/07/30 23:54:35 fetching corpus: 21200, signal 745504/776748 (executing program) 2021/07/30 23:54:35 fetching corpus: 21250, signal 746189/776748 (executing program) 2021/07/30 23:54:36 fetching corpus: 21300, signal 746741/776748 (executing program) 2021/07/30 23:54:36 fetching corpus: 21350, signal 747085/776748 (executing program) 2021/07/30 23:54:36 fetching corpus: 21400, signal 747693/776748 (executing program) 2021/07/30 23:54:36 fetching corpus: 21450, signal 748053/776748 (executing program) 2021/07/30 23:54:37 fetching corpus: 21500, signal 748564/776749 (executing program) 2021/07/30 23:54:37 fetching corpus: 21550, signal 749459/776753 (executing program) 2021/07/30 23:54:37 fetching corpus: 21600, signal 750068/776753 (executing program) 2021/07/30 23:54:37 fetching corpus: 21650, signal 750697/776753 (executing program) 2021/07/30 23:54:38 fetching corpus: 21700, signal 750944/776753 (executing program) 2021/07/30 23:54:38 fetching corpus: 21750, signal 751289/776753 (executing program) 2021/07/30 23:54:38 fetching corpus: 21800, signal 751732/776754 (executing program) 2021/07/30 23:54:38 fetching corpus: 21850, signal 752575/776754 (executing program) 2021/07/30 23:54:39 fetching corpus: 21900, signal 753056/776754 (executing program) 2021/07/30 23:54:39 fetching corpus: 21950, signal 753448/776755 (executing program) 2021/07/30 23:54:39 fetching corpus: 22000, signal 754251/776755 (executing program) 2021/07/30 23:54:39 fetching corpus: 22050, signal 755000/776755 (executing program) 2021/07/30 23:54:40 fetching corpus: 22100, signal 755492/776755 (executing program) 2021/07/30 23:54:40 fetching corpus: 22150, signal 756303/776755 (executing program) 2021/07/30 23:54:40 fetching corpus: 22200, signal 756743/776755 (executing program) 2021/07/30 23:54:40 fetching corpus: 22250, signal 757138/776755 (executing program) 2021/07/30 23:54:41 fetching corpus: 22300, signal 757677/776755 (executing program) 2021/07/30 23:54:41 fetching corpus: 22350, signal 757953/776755 (executing program) 2021/07/30 23:54:42 fetching corpus: 22400, signal 758420/776756 (executing program) 2021/07/30 23:54:42 fetching corpus: 22450, signal 758913/776756 (executing program) 2021/07/30 23:54:42 fetching corpus: 22500, signal 759228/776756 (executing program) 2021/07/30 23:54:43 fetching corpus: 22550, signal 759879/776756 (executing program) 2021/07/30 23:54:43 fetching corpus: 22600, signal 760176/776756 (executing program) 2021/07/30 23:54:43 fetching corpus: 22650, signal 760605/776757 (executing program) 2021/07/30 23:54:43 fetching corpus: 22655, signal 760629/776759 (executing program) 2021/07/30 23:54:43 fetching corpus: 22655, signal 760629/776759 (executing program) 2021/07/30 23:54:47 starting 4 fuzzer processes 23:54:48 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000380)=0xc) [ 195.655331][ T51] audit: type=1400 audit(1627689288.247:8): avc: denied { execmem } for pid=8707 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:54:48 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14}}, @dstopts={{0x18}}], 0xf}}, {{&(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private1]}}}], 0x28}}], 0x2, 0x0) 23:54:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x6, 0xd, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x81, 0x6b, 0x200, 0x400, 0x5d6f, 0x40240080, r3}) r4 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x81, 0x6b, 0x200, 0x400, 0x5d6f, 0x40240080, r5}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x4e23, 0x0, 0x4e20, 0x5, 0x2, 0xa0, 0x80, 0x2c, r5, 0xee01}, {0x14, 0x8, 0x9, 0x7fffffff, 0x1b267969, 0x0, 0x3, 0x20}, {0x1000, 0x9, 0x80000001, 0x1}, 0x20, 0x6e6bb1, 0x2, 0x0, 0x1, 0x1}, {{@in6=@local, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x2, 0x1, 0x81, 0x8000, 0xfffff370, 0x4}}, 0xe8) accept4$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000340)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, {0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x10001}, 0x0, [0x9, 0x101, 0x8000, 0x0, 0xffffffff, 0x3, 0x1ff, 0x9]}, 0x5c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}}, 0x20000044) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@remote, @local, @loopback, 0x3, 0x2, 0x0, 0x100, 0x1, 0x84010228}) 23:54:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) [ 197.145838][ T8708] chnl_net:caif_netlink_parms(): no params data found [ 197.254356][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.267816][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.279569][ T8708] device bridge_slave_0 entered promiscuous mode [ 197.296620][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.307286][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.319181][ T8708] device bridge_slave_1 entered promiscuous mode [ 197.401497][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.418760][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.456824][ T8708] team0: Port device team_slave_0 added [ 197.468553][ T8708] team0: Port device team_slave_1 added [ 197.500895][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.512845][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.549539][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.579705][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.590160][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.625390][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.677711][ T8708] device hsr_slave_0 entered promiscuous mode [ 197.688881][ T8708] device hsr_slave_1 entered promiscuous mode [ 197.888965][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 197.992082][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 198.105799][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.118259][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.129609][ T8710] device bridge_slave_0 entered promiscuous mode [ 198.141028][ T8708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.166636][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.174519][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.185801][ T8710] device bridge_slave_1 entered promiscuous mode [ 198.195335][ T8708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.250089][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.257480][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.266072][ T8712] device bridge_slave_0 entered promiscuous mode [ 198.274880][ T8708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.293388][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.299954][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.307772][ T8712] device bridge_slave_1 entered promiscuous mode [ 198.318884][ T8708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.335486][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.358116][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.373406][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.393814][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.426048][ T8710] team0: Port device team_slave_0 added [ 198.439510][ T8710] team0: Port device team_slave_1 added [ 198.510683][ T8712] team0: Port device team_slave_0 added [ 198.528499][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.535996][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.567124][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.580900][ T8714] chnl_net:caif_netlink_parms(): no params data found [ 198.595542][ T8712] team0: Port device team_slave_1 added [ 198.610986][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.620570][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.655679][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.684757][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.691682][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.721562][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.748010][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.756341][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.786572][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.827392][ T8710] device hsr_slave_0 entered promiscuous mode [ 198.841703][ T8710] device hsr_slave_1 entered promiscuous mode [ 198.851514][ T8710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.863152][ T8710] Cannot create hsr debugfs directory [ 198.918434][ T8712] device hsr_slave_0 entered promiscuous mode [ 198.926015][ T8712] device hsr_slave_1 entered promiscuous mode [ 198.933608][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.942901][ T8712] Cannot create hsr debugfs directory [ 198.976574][ T9061] Bluetooth: hci0: command 0x0409 tx timeout [ 198.981756][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.993758][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.001051][ T8714] device bridge_slave_0 entered promiscuous mode [ 199.036586][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.043676][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.051272][ T8714] device bridge_slave_1 entered promiscuous mode [ 199.128964][ T8714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.169774][ T8714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.238294][ T8714] team0: Port device team_slave_0 added [ 199.251019][ T8714] team0: Port device team_slave_1 added [ 199.284837][ T2894] Bluetooth: hci1: command 0x0409 tx timeout [ 199.309170][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.323481][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.364689][ T8714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.376433][ T8714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.382062][ T8714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.406630][ T8714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.478039][ T8708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.503994][ T8714] device hsr_slave_0 entered promiscuous mode [ 199.513458][ T8714] device hsr_slave_1 entered promiscuous mode [ 199.523980][ T8714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.535988][ T8714] Cannot create hsr debugfs directory [ 199.557773][ T8710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.574536][ T8710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.601453][ T8710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.613197][ T39] Bluetooth: hci2: command 0x0409 tx timeout [ 199.616380][ T8710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.653200][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.665266][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.698594][ T8708] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.763682][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.773017][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.782278][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.789678][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.799668][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.810315][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.819073][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.826062][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.833216][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.842616][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.853338][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.871151][ T8712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.889043][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.898090][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.911110][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.922770][ T5053] Bluetooth: hci3: command 0x0409 tx timeout [ 199.922792][ T8712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.949499][ T8712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.960251][ T8712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.996958][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.008764][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.025240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.036823][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.078053][ T8708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.094428][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.122773][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.135129][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.177863][ T8714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.187747][ T8714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.209842][ T8714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.229252][ T8714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.266941][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.275741][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.315064][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.326723][ T8708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.362227][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.371775][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.387376][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.416893][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.438019][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.452924][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.464776][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.473496][ T9491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.483755][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.518731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.537531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.550982][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.560067][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.570192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.582045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.593188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.625231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.651224][ T8708] device veth0_vlan entered promiscuous mode [ 200.672849][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.695776][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.705410][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.717473][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.729328][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.739950][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.751392][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.762295][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.773112][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.783081][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.793660][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.805368][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.815230][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.827159][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.840832][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.853431][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.869066][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.877425][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.900896][ T8714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.911051][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.922232][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.936839][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.945747][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.957467][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.969811][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.978419][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.998926][ T8708] device veth1_vlan entered promiscuous mode [ 201.011422][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.034955][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.050306][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.052523][ T9061] Bluetooth: hci0: command 0x041b tx timeout [ 201.064890][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.089623][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.100131][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.116180][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.125465][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.141758][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.154451][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.161845][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.168923][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.177299][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.186080][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.194135][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.213270][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.220662][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.241554][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.271110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.288139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.304349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.317543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.328029][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.335060][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.343559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.353004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.361163][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.368212][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.372578][ T4013] Bluetooth: hci1: command 0x041b tx timeout [ 201.377232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.397371][ T8712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.414219][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.432004][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.440492][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.449327][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.481148][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.489299][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.498606][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.507223][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.518170][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.528282][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.539655][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.549577][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.557326][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.566915][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.584541][ T8710] device veth0_vlan entered promiscuous mode [ 201.595438][ T8708] device veth0_macvtap entered promiscuous mode [ 201.620821][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.634761][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.645066][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.661400][ T8708] device veth1_macvtap entered promiscuous mode [ 201.676970][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.691108][ T8710] device veth1_vlan entered promiscuous mode [ 201.709936][ T4013] Bluetooth: hci2: command 0x041b tx timeout [ 201.711187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.731063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.741247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.751621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.760946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.770354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.789013][ T8714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.804371][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.828608][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.838643][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.883039][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.895584][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.905967][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.921705][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.937703][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.949163][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.961221][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.971410][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.999690][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.010996][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.012733][ T9581] Bluetooth: hci3: command 0x041b tx timeout [ 202.026015][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.037069][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.048975][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.062839][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.101642][ T8708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.112488][ T8708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.122880][ T8708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.134106][ T8708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.149245][ T8710] device veth0_macvtap entered promiscuous mode [ 202.159082][ T8712] device veth0_vlan entered promiscuous mode [ 202.166621][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.175704][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.184333][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.204453][ T8710] device veth1_macvtap entered promiscuous mode [ 202.225957][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.237462][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.247816][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.284226][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.295669][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.319790][ T8712] device veth1_vlan entered promiscuous mode [ 202.351559][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.366528][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.379673][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.393029][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.407266][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.419414][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.429790][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.440445][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.451279][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.464633][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.475343][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.486594][ T8714] device veth0_vlan entered promiscuous mode [ 202.501810][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.516532][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.530758][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.576719][ T8712] device veth0_macvtap entered promiscuous mode [ 202.591917][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.607490][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.618600][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.630551][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.650199][ T8710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.661872][ T8710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.672771][ T8710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.683187][ T8710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.733589][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.743456][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.743542][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.756943][ T8712] device veth1_macvtap entered promiscuous mode [ 202.776508][ T8714] device veth1_vlan entered promiscuous mode [ 202.784894][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.793208][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.844779][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.861230][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.911666][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.925736][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.937044][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.950624][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.964883][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.973834][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.983112][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.992297][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.037906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.048138][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.060859][ T8714] device veth0_macvtap entered promiscuous mode [ 203.087017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.101994][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.110965][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.124283][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.132854][ T5053] Bluetooth: hci0: command 0x040f tx timeout [ 203.142924][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.163285][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.179697][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 23:54:55 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000002c0)='..}\x00', &(0x7f0000000300)='/dev/sg#\x00'], 0x0, 0x0) [ 203.198711][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.200878][ T8714] device veth1_macvtap entered promiscuous mode [ 203.207440][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.222831][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.233618][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.242098][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 23:54:55 executing program 0: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x27, &(0x7f0000000240)={0x0, 0x0, 0x12}) [ 203.250801][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.261893][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.273217][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.308945][ T8712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 23:54:55 executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) faccessat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000001e80)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) [ 203.322840][ T8712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.342437][ T8712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.352581][ T8712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.380606][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 23:54:56 executing program 1: syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x40) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) [ 203.396866][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:54:56 executing program 0: chdir(&(0x7f000000e680)='./file0\x00') [ 203.411804][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.429521][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.445945][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.452810][ T27] Bluetooth: hci1: command 0x040f tx timeout 23:54:56 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2123) [ 203.458129][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.478788][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.489831][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.499070][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.525882][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.541199][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.554957][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.569861][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.581786][ T8714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.595781][ T8714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.610820][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.631764][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.642981][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.659644][ T8714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.677911][ T8714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.689183][ T8714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.702747][ T8714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.774096][ T9061] Bluetooth: hci2: command 0x040f tx timeout [ 203.796501][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.820251][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.847410][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.858070][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.869372][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.883424][ T9061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.909489][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.939268][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.961815][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.972246][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.981852][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.993159][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:54:56 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10}, 0x10}}, 0x0) 23:54:56 executing program 3: r0 = inotify_init1(0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 23:54:56 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 23:54:56 executing program 1: syz_io_uring_setup(0x1565, &(0x7f00000000c0)={0x0, 0x3f62}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x7fffffff) [ 204.086408][ T9061] Bluetooth: hci3: command 0x040f tx timeout 23:54:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 23:54:56 executing program 1: r0 = socket(0x2a, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:56 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=""/68, 0x44}, 0x12100) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000004c0)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x1411, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e21, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x27, 0x0, "cbf29ca014987bb8cdcc38b797e60c5881d5ce141f6fdf0abb216969be5b2118187fdb353fea1e15a36f7c6d7e0c84add6aa84af0966f5ade62c3d5a4c92bdab23dfdd9ee20fad5df65e4d1f6e01ec29"}, 0xd8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/19, 0x13}, {&(0x7f0000000740)=""/47, 0x2f}, {&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000800)=""/175, 0xaf}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/16, 0x10}, {&(0x7f0000001a40)=""/140, 0x8c}, {&(0x7f0000001b00)=""/41, 0x29}], 0x9, &(0x7f0000001bc0)=""/254, 0xfe}, 0x40002041) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001e00)={0x1, 0xd8, &(0x7f0000001d00)=""/216}) faccessat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000001e80)='/proc/slabinfo\x00', 0x0, 0x0) faccessat2(r3, &(0x7f0000001ec0)='./file0\x00', 0x4a, 0x100) openat$nvme_fabrics(0xffffff9c, &(0x7f00000021c0), 0xa40, 0x0) 23:54:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) 23:54:56 executing program 0: syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0x40) 23:54:56 executing program 1: r0 = socket(0x2a, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:56 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 23:54:56 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) openat2$dir(0xffffff9c, &(0x7f0000000c40)='./file0\x00', &(0x7f0000002c40)={0x4042, 0x0, 0xa}, 0x18) 23:54:56 executing program 2: r0 = socket(0x2a, 0x2, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) [ 204.263998][ T51] audit: type=1800 audit(1627689296.857:9): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=13901 res=0 errno=0 23:54:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in, 0x0, 0x0, 0x0, 0x0, "eb34813f47426dfd860e437d6279977b500a2fdd5fdd1eb03bc91e1b57c99d3d46bc178d46a65fa1790b6896f49d127469e86f701ead4fa4000746cd26a85921c1b57c51694eb64c293d13c76f29b62f"}, 0xd8) 23:54:56 executing program 1: r0 = socket(0x2a, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x18}}], 0x18}}], 0x2, 0x0) 23:54:56 executing program 3: openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x48102, 0x0) 23:54:56 executing program 1: r0 = socket(0x2a, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) 23:54:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000000)) 23:54:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x20440, 0x0) 23:54:56 executing program 1: getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 23:54:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x24) 23:54:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) [ 204.431499][ T51] audit: type=1400 audit(1627689297.017:10): avc: denied { write } for pid=9744 comm="syz-executor.2" name="net" dev="proc" ino=34581 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 23:54:57 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 23:54:57 executing program 1: getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 23:54:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', &(0x7f0000000100)='ns/pid\x00:\xe5[I\x86\xd6j\xd4\x84cU\xb2\x94j\xc2\xb96R\xe9\x85[f|\xa3.\x00\xb6\f\xff\xe4l\x97\xcf\xf8h\xf16\x84\xa2`\xfa\x82pFX\x06H\x8e\x0e\xecN\x93_\x93\x8e\xdb', 0xffffffffffffff28, 0x0) [ 204.490366][ T51] audit: type=1400 audit(1627689297.017:11): avc: denied { add_name } for pid=9744 comm="syz-executor.2" name=".pending_reads" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 23:54:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 23:54:57 executing program 1: getpeername$unix(0xffffffffffffffff, 0x0, 0x0) [ 204.538253][ T51] audit: type=1400 audit(1627689297.017:12): avc: denied { create } for pid=9744 comm="syz-executor.2" name=".pending_reads" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 23:54:57 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f00000002c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0xffffffffffffffb8) 23:54:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001180)='attr/current\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 23:54:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 23:54:57 executing program 1: r0 = socket(0x0, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:57 executing program 0: add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0xfc26, 0xfffffffffffffffe) 23:54:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x9, 0x201}, 0x14}}, 0x0) 23:54:57 executing program 1: r0 = socket(0x0, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 23:54:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x1dc, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private, 0x0, 0x0, 'ip6gre0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x238) 23:54:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 23:54:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) 23:54:57 executing program 0: setresuid(0xee00, 0x0, 0xffffffffffffffff) 23:54:57 executing program 1: r0 = socket(0x0, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000780)={0x6, {{0x2, 0x0, @multicast1}}}, 0x8c) 23:54:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc6a}]}]}, 0x58}}, 0x0) 23:54:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') ftruncate(r0, 0xffffffff) 23:54:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc6a}]}]}, 0x58}}, 0x0) 23:54:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x0) 23:54:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') read$FUSE(r0, 0x0, 0x0) 23:54:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc6a}]}]}, 0x58}}, 0x0) 23:54:57 executing program 1: r0 = socket(0x2a, 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x60) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r3 = gettid() tkill(r3, 0x1000000000016) 23:54:57 executing program 1: r0 = socket(0x2a, 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:54:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc6a}]}]}, 0x58}}, 0x0) 23:54:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="dd", 0x1}, {0x0}, {0x0}, {&(0x7f00000000c0)="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", 0x1000}], 0x4}}], 0x1, 0x0) 23:54:57 executing program 1: r0 = socket(0x2a, 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) [ 205.204100][ T5] Bluetooth: hci0: command 0x0419 tx timeout 23:54:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x8) 23:54:57 executing program 1: socket(0x2a, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 23:54:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x1b8, 0x94, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x124, 0xffffffff, 0xffffffff, 0x124, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@AUDIT={0x24}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x214) 23:54:58 executing program 1: socket(0x2a, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 23:54:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$FUSE(r0, 0x0, 0x0) 23:54:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x60) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r3 = gettid() tkill(r3, 0x1000000000016) 23:54:58 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') 23:54:58 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', 0x0) 23:54:58 executing program 1: socket(0x2a, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 23:54:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) [ 205.522936][ T9581] Bluetooth: hci1: command 0x0419 tx timeout 23:54:58 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', 0x0) 23:54:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}}, 0x0) 23:54:58 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', 0x0) 23:54:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x60) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r3 = gettid() tkill(r3, 0x1000000000016) 23:54:58 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x0) close(r0) 23:54:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, 0x0, 0x0) 23:54:58 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', 0x0) 23:54:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) 23:54:58 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='net/sockstat\x00') 23:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 23:54:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000001300)={'IDLETIMER\x00'}, &(0x7f0000001340)=0x1e) [ 205.852856][ T39] Bluetooth: hci2: command 0x0419 tx timeout 23:54:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x60) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r3 = gettid() tkill(r3, 0x1000000000016) 23:54:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) 23:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 23:54:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 23:54:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1dc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @private, 0x0, 0x0, 'ip6gre0\x00', 'rose0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'bond_slave_1\x00', 'team0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x238) 23:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 23:54:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580), 0x9}}], 0x34, 0x0) 23:54:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 23:54:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x4) 23:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:54:58 executing program 1: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000580)='smaps\x00') 23:54:58 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') 23:54:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x4) 23:54:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) 23:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001e0021030000000000000000"], 0x14}}, 0x0) 23:54:58 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') [ 206.175581][ T39] Bluetooth: hci3: command 0x0419 tx timeout 23:54:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x4) 23:54:58 executing program 0: socketpair(0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fork() pipe2(0x0, 0x80000) setgid(0x0) getresuid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000147c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000012bc0)=[{&(0x7f00000118c0)}], 0x1}}], 0x3, 0x0) setrlimit(0x0, &(0x7f0000000000)) 23:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f000000da40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000063c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x40010100, 0x0) 23:54:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @loopback}, 0x8) 23:54:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x4) 23:54:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x40010002, 0x0) sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@rights={{0x14, 0x1, 0x1, [r1, r2]}}], 0x14}}], 0x1, 0x0) 23:54:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 23:54:58 executing program 1: r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='>', 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$invalidate(0x15, r0) 23:54:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') write$FUSE_OPEN(r0, 0x0, 0x0) 23:54:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) 23:54:59 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') fcntl$setlease(r0, 0x400, 0x0) 23:54:59 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x1b35) 23:54:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @random="2d934a563e27"}, 0x2b, {0x2, 0x0, @private}, 'veth1\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @initdev}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000003a00)={0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e20, @private=0xa010102}}}, 0x84) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) 23:54:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x40010002, 0x0) sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@rights={{0x14, 0x1, 0x1, [r1, r2]}}], 0x14}}], 0x1, 0x0) 23:54:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) [ 206.537971][ T9954] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 23:54:59 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x1b35) 23:54:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) 23:54:59 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x1b35) 23:54:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @random="2d934a563e27"}, 0x2b, {0x2, 0x0, @private}, 'veth1\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @initdev}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000003a00)={0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e20, @private=0xa010102}}}, 0x84) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) 23:54:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x40010002, 0x0) sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@rights={{0x14, 0x1, 0x1, [r1, r2]}}], 0x14}}], 0x1, 0x0) 23:54:59 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x1b35) 23:54:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) 23:54:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @random="2d934a563e27"}, 0x2b, {0x2, 0x0, @private}, 'veth1\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @initdev}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000003a00)={0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e20, @private=0xa010102}}}, 0x84) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) 23:54:59 executing program 3: openat$dir(0xffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x10841, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)={&(0x7f0000000b40)='./file0\x00'}, 0x10) 23:54:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @random="2d934a563e27"}, 0x2b, {0x2, 0x0, @private}, 'veth1\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @initdev}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000003a00)={0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e20, @private=0xa010102}}}, 0x84) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) 23:54:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) 23:54:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x40010002, 0x0) sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@rights={{0x14, 0x1, 0x1, [r1, r2]}}], 0x14}}], 0x1, 0x0) 23:54:59 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_vlan\x00'}) [ 206.871214][ T9989] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 23:54:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) 23:54:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') read$FUSE(r0, 0x0, 0x0) 23:54:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') read$FUSE(r0, 0x0, 0x0) 23:54:59 executing program 2: request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='fscrypt:', 0x0) 23:54:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp6\x00') read$FUSE(r0, 0x0, 0x0) 23:54:59 executing program 3: getresuid(&(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000004140)) 23:54:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="0200faff8000"}, 0x0, {0x2, 0x0, @remote}, 'macvlan0\x00'}) 23:54:59 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/module/loop', 0x22000, 0x0) close(r0) 23:54:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="a6", 0x1, 0x0, 0x0, 0x0) 23:54:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_team\x00'}, 0x18) 23:54:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000200)=0x54) 23:54:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) 23:54:59 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), 0xffffffffffffffff) 23:54:59 executing program 2: r0 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) flistxattr(r0, 0x0, 0x0) 23:54:59 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') 23:54:59 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/vlan/config\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) 23:54:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x2b, {0x2, 0x0, @broadcast}, 'batadv_slave_0\x00'}) 23:54:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000001480), 0x4) 23:54:59 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/29, 0x1d) 23:54:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}}], 0x1, 0x0) 23:54:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000037c0)=[{0x0}, {&(0x7f00000035c0)=""/57, 0x39}, {&(0x7f0000003600)=""/75, 0x4b}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="df9d1d568cdc1a8709a939e7717d72677dbdf70e57a64e50a96c50ab6422beb682024a344327d432cb46195df0b8e16d374d50419082ff4f89d8", 0x3a}], 0x1}}], 0x1, 0x0) 23:54:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) 23:54:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}}], 0x1, 0x0) 23:54:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) 23:54:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50}, 0x50) 23:54:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) 23:54:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 23:54:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1486], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 23:54:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 23:55:00 executing program 0: pipe(&(0x7f0000003a00)={0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1}) 23:55:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) 23:55:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f00000000c0)="830fd9ce", 0x4) 23:55:00 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stat\x00') read$FUSE(r0, 0x0, 0x0) 23:55:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1486], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 23:55:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) 23:55:00 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc1}, &(0x7f00000012c0)={0x0, "f74fce602d6ea62d8ce9274a15babe9365eac048abaa9ec55fd18bd193337f395192587f0101ae5dd6153114e47a59c3a81f960a151cc67534a1e24b3352927a"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)) 23:55:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 23:55:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) 23:55:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='totmaps\x00') read$FUSE(r0, 0x0, 0x0) 23:55:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1486], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 23:55:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) 23:55:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004240)={'wlan0\x00'}) 23:55:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000dc0500001000000095000000000000009abb1723bf2c204131c9545b21c751ee4024f479cbe4b89f9808836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18a84246eec0b8d5d4494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f7fcd8ac4109850ce4aa143beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000030000000000cdb7fe6d684423596ee2bdad7787936c24c84d4b21327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e78e6ca5460cfa312daac36dbe7d1db9f5561ad6f7c2e79fb00b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79c3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e544dc6861822136ab34bd28eca5f419dfeeefa1e89d6a3b74fbb4b619c4398424b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb0158b4af0f8e86c62a4c72327c7eac45496d41a8389937162ba7617fd85daaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675af5e39db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e64f925192663904537229a30235cd5985f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6e5e82e881b7bb7f1a407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b1b067689d2a36d720fbef6162a0b0759aa5aff50000000000000000064898f58f8822675cc74fbd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e03e6fa768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd4673105104000000000000007655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadbc144e82692b4a77e28978a4c339701ecd38bc1ed03569569042461c8c693a7c714ba01eb0e021d31e991dac4f8003ee2b65a9835d00e663cf2733e48b3645985df01b97e5a7b17aa7d58a158f258a4a5c1ed8c4d1c2c95c6a097413c4fa62cf834ade34962c9b53a8428130aae0b05548f53586aac0ddd42dd2b817a441199bcf38c3999c1d3fb6381ed21f21c5079854f1919cc0d876820f41b5c61cf27f9347583102a9bbfe6c93deff5604a1e387dbea3e158516f69e95188e521cad3c05e34c13790048150944f57d486827fed7d255473dd618ae7fea79d68e51ad5c431f2712065110c1767199ab9f92c901f68ad1a752fa85994f87815c66e0d4eee0c9a76a37bc419e19dec9598b836ab9d618e3a851fb2965b8c26d82d1859bb6c231efc9e234def000093227d503b8c2c33133a3f444707bdf31c5a33b6fc1004971fbb7dd480ec03086a1d34a158afed5d2147cf79cd5da77f239047e1de0d0ff3350c11661c9f9492966091d178c9ec53f0996022cb627536a08d42102cb1acec325d38e05cd3cc72e21fcf3f69dee1a02419b399e35034bb0e2ce89a78ce42f6f863e5524113e3e62a761694aea19b906ee5bc0af825a817b78e555f1a7a2f9dc45eabe535b246bf5f0ab75dc1032fb3755aa9910bdbbdab717d1bec0ec6da1016680806d6a62b7fa055a54ca97a80696bb0303e39ee6fb69888710549e38dc471721d1ecc687d9c922653f5a427ef9f572fd214bab463db11e37f138bc3855b1898571f4c5decf6bc4fece543186f892e5d58a6cecb2e7315c0f40897cca41bf99d31ad48d886bb1400"/1486], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 23:55:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) 23:55:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 23:55:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 23:55:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0x4c0, &(0x7f0000001100)="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"}) 23:55:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0xbc0, 0xffffffff, 0xa20, 0x0, 0xa20, 0xffffffff, 0xffffffff, 0xaf0, 0xaf0, 0xaf0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xff000000], [0xff, 0xffffff00, 0xff, 0xff], 'wlan0\x00', 'syzkaller1\x00', {}, {0x1fe}, 0x29, 0xff, 0x3, 0x60}, 0x0, 0x8b8, 0x8e0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2], 0x6, 0x5f, 0x2}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {0xf1, 0x3}, {0x800, 0x1}, {0xf68, 0x1}, {}, {0x3}, {0xffffffa5, 0x3}, {0x2}, {0x80000001, 0x2}, {0x0, 0x1}, {0x9}], [{0x0, 0x1ff}, {0x6, 0x3}, {0x7, 0xc6}, {0x7, 0x3}, {0x6, 0x7ff}, {0x2, 0xffffffa5}, {0x0, 0x40}, {0x5, 0x1f}, {0xffffffff, 0x9}, {0x6, 0x40}, {0x8, 0x50}], 0x1, 0x8}, {[{0x400, 0x3}, {0x8000}, {0x1, 0x1}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x6, 0x3}, {0x1634}], [{0xc3, 0x2}, {0x3ff, 0xffff}, {0x0, 0xf47}, {0xb8, 0x1}, {0x1ff, 0x1}, {0x4, 0x3f}, {0x20, 0xe6}, {0x20, 0x2}, {0x4, 0xffff8000}, {0x3, 0x7ff}, {0x8000, 0x6}], 0x4, 0x8}, {[{0x8, 0x3}, {0xffff592d, 0x3}, {0x1ff, 0x1}, {0x5, 0x3}, {0x7ff, 0x2}, {0x0, 0x3}, {0x3}, {0x3, 0x2}, {}, {0x7fff, 0x1}, {0x9, 0x1}], [{}, {}, {0x1, 0xff}, {0x7, 0x9}, {0xffff, 0x9}, {0x1, 0x80000001}, {0xffff, 0xfffffffc}, {0xfff, 0xffff}, {0x101, 0x8}, {0xbdca, 0x1}, {0x1000, 0xa}], 0xa, 0x6}, {[{0x0, 0x1}, {0x80, 0x3}, {0x2, 0x2}, {0x400, 0x3}, {0x1, 0x1}, {0x800, 0x1}, {0x81}, {0x2}, {0x7ff, 0x3}, {0x7fffffff, 0x1}, {0x20, 0x3}], [{0x7, 0x8}, {0x800, 0x8}, {0x4, 0x1ff}, {0x1, 0xffffa21e}, {0x2, 0x6}, {0x658, 0xfffff800}, {0x7ff, 0x4}, {0x6, 0x40}, {0x7, 0xfffffffa}, {0x5, 0x1}, {0xff, 0x10000}], 0x3, 0x1}, {[{0x5, 0x3}, {0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x8, 0x2}, {0x2f7}, {0x1000, 0x3}, {0x2, 0x2}, {0x2f, 0x1}, {0x8, 0x1}, {0x2, 0x3}], [{0x80000001, 0xfffffff9}, {0xcea, 0x130}, {0x2, 0x8}, {0x5, 0xffffaef8}, {0xffffff1f, 0x2800000}, {0x4}, {0xffffffff, 0x81}, {0x9, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x9, 0x6}], 0x2, 0x7}, {[{0x4, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x2}, {0xfff}, {0x9, 0x3}, {0x9, 0x3}, {0xfffffff9, 0x2}, {0x1}, {0x4, 0x1}, {0x2}], [{0xff, 0xfff}, {0x9, 0x10000}, {0x8001, 0x7}, {0x2, 0x7f}, {0x400, 0x5327}, {0x6, 0x522e}, {0x9, 0x2}, {0x5, 0xb988}, {0x7fff, 0x80000001}, {0x7}, {0x22df12f7, 0x1}], 0x81, 0x5}, {[{0x3ff, 0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x3}, {0x1f, 0x2}, {0xf6b, 0x3}, {0xff8, 0x2}, {0x3, 0x1}, {0x8000, 0x1}, {0x39e, 0x2}], [{0x8000, 0x8000}, {0x711, 0x7ff}, {0xd2, 0x1}, {0x7cd, 0xfb}, {0x5ae4, 0xf2}, {0x7fff, 0x1}, {0x8ac, 0x3}, {0x7fff, 0x800}, {0x2}, {0x3ff, 0x80000000}, {0x1}], 0xa, 0x1}, {[{0x126, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {0x2}, {0xfff}, {0xb0, 0x1}, {0x7ff, 0x3}, {}, {0x9, 0x2}, {0x7fffffff, 0x3}], [{0x3, 0x1ff}, {}, {0x7, 0x5}, {0x7, 0x8000}, {0x6, 0x1000000}, {0x9, 0x1}, {0x3}, {0x6, 0x40}, {0x4, 0x4}, {0x0, 0x2}, {0x3ff, 0x2}], 0x3, 0x1}, {[{0x0, 0x1}, {0x2, 0x2}, {0x80}, {0x5, 0x3}, {0x10001, 0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x8}, {0x5c83, 0x1}], [{0xc4b1bc4f, 0xffff}, {0x3, 0x2}, {0x9, 0x4298}, {0x6, 0x1}, {0x0, 0x2}, {0x3}, {0x0, 0x5ea2}, {0x3}, {0x8001, 0x7}, {0x0, 0x7fffffff}, {0x4}], 0x6, 0x5}, {[{0x80000000, 0x2}, {0x752, 0x2}, {0x1ff, 0x1}, {}, {0x9, 0x1}, {0x8, 0x3}, {0xffffffc0, 0x3}, {0x91f, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x3}], [{0x101, 0xfffffffb}, {0x3ff, 0x67b4}, {0x0, 0x3}, {0xab7, 0x2f}, {0xda, 0x1}, {0x6, 0xffffffff}, {0x478, 0x79b6}, {0x0, 0x2}, {0xc0000000, 0x1}, {0x7, 0x7}, {0x81, 0xfffffffb}], 0x5, 0xa}, {[{0xaa4, 0x7e72911f9aeb6fce}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0x34d59f95, 0x5}, {0x78, 0x1}, {0x332, 0x2}, {0xfff}, {0x100}, {0x2, 0x2}, {0x7, 0x2}], [{0x0, 0x4}, {0x1, 0x7f}, {0x9, 0x3f}, {0x0, 0x1}, {0x0, 0xfd4f}, {0x75, 0x2}, {}, {0x9, 0x5b9}, {0x3ff, 0x80000000}, {0x5, 0x9c}, {0x80000001, 0x2}], 0x8, 0x2}], 0x0, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x0, 0x3}, {0x4, 0x3, 0x6}}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x2c, 0x9, 0x5, 0x1, 0x0, 0xc}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x80000000, 0x9, 0xfffffff9, 0x4, 0x4]}}}, {{@ipv6={@local, @mcast2, [0x0, 0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x20, 0x0, 0x41}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc20) socket(0x8, 0x40005, 0x8) [ 207.996697][T10107] x_tables: duplicate underflow at hook 2 [ 208.015575][T10111] x_tables: duplicate underflow at hook 2 23:55:00 executing program 0: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000cc0), 0xffffffffffffffff) 23:55:00 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 23:55:00 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 23:55:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x104, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2ac, 0x2ac, 0x2ac, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x104, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @common=@socket0={{0x20}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syz_tun\x00', 'vcan0\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x354) 23:55:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 23:55:00 executing program 0: capget(0x0, &(0x7f0000000040)) time(&(0x7f0000000080)) 23:55:00 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000400)={@random="cbeffc90986c", @random="069c1a410004", @val, {@ipv6}}, 0x0) 23:55:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000440)={[{@test_dummy_encryption}]}) 23:55:00 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) [ 208.299968][T10129] loop3: detected capacity change from 0 to 140 [ 208.307420][T10131] jffs2: Unknown parameter 'smackfshat' [ 208.308528][T10131] jffs2: Unknown parameter 'smackfshat' 23:55:00 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 23:55:00 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 208.361364][T10129] EXT4-fs (loop3): Test dummy encryption mode enabled [ 208.392992][T10129] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 208.405017][T10146] jffs2: Unknown parameter 'smackfshat' [ 208.411198][T10129] ext4 filesystem being mounted at /syzkaller-testdir685563277/syzkaller.sZrXK1/51/mnt supports timestamps until 2038 (0x7fffffff) 23:55:01 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 23:55:01 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x2dd3, &(0x7f0000000000)={0x0, 0xdba4, 0x1, 0x3, 0x35d, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x5}, 0xffff) syz_genetlink_get_family_id$team(&(0x7f0000000cc0), r1) sendmsg$TEAM_CMD_NOOP(r1, 0x0, 0x2008010) 23:55:01 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:01 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) [ 208.723706][T10156] jffs2: Unknown parameter 'smackfshat' 23:55:01 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x330101, 0x0) 23:55:01 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 208.774555][T10166] jffs2: Unknown parameter 'smackfshat' 23:55:01 executing program 0: syz_mount_image$jffs2(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:01 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001080)=@framed, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002180), 0x10}, 0x78) 23:55:01 executing program 0: syz_mount_image$jffs2(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:01 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0xa0975269a8a63a8f) 23:55:01 executing program 2: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd65, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0x0, "a873d245", {0x3, 0x0, 0x0, 0x6}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x384, &(0x7f0000000f40)=ANY=[@ANYBLOB="e100004e8c97d9c11576d4dbc84030cf9f9374c2a5b26001f12bede84e23292f9a05145eea072c4cbff2c2eaaa50cefe5b5d17185632060000009992d155400cb7e2cee962c208bbc81a07fb5d53d2bbb738d4a2a8e7f741fb37a578a0bdcf262b8b9b59f908cff453446914773993821386a0a17e736b52b72f9ac00ecf1ee540587fbb47a3e724bd9ff478e4f4a92b811bd7e447e208ac39cc020440454c2ed1fa1033703856d42e1fab601e053ea6"]) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x104, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) 23:55:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', @ifru_data=0x0}) 23:55:01 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) 23:55:01 executing program 0: syz_mount_image$jffs2(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 209.087835][T10188] jffs2: Bad value for 'compr' [ 209.097932][T10188] jffs2: Bad value for 'compr' 23:55:01 executing program 3: syz_io_uring_setup(0x4da, &(0x7f0000000000)={0x0, 0x552a, 0xa, 0x0, 0x103}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 23:55:01 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) 23:55:01 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 209.232807][T10201] jffs2: Bad value for 'compr' [ 209.292726][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.613874][ T5] usb 7-1: too many configurations: 210, using maximum allowed: 8 [ 210.513353][ T5] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.521629][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.530637][ T5] usb 7-1: Product: syz [ 210.535017][ T5] usb 7-1: Manufacturer: syz [ 210.539297][ T5] usb 7-1: SerialNumber: syz [ 210.596479][ T5] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 211.253114][ T5] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.456610][T10181] udc-core: couldn't find an available UDC or it's busy [ 211.464488][T10181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.482945][ T3023] usb 7-1: USB disconnect, device number 2 [ 212.322556][ T5] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 212.331821][ T5] ath9k_htc: Failed to initialize the device [ 212.359468][ T3023] usb 7-1: ath9k_htc: USB layer deinitialized 23:55:05 executing program 2: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0xfffffffffffffffb}], 0x0, &(0x7f0000000240)={[{')&$\xb1'}, {}], [{@dont_appraise}]}) 23:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) [ 212.533096][T10230] loop2: detected capacity change from 0 to 16383 [ 212.533522][T10229] jffs2: Bad value for 'compr' [ 212.559286][T10230] vxfs: WRONG superblock magic 00000000 at 1 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 212.576176][T10230] vxfs: WRONG superblock magic 00000000 at 8 [ 212.585915][T10230] vxfs: can't find superblock. 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) 23:55:05 executing program 3: syz_mount_image$erofs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002300)) 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 212.630432][T10239] 9pnet: Insufficient options for proto=fd [ 212.654733][T10242] jffs2: Bad value for 'compr' [ 212.666948][T10230] loop2: detected capacity change from 0 to 16383 [ 212.679395][T10230] vxfs: WRONG superblock magic 00000000 at 1 [ 212.691370][T10230] vxfs: WRONG superblock magic 00000000 at 8 [ 212.703004][T10230] vxfs: can't find superblock. 23:55:05 executing program 2: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0xfffffffffffffffb}], 0x0, &(0x7f0000000240)={[{')&$\xb1'}, {}], [{@dont_appraise}]}) 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:55:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001080)=@framed={{}, [@map, @func, @alu={0x4, 0x0, 0x5, 0x7, 0x8, 0x80, 0xffffffffffffffff}, @initr0, @call, @jmp]}, &(0x7f0000001100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:05 executing program 1: syz_mount_image$jffs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) [ 212.791721][T10255] loop2: detected capacity change from 0 to 16383 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 212.808794][T10255] vxfs: WRONG superblock magic 00000000 at 1 [ 212.815691][T10255] vxfs: WRONG superblock magic 00000000 at 8 23:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x1076ddb96caded2b) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r2, 0xf26, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1400, 0x8}}}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='pagemap\x00') sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20004080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, [@map={0x18, 0x4, 0x1, 0x0, r3}, @func, @alu={0x4, 0x0, 0x5, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x96}, @jmp={0x5, 0x0, 0x3, 0xb, 0xa, 0x100}]}, &(0x7f0000001100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x17, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000002140)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002180)={0x0, 0x10, 0x94, 0x8000}, 0x10}, 0x78) 23:55:05 executing program 1: syz_mount_image$jffs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) [ 212.823118][T10255] vxfs: can't find superblock. 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) [ 212.885659][T10266] jffs2: Unknown parameter 'smackfshat' 23:55:05 executing program 2: socket(0x18, 0x0, 0xd7) 23:55:05 executing program 1: syz_mount_image$jffs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) 23:55:05 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001540)={0x0, 0x74}, 0x20) 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x1076ddb96caded2b) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) 23:55:05 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff) [ 212.977343][T10275] jffs2: Unknown parameter 'smackfshat' 23:55:05 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) [ 213.028492][T10285] jffs2: Unknown parameter 'smackfshat' 23:55:05 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@compr_lzo}]}) 23:55:05 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 23:55:05 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=']) [ 213.117258][T10297] No source specified 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:55:05 executing program 2: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@compr_lzo}]}) 23:55:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x0, 0x0, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 23:55:05 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) syz_io_uring_setup(0x4da, &(0x7f0000000000)={0x0, 0x552a, 0xa, 0x0, 0x103}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 213.189966][T10304] MTD: Attempt to mount non-MTD device "/dev/loop2" 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:55:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5421, 0x0) 23:55:05 executing program 3: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000016c0)="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", 0x1fa, 0x6}], 0x0, &(0x7f0000000440)) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:55:05 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000cc0), r0) [ 213.270423][T10320] loop3: detected capacity change from 0 to 1 [ 213.272677][T10304] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 213.281490][T10320] vxfs: unable to read disk superblock at 1 [ 213.289724][T10320] vxfs: unable to read disk superblock at 8 [ 213.295663][T10320] vxfs: can't find superblock. 23:55:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 23:55:05 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) 23:55:05 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) [ 213.360290][T10320] loop3: detected capacity change from 0 to 1 [ 213.367490][T10320] vxfs: unable to read disk superblock at 1 [ 213.371406][T10336] No source specified 23:55:05 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) [ 213.383693][T10320] vxfs: unable to read disk superblock at 8 [ 213.390252][T10320] vxfs: can't find superblock. 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) [ 213.424557][T10345] No source specified 23:55:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 23:55:06 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x3, 0xfffffffb, &(0x7f0000001c00)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) 23:55:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@mcast2}) [ 213.491638][T10355] No source specified 23:55:06 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x600c02, 0x0) epoll_wait(r0, &(0x7f0000000c80)=[{}], 0x1, 0x361bc3c) 23:55:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={0x0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 23:55:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 23:55:06 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x200002, 0x0) [ 213.557667][T10367] No source specified 23:55:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 23:55:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40305839, 0x0) 23:55:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) [ 213.642763][T10376] No source specified 23:55:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 23:55:06 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000001080)=@framed={{}, [@map, @func, @alu, @call]}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 213.695353][T10386] No source specified 23:55:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) 23:55:06 executing program 3: syz_mount_image$afs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x1014, &(0x7f0000000680)) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='com']) 23:55:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) [ 213.775082][T10393] jffs2: Unknown parameter 'com' 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='com']) 23:55:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr]}, {0x0, [0x0, 0x0]}}, &(0x7f00000000c0)=""/212, 0x28, 0xd4, 0x1}, 0x20) [ 213.821966][T10399] jffs2: Unknown parameter 'com' 23:55:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='com']) 23:55:06 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setns(r0, 0x0) [ 213.911751][T10411] jffs2: Unknown parameter 'com' 23:55:06 executing program 3: syz_mount_image$afs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x1014, &(0x7f0000000680)) 23:55:06 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x3c}, 0x10) 23:55:06 executing program 2: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr']) 23:55:06 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x7c1d00, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 23:55:06 executing program 2: syz_mount_image$vxfs(&(0x7f0000000480), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000d80)=ANY=[]) syz_mount_image$efs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) [ 213.963486][T10420] jffs2: Bad value for 'compr' 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr']) 23:55:06 executing program 3: creat(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0xc, 0x0) 23:55:06 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100207504000000000041"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) [ 214.045103][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.045208][T10427] vxfs: WRONG superblock magic 00000000 at 1 [ 214.058649][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.066576][T10427] vxfs: WRONG superblock magic 00000000 at 8 [ 214.072284][T10434] jffs2: Bad value for 'compr' [ 214.080863][T10427] vxfs: can't find superblock. 23:55:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00074000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39050108038da1924425181aa5", 0x0, 0x200, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830e3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7007c0605a0ffffffff"}, 0x28) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 23:55:06 executing program 3: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[], [{@dont_appraise}]}) 23:55:06 executing program 1: syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr']) [ 214.134078][T10439] jffs2: Unknown parameter 'dont_appraise' [ 214.137430][T10441] jffs2: Bad value for 'compr' [ 214.141793][T10439] jffs2: Unknown parameter 'dont_appraise' 23:55:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00074000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39050108038da1924425181aa5", 0x0, 0x200, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830e3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7007c0605a0ffffffff"}, 0x28) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 214.311863][T10427] vxfs: WRONG superblock magic 00000000 at 1 [ 214.336775][T10427] vxfs: WRONG superblock magic 00000000 at 8 [ 214.357812][T10427] vxfs: can't find superblock. 23:55:07 executing program 1: socket(0x18, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) io_uring_setup(0x3337, &(0x7f0000000100)={0x0, 0x6bcf, 0x0, 0x0, 0x18}) 23:55:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a0"], 0xd0}, 0x0) 23:55:07 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000001080)=@framed={{}, [@map]}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:07 executing program 0: accept(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="24af62b94b7905ce6adde536d50efbe8a4b27c09fca0bbd687f1eb2bebf32c583202467551b41d3eb11372d0f051a72ed2cf3fc4d2ff372d0052c97f22c039a3a42edb3bd8565e2d93325558a08fa902e43408d81f9104653be51d32c082b783170fcc5c40dc1ef097f80b4878f5c9f8", 0x70, 0xffffffffffffff91}], 0xf020, &(0x7f0000000400)={[], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}]}) 23:55:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) [ 214.513933][T10456] loop0: detected capacity change from 0 to 16383 23:55:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x1, &(0x7f0000000cc0)=@raw=[@func], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 23:55:07 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1) 23:55:07 executing program 3: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x1279728b8e0b7d1e) 23:55:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 23:55:07 executing program 1: getresuid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) 23:55:07 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x74, 0x0) 23:55:07 executing program 3: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 23:55:07 executing program 1: socket(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x3337, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x18}) 23:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x24}}, 0x0) 23:55:07 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) 23:55:07 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) [ 214.727998][T10486] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:55:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @mcast1, 0xf10}) 23:55:07 executing program 3: syz_mount_image$afs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='dyn']) 23:55:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) 23:55:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) 23:55:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x0, 0x3}, &(0x7f0000000340)=0x20) 23:55:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x290) 23:55:07 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:07 executing program 1: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x2480, &(0x7f0000003740)) 23:55:07 executing program 0: syz_mount_image$afs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x1014, &(0x7f0000000680)={[{@source}]}) 23:55:07 executing program 3: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000016c0)="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", 0x1fa, 0x6}], 0x0, &(0x7f0000000440)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) [ 214.960493][T10532] loop3: detected capacity change from 0 to 1 [ 214.970154][T10532] vxfs: unable to read disk superblock at 1 [ 214.978853][T10532] vxfs: unable to read disk superblock at 8 [ 214.988110][T10532] vxfs: can't find superblock. 23:55:07 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) [ 215.049697][T10532] loop3: detected capacity change from 0 to 1 23:55:07 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f00000007c0)) [ 215.060056][T10532] vxfs: unable to read disk superblock at 1 23:55:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xa20, 0x0, 0xa20, 0xffffffff, 0xffffffff, 0xaf0, 0xaf0, 0xaf0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [], [], 'wlan0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@local, @mcast2, [], [], 'veth0_to_team\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) [ 215.069812][T10532] vxfs: unable to read disk superblock at 8 [ 215.077420][T10532] vxfs: can't find superblock. 23:55:07 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:07 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:07 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000000)=""/53, 0x35) 23:55:07 executing program 1: syz_io_uring_setup(0x4f46, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 23:55:07 executing program 3: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000016c0)="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", 0x1fa, 0x6}], 0x0, &(0x7f0000000440)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) 23:55:07 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[], 0x74, 0x0) 23:55:07 executing program 1: syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@source={'source', 0x3d, '/dev/fb1\x00'}}]}) 23:55:07 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) [ 215.244215][T10573] kAFS: unparsable volume name [ 215.251217][T10573] kAFS: unparsable volume name 23:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) [ 215.267776][T10575] loop3: detected capacity change from 0 to 1 23:55:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 215.278747][T10575] vxfs: unable to read disk superblock at 1 [ 215.286011][T10575] vxfs: unable to read disk superblock at 8 [ 215.292740][T10575] vxfs: can't find superblock. 23:55:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:55:07 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 23:55:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:55:08 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 23:55:08 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}}}], 0x28}, 0x0) 23:55:08 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:08 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 23:55:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', @ifru_data=&(0x7f0000000000)="b62d88233cb980bc591f659bc8205cda26f185af4c231ca8f063c5724d6dc576"}) [ 215.490289][ T51] audit: type=1400 audit(1627689308.077:13): avc: denied { create } for pid=10600 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 23:55:08 executing program 0: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) 23:55:08 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 23:55:08 executing program 1: syz_mount_image$qnx4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f00000004c0)="4c96", 0x2, 0xffff}], 0x0, 0x0) [ 215.566162][T10615] No source specified [ 215.572924][T10615] No source specified [ 215.578176][T10617] loop1: detected capacity change from 0 to 255 23:55:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) 23:55:08 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$jffs2(0x0, &(0x7f00000002c0)='./file0\x00', 0x3, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="24af62b94b7905ce6adde536d50efbe8a4b27c09fca0bbd687f1eb2bebf32c583202467551b41d3eb11372d0f051a72ed2cf3fc4d2ff372d0052c97f22c039a3a42edb3bd8565e2d93325558a08fa902e43408d81f9104653be51d32c082b783170fcc5c40dc1ef097f80b4878f5c9f883e03704dd39b19af32d71bfc279ef3be75fd7f5f972cdb77431ef4d593f637d75178841a13c02a90c60c2f6f8eefd747809eebc578d08172118bb91f244a689f1b62293cc68f30821c587393b46a3", 0xbf, 0xffffffffffffff91}], 0x0, &(0x7f0000000400)={[{@compr_lzo}, {@compr_zlib}, {@compr_zlib}, {}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, 'team\x00'}}, {@appraise_type}, {@smackfstransmute}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcs\x00'}}]}) [ 215.646507][T10628] loop0: detected capacity change from 0 to 16383 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 215.696273][T10617] loop1: detected capacity change from 0 to 255 23:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000007ac0)) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) 23:55:08 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 23:55:08 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x2, &(0x7f0000000500)=@raw=[@btf_id], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:08 executing program 3: syz_mount_image$qnx4(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)) 23:55:08 executing program 0: openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x486081) 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) [ 215.844153][T10652] qnx4: no qnx4 filesystem (no root dir). 23:55:08 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 23:55:08 executing program 1: syz_io_uring_setup(0x4da, &(0x7f0000000000)={0x0, 0x552a, 0xa}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 215.916302][T10652] qnx4: no qnx4 filesystem (no root dir). 23:55:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000003440), 0x8400, &(0x7f0000003540)) 23:55:08 executing program 1: syz_mount_image$afs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='dyn,flock']) 23:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xe}, 0x1c) 23:55:08 executing program 0: syz_mount_image$afs(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000016c0)="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", 0x7fa, 0x6}], 0x0, &(0x7f0000000440)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@obj_user={'obj_user', 0x3d, '\\'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) [ 216.009563][T10678] afs: Bad value for 'flock' [ 216.017696][T10678] afs: Bad value for 'flock' [ 216.031651][T10681] loop0: detected capacity change from 0 to 4 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8400, &(0x7f0000003540)) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @mcast1}) [ 216.058811][T10681] vxfs: WRONG superblock magic 1fbc027c at 1 [ 216.066724][T10681] vxfs: unable to read disk superblock at 8 [ 216.074875][T10681] vxfs: can't find superblock. 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8400, &(0x7f0000003540)) 23:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xe}, 0x1c) 23:55:08 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8400, &(0x7f0000003540)) 23:55:08 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 23:55:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xf0, 0x1f70}) 23:55:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003540)) 23:55:08 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100080}, 0x20) 23:55:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') [ 216.267802][T10709] vxfs: WRONG superblock magic 00000000 at 1 [ 216.276080][T10709] vxfs: WRONG superblock magic 00000000 at 8 [ 216.283850][T10709] vxfs: can't find superblock. 23:55:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x3}, 0x20) 23:55:08 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 23:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) 23:55:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0x8) 23:55:08 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003540)) 23:55:08 executing program 0: statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='compr=zlib,compr=zlib,rp_size=00000000000000000128']) 23:55:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) [ 216.392825][T10728] jffs2: Bad value for 'rp_size' 23:55:09 executing program 1: syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={[{}]}) [ 216.411774][T10732] vxfs: WRONG superblock magic 00000000 at 1 23:55:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x4030582b, 0x0) [ 216.419309][T10735] kAFS: No cell specified [ 216.420613][T10735] kAFS: No cell specified [ 216.426670][T10732] vxfs: WRONG superblock magic 00000000 at 8 [ 216.436569][T10732] vxfs: can't find superblock. 23:55:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) 23:55:09 executing program 3: r0 = getpid() ptrace$setregset(0x4205, r0, 0x0, 0x0) 23:55:09 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) 23:55:09 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003540)) 23:55:09 executing program 3: syz_mount_image$jffs2(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)='$', 0x1}], 0xf020, &(0x7f0000000400)) 23:55:09 executing program 0: epoll_create(0x82) 23:55:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 23:55:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) 23:55:09 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c']) [ 216.578553][T10754] vxfs: WRONG superblock magic 00000000 at 1 [ 216.587811][T10754] vxfs: WRONG superblock magic 00000000 at 8 [ 216.596001][T10754] vxfs: can't find superblock. [ 216.601728][T10761] jffs2: Unknown parameter 'c' 23:55:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 23:55:09 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, 0x0) 23:55:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) 23:55:09 executing program 3: syz_mount_image$jffs2(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@compr_lzo}, {@compr_zlib}, {}], [{@smackfshat={'smackfshat', 0x3d, '-@/{%'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, 'team\x00'}}]}) 23:55:09 executing program 1: add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x64, 0x39]}, &(0x7f0000000280)={0x0, "8169d745101ae97769d93bdc6d76fe019c065cd2ba6dc46da2b5be12989bbbb796e90e6c75a3309625dc52edbdb2f8c748495fabb21f6f593467947243eaf58c"}, 0x48, 0xfffffffffffffffb) [ 216.730109][T10781] jffs2: Unknown parameter 'smackfshat' 23:55:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5451, 0x0) 23:55:09 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, 0x0) [ 216.773857][T10781] jffs2: Unknown parameter 'smackfshat' 23:55:09 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001080)=@framed, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) 23:55:09 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 23:55:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0xbc0, 0xffffffff, 0xa20, 0x0, 0xa20, 0xffffffff, 0xffffffff, 0xaf0, 0xaf0, 0xaf0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [], [], 'wlan0\x00', 'syzkaller1\x00'}, 0x0, 0x8b8, 0x8e0, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x5f}}, @common=@unspec=@u32={{0x7e0}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@local, @mcast2, [], [], 'veth0_to_team\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc20) 23:55:10 executing program 3: syz_mount_image$jffs2(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffff91}], 0x0, &(0x7f0000000400)) 23:55:10 executing program 1: listxattr(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 23:55:10 executing program 2: syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000003440), 0x8400, 0x0) [ 217.565075][T10808] x_tables: duplicate underflow at hook 2 23:55:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x80045440, &(0x7f0000000480)) [ 217.621419][T10813] loop3: detected capacity change from 0 to 16383 23:55:10 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x7280, 0x0) syz_mount_image$affs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)='T', 0x1}], 0x200028, &(0x7f0000000280)) syz_mount_image$affs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{0x0, 0x0, 0x5}, {0x0}, {0x0}, {0x0}], 0x4404, &(0x7f00000019c0)={[{'\\'}, {'@.+.'}, {'affs\x00'}, {'affs\x00'}, {'\\!^'}], [{@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64], 0x2d, [0x36], 0x2d, [], 0x2d, [0x0, 0x0, 0x63], 0x2d, [0x0, 0x39, 0x0, 0x32, 0x34]}}}]}) socket$nl_generic(0x10, 0x3, 0x10) geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004400)) syz_io_uring_setup(0x483a, &(0x7f0000008500)={0x0, 0xfecf, 0x0, 0x0, 0x386}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008580), &(0x7f00000085c0)) syz_open_procfs$namespace(0x0, 0x0) 23:55:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:10 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x15}]}) 23:55:10 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0, 0x0) [ 217.739443][T10813] loop3: detected capacity change from 0 to 16383 [ 217.744989][T10819] affs: Unrecognized mount option "\" or missing value [ 217.774611][T10819] affs: Error parsing options 23:55:10 executing program 3: select(0x40, &(0x7f0000000000)={0x2}, &(0x7f0000000040)={0x4}, 0x0, 0x0) 23:55:10 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={0x0, 0x0}) 23:55:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x545d, 0x0) 23:55:10 executing program 0: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 217.869001][ C2] hrtimer: interrupt took 131428 ns 23:55:10 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x7280, 0x0) syz_mount_image$affs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)='T', 0x1}], 0x200028, &(0x7f0000000280)) syz_mount_image$affs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{0x0, 0x0, 0x5}, {0x0}, {0x0}, {0x0}], 0x4404, &(0x7f00000019c0)={[{'\\'}, {'@.+.'}, {'affs\x00'}, {'affs\x00'}, {'\\!^'}], [{@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64], 0x2d, [0x36], 0x2d, [], 0x2d, [0x0, 0x0, 0x63], 0x2d, [0x0, 0x39, 0x0, 0x32, 0x34]}}}]}) socket$nl_generic(0x10, 0x3, 0x10) geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004400)) syz_io_uring_setup(0x483a, &(0x7f0000008500)={0x0, 0xfecf, 0x0, 0x0, 0x386}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008580), &(0x7f00000085c0)) syz_open_procfs$namespace(0x0, 0x0) 23:55:10 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) 23:55:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x80047453, 0x0) 23:55:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b3b, 0x0) 23:55:10 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) 23:55:10 executing program 3: prctl$PR_SET_SECCOMP(0x3a, 0x0, 0x0) 23:55:10 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) [ 218.764902][T10864] affs: Unrecognized mount option "\" or missing value [ 218.778220][T10864] affs: Error parsing options 23:55:11 executing program 0: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 23:55:11 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100057a6d6b867240e88000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd7604000000128d00800000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) 23:55:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e2000ff0100000000000000000000010400"}) r1 = syz_usb_connect_ath9k(0x3, 0x68, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "56991c17"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x78, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x5a, &(0x7f00000002c0)=@generic={0x2, 0x0, 0x52, "598791dc", "8d4e703cacf0da4dd843b2901d23d3a18844ffeff2f58a4027e17102cb43db9ed116909a42d4214da250bd70191a8044897175f8b50161572823991c7c3912a6c63029579ca1f5be737d858ab1373fcabdac"}) 23:55:11 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) 23:55:11 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) [ 218.898963][T10887] bridge1: port 1(team0) entered blocking state [ 218.907170][T10887] bridge1: port 1(team0) entered disabled state [ 218.918158][T10887] device team_slave_0 entered promiscuous mode 23:55:11 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) [ 218.925350][T10887] device team_slave_1 entered promiscuous mode 23:55:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x80108906, 0x0) 23:55:11 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) [ 219.122499][ T5108] usb 8-1: new high-speed USB device number 2 using dummy_hcd 23:55:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:55:12 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) [ 219.723436][ T5108] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.734599][ T5108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.745116][ T5108] usb 8-1: Product: syz [ 219.750477][ T5108] usb 8-1: Manufacturer: syz [ 219.757350][ T5108] usb 8-1: SerialNumber: syz [ 219.806818][ T5108] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.472511][ T5108] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.565330][ T3400] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.574631][ T3400] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.892648][ T5108] usb 8-1: ath9k_htc: Invalid TX pipe: 0 [ 220.898164][ T5108] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 221.351652][ T9491] usb 8-1: USB disconnect, device number 2 [ 221.373922][ T5108] ath9k_htc: Failed to initialize the device [ 221.383947][ T9491] usb 8-1: ath9k_htc: USB layer deinitialized [ 222.142489][ T27] usb 8-1: new high-speed USB device number 3 using dummy_hcd 23:55:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b3a, 0x0) 23:55:14 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 23:55:14 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) 23:55:14 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8940, 0x0) 23:55:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b3a, 0xfffffffffffffffa) 23:55:15 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@req={0x28, &(0x7f0000000540)={'veth0\x00', @ifru_map}}) 23:55:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d00000028000180140002006361696630000000000000000000000008000300030000000800030003000000680001"], 0x20c}}, 0x0) 23:55:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x5415, 0x0) [ 222.442822][ T27] usb 8-1: device descriptor read/all, error -71 23:55:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x2, 0x0) 23:55:15 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 23:55:15 executing program 0: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 23:55:15 executing program 1: sendmsg$sock(0xffffffffffffffff, 0x0, 0x7db195418d6176a9) 23:55:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x5429, 0x0) 23:55:15 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 23:55:15 executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 23:55:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x540d, 0x0) 23:55:15 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 23:55:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x2, 0x7ff, 0x0, 0x1}, 0x40) 23:55:15 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8927, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:15 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)) 23:55:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:55:15 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000300)={'vlan0\x00'}) 23:55:15 executing program 2: set_mempolicy(0x3, &(0x7f0000000600)=0xbf, 0xc08) 23:55:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b47, &(0x7f0000000480)) 23:55:16 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0xb3bc, 0x6) 23:55:16 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {}, {}]}) 23:55:16 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000300)={'vlan0\x00'}) 23:55:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b48, &(0x7f0000000480)) 23:55:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x40086602, &(0x7f0000000480)) 23:55:16 executing program 3: syz_mount_image$affs(0x0, &(0x7f0000000300)='./file0\x00', 0x6ac1, 0x7, &(0x7f00000018c0)=[{&(0x7f0000000340)="750b2616653f06ab83305fad15478468ea93855870ceac04494113", 0x1b}, {&(0x7f0000000380)="e8008b8296cea500a99f58f522cf18b1d492a6df41d942b6c4685929a816c1d12c47b71ab32ce901f0", 0x29, 0x80}, {&(0x7f0000000400)='M', 0x1}, {0x0}, {0x0}, {&(0x7f0000000740)="e029cfff50baa057eed4e20190accbb211b02a5e65aa1cf7fc1b554397130cd540c00608180afcddc1c863ae2cb6d636c408688f951b5207b57f71", 0x3b, 0x7fff}, {&(0x7f0000001840)}], 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000085c0)) 23:55:16 executing program 0: prctl$PR_SET_SECCOMP(0x27, 0x0, &(0x7f0000000080)={0x0, 0x0}) 23:55:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b49, &(0x7f0000000480)) [ 223.507188][T11007] loop3: detected capacity change from 0 to 127 23:55:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7}, 0x40) 23:55:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 23:55:16 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89a0, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x2, 0x400000) 23:55:16 executing program 0: syz_io_uring_setup(0x483a, &(0x7f0000008500)={0x0, 0x0, 0x0, 0x0, 0x386}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008580), &(0x7f00000085c0)) [ 223.632198][T11007] loop3: detected capacity change from 0 to 127 23:55:16 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 23:55:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x1}}) 23:55:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0xc020660b, 0x0) 23:55:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) 23:55:16 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3}]}) 23:55:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b46, 0x0) 23:55:16 executing program 0: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b49, &(0x7f0000000480)) [ 223.749443][ T51] audit: type=1326 audit(1627689316.337:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11036 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 23:55:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x401c5820, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:16 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b3b, &(0x7f0000000480)) 23:55:16 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89a0, 0x0) 23:55:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b65, 0xfffffffffffffffa) 23:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:55:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b4b, 0x0) 23:55:16 executing program 2: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b64, &(0x7f0000000480)) 23:55:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x2, 0x970000) 23:55:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) 23:55:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2c326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000034) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x40000) 23:55:16 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, &(0x7f00000000c0)={'syzkaller0\x00'}) 23:55:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 23:55:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x19, 0x4, 0x0, 0x8}, 0x40) 23:55:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 23:55:16 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 23:55:16 executing program 0: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 23:55:16 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 23:55:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2c326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000034) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x40000) 23:55:16 executing program 0: prctl$PR_SET_SECCOMP(0xf, 0x4af000, 0x0) 23:55:16 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 23:55:16 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x64000, 0x0) 23:55:16 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 23:55:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:55:16 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x64000, 0x0) 23:55:17 executing program 0: prctl$PR_SET_SECCOMP(0x59616d61, 0x1, 0x0) 23:55:17 executing program 1: bpf$MAP_LOOKUP_ELEM(0x10, 0x0, 0x0) 23:55:17 executing program 3: bpf$MAP_LOOKUP_ELEM(0x12, 0x0, 0x0) 23:55:17 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) 23:55:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000002000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000140)) [ 224.587500][T11144] loop0: detected capacity change from 0 to 513 23:55:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 224.609388][T11144] EXT4-fs (loop0): revision level too high, forcing read-only mode 23:55:17 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 224.626150][T11144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:55:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5423, &(0x7f0000000480)) 23:55:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000002000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000140)) 23:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b31, 0x0) 23:55:17 executing program 2: syz_mount_image$afs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 1: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x5423, &(0x7f0000000480)) 23:55:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x3c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x2}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:55:17 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 1: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b31, &(0x7f0000000480)) 23:55:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4bfb, &(0x7f0000000480)) 23:55:17 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)) socketpair(0x6, 0x0, 0x0, &(0x7f0000000880)) [ 224.846135][T11179] loop0: detected capacity change from 0 to 513 [ 224.871922][T11179] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 224.873018][T11179] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:55:17 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r0, 0x0, 0x0}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc000) 23:55:17 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x3c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x2}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:55:17 executing program 2: syz_mount_image$afs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 2: syz_mount_image$afs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@dyn}]}) 23:55:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0xc0045878, 0x0) [ 225.061396][T11201] ================================================================== [ 225.061522][T11201] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x12f4/0x1430 [ 225.061870][T11201] Write of size 4 at addr ffffc9000b5e1000 by task syz-executor.3/11201 [ 225.061891][T11201] [ 225.061910][T11201] CPU: 2 PID: 11201 Comm: syz-executor.3 Not tainted 5.14.0-rc3-syzkaller #0 [ 225.061936][T11201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 225.061980][T11201] Call Trace: [ 225.062048][T11201] dump_stack_lvl+0xcd/0x134 [ 225.062218][T11201] print_address_description.constprop.0.cold+0xf/0x2d6 [ 225.062327][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.062355][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.062380][T11201] kasan_report.cold+0x83/0xdf [ 225.062406][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.062432][T11201] sys_imageblit+0x12f4/0x1430 [ 225.062459][T11201] ? drm_fb_helper_damage.isra.0+0x2c4/0x380 [ 225.062544][T11201] drm_fbdev_fb_imageblit+0x15c/0x350 [ 225.062575][T11201] bit_putcs+0x6e1/0xd20 [ 225.062600][T11201] ? bit_clear+0x4f0/0x4f0 [ 225.062624][T11201] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 225.062809][T11201] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 225.063002][T11201] ? fb_get_color_depth+0x11a/0x240 [ 225.063047][T11201] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 225.063072][T11201] ? bit_clear+0x4f0/0x4f0 [ 225.063099][T11201] fbcon_putcs+0x35a/0x450 [ 225.063122][T11201] do_update_region+0x399/0x630 [ 225.063185][T11201] ? con_get_trans_old+0x2a0/0x2a0 [ 225.063206][T11201] ? fb_get_color_depth+0x11a/0x240 [ 225.063233][T11201] ? fbcon_set_palette+0x462/0x630 [ 225.063257][T11201] ? var_to_display+0x7f0/0x7f0 [ 225.063279][T11201] redraw_screen+0x61f/0x740 [ 225.063301][T11201] ? csi_J+0xab0/0xab0 [ 225.063325][T11201] ? fbcon_set_palette+0x462/0x630 [ 225.063349][T11201] fbcon_modechanged+0x593/0x6d0 [ 225.063372][T11201] fbcon_update_vcs+0x3a/0x50 [ 225.063399][T11201] do_fb_ioctl+0x62e/0x690 [ 225.063425][T11201] ? fb_getput_cmap+0x270/0x270 [ 225.063452][T11201] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 225.063601][T11201] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 225.063624][T11201] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 225.063650][T11201] ? do_vfs_ioctl+0x132/0x15d0 [ 225.063725][T11201] ? vfs_fileattr_set+0xb50/0xb50 [ 225.063749][T11201] ? selinux_file_ioctl+0x424/0x5d0 [ 225.063793][T11201] ? __fget_files+0x23d/0x3e0 [ 225.063857][T11201] ? security_file_ioctl+0x5c/0xb0 [ 225.063969][T11201] fb_ioctl+0xe7/0x150 [ 225.064006][T11201] ? do_fb_ioctl+0x690/0x690 [ 225.064031][T11201] __x64_sys_ioctl+0x193/0x200 [ 225.064057][T11201] do_syscall_64+0x35/0xb0 [ 225.064137][T11201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.064164][T11201] RIP: 0033:0x4665e9 [ 225.064207][T11201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.064230][T11201] RSP: 002b:00007f554961c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.064270][T11201] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 225.064287][T11201] RDX: 0000000020000200 RSI: 0000000000004601 RDI: 0000000000000003 [ 225.064302][T11201] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 225.064317][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 225.064333][T11201] R13: 00007ffeb7f88dcf R14: 00007f554961c300 R15: 0000000000022000 [ 225.064352][T11201] [ 225.064357][T11201] [ 225.064361][T11201] Memory state around the buggy address: [ 225.064381][T11201] ffffc9000b5e0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 225.064414][T11201] ffffc9000b5e0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 225.064431][T11201] >ffffc9000b5e1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 225.064443][T11201] ^ [ 225.064454][T11201] ffffc9000b5e1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 225.064468][T11201] ffffc9000b5e1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 225.064481][T11201] ================================================================== [ 225.064509][T11201] Disabling lock debugging due to kernel taint [ 225.072113][T11201] Kernel panic - not syncing: panic_on_warn set ... [ 225.072127][T11201] CPU: 2 PID: 11201 Comm: syz-executor.3 Tainted: G B 5.14.0-rc3-syzkaller #0 [ 225.072148][T11201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 225.072158][T11201] Call Trace: [ 225.072165][T11201] dump_stack_lvl+0xcd/0x134 [ 225.072190][T11201] panic+0x306/0x73d [ 225.072249][T11201] ? __warn_printk+0xf3/0xf3 [ 225.072271][T11201] ? preempt_schedule_common+0x59/0xc0 [ 225.072301][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.072362][T11201] ? preempt_schedule_thunk+0x16/0x18 [ 225.072456][T11201] ? trace_hardirqs_on+0x38/0x1c0 [ 225.072508][T11201] ? trace_hardirqs_on+0x51/0x1c0 [ 225.072534][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.072561][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.072592][T11201] end_report.cold+0x5a/0x5a [ 225.072619][T11201] kasan_report.cold+0x71/0xdf [ 225.072648][T11201] ? sys_imageblit+0x12f4/0x1430 [ 225.072674][T11201] sys_imageblit+0x12f4/0x1430 [ 225.072726][T11201] ? drm_fb_helper_damage.isra.0+0x2c4/0x380 [ 225.072752][T11201] drm_fbdev_fb_imageblit+0x15c/0x350 [ 225.072775][T11201] bit_putcs+0x6e1/0xd20 [ 225.072799][T11201] ? bit_clear+0x4f0/0x4f0 [ 225.072821][T11201] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 225.072856][T11201] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 225.072878][T11201] ? fb_get_color_depth+0x11a/0x240 [ 225.073097][T11201] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 225.073124][T11201] ? bit_clear+0x4f0/0x4f0 [ 225.073149][T11201] fbcon_putcs+0x35a/0x450 [ 225.073175][T11201] do_update_region+0x399/0x630 [ 225.073200][T11201] ? con_get_trans_old+0x2a0/0x2a0 [ 225.073223][T11201] ? fb_get_color_depth+0x11a/0x240 [ 225.073253][T11201] ? fbcon_set_palette+0x462/0x630 [ 225.073278][T11201] ? var_to_display+0x7f0/0x7f0 [ 225.073299][T11201] redraw_screen+0x61f/0x740 [ 225.073322][T11201] ? csi_J+0xab0/0xab0 [ 225.073343][T11201] ? fbcon_set_palette+0x462/0x630 [ 225.073367][T11201] fbcon_modechanged+0x593/0x6d0 [ 225.073391][T11201] fbcon_update_vcs+0x3a/0x50 [ 225.073414][T11201] do_fb_ioctl+0x62e/0x690 [ 225.073442][T11201] ? fb_getput_cmap+0x270/0x270 [ 225.073471][T11201] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 225.073501][T11201] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 225.073526][T11201] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 225.073554][T11201] ? do_vfs_ioctl+0x132/0x15d0 [ 225.073586][T11201] ? vfs_fileattr_set+0xb50/0xb50 [ 225.073611][T11201] ? selinux_file_ioctl+0x424/0x5d0 [ 225.073640][T11201] ? __fget_files+0x23d/0x3e0 [ 225.073665][T11201] ? security_file_ioctl+0x5c/0xb0 [ 225.073694][T11201] fb_ioctl+0xe7/0x150 [ 225.073757][T11201] ? do_fb_ioctl+0x690/0x690 [ 225.073786][T11201] __x64_sys_ioctl+0x193/0x200 [ 225.073810][T11201] do_syscall_64+0x35/0xb0 [ 225.073839][T11201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.073863][T11201] RIP: 0033:0x4665e9 [ 225.073878][T11201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.073900][T11201] RSP: 002b:00007f554961c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.073922][T11201] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 225.073936][T11201] RDX: 0000000020000200 RSI: 0000000000004601 RDI: 0000000000000003 [ 225.073950][T11201] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 225.073964][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 225.073977][T11201] R13: 00007ffeb7f88dcf R14: 00007f554961c300 R15: 0000000000022000 [ 225.075108][T11201] Kernel Offset: disabled [ 225.816533][T11201] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:55:18 Registers: info registers vcpu 0 RAX=00000000ac000400 RBX=ffff88802ca19460 RCX=ffffffff812af148 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8d6c3008 RBP=0000000000000000 RSP=ffffc90000007f68 R8 =0000000000000000 R9 =ffffffff8d6c300f R10=fffffbfff1ad8601 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812af17d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe6087908c0 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000014a53ad CR3=000000006f9c6000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=ffffffffffffff00ffff0000ff000000 XMM03=ffff000000000000ffff000000000000 XMM04=00000000000000000000000000000000 XMM05=ffff000000000000ffff000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=0a316164732f7665642f3d746f6f7220 XMM09=080d0f02164b54551d0c144b55555654 XMM10=5c0101010d4b5d090d17130c4b090d17 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000ac000400 RBX=ffff88802cb19460 RCX=ffffffff812af148 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8d6c3008 RBP=0000000000000001 RSP=ffffc90000728f68 R8 =0000000000000000 R9 =ffffffff8d6c300f R10=fffffbfff1ad8601 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812af17d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 00007fe6087908c0 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd05024cd7 CR3=0000000075a8b000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6d616e002f002f70756f7267632f7366 XMM01=0000657079743e2d780073257325002f XMM02=ffff0f0e0d0c0b0a0908070605040302 XMM03=00000000000000000000006d616e002f XMM04=00000000000000000000000000000073 XMM05=00000000ffffffffffffff00ffff0000 XMM06=7379733a470a303d59444145525f444d XMM07=00000000000000000000000000000000 XMM08=00ffffffffff00ff00007f00ff010000 XMM09=080d0f02164b54551d0c144b55555654 XMM10=5c0101010d4b5d090d17130c4b090d17 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8432fc3c RDI=ffffffff904f8ea0 RBP=ffffffff904f8e60 RSP=ffffc90001af7280 R8 =000000000000005d R9 =0000000000000000 R10=ffffffff8432fc2d R11=000000000000001f R12=0000000000000000 R13=fffffbfff209f21f R14=fffffbfff209f1d6 R15=dffffc0000000000 RIP=ffffffff8432fc62 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f554961c700 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000049c25000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffffff XMM06=ffffffffffffffffffffffffffffffff XMM07=000000000000000000e800a800000000 XMM08=2570756c6c25706f6f6c2f7665642f00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=00000000ac000400 RBX=ffff88802cd19460 RCX=ffffffff812af148 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8d6c3008 RBP=0000000000000003 RSP=ffffc90001e07eb0 R8 =0000000000000000 R9 =ffffffff8d6c300f R10=fffffbfff1ad8601 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812af17d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbd7639c8c0 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd736e4000 CR3=000000002609b000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5837fe9dc1c91f3200000000000402f8 XMM01=8ca0b852b1c7c8e10000000000040498 XMM02=f1c1a81e7e6f168700000000000406e8 XMM03=375afdebbf381c81000000000005a9f8 XMM04=2a3ca93bab1efb6600000000001c92c8 XMM05=d3fdd5f48436fbd70000000000040790 XMM06=72ddc25b325f09360000000000040648 XMM07=a1fcdcf819d7e1e50000000000040408 XMM08=dccec8949309cb6a00000000001c9158 XMM09=515151685b0707241100226b07070707 XMM10=070707070707505151515151685b0c13 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000