Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts. 2020/10/08 14:38:02 fuzzer started 2020/10/08 14:38:02 dialing manager at 10.128.0.26:38013 2020/10/08 14:38:02 syscalls: 3450 2020/10/08 14:38:02 code coverage: enabled 2020/10/08 14:38:02 comparison tracing: enabled 2020/10/08 14:38:02 extra coverage: enabled 2020/10/08 14:38:02 setuid sandbox: enabled 2020/10/08 14:38:02 namespace sandbox: enabled 2020/10/08 14:38:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/08 14:38:02 fault injection: enabled 2020/10/08 14:38:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/08 14:38:02 net packet injection: enabled 2020/10/08 14:38:02 net device setup: enabled 2020/10/08 14:38:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/08 14:38:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/08 14:38:02 USB emulation: enabled 2020/10/08 14:38:02 hci packet injection: enabled 2020/10/08 14:38:02 wifi device emulation: enabled 14:38:45 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x541b, 0x0) 14:38:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffffb5) 14:38:46 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000010101020000000000000000020000000c0019800800020002050000740002"], 0x94}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 14:38:46 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80044df9, &(0x7f0000000200)) 14:38:46 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x16c0, 0x5e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 14:38:47 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="457f5c706bf9e6c15fd08cc691fe", 0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000280)="585b9f0f09ce9cd042e02db7bb5ccf9e5d33edb744773875023fc9102af5e533862f388b53b89bf24e", 0x0}, 0x40) syzkaller login: [ 106.023224][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 106.247320][ T6896] IPVS: ftp: loaded support on port[0] = 21 [ 106.371295][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 106.524902][ T6898] IPVS: ftp: loaded support on port[0] = 21 [ 106.603372][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.611112][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.619000][ T6894] device bridge_slave_0 entered promiscuous mode [ 106.630599][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.637685][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.683813][ T6894] device bridge_slave_1 entered promiscuous mode [ 106.755917][ T6900] IPVS: ftp: loaded support on port[0] = 21 [ 106.809327][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.831029][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 106.842990][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.945314][ T6894] team0: Port device team_slave_0 added [ 107.056548][ T6894] team0: Port device team_slave_1 added [ 107.058330][ T6902] IPVS: ftp: loaded support on port[0] = 21 [ 107.123649][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.132321][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.141961][ T6896] device bridge_slave_0 entered promiscuous mode [ 107.154186][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.161405][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.187439][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.205030][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.212086][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.238533][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.254262][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.261851][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.269554][ T6896] device bridge_slave_1 entered promiscuous mode [ 107.339501][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.393570][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.414380][ T6894] device hsr_slave_0 entered promiscuous mode [ 107.422310][ T6894] device hsr_slave_1 entered promiscuous mode [ 107.651053][ T6896] team0: Port device team_slave_0 added [ 107.657175][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 107.693894][ T6896] team0: Port device team_slave_1 added [ 107.701657][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 107.754798][ T7023] IPVS: ftp: loaded support on port[0] = 21 [ 107.803125][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.810399][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.837177][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.891098][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.898109][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.925833][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.001234][ T2646] Bluetooth: hci0: command 0x0409 tx timeout [ 108.055911][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 108.083091][ T6896] device hsr_slave_0 entered promiscuous mode [ 108.091718][ T6896] device hsr_slave_1 entered promiscuous mode [ 108.098355][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.106206][ T6896] Cannot create hsr debugfs directory [ 108.188662][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.196639][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.206787][ T6900] device bridge_slave_0 entered promiscuous mode [ 108.218117][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.225963][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.234739][ T6900] device bridge_slave_1 entered promiscuous mode [ 108.242467][ T3941] Bluetooth: hci1: command 0x0409 tx timeout [ 108.319751][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.328689][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.338119][ T6898] device bridge_slave_0 entered promiscuous mode [ 108.365023][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.385940][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.394225][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.406069][ T6898] device bridge_slave_1 entered promiscuous mode [ 108.420068][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.480686][ T3941] Bluetooth: hci2: command 0x0409 tx timeout [ 108.509460][ T6894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.543614][ T6894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.557902][ T6894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.582936][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.602166][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.609264][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.619309][ T6902] device bridge_slave_0 entered promiscuous mode [ 108.628091][ T6894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.659450][ T6900] team0: Port device team_slave_0 added [ 108.668462][ T6900] team0: Port device team_slave_1 added [ 108.688560][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.703811][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.711324][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.719170][ T6902] device bridge_slave_1 entered promiscuous mode [ 108.731387][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 108.845572][ T6898] team0: Port device team_slave_0 added [ 108.862420][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.869436][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.897703][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.921066][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 108.940018][ T6898] team0: Port device team_slave_1 added [ 108.948593][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.959097][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.960683][ T3941] Bluetooth: hci4: command 0x0409 tx timeout [ 108.974603][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.000703][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.071189][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.082093][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.089098][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.116467][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.134295][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.142129][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.168869][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.253189][ T6902] team0: Port device team_slave_0 added [ 109.295001][ T6902] team0: Port device team_slave_1 added [ 109.316338][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.324737][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.333670][ T7023] device bridge_slave_0 entered promiscuous mode [ 109.352726][ T6900] device hsr_slave_0 entered promiscuous mode [ 109.361016][ T6900] device hsr_slave_1 entered promiscuous mode [ 109.367605][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.375346][ T6900] Cannot create hsr debugfs directory [ 109.387193][ T6898] device hsr_slave_0 entered promiscuous mode [ 109.394408][ T6898] device hsr_slave_1 entered promiscuous mode [ 109.402245][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.409812][ T6898] Cannot create hsr debugfs directory [ 109.429688][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.436933][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.445953][ T7023] device bridge_slave_1 entered promiscuous mode [ 109.461553][ T6896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.477641][ T6896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.520907][ T3941] Bluetooth: hci5: command 0x0409 tx timeout [ 109.569294][ T6896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.579302][ T6896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.597512][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.606068][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.638253][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.654223][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.681934][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.688919][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.717417][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.731749][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.806022][ T7023] team0: Port device team_slave_0 added [ 109.851594][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.864895][ T6902] device hsr_slave_0 entered promiscuous mode [ 109.872665][ T6902] device hsr_slave_1 entered promiscuous mode [ 109.879378][ T6902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.888430][ T6902] Cannot create hsr debugfs directory [ 109.896879][ T7023] team0: Port device team_slave_1 added [ 110.005304][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.013227][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.040658][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.056930][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.065192][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.091644][ T12] Bluetooth: hci0: command 0x041b tx timeout [ 110.097766][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.115257][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.125942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.145420][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.225901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.245640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.254419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.261741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.316511][ T7023] device hsr_slave_0 entered promiscuous mode [ 110.328176][ T17] Bluetooth: hci1: command 0x041b tx timeout [ 110.338421][ T7023] device hsr_slave_1 entered promiscuous mode [ 110.349873][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.358152][ T7023] Cannot create hsr debugfs directory [ 110.369578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.377852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.387387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.396204][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.403369][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.413523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.422212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.455578][ T6900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.467635][ T6900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.493438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.506613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.515739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.525145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.534150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.544265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.552976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.561687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.562334][ T2646] Bluetooth: hci2: command 0x041b tx timeout [ 110.570621][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.602062][ T6900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.614891][ T6900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.718682][ T6898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.740328][ T6898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.750676][ T6898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.789646][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.805904][ T2646] Bluetooth: hci3: command 0x041b tx timeout [ 110.805922][ T6898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.865616][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.900999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.913345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.921029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.930219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.939057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.946224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.992424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.000618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.009290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.019095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.029138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.038842][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.045996][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.051524][ T2646] Bluetooth: hci4: command 0x041b tx timeout [ 111.087168][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.098572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.125821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.136677][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.145875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.154640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.163960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.173801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.213004][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.222790][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.233328][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.243359][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.267442][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.321790][ T6902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.345053][ T6902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.355900][ T6902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.372590][ T6902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.434814][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.444601][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.497674][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.507056][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.528312][ T6894] device veth0_vlan entered promiscuous mode [ 111.561755][ T7023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.579743][ T7023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.589632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.598254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.607587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.611809][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 111.616597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.655798][ T7023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.676180][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.686090][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.705946][ T6894] device veth1_vlan entered promiscuous mode [ 111.723660][ T7023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.792178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.800084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.810318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.819820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.841459][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.879299][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.913964][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.929295][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.956712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.969590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.978616][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.985748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.000222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.010312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.036566][ T6894] device veth0_macvtap entered promiscuous mode [ 112.047816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.056904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.074290][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.094336][ T6894] device veth1_macvtap entered promiscuous mode [ 112.115815][ T6896] device veth0_vlan entered promiscuous mode [ 112.127781][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.139511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.148571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.159179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.168478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.171949][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 112.177369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.191488][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.198623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.207826][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.217886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.227080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.235952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.245045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.252227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.261094][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.269798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.278425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.302120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.318697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.328537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.342284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.378096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.388395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.396934][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.412712][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 112.424212][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.440990][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.464479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.476715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.487666][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.494910][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.503433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.512568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.521084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.531752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.540824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.552722][ T6896] device veth1_vlan entered promiscuous mode [ 112.568110][ T6900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.580020][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.608829][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.642711][ T7724] Bluetooth: hci2: command 0x040f tx timeout [ 112.661048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.681198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.691730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.710633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.733062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.741664][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.751631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.758772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.767169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.776523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.785964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.793121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.801586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.811297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.820592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.831860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.878558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.887989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.892538][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 112.907924][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.918183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.927591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.936469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.945451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.955347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.963551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.971021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.021321][ T6894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.031300][ T6894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.048515][ T6894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.061049][ T6894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.080189][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.090993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.101236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.114977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.122779][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 113.125428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.141932][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.159880][ T6896] device veth0_macvtap entered promiscuous mode [ 113.211404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.220868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.230435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.238822][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.248609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.257455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.270662][ T6896] device veth1_macvtap entered promiscuous mode [ 113.279739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.291277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.305608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.317843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.331069][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.369618][ T6902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.380928][ T6902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.396107][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.405239][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.414550][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.423485][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.437487][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.490396][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.504094][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.512994][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.521481][ T2646] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.528641][ T2646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.538189][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.616132][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.633483][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.642268][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.664293][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.681337][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.682715][ T12] Bluetooth: hci5: command 0x040f tx timeout [ 113.688464][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.771430][ T6900] device veth0_vlan entered promiscuous mode [ 113.779444][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.790528][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.827250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.841658][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.851977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.861161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.869395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.877543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.886845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.895977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.906745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.918776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.928127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.936485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.966470][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.986883][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.004745][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.018113][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.028987][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.041468][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.096519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.106211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.116964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.125945][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.134652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.145685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.155190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.165125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.178965][ T6896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.193713][ T6896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.202506][ T6896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.211329][ T6896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.239304][ T6900] device veth1_vlan entered promiscuous mode [ 114.243139][ T3941] Bluetooth: hci0: command 0x0419 tx timeout [ 114.245781][ T681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.260414][ T681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.272133][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.283209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.295706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.305006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.313849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.325895][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.347573][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.371896][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.403659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.412014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.444698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:38:55 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x541b, 0x0) [ 114.485302][ T12] Bluetooth: hci1: command 0x0419 tx timeout [ 114.511436][ T6900] device veth0_macvtap entered promiscuous mode [ 114.641284][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.661492][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.681306][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.692494][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.713442][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.723986][ T3941] Bluetooth: hci2: command 0x0419 tx timeout [ 114.734101][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.800851][ T6900] device veth1_macvtap entered promiscuous mode 14:38:56 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x541b, 0x0) [ 114.849678][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.864667][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.889658][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.907232][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.964066][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.978148][ T2646] Bluetooth: hci3: command 0x0419 tx timeout [ 114.987768][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.999207][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 14:38:56 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x541b, 0x0) [ 115.030501][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.060866][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.077579][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.095760][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 14:38:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) [ 115.141470][ T6902] device veth0_vlan entered promiscuous mode [ 115.190275][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.205303][ T2646] Bluetooth: hci4: command 0x0419 tx timeout [ 115.205881][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.238080][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.262958][ C1] hrtimer: interrupt took 42927 ns [ 115.268845][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.290478][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.310193][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.328983][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.373853][ T6902] device veth1_vlan entered promiscuous mode [ 115.402822][ T6898] device veth0_vlan entered promiscuous mode [ 115.419949][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.437720][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:38:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) [ 115.466196][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.476906][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.505233][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.533462][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.554061][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.572693][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.588366][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.598973][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.608644][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.619632][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.632807][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.648533][ T6900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.659493][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.740045][ T6900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.754265][ T6900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.783317][ T6900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.796641][ T17] Bluetooth: hci5: command 0x0419 tx timeout 14:38:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) [ 115.833010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.845480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.858436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.867521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.892979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.908803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.935688][ T6898] device veth1_vlan entered promiscuous mode [ 115.954042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.968727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 14:38:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) [ 116.016867][ T7023] device veth0_vlan entered promiscuous mode [ 116.081724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.099551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 14:38:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffffb5) [ 116.135447][ T7023] device veth1_vlan entered promiscuous mode [ 116.160742][ T6902] device veth0_macvtap entered promiscuous mode [ 116.247905][ T6902] device veth1_macvtap entered promiscuous mode [ 116.302145][ T6898] device veth0_macvtap entered promiscuous mode [ 116.389815][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.417186][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.459118][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.491767][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.502088][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.536182][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.567130][ T6898] device veth1_macvtap entered promiscuous mode [ 116.586581][ T7023] device veth0_macvtap entered promiscuous mode [ 116.599225][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.618265][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.663849][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.676086][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.694638][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.706943][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.718393][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.729667][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.740476][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.753298][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.768025][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.778560][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.788753][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.800700][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.812273][ T6902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.822794][ T6902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.836363][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.849370][ T7023] device veth1_macvtap entered promiscuous mode [ 116.852639][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.867551][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.884796][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.893069][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.910789][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.920535][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.929608][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.939395][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.957690][ T6902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.973414][ T6902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.986161][ T6902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.996989][ T6902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.019358][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.031368][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.059186][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.070393][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.081140][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.092128][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.103607][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.114635][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.128337][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.158404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.169666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.187835][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.198497][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.210691][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.222644][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.233537][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.245258][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.255197][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.266029][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.278683][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.300824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.311811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.327501][ T6898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.337118][ T6898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.346276][ T6898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.355807][ T6898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.378372][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.381333][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.398160][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.410516][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.421146][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.432817][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.443329][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.454644][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.468175][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.479161][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.491188][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.502431][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.514900][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.534123][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.543654][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.552867][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.581816][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.624113][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.650805][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.662340][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.682818][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.714190][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.733023][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.752220][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.762589][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.787835][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.803685][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.822794][ T7023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.839002][ T7023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.852979][ T7023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.867030][ T7023] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.893458][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.902774][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.043062][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.059856][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.113491][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.161631][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.191507][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.220072][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.250576][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.283392][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.320568][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.350601][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.376699][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.378332][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.391349][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.420177][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.438088][ T681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.460754][ T681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.464484][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.506220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.619721][ T8374] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.804756][ T2646] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.845320][ T8380] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. 14:39:00 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000010101020000000000000000020000000c0019800800020002050000740002"], 0x94}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 14:39:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffffb5) [ 119.008171][ T8386] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.264667][ T2646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.276382][ T2646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.287310][ T2646] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 119.296504][ T2646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.322516][ T2646] usb 5-1: config 0 descriptor?? [ 119.370563][ T2646] usbhid 5-1:0.0: can't add hid device: -22 [ 119.384762][ T2646] usbhid: probe of 5-1:0.0 failed with error -22 [ 119.577793][ T2646] usb 5-1: USB disconnect, device number 2 [ 120.384929][ T7724] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.825166][ T7724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.836299][ T7724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.849266][ T7724] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 120.858942][ T7724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.870053][ T7724] usb 5-1: config 0 descriptor?? [ 120.930177][ T7724] usbhid 5-1:0.0: can't add hid device: -22 [ 120.937405][ T7724] usbhid: probe of 5-1:0.0 failed with error -22 [ 121.122927][ T8100] usb 5-1: USB disconnect, device number 3 14:39:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80044df9, &(0x7f0000000200)) 14:39:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) 14:39:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) 14:39:02 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="457f5c706bf9e6c15fd08cc691fe", 0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000280)="585b9f0f09ce9cd042e02db7bb5ccf9e5d33edb744773875023fc9102af5e533862f388b53b89bf24e", 0x0}, 0x40) 14:39:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffffb5) 14:39:02 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000010101020000000000000000020000000c0019800800020002050000740002"], 0x94}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 121.260039][ T8424] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. 14:39:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80044df9, &(0x7f0000000200)) 14:39:02 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="457f5c706bf9e6c15fd08cc691fe", 0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000280)="585b9f0f09ce9cd042e02db7bb5ccf9e5d33edb744773875023fc9102af5e533862f388b53b89bf24e", 0x0}, 0x40) 14:39:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) 14:39:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80044df9, &(0x7f0000000200)) 14:39:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) 14:39:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:02 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="457f5c706bf9e6c15fd08cc691fe", 0x0, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000280)="585b9f0f09ce9cd042e02db7bb5ccf9e5d33edb744773875023fc9102af5e533862f388b53b89bf24e", 0x0}, 0x40) 14:39:03 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 2: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000010101020000000000000000020000000c0019800800020002050000740002"], 0x94}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 14:39:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) 14:39:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) [ 122.111982][ T8454] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. 14:39:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@source={'source', 0x3d, '%^\xa5\xdb-:'}}, {@dyn='dyn'}]}) 14:39:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 14:39:03 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) 14:39:03 executing program 0: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@source={'source', 0x3d, '%^\xa5\xdb-:'}}, {@dyn='dyn'}]}) 14:39:04 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) [ 122.775507][ T8487] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 14:39:04 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) 14:39:04 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:04 executing program 0: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@source={'source', 0x3d, '%^\xa5\xdb-:'}}, {@dyn='dyn'}]}) 14:39:04 executing program 5: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 123.039086][ T8504] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 14:39:04 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) 14:39:04 executing program 0: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 123.288858][ T8520] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 14:39:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@source={'source', 0x3d, '%^\xa5\xdb-:'}}, {@dyn='dyn'}]}) 14:39:04 executing program 4: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:04 executing program 5: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:04 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) 14:39:04 executing program 0: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:04 executing program 5: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 123.730599][ T8537] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 14:39:04 executing program 4: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 14:39:05 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:05 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:05 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, &(0x7f0000000000), 0x10) 14:39:05 executing program 4: getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x1) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) [ 124.067805][ T8550] blktrace: Concurrent blktraces are not allowed on loop0 14:39:05 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:05 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:05 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, &(0x7f0000000000), 0x10) 14:39:05 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x2) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 14:39:05 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:05 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:39:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, &(0x7f0000000000), 0x10) 14:39:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffff8021) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 14:39:05 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:39:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 14:39:05 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffff8021) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 14:39:06 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:39:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, &(0x7f0000000000), 0x10) 14:39:06 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000002c0)={0x20, 0xa, &(0x7f00000001c0), {0x0, 0x5, 0x41414770, 0x7, 0x0, 0x3ff, 0xb, 0xe6}}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/35) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x2d, 0x1}) geteuid() r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5}) 14:39:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 14:39:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffff8021) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 14:39:06 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:39:06 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100), 0xb8b, 0x0) close(r3) 14:39:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 14:39:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffff8021) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 14:39:06 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200052203, 0x400000008000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 14:39:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 14:39:06 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) close(r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) 14:39:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100), 0xb8b, 0x0) close(r3) [ 125.614544][ T8630] autofs4:pid:8630:autofs_fill_super: could not open pipe file descriptor 14:39:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200052203, 0x400000008000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 125.661868][ T8634] autofs4:pid:8634:autofs_fill_super: could not open pipe file descriptor 14:39:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x0, 0x743000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f0000000580)='^'}) 14:39:06 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100), 0xb8b, 0x0) close(r3) 14:39:07 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) close(r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) [ 125.817653][ T8640] binder: 8637:8640 ioctl c0306201 20001580 returned -11 14:39:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x0, 0x743000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f0000000580)='^'}) 14:39:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200052203, 0x400000008000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 125.925474][ T8647] autofs4:pid:8647:autofs_fill_super: could not open pipe file descriptor [ 125.993726][ T8651] binder: 8649:8651 ioctl c0306201 20001580 returned -11 14:39:09 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:09 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) close(r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) 14:39:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0) splice(r2, 0x0, r4, &(0x7f0000000100), 0xb8b, 0x0) close(r3) 14:39:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x0, 0x743000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f0000000580)='^'}) 14:39:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8000000200052203, 0x400000008000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 14:39:09 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) [ 128.460881][ T8678] binder: 8673:8678 ioctl c0306201 20001580 returned -11 [ 128.472792][ T8679] autofs4:pid:8679:autofs_fill_super: could not open pipe file descriptor 14:39:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:09 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x0, 0x743000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f0000000580)='^'}) 14:39:09 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) close(r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) [ 128.764677][ T8694] binder: 8689:8694 ioctl c0306201 20001580 returned -11 [ 128.784966][ T8695] autofs4:pid:8695:autofs_fill_super: could not open pipe file descriptor 14:39:10 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 14:39:12 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/181, 0xb5}], 0x1) 14:39:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 14:39:12 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:12 executing program 5: syz_io_uring_setup(0x3a68, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xe2f, &(0x7f0000000400), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000004c0)) 14:39:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x4, 0x0) [ 131.678147][ C1] [ 131.680532][ C1] ================================ [ 131.685631][ C1] WARNING: inconsistent lock state [ 131.690734][ C1] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 131.697484][ C1] -------------------------------- [ 131.702588][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 131.709446][ C1] syz-executor.1/6896 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 131.716117][ C1] ffff888025d83a18 (&xa->xa_lock#10){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 [ 131.724832][ C1] {SOFTIRQ-ON-W} state was registered at: [ 131.730558][ C1] lock_acquire+0x1f2/0xaa0 [ 131.735169][ C1] _raw_spin_lock+0x2a/0x40 [ 131.739752][ C1] io_uring_add_task_file+0x207/0x430 [ 131.745217][ C1] io_uring_setup+0x2727/0x3660 [ 131.750270][ C1] do_syscall_64+0x2d/0x70 [ 131.754781][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 131.760846][ C1] irq event stamp: 377549 [ 131.765192][ C1] hardirqs last enabled at (377548): [] _raw_spin_unlock_irqrestore+0x6f/0x90 [ 131.775801][ C1] hardirqs last disabled at (377549): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 131.785869][ C1] softirqs last enabled at (376438): [] asm_call_irq_on_stack+0xf/0x20 [ 131.795755][ C1] softirqs last disabled at (377515): [] asm_call_irq_on_stack+0xf/0x20 [ 131.805642][ C1] [ 131.805642][ C1] other info that might help us debug this: [ 131.813693][ C1] Possible unsafe locking scenario: [ 131.813693][ C1] [ 131.821135][ C1] CPU0 [ 131.824423][ C1] ---- [ 131.827700][ C1] lock(&xa->xa_lock#10); [ 131.832132][ C1] [ 131.835582][ C1] lock(&xa->xa_lock#10); [ 131.840170][ C1] [ 131.840170][ C1] *** DEADLOCK *** [ 131.840170][ C1] [ 131.848302][ C1] 3 locks held by syz-executor.1/6896: [ 131.853754][ C1] #0: ffff888137770460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3a/0xb0 [ 131.862889][ C1] #1: ffff88805e9b8a08 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x27d/0x660 [ 131.873154][ C1] #2: ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 131.882022][ C1] [ 131.882022][ C1] stack backtrace: [ 131.887922][ C1] CPU: 1 PID: 6896 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 131.897724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.907773][ C1] Call Trace: [ 131.911051][ C1] [ 131.913905][ C1] dump_stack+0x198/0x1fb [ 131.918232][ C1] mark_lock.cold+0x32/0x74 [ 131.922735][ C1] ? lock_chain_count+0x20/0x20 [ 131.927578][ C1] ? mark_lock+0xf7/0x2420 [ 131.931986][ C1] ? lock_chain_count+0x20/0x20 [ 131.936826][ C1] ? kernel_text_address+0xbd/0xf0 [ 131.941954][ C1] ? __kernel_text_address+0x9/0x30 [ 131.947166][ C1] ? unwind_get_return_address+0x51/0x90 [ 131.952788][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 131.958006][ C1] __lock_acquire+0x118a/0x56d0 [ 131.964083][ C1] ? lock_chain_count+0x20/0x20 [ 131.968929][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 131.974903][ C1] lock_acquire+0x1f2/0xaa0 [ 131.979427][ C1] ? xa_destroy+0xaa/0x350 [ 131.983836][ C1] ? lock_release+0x890/0x890 [ 131.988509][ C1] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 131.993905][ C1] _raw_spin_lock_irqsave+0x94/0xd0 [ 131.999130][ C1] ? xa_destroy+0xaa/0x350 [ 132.003535][ C1] xa_destroy+0xaa/0x350 [ 132.007769][ C1] ? xas_pause+0x3b0/0x3b0 [ 132.012203][ C1] ? lock_acquire+0x1f2/0xaa0 [ 132.016876][ C1] ? lock_release+0x890/0x890 [ 132.021571][ C1] ? free_obj_work+0x5b0/0x5b0 [ 132.026327][ C1] __io_uring_free+0x60/0xc0 [ 132.030912][ C1] __put_task_struct+0xff/0x3f0 [ 132.035753][ C1] delayed_put_task_struct+0x1f6/0x340 [ 132.041208][ C1] rcu_core+0x645/0x1240 [ 132.045455][ C1] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 132.050486][ C1] ? mark_held_locks+0x9f/0xe0 [ 132.055241][ C1] ? lock_is_held_type+0xbb/0xf0 [ 132.060198][ C1] __do_softirq+0x203/0xab6 [ 132.064696][ C1] asm_call_irq_on_stack+0xf/0x20 [ 132.069700][ C1] [ 132.072630][ C1] do_softirq_own_stack+0x9b/0xd0 [ 132.077642][ C1] irq_exit_rcu+0x235/0x280 [ 132.082134][ C1] sysvec_apic_timer_interrupt+0x51/0xf0 [ 132.087752][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 132.093726][ C1] RIP: 0010:read_seqbegin.constprop.0+0x10f/0x1e0 [ 132.100143][ C1] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ba 00 00 00 48 83 3d 99 cc 74 08 00 0f 84 94 00 00 00 e8 86 25 ad ff 48 89 df 57 9d <0f> 1f 44 00 00 eb 07 e8 75 25 ad ff f3 90 44 8b 25 cc 10 59 08 31 [ 132.119823][ C1] RSP: 0018:ffffc90005497d98 EFLAGS: 00000293 [ 132.125884][ C1] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff815aa1a7 [ 132.133845][ C1] RDX: ffff88800fe5a380 RSI: ffffffff81c8355a RDI: 0000000000000293 [ 132.141821][ C1] RBP: ffffc90005497ed0 R08: 0000000000000001 R09: ffffffff8d732a2f [ 132.149780][ C1] R10: fffffbfff1ae6545 R11: 0000000000000000 R12: 0000000000000200 [ 132.157741][ C1] R13: ffff88802f27cc00 R14: 0000000000000000 R15: 0000000000000000 [ 132.165727][ C1] ? mark_lock+0xf7/0x2420 [ 132.170139][ C1] ? read_seqbegin.constprop.0+0x10a/0x1e0 [ 132.175940][ C1] d_lookup+0x18/0x60 [ 132.179936][ C1] lookup_dcache+0x1e/0x130 [ 132.184442][ C1] __lookup_hash+0x29/0x180 [ 132.188936][ C1] do_unlinkat+0x295/0x660 [ 132.193356][ C1] ? __ia32_sys_rmdir+0x100/0x100 [ 132.198369][ C1] ? strncpy_from_user+0x29e/0x3a0 [ 132.203493][ C1] do_syscall_64+0x2d/0x70 [ 132.207901][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 132.213782][ C1] RIP: 0033:0x45db77 [ 132.217669][ C1] Code: 00 66 90 b8 58 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 132.237365][ C1] RSP: 002b:00007fff9ceb36b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 132.245771][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045db77 [ 132.253731][ C1] RDX: 00007fff9ceb36d0 RSI: 00007fff9ceb36d0 RDI: 00007fff9ceb3760 [ 132.261689][ C1] RBP: 0000000000000035 R08: 0000000000000000 R09: 000000000000000f [ 132.269663][ C1] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff9ceb47f0 [ 132.277624][ C1] R13: 00000000021dda60 R14: 0000000000000000 R15: 00007fff9ceb47f0 14:39:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 14:39:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:13 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x12) 14:39:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) [ 132.430139][ T8745] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 14:39:13 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfd14) lseek(r3, 0x0, 0x3) 14:39:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfd14) lseek(r3, 0x0, 0x3) 14:39:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfd14) lseek(r3, 0x0, 0x3) [ 132.749965][ T8770] kvm [8767]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x27 [ 132.784020][ T8770] kvm [8767]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x19 [ 132.890546][ T8777] kvm [8775]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x27 [ 132.927350][ T8777] kvm [8775]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x19 14:39:14 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x4, 0x0) 14:39:16 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) 14:39:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfd14) lseek(r3, 0x0, 0x3) 14:39:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:16 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x4, 0x0) [ 135.493394][ T8808] kvm [8805]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x27 [ 135.508333][ T8811] kvm [8804]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x27 [ 135.523545][ T8808] kvm [8805]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x19 [ 135.538174][ T8811] kvm [8804]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x19 14:39:16 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:39:16 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x4, 0x0) 14:39:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:16 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 14:39:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4cd, 0x20020000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:39:16 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000800bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 135.763588][ T8825] kvm [8822]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x27 [ 135.797283][ T8825] kvm [8822]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x19 [ 135.807013][ T29] audit: type=1804 audit(1602167956.979:2): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/22/file0/bus" dev="ramfs" ino=35006 res=1 errno=0 [ 135.873499][ T29] audit: type=1804 audit(1602167956.999:3): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/22/file0/bus" dev="ramfs" ino=35006 res=1 errno=0 14:39:17 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) [ 135.919025][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 136.081607][ T29] audit: type=1804 audit(1602167957.269:4): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/22/file0/file0/bus" dev="ramfs" ino=34572 res=1 errno=0 [ 136.129297][ T29] audit: type=1804 audit(1602167957.269:5): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/22/file0/file0/bus" dev="ramfs" ino=34572 res=1 errno=0 14:39:19 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000800bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:39:19 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) 14:39:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 14:39:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 14:39:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) [ 138.513878][ T29] audit: type=1804 audit(1602167959.699:6): pid=8867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/23/file0/bus" dev="ramfs" ino=34596 res=1 errno=0 [ 138.581178][ T29] audit: type=1804 audit(1602167959.728:7): pid=8867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/23/file0/bus" dev="ramfs" ino=34596 res=1 errno=0 [ 138.584511][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:39:19 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) 14:39:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 14:39:19 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 138.606635][ T29] audit: type=1804 audit(1602167959.748:8): pid=8871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir929883522/syzkaller.x4cgXE/22/file0/bus" dev="ramfs" ino=34600 res=1 errno=0 [ 138.654559][ T29] audit: type=1804 audit(1602167959.818:9): pid=8871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir929883522/syzkaller.x4cgXE/22/file0/bus" dev="ramfs" ino=34600 res=1 errno=0 14:39:19 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) 14:39:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 14:39:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 14:39:20 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:39:20 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000800bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:39:20 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:39:20 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 14:39:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) [ 139.349197][ T29] audit: type=1804 audit(1602167960.528:10): pid=8902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/24/file0/bus" dev="ramfs" ino=34640 res=1 errno=0 14:39:20 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 139.423600][ T29] audit: type=1804 audit(1602167960.568:11): pid=8902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir254208006/syzkaller.ESD7lG/24/file0/bus" dev="ramfs" ino=34640 res=1 errno=0 [ 139.536331][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:39:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 14:39:21 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 14:39:22 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:39:22 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:39:22 executing program 4: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='y', 0x1, r0) keyctl$unlink(0xb, r1, 0xfffffffffffffffc) 14:39:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ffff", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x5, 0x2}]}}}}}}}}, 0x0)