Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2020/10/13 13:29:44 fuzzer started 2020/10/13 13:29:45 dialing manager at 10.128.0.26:36527 2020/10/13 13:29:45 syscalls: 3479 2020/10/13 13:29:45 code coverage: enabled 2020/10/13 13:29:45 comparison tracing: enabled 2020/10/13 13:29:45 extra coverage: enabled 2020/10/13 13:29:45 setuid sandbox: enabled 2020/10/13 13:29:45 namespace sandbox: enabled 2020/10/13 13:29:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/13 13:29:45 fault injection: enabled 2020/10/13 13:29:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/13 13:29:45 net packet injection: enabled 2020/10/13 13:29:45 net device setup: enabled 2020/10/13 13:29:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/13 13:29:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/13 13:29:45 USB emulation: enabled 2020/10/13 13:29:45 hci packet injection: enabled 2020/10/13 13:29:45 wifi device emulation: enabled 13:30:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done], 0x0, 0x0, 0x0}) 13:30:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0xfffffffe}, 0x40) 13:30:43 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(r1, 0x0, 0x0) 13:30:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, &(0x7f0000000100), 0x18) 13:30:44 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:44 executing program 5: unshare(0x8020400) bpf$BPF_GET_BTF_INFO(0x2, 0x0, 0x0) [ 105.710041][ T6857] IPVS: ftp: loaded support on port[0] = 21 [ 105.895925][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 105.971188][ T6859] IPVS: ftp: loaded support on port[0] = 21 [ 106.025561][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.033062][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.041613][ T6857] device bridge_slave_0 entered promiscuous mode [ 106.058702][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.066116][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.073743][ T6857] device bridge_slave_1 entered promiscuous mode [ 106.109688][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.146972][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.167746][ T6861] IPVS: ftp: loaded support on port[0] = 21 [ 106.220429][ T6857] team0: Port device team_slave_0 added [ 106.262985][ T6857] team0: Port device team_slave_1 added [ 106.384620][ T6863] IPVS: ftp: loaded support on port[0] = 21 [ 106.402940][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.412071][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.438973][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.455566][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.462505][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.490493][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.507789][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 106.639712][ T6865] IPVS: ftp: loaded support on port[0] = 21 [ 106.652513][ T6857] device hsr_slave_0 entered promiscuous mode [ 106.664100][ T6857] device hsr_slave_1 entered promiscuous mode [ 106.791343][ T6867] IPVS: ftp: loaded support on port[0] = 21 [ 106.868598][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.879358][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.887956][ T6859] device bridge_slave_0 entered promiscuous mode [ 106.900230][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.907521][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.916904][ T6859] device bridge_slave_1 entered promiscuous mode [ 107.018321][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.037693][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.161580][ T6859] team0: Port device team_slave_0 added [ 107.170304][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 107.205853][ T6857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.216535][ T6857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.231304][ T6859] team0: Port device team_slave_1 added [ 107.252816][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.261813][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.288064][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.303050][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.310073][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.336203][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.355779][ T6857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.375477][ T6857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.403382][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 107.513081][ T6859] device hsr_slave_0 entered promiscuous mode [ 107.520814][ T6859] device hsr_slave_1 entered promiscuous mode [ 107.529883][ T6859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.538141][ T6859] Cannot create hsr debugfs directory [ 107.624475][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 107.663272][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.674568][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.683005][ T6861] device bridge_slave_0 entered promiscuous mode [ 107.694551][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.702810][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.711983][ T6861] device bridge_slave_1 entered promiscuous mode [ 107.725197][ T3098] Bluetooth: hci0: command 0x0409 tx timeout [ 107.792454][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.800597][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.811299][ T6863] device bridge_slave_0 entered promiscuous mode [ 107.853912][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.870054][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.881879][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.890291][ T6863] device bridge_slave_1 entered promiscuous mode [ 107.927258][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 107.943135][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.962787][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.964787][ T2472] Bluetooth: hci1: command 0x0409 tx timeout [ 107.991690][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.023568][ T6863] team0: Port device team_slave_0 added [ 108.087667][ T6863] team0: Port device team_slave_1 added [ 108.104149][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.111629][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.122719][ T6865] device bridge_slave_0 entered promiscuous mode [ 108.142433][ T6861] team0: Port device team_slave_0 added [ 108.158130][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.190084][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.202262][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.204870][ T2472] Bluetooth: hci2: command 0x0409 tx timeout [ 108.214057][ T6865] device bridge_slave_1 entered promiscuous mode [ 108.233935][ T6861] team0: Port device team_slave_1 added [ 108.253483][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.262195][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.271258][ T6867] device bridge_slave_0 entered promiscuous mode [ 108.288329][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.295990][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.303699][ T6867] device bridge_slave_1 entered promiscuous mode [ 108.311818][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.319448][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.346836][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.357551][ T3098] Bluetooth: hci3: command 0x0409 tx timeout [ 108.365813][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.392438][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.402184][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.416458][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.423398][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.453125][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.466597][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.489006][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.496471][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.524288][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.547342][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.559632][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.579340][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.588151][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.614336][ T3098] Bluetooth: hci4: command 0x0409 tx timeout [ 108.621469][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.640136][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.669678][ T6865] team0: Port device team_slave_0 added [ 108.686847][ T6865] team0: Port device team_slave_1 added [ 108.706758][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.718200][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.728711][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.736020][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.744017][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.753870][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.762733][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.769852][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.784911][ T2662] Bluetooth: hci5: command 0x0409 tx timeout [ 108.823933][ T6863] device hsr_slave_0 entered promiscuous mode [ 108.831103][ T6863] device hsr_slave_1 entered promiscuous mode [ 108.849022][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.857462][ T6863] Cannot create hsr debugfs directory [ 108.875727][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.883661][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.898867][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.910462][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.922222][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.930905][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.939692][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.948699][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.965346][ T6867] team0: Port device team_slave_0 added [ 108.979855][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.987198][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.014942][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.032458][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.040640][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.067142][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.088950][ T6867] team0: Port device team_slave_1 added [ 109.105915][ T6861] device hsr_slave_0 entered promiscuous mode [ 109.113856][ T6861] device hsr_slave_1 entered promiscuous mode [ 109.121001][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.128888][ T6861] Cannot create hsr debugfs directory [ 109.153678][ T6859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.184932][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.193282][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.214113][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.222418][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.248809][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.261337][ T6859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.277091][ T6859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.303872][ T6865] device hsr_slave_0 entered promiscuous mode [ 109.311617][ T6865] device hsr_slave_1 entered promiscuous mode [ 109.319400][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.327211][ T6865] Cannot create hsr debugfs directory [ 109.339239][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.346832][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.374247][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.389214][ T6859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.422319][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.430594][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.471185][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.546682][ T6867] device hsr_slave_0 entered promiscuous mode [ 109.553500][ T6867] device hsr_slave_1 entered promiscuous mode [ 109.561753][ T6867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.570217][ T6867] Cannot create hsr debugfs directory [ 109.742928][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.751889][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.759759][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.794870][ T2472] Bluetooth: hci0: command 0x041b tx timeout [ 109.801331][ T6863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.818703][ T6863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.869710][ T6863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.909771][ T6863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.929899][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.952235][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.998514][ T6865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.009852][ T6865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.032681][ T6865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.039546][ T2590] Bluetooth: hci1: command 0x041b tx timeout [ 110.053691][ T6865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.113323][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.135405][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.143448][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.156468][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.164212][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.191728][ T6861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.200939][ T6861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.235946][ T6861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.244376][ T6857] device veth0_vlan entered promiscuous mode [ 110.272376][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.279497][ T2662] Bluetooth: hci2: command 0x041b tx timeout [ 110.288185][ T6861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.303541][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.317243][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.328710][ T6867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.356714][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.371598][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.381294][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.388404][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.396721][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.406341][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.414983][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.422077][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.429947][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.440031][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.453258][ T2662] Bluetooth: hci3: command 0x041b tx timeout [ 110.462373][ T6857] device veth1_vlan entered promiscuous mode [ 110.473986][ T6867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.507025][ T6867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.520953][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.530279][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.542233][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.550863][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.559907][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.593427][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.606372][ T6867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.625895][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.634234][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.643208][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.664101][ T6859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.676205][ T27] Bluetooth: hci4: command 0x041b tx timeout [ 110.683894][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.718768][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.728660][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.745559][ T6857] device veth0_macvtap entered promiscuous mode [ 110.757123][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.766003][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.798563][ T6857] device veth1_macvtap entered promiscuous mode [ 110.812388][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.821642][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.829692][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.838004][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.846340][ T27] Bluetooth: hci5: command 0x041b tx timeout [ 110.848660][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.875188][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.904977][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.912387][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.942368][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.957839][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.970738][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.979246][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.993123][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.005993][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.017380][ T6865] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.047600][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.056945][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.065773][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.089596][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.113168][ T6857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.127016][ T6857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.142517][ T6857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.164579][ T6857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.180429][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.193035][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.202983][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.210095][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.218392][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.227341][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.236431][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.245125][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.253425][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.262548][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.271501][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.278618][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.287611][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.296141][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.303747][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.311947][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.320254][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.329975][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.338740][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.345878][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.360780][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.370301][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.379793][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.388347][ T6859] device veth0_vlan entered promiscuous mode [ 111.432902][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.448638][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.457912][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.465122][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.472822][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.481709][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.490972][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.500250][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.509132][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.516268][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.524096][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.533347][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.541805][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.548943][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.557800][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.566795][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.579796][ T6859] device veth1_vlan entered promiscuous mode [ 111.626649][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.637283][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.647773][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.657305][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.667443][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.676521][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.755054][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.768686][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.777199][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.787167][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.796453][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.805132][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.813601][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.822222][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.830742][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.839535][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.848079][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.856869][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.865619][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.876169][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.884422][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.892432][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.906629][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.916954][ T2662] Bluetooth: hci0: command 0x040f tx timeout [ 111.928608][ T6863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.940155][ T7621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.941553][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.956044][ T7621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.971840][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.985022][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.992705][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.002103][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.012538][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.021765][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.063852][ T6859] device veth0_macvtap entered promiscuous mode [ 112.088539][ T6861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.103528][ T6861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.117391][ T8177] Bluetooth: hci1: command 0x040f tx timeout [ 112.123487][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.132582][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.142544][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.151583][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.160893][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.169424][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.180473][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.188477][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.213206][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.236571][ T6859] device veth1_macvtap entered promiscuous mode [ 112.255725][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.271437][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.281105][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.305961][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.318421][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.332422][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.340552][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.353675][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.355438][ T2662] Bluetooth: hci2: command 0x040f tx timeout [ 112.362788][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.374723][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.382453][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.391232][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.399693][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.406806][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.414340][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.426182][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.434030][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.480161][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.491343][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.503238][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.512887][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.535309][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.542650][ T2662] Bluetooth: hci3: command 0x040f tx timeout [ 112.545664][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.566944][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.577505][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:30:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 112.599662][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.625536][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.636209][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.648474][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.661486][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.671506][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.705376][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.721589][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.740172][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.751682][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.762252][ T8177] Bluetooth: hci4: command 0x040f tx timeout [ 112.769051][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.785593][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.793412][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.803826][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.812489][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.823558][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.832239][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.841351][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.871412][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.895566][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.915688][ T7938] Bluetooth: hci5: command 0x040f tx timeout [ 112.927228][ T6859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.938415][ T6859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.956510][ T6859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.965766][ T6859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.984198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.994347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.011796][ T6863] device veth0_vlan entered promiscuous mode [ 113.039270][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.048331][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.058040][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.068520][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.106834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.115882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.129522][ T6861] device veth0_vlan entered promiscuous mode [ 113.147960][ T6863] device veth1_vlan entered promiscuous mode [ 113.166535][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.176083][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.184154][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.194388][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.210886][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 13:30:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 113.245290][ T6861] device veth1_vlan entered promiscuous mode [ 113.274027][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.304886][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.317922][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.366664][ T8211] IPVS: ftp: loaded support on port[0] = 21 [ 113.420989][ T6863] device veth0_macvtap entered promiscuous mode [ 113.467360][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.493055][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.501330][ T6861] device veth0_macvtap entered promiscuous mode [ 113.517066][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.530128][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.539158][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.552919][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.562045][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.571255][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.579839][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.588217][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.597152][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.632911][ T6863] device veth1_macvtap entered promiscuous mode [ 113.667402][ T6861] device veth1_macvtap entered promiscuous mode [ 113.706839][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.730214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.738880][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.751281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.764150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.777702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.788899][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.800151][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.811089][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.821334][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.831847][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.847273][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.858245][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.870390][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.882253][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.893720][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.916017][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.930257][ T6865] device veth0_vlan entered promiscuous mode [ 113.945867][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.955433][ T7938] Bluetooth: hci0: command 0x0419 tx timeout 13:30:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0xfffffffe}, 0x40) [ 113.971876][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.004327][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:30:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0xfffffffe}, 0x40) [ 114.026904][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.051044][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.064139][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:30:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0xfffffffe}, 0x40) [ 114.082829][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.105066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.122740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 13:30:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) [ 114.148811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.178530][ T8261] IPVS: ftp: loaded support on port[0] = 21 [ 114.189537][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 13:30:53 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) [ 114.194813][ T7938] Bluetooth: hci1: command 0x0419 tx timeout [ 114.221321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.238013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.260974][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.280081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.300018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.313276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.340353][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.351868][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.365647][ C0] [ 114.367418][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.367983][ C0] ======================================================== [ 114.367987][ C0] WARNING: possible irq lock inversion dependency detected [ 114.367997][ C0] 5.9.0-syzkaller #0 Not tainted [ 114.368005][ C0] -------------------------------------------------------- [ 114.378963][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.385559][ C0] syz-executor.1/8271 just changed the state of lock: [ 114.385563][ C0] ffff88809a5b2908 (&group->lock){..-.}-{2:2}, at: snd_pcm_period_elapsed+0x2c/0x210 [ 114.385585][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 114.385587][ C0] (&card->ctl_files_rwlock){.+.+}-{2:2} [ 114.385594][ C0] [ 114.385594][ C0] [ 114.385594][ C0] and interrupts could create inverse lock ordering between them. [ 114.385594][ C0] [ 114.385596][ C0] [ 114.385596][ C0] other info that might help us debug this: [ 114.385599][ C0] Possible interrupt unsafe locking scenario: [ 114.385599][ C0] [ 114.385601][ C0] CPU0 CPU1 [ 114.385603][ C0] ---- ---- [ 114.385604][ C0] lock(&card->ctl_files_rwlock); [ 114.385609][ C0] local_irq_disable(); [ 114.385611][ C0] lock(&group->lock); [ 114.385616][ C0] lock(&card->ctl_files_rwlock); [ 114.385619][ C0] [ 114.385621][ C0] lock(&group->lock); [ 114.385625][ C0] [ 114.385625][ C0] *** DEADLOCK *** [ 114.385625][ C0] [ 114.385630][ C0] 1 lock held by syz-executor.1/8271: [ 114.385633][ C0] #0: ffffc90000007db0 ((&dpcm->timer)){+.-.}-{0:0}, at: call_timer_fn+0x57/0x160 [ 114.385648][ C0] [ 114.385648][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 114.385663][ C0] -> (&card->ctl_files_rwlock){.+.+}-{2:2} { [ 114.385670][ C0] HARDIRQ-ON-R at: [ 114.385680][ C0] lock_acquire+0x160/0x710 [ 114.385689][ C0] _raw_read_lock+0x32/0x40 [ 114.385696][ C0] snd_ctl_notify+0x86/0x550 [ 114.385704][ C0] __snd_ctl_add_replace+0x582/0x8a0 [ 114.385710][ C0] snd_ctl_add+0x6e/0x110 [ 114.385719][ C0] snd_dummy_probe+0xb9e/0x1000 [ 114.385727][ C0] platform_drv_probe+0xcd/0x150 [ 114.385734][ C0] really_probe+0x753/0x1110 [ 114.385742][ C0] driver_probe_device+0x106/0x1a0 [ 114.385750][ C0] bus_for_each_drv+0x108/0x170 [ 114.385757][ C0] __device_attach+0x262/0x3f0 [ 114.385765][ C0] bus_probe_device+0xb8/0x1f0 [ 114.385771][ C0] device_add+0x1630/0x19b0 [ 114.385778][ C0] platform_device_add+0x4ad/0x6e0 [ 114.385785][ C0] platform_device_register_full+0x448/0x530 [ 114.385794][ C0] alsa_card_dummy_init+0x1b3/0x398 [ 114.385803][ C0] do_one_initcall+0x14b/0x350 [ 114.385811][ C0] do_initcall_level+0x101/0x14c [ 114.385818][ C0] do_initcalls+0x59/0x9b [ 114.385825][ C0] kernel_init_freeable+0x356/0x474 [ 114.385832][ C0] kernel_init+0xd/0x290 [ 114.385840][ C0] ret_from_fork+0x1f/0x30 [ 114.385842][ C0] SOFTIRQ-ON-R at: [ 114.385850][ C0] lock_acquire+0x160/0x710 [ 114.385856][ C0] _raw_read_lock+0x32/0x40 [ 114.385863][ C0] snd_ctl_notify+0x86/0x550 [ 114.385870][ C0] __snd_ctl_add_replace+0x582/0x8a0 [ 114.385877][ C0] snd_ctl_add+0x6e/0x110 [ 114.385885][ C0] snd_dummy_probe+0xb9e/0x1000 [ 114.385892][ C0] platform_drv_probe+0xcd/0x150 [ 114.385899][ C0] really_probe+0x753/0x1110 [ 114.385906][ C0] driver_probe_device+0x106/0x1a0 [ 114.385912][ C0] bus_for_each_drv+0x108/0x170 [ 114.385925][ C0] __device_attach+0x262/0x3f0 [ 114.395812][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.398008][ C0] bus_probe_device+0xb8/0x1f0 [ 114.398016][ C0] device_add+0x1630/0x19b0 [ 114.398021][ C0] platform_device_add+0x4ad/0x6e0 [ 114.398032][ C0] platform_device_register_full+0x448/0x530 [ 114.405768][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.414963][ C0] alsa_card_dummy_init+0x1b3/0x398 [ 114.414972][ C0] do_one_initcall+0x14b/0x350 [ 114.414980][ C0] do_initcall_level+0x101/0x14c [ 114.414986][ C0] do_initcalls+0x59/0x9b [ 114.414993][ C0] kernel_init_freeable+0x356/0x474 [ 114.415000][ C0] kernel_init+0xd/0x290 [ 114.415007][ C0] ret_from_fork+0x1f/0x30 [ 114.415011][ C0] INITIAL READ USE at: [ 114.415019][ C0] lock_acquire+0x160/0x710 [ 114.415031][ C0] _raw_read_lock+0x32/0x40 [ 114.425754][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.431182][ C0] snd_ctl_notify+0x86/0x550 [ 114.431190][ C0] __snd_ctl_add_replace+0x582/0x8a0 [ 114.431200][ C0] snd_ctl_add+0x6e/0x110 [ 114.439976][ T7938] Bluetooth: hci2: command 0x0419 tx timeout [ 114.444750][ C0] snd_dummy_probe+0xb9e/0x1000 [ 114.444758][ C0] platform_drv_probe+0xcd/0x150 [ 114.444765][ C0] really_probe+0x753/0x1110 [ 114.444777][ C0] driver_probe_device+0x106/0x1a0 [ 114.470751][ T6861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.475396][ C0] bus_for_each_drv+0x108/0x170 [ 114.475405][ C0] __device_attach+0x262/0x3f0 [ 114.475412][ C0] bus_probe_device+0xb8/0x1f0 [ 114.475418][ C0] device_add+0x1630/0x19b0 [ 114.475425][ C0] platform_device_add+0x4ad/0x6e0 [ 114.475432][ C0] platform_device_register_full+0x448/0x530 [ 114.475441][ C0] alsa_card_dummy_init+0x1b3/0x398 [ 114.475449][ C0] do_one_initcall+0x14b/0x350 [ 114.475461][ C0] do_initcall_level+0x101/0x14c [ 114.482414][ T6861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.486143][ C0] do_initcalls+0x59/0x9b [ 114.486151][ C0] kernel_init_freeable+0x356/0x474 [ 114.486158][ C0] kernel_init+0xd/0x290 [ 114.486166][ C0] ret_from_fork+0x1f/0x30 [ 114.486168][ C0] } [ 114.486179][ C0] ... key at: [] snd_card_new.__key.3+0x0/0x10 [ 114.486181][ C0] ... acquired at: [ 114.486188][ C0] lock_acquire+0x160/0x710 [ 114.486195][ C0] _raw_read_lock+0x32/0x40 [ 114.486202][ C0] snd_ctl_notify+0x86/0x550 [ 114.486210][ C0] loopback_trigger+0xc40/0x1500 [ 114.486217][ C0] snd_pcm_start+0x471/0x6c0 [ 114.486226][ C0] __snd_pcm_lib_xfer+0xf73/0x1320 [ 114.486233][ C0] snd_pcm_oss_write3+0x209/0x330 [ 114.486240][ C0] snd_pcm_plug_write_transfer+0x28b/0x490 [ 114.486245][ C0] snd_pcm_oss_write2+0x156/0x370 [ 114.486252][ C0] snd_pcm_oss_write+0x911/0xd70 [ 114.486260][ C0] vfs_write+0x2d3/0xd10 [ 114.486267][ C0] ksys_write+0x11b/0x220 [ 114.486274][ C0] do_syscall_64+0x31/0x70 [ 114.486281][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.486282][ C0] [ 114.486284][ C0] -> (&group->lock){..-.}-{2:2} { [ 114.486293][ C0] IN-SOFTIRQ-W at: [ 114.486302][ C0] lock_acquire+0x160/0x710 [ 114.486308][ C0] _raw_spin_lock_irqsave+0xaa/0xd0 [ 114.486315][ C0] snd_pcm_period_elapsed+0x2c/0x210 [ 114.486320][ C0] call_timer_fn+0x91/0x160 [ 114.486326][ C0] __run_timers+0x65e/0x830 [ 114.486332][ C0] run_timer_softirq+0x46/0x80 [ 114.486339][ C0] __do_softirq+0x256/0x6e0 [ 114.486346][ C0] asm_call_irq_on_stack+0xf/0x20 [ 114.486355][ C0] do_softirq_own_stack+0x9a/0xf0 [ 114.486363][ C0] __irq_exit_rcu+0x21f/0x230 [ 114.486377][ C0] irq_exit_rcu+0x5/0x20 [ 114.486386][ C0] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 114.486393][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 114.486400][ C0] arch_local_irq_restore+0x3a/0x50 [ 114.486407][ C0] lock_is_held_type+0xc8/0x100 [ 114.486416][ C0] ___might_sleep+0x83/0x570 [ 114.486424][ C0] __mutex_lock_common+0x50/0x2fc0 [ 114.486431][ C0] mutex_lock_nested+0x1a/0x20 [ 114.486438][ C0] snd_pcm_oss_write3+0x216/0x330 [ 114.486446][ C0] snd_pcm_plug_write_transfer+0x28b/0x490 [ 114.486453][ C0] snd_pcm_oss_write2+0x156/0x370 [ 114.486460][ C0] snd_pcm_oss_write+0x911/0xd70 [ 114.486467][ C0] vfs_write+0x2d3/0xd10 [ 114.486474][ C0] ksys_write+0x11b/0x220 [ 114.486481][ C0] do_syscall_64+0x31/0x70 [ 114.486489][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.486491][ C0] INITIAL USE at: [ 114.486503][ C0] lock_acquire+0x160/0x710 [ 114.486511][ C0] _raw_spin_lock_irq+0xa6/0xc0 [ 114.486517][ C0] snd_pcm_hw_params+0xca/0x16b0 [ 114.486526][ C0] snd_pcm_oss_change_params_locked+0x25e0/0x4410 [ 114.486533][ C0] snd_pcm_oss_write+0x269/0xd70 [ 114.486540][ C0] vfs_write+0x2d3/0xd10 [ 114.486546][ C0] ksys_write+0x11b/0x220 [ 114.486553][ C0] do_syscall_64+0x31/0x70 [ 114.486560][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.486563][ C0] } [ 114.486573][ C0] ... key at: [] snd_pcm_group_init.__key+0x0/0x10 [ 114.486575][ C0] ... acquired at: [ 114.486582][ C0] __lock_acquire+0xa67/0x2bd0 [ 114.486589][ C0] lock_acquire+0x160/0x710 [ 114.486596][ C0] _raw_spin_lock_irqsave+0xaa/0xd0 [ 114.486603][ C0] snd_pcm_period_elapsed+0x2c/0x210 [ 114.486610][ C0] call_timer_fn+0x91/0x160 [ 114.486616][ C0] __run_timers+0x65e/0x830 [ 114.486621][ C0] run_timer_softirq+0x46/0x80 [ 114.486632][ C0] __do_softirq+0x256/0x6e0 [ 114.493262][ T6861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.498448][ C0] asm_call_irq_on_stack+0xf/0x20 [ 114.498458][ C0] do_softirq_own_stack+0x9a/0xf0 [ 114.498466][ C0] __irq_exit_rcu+0x21f/0x230 [ 114.498472][ C0] irq_exit_rcu+0x5/0x20 [ 114.498481][ C0] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 114.498488][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 114.498500][ C0] arch_local_irq_restore+0x3a/0x50 [ 114.498511][ C0] lock_is_held_type+0xc8/0x100 [ 114.506834][ T6861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.512752][ C0] ___might_sleep+0x83/0x570 [ 114.512761][ C0] __mutex_lock_common+0x50/0x2fc0 [ 114.512771][ C0] mutex_lock_nested+0x1a/0x20 [ 114.596914][ T7938] Bluetooth: hci3: command 0x0419 tx timeout [ 114.601668][ C0] snd_pcm_oss_write3+0x216/0x330 [ 114.834419][ T7938] Bluetooth: hci4: command 0x0419 tx timeout [ 114.838921][ C0] snd_pcm_plug_write_transfer+0x28b/0x490 [ 114.838933][ C0] snd_pcm_oss_write2+0x156/0x370 [ 114.994640][ T7938] Bluetooth: hci5: command 0x0419 tx timeout [ 115.000223][ C0] snd_pcm_oss_write+0x911/0xd70 [ 115.000230][ C0] vfs_write+0x2d3/0xd10 [ 115.000236][ C0] ksys_write+0x11b/0x220 [ 115.000244][ C0] do_syscall_64+0x31/0x70 [ 115.000250][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.000252][ C0] [ 115.000254][ C0] [ 115.000254][ C0] stack backtrace: [ 115.000264][ C0] CPU: 0 PID: 8271 Comm: syz-executor.1 Not tainted 5.9.0-syzkaller #0 [ 115.000269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.000272][ C0] Call Trace: [ 115.000276][ C0] [ 115.000286][ C0] dump_stack+0x1d6/0x29e [ 115.000297][ C0] print_irq_inversion_bug+0xa5c/0xd70 [ 115.000308][ C0] ? stack_trace_save+0xad/0x150 [ 115.000316][ C0] ? __bfs+0x2e6/0x5c0 [ 115.000326][ C0] mark_lock+0xe80/0x2050 [ 115.000339][ C0] ? lock_is_held_type+0xc8/0x100 [ 115.000348][ C0] __lock_acquire+0xa67/0x2bd0 [ 115.000363][ C0] ? lock_is_held_type+0xc8/0x100 [ 115.000373][ C0] lock_acquire+0x160/0x710 [ 115.000383][ C0] ? snd_pcm_period_elapsed+0x2c/0x210 [ 115.000391][ C0] ? _raw_spin_unlock_irqrestore+0x2d/0x90 [ 115.000398][ C0] ? _raw_spin_lock_irqsave+0x84/0xd0 [ 115.000407][ C0] _raw_spin_lock_irqsave+0xaa/0xd0 [ 115.000415][ C0] ? snd_pcm_period_elapsed+0x2c/0x210 [ 115.000422][ C0] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.000448][ C0] snd_pcm_period_elapsed+0x2c/0x210 [ 115.000455][ C0] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.000467][ C0] call_timer_fn+0x91/0x160 [ 115.704399][ C0] ? loopback_jiffies_timer_dpcm_info+0x1f0/0x1f0 [ 115.710792][ C0] __run_timers+0x65e/0x830 [ 115.715269][ C0] run_timer_softirq+0x46/0x80 [ 115.720002][ C0] __do_softirq+0x256/0x6e0 [ 115.724485][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 115.729665][ C0] asm_call_irq_on_stack+0xf/0x20 [ 115.734654][ C0] [ 115.737565][ C0] do_softirq_own_stack+0x9a/0xf0 [ 115.742567][ C0] __irq_exit_rcu+0x21f/0x230 [ 115.747213][ C0] irq_exit_rcu+0x5/0x20 [ 115.751429][ C0] sysvec_apic_timer_interrupt+0xe0/0xf0 [ 115.757031][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 115.763079][ C0] RIP: 0010:arch_local_irq_restore+0x3a/0x50 [ 115.769291][ C0] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 0c 48 c7 c7 20 2e 8d 89 e8 85 98 5b 00 48 83 3d 3d 27 33 08 00 74 0c 48 89 df 57 9d <0f> 1f 44 00 00 5b c3 0f 0b 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 [ 115.788863][ C0] RSP: 0018:ffffc9001634fa18 EFLAGS: 00000282 [ 115.794895][ C0] RAX: 1ffffffff131a5c4 RBX: 0000000000000282 RCX: dffffc0000000000 [ 115.802836][ C0] RDX: ffffc9000a789000 RSI: 0000000000000000 RDI: 0000000000000282 [ 115.810795][ C0] RBP: 0000000000000000 R08: ffffffff866a4bb6 R09: 0000000000000000 [ 115.818735][ C0] R10: ffffed10134b651f R11: 0000000000000000 R12: ffffffff898fffe0 [ 115.826675][ C0] R13: ffff8880588ee500 R14: 0000000000000282 R15: 00000000ffffffff [ 115.834639][ C0] ? snd_pcm_oss_write3+0x216/0x330 [ 115.839896][ C0] lock_is_held_type+0xc8/0x100 [ 115.844725][ C0] ___might_sleep+0x83/0x570 [ 115.849308][ C0] __mutex_lock_common+0x50/0x2fc0 [ 115.854395][ C0] ? fill_silence+0x240/0x240 [ 115.859048][ C0] ? __snd_pcm_lib_xfer+0x1320/0x1320 [ 115.864400][ C0] ? snd_pcm_oss_write3+0x216/0x330 [ 115.869586][ C0] mutex_lock_nested+0x1a/0x20 [ 115.874332][ C0] snd_pcm_oss_write3+0x216/0x330 [ 115.879353][ C0] ? snd_pcm_plugin_build_io+0x590/0x590 [ 115.884971][ C0] snd_pcm_plug_write_transfer+0x28b/0x490 [ 115.890754][ C0] snd_pcm_oss_write2+0x156/0x370 [ 115.895759][ C0] snd_pcm_oss_write+0x911/0xd70 [ 115.900664][ C0] ? rw_verify_area+0x198/0x340 [ 115.905493][ C0] ? snd_pcm_oss_read+0xcf0/0xcf0 [ 115.910495][ C0] vfs_write+0x2d3/0xd10 [ 115.914708][ C0] ? __fdget_pos+0x1dd/0x2f0 [ 115.919268][ C0] ksys_write+0x11b/0x220 [ 115.923566][ C0] do_syscall_64+0x31/0x70 [ 115.927952][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.933811][ C0] RIP: 0033:0x45de59 [ 115.937674][ C0] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 115.957246][ C0] RSP: 002b:00007f90015afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.965717][ C0] RAX: ffffffffffffffda RBX: 000000000003ac40 RCX: 000000000045de59 [ 115.973667][ C0] RDX: 0000000000080000 RSI: 0000000020002000 RDI: 0000000000000004 [ 115.981611][ C0] RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000 [ 115.989560][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 115.997539][ C0] R13: 00007ffde441cb2f R14: 00007f90015b09c0 R15: 000000000118bfd4 [ 116.018173][ T6863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.028292][ T6863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.037448][ T6863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.046509][ T6863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.056497][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.065605][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.132617][ T6865] device veth1_vlan entered promiscuous mode [ 116.148182][ T6867] device veth0_vlan entered promiscuous mode [ 116.156303][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.166750][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.198373][ T6867] device veth1_vlan entered promiscuous mode [ 116.219851][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.235090][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.248977][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.268155][ T6861] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 116.284112][ T6865] device veth0_macvtap entered promiscuous mode [ 116.317561][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.326858][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.336578][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.350964][ T6865] device veth1_macvtap entered promiscuous mode [ 116.365905][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.376585][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.386722][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.397516][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.407381][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.417933][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429679][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.440960][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.452796][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.486006][ T6863] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 116.499097][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.508626][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.519312][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.524968][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.528356][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.543487][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.552419][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.561077][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.569786][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.582356][ T6867] device veth0_macvtap entered promiscuous mode [ 116.590807][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.600988][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.612067][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.629174][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.641761][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.651770][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.662214][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.672034][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.682780][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.693480][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.702519][ T6867] device veth1_macvtap entered promiscuous mode [ 116.715622][ T6861] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 116.728135][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.736071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.744798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.755353][ T6865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.764016][ T6865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.773878][ T6865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.782579][ T6865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.794650][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.803501][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.810159][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.821685][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.831774][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.843103][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.853062][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.863648][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.873462][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.884050][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.893868][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.904346][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.915348][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.938447][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.946362][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.955750][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.965783][ T6863] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 116.973689][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.985520][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.996013][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.006587][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.018299][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.028740][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.038591][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.049227][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.059069][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.069481][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.083595][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.092947][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.101116][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.114205][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.114356][ T6865] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 117.142839][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.145794][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.162070][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.172814][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.181367][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x38, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) [ 117.201684][ T6867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.211017][ T6867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.220092][ T6867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.228806][ T6867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.295297][ T6865] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 117.304430][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.328051][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.399524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.455115][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.478845][ T6867] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 117.497000][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:30:56 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(r1, 0x0, 0x0) 13:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, &(0x7f0000000100), 0x18) [ 117.509788][ T8357] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.570696][ T8371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.581576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.619259][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.652006][ T6867] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 117.673728][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.696586][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 13:30:56 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) [ 117.731126][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.743649][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.774911][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:30:56 executing program 5: unshare(0x8020400) bpf$BPF_GET_BTF_INFO(0x2, 0x0, 0x0) 13:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x38, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 13:30:56 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(r1, 0x0, 0x0) 13:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, &(0x7f0000000100), 0x18) 13:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x38, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 13:30:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:30:56 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) [ 117.909035][ T8400] 9pnet_virtio: no channels available for device 127.0.0.1 13:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, &(0x7f0000000100), 0x18) 13:30:56 executing program 5: unshare(0x8020400) bpf$BPF_GET_BTF_INFO(0x2, 0x0, 0x0) 13:30:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x38, r1, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 13:30:56 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(r1, 0x0, 0x0) [ 117.951840][ T8408] IPVS: ftp: loaded support on port[0] = 21 13:30:56 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 5: unshare(0x8020400) bpf$BPF_GET_BTF_INFO(0x2, 0x0, 0x0) 13:30:57 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) [ 118.037195][ T8423] 9pnet_virtio: no channels available for device 127.0.0.1 13:30:57 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:30:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@utf8no='utf8=0'}]}) 13:30:57 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) [ 118.184042][ T25] tipc: TX() has been purged, node left! 13:30:57 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f00000011c0)={[{@fat=@debug='debug'}]}) 13:30:57 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) [ 118.270327][ T8462] FAT-fs (loop5): Directory bread(block 6) failed 13:30:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@utf8no='utf8=0'}]}) [ 118.358655][ T8467] IPVS: ftp: loaded support on port[0] = 21 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) io_setup(0x799, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000580)=';', 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000015c0)}]) 13:30:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 118.431029][ T8476] FAT-fs (loop4): bogus number of reserved sectors [ 118.461918][ T8476] FAT-fs (loop4): Can't find a valid FAT filesystem 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) [ 118.506439][ T8507] FAT-fs (loop5): Directory bread(block 6) failed 13:30:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@utf8no='utf8=0'}]}) [ 118.585540][ T8511] IPVS: ftp: loaded support on port[0] = 21 [ 118.618630][ T8476] FAT-fs (loop4): bogus number of reserved sectors 13:30:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 118.630878][ T8476] FAT-fs (loop4): Can't find a valid FAT filesystem 13:30:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f00000011c0)={[{@fat=@debug='debug'}]}) 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@utf8no='utf8=0'}]}) [ 118.718250][ T8549] FAT-fs (loop5): Directory bread(block 6) failed 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f00000011c0)={[{@fat=@debug='debug'}]}) [ 118.797640][ T8559] FAT-fs (loop4): bogus number of reserved sectors [ 118.806421][ T8559] FAT-fs (loop4): Can't find a valid FAT filesystem 13:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) [ 118.941186][ T8575] FAT-fs (loop4): bogus number of reserved sectors [ 118.947523][ T8569] FAT-fs (loop5): Directory bread(block 6) failed [ 118.966315][ T8575] FAT-fs (loop4): Can't find a valid FAT filesystem 13:30:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 13:30:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f00000011c0)={[{@fat=@debug='debug'}]}) 13:30:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002200)=""/248, 0xf8}], 0x1}}], 0x300, 0x2022, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {&(0x7f0000006a80)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 13:30:58 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:30:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:58 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:30:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) [ 119.315875][ T25] tipc: TX() has been purged, node left! [ 119.334601][ T8617] FAT-fs (loop4): bogus number of reserved sectors [ 119.341293][ T25] tipc: TX() has been purged, node left! [ 119.346532][ T8617] FAT-fs (loop4): Can't find a valid FAT filesystem 13:30:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x80000000}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 13:30:58 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 13:30:58 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010009f07000000ff0300000000000000", @ANYRES32=0x0, @ANYBLOB="1b00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019004000000005002b0002000000050017"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 13:30:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000006c0)=0x329568bb, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast2=0x7f000001}, "0940008102030000"}}}}}, 0x0) 13:30:58 executing program 2: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x180010, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 13:30:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x38}}, 0x0) [ 119.460330][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 119.461980][ T8635] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 119.480242][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 119.536148][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 119.556708][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:58 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:30:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="1c0000005200050f0c1000000001c00000000171f8a27a4c0208755f", 0x1c, 0x0, 0x0, 0x0) 13:30:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x80000000}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 13:30:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x38}}, 0x0) 13:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:58 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010009f07000000ff0300000000000000", @ANYRES32=0x0, @ANYBLOB="1b00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019004000000005002b0002000000050017"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 13:30:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="1c0000005200050f0c1000000001c00000000171f8a27a4c0208755f", 0x1c, 0x0, 0x0, 0x0) 13:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x38}}, 0x0) [ 119.904568][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 119.917693][ T8664] input input9: cannot allocate more than FF_MAX_EFFECTS effects 13:30:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x80000000}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 13:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x38}}, 0x0) [ 119.945983][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 120.016536][ T8683] input input11: cannot allocate more than FF_MAX_EFFECTS effects 13:30:59 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:30:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="1c0000005200050f0c1000000001c00000000171f8a27a4c0208755f", 0x1c, 0x0, 0x0, 0x0) 13:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010009f07000000ff0300000000000000", @ANYRES32=0x0, @ANYBLOB="1b00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019004000000005002b0002000000050017"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 13:30:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x80000000}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 13:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 120.465708][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 120.479573][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="1c0000005200050f0c1000000001c00000000171f8a27a4c0208755f", 0x1c, 0x0, 0x0, 0x0) [ 120.527711][ T8704] input input15: cannot allocate more than FF_MAX_EFFECTS effects 13:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010009f07000000ff0300000000000000", @ANYRES32=0x0, @ANYBLOB="1b00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019004000000005002b0002000000050017"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 13:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 120.643729][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 120.673282][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:30:59 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:30:59 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:31:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x200008}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:31:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:31:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:31:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x3) 13:31:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x3) 13:31:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x3) 13:31:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 13:31:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x3) [ 121.739300][ T8800] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:31:01 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 3: add_key$keyring(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 13:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 13:31:01 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/45, 0x2d) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x101) 13:31:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 13:31:01 executing program 3: add_key$keyring(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 3: add_key$keyring(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 13:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 3: add_key$keyring(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 13:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 13:31:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:01 executing program 3: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) 13:31:01 executing program 3: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:01 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="6400000024000b0f000004000000010000000000", @ANYRES32=r3, @ANYBLOB="00002000ffffffff000000000800010074626600380002000c000400444d816f0491823f2800010000000000000000008b0f000000000000000000000000000000000000000001"], 0x64}}, 0x0) socket(0x10, 0x3, 0x0) [ 122.977586][ T8894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:31:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:02 executing program 1: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 3: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 1: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 3: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:31:02 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 1: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:02 executing program 2: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@generic={0x7f}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000840)='GPL\x00', 0x7, 0x92, &(0x7f0000000880)=""/146, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:31:02 executing program 2: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 2: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 1: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 0: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 5: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 123.563381][ C0] hrtimer: interrupt took 16512 ns 13:31:02 executing program 2: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 1: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 5: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:02 executing program 0: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:03 executing program 4: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) chdir(&(0x7f0000000700)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:31:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/1325], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 13:31:03 executing program 1: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:03 executing program 5: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:03 executing program 0: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 13:31:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) 13:31:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b6030000001000006a0a00fe39000000850000002b0000009c000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de01800000aaa6912a8b2ce571c4580000f7000000e3a94b574d2eb38a548355f0b886bd001362df1d4fdd860db5808922033e3e0f242a46b3009a54f40780b089bd9d5fdb68832e986440ff0a7edfa0cb231ccd0000000000000000000000529c58a47777e27060493073807c4b7bbaed91f33fb382d91ae8e1a49b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714220800ca40b24cfd4702fa0892729507982d90e116bba29bb744af70bbcd8f3ad2db451de058226c4e31a27bf456c04c58bdd0b424ac416e66af9ebcfea905d37cf227312cb81ec843bcea06e7fa5e5b3596301460142f83b465d9e57dfdb06dcf91fd0600000000000000d2110cf2e1f4682c24a314447c5e0807f0b102000000bd061772daa52a38539295d3fea7a7e669441e1ff041143ecfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd356e205585e30a64830a5796cd7ce18b68bc3c2008f08b57e061d33357d663e3776c7a379a1962e12302f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d4326968122cc5dcaa7ba330963b7093ff0f02dba114f75e1ffd5c2912b506bfb93122fc776a377fb2129dadec51a3676505000000000000000000000000e02739ccd50523d36032d38f5cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7b9bae9b1698e19eb0e6d5244c1ff01e97628a88a4b37032f1ef8b8046a3236ad1fe10f7035489179fc8f6c673e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2818206ce5fba6fca8b270d76191b43ab4cbdd4dbcccdc644fe65e7bd90a5fc16387bcb5e1e028d7d2a33c78cb8fe48ddcf6aa571417bd42909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9538eb067b21111dbaa58b19a52f3f12880108d08eb477ad349c2214bc7f8378b7e5b5415f3da911411ed6655c6b66b967a2e416313dfe58e88fbfa825114227c2f6cfd1448bd37902a5678af7277e6cde25737b058ba3ca60696bc1d4df56b6f544f57ddc35f3c1b5904def348912e1fefe8164c3341b919135c8593085d2a9a260663c11f5472cad2de673f9a1fcac868ff6cb20122f76531881165f4d46ed323ce0dc462ff47e1fb4a8e2a1f6e3b8134031eb29e068c831dc2d825b82749063a85bf6c1bcf4ccf798e49000000000000000000009e664603220bf1e47cfdc28f5cc38b3d66751a524081f961f3a6bec7b84976ae5fc7a8d29dc65277f6a47422bcf49b3f399fb3b10967ef66d63e4404d66f6ac1c6d0d77dd3e55dc62e58b25a34d1a482672315813e92188263a93f13dde4dd81dfe32af06f6f3fcd73789cc69925a3211955290f85e42dabf19d40f717edd7361ad3801f6642046376000000000000005581a3b65fc336f7011e68103c95c8a0e6b0c285a1b8a99afbb2f4271dd4b0acf21fe6d837ed5c208970b52130b5a7e13d5465e9ec069c1b2e97d2c4cbf7b02a15c87bd20826c8ad221c62177dbeec3bbfc9203cd4d0e1b91cc2eaaa198d2815c5dda45f7fe16cf750d14ef045c8d84174f7744eafc2525359892d5a7f4512000000000000000085425266641d272188345cc600"/1325], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)