[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2020/12/17 14:47:57 fuzzer started 2020/12/17 14:47:57 dialing manager at 10.128.0.26:40379 2020/12/17 14:47:58 syscalls: 3466 2020/12/17 14:47:58 code coverage: enabled 2020/12/17 14:47:58 comparison tracing: enabled 2020/12/17 14:47:58 extra coverage: enabled 2020/12/17 14:47:58 setuid sandbox: enabled 2020/12/17 14:47:58 namespace sandbox: enabled 2020/12/17 14:47:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/17 14:47:58 fault injection: enabled 2020/12/17 14:47:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/17 14:47:58 net packet injection: enabled 2020/12/17 14:47:58 net device setup: enabled 2020/12/17 14:47:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/17 14:47:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/17 14:47:58 USB emulation: enabled 2020/12/17 14:47:58 hci packet injection: enabled 2020/12/17 14:47:58 wifi device emulation: enabled 14:52:23 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0xf3, 0x44, 0xf0, 0x8, 0x411, 0xd9, 0x929d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0x8f, 0x9b}}]}}]}}, 0x0) 14:52:23 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 14:52:23 executing program 2: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x30, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) 14:52:24 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001f80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000002140)=@lang_id={0x4}}, {0x2, &(0x7f0000002180)=@string={0x2}}]}) 14:52:24 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) 14:52:24 executing program 5: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3a, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syzkaller login: [ 338.858162][ T8511] IPVS: ftp: loaded support on port[0] = 21 [ 339.037769][ T8513] IPVS: ftp: loaded support on port[0] = 21 [ 339.224949][ T8515] IPVS: ftp: loaded support on port[0] = 21 [ 339.327056][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 339.474768][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 339.579443][ T8517] IPVS: ftp: loaded support on port[0] = 21 [ 339.702203][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.712716][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.734886][ T8511] device bridge_slave_0 entered promiscuous mode [ 339.773264][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.780397][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.788569][ T8511] device bridge_slave_1 entered promiscuous mode [ 339.816601][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.824198][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.833343][ T8513] device bridge_slave_0 entered promiscuous mode [ 339.844536][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.852676][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.860947][ T8513] device bridge_slave_1 entered promiscuous mode [ 339.878476][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.919746][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.923283][ T8519] IPVS: ftp: loaded support on port[0] = 21 [ 339.975573][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.000078][ T8511] team0: Port device team_slave_0 added [ 340.036516][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.065744][ T8511] team0: Port device team_slave_1 added [ 340.217500][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.231693][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.262930][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.281907][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 340.286959][ T8536] IPVS: ftp: loaded support on port[0] = 21 [ 340.323198][ T8513] team0: Port device team_slave_0 added [ 340.362703][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.369672][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.397259][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.422833][ T8513] team0: Port device team_slave_1 added [ 340.515248][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.523233][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.551550][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.563899][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 340.589223][ T8511] device hsr_slave_0 entered promiscuous mode [ 340.596081][ T8511] device hsr_slave_1 entered promiscuous mode [ 340.604977][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.612481][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.638575][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.697617][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.706779][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.716491][ T8515] device bridge_slave_0 entered promiscuous mode [ 340.729415][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.736812][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.746881][ T8515] device bridge_slave_1 entered promiscuous mode [ 340.767143][ T4615] Bluetooth: hci0: command 0x0409 tx timeout [ 340.895827][ T8513] device hsr_slave_0 entered promiscuous mode [ 340.915802][ T8513] device hsr_slave_1 entered promiscuous mode [ 340.923129][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.931412][ T8513] Cannot create hsr debugfs directory [ 340.997833][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.007297][ T4615] Bluetooth: hci1: command 0x0409 tx timeout [ 341.018630][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.099089][ T8519] chnl_net:caif_netlink_parms(): no params data found [ 341.134035][ T8515] team0: Port device team_slave_0 added [ 341.166716][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.174140][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.183924][ T8517] device bridge_slave_0 entered promiscuous mode [ 341.193938][ T8515] team0: Port device team_slave_1 added [ 341.209495][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 341.227186][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.237175][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.239904][ T4615] Bluetooth: hci2: command 0x0409 tx timeout [ 341.249738][ T8517] device bridge_slave_1 entered promiscuous mode [ 341.312816][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.322528][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.349686][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.368697][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.375766][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.401925][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.468268][ T8515] device hsr_slave_0 entered promiscuous mode [ 341.475382][ T8515] device hsr_slave_1 entered promiscuous mode [ 341.480158][ T4615] Bluetooth: hci3: command 0x0409 tx timeout [ 341.489237][ T8515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.497799][ T8515] Cannot create hsr debugfs directory [ 341.530703][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.591970][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.719991][ T4615] Bluetooth: hci4: command 0x0409 tx timeout [ 341.737316][ T8517] team0: Port device team_slave_0 added [ 341.745268][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.754487][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.763892][ T8536] device bridge_slave_0 entered promiscuous mode [ 341.775496][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.783247][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.792645][ T8536] device bridge_slave_1 entered promiscuous mode [ 341.809534][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.818174][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.828011][ T8519] device bridge_slave_0 entered promiscuous mode [ 341.838198][ T8517] team0: Port device team_slave_1 added [ 341.905991][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.913309][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.921916][ T8519] device bridge_slave_1 entered promiscuous mode [ 341.939128][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.953613][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.961562][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.998923][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.038704][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.048347][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.056977][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.084891][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.102261][ T8511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.120663][ T4615] Bluetooth: hci5: command 0x0409 tx timeout [ 342.132115][ T8519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.152953][ T8519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.175447][ T8511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.217908][ T8511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.237267][ T8536] team0: Port device team_slave_0 added [ 342.256818][ T8536] team0: Port device team_slave_1 added [ 342.271708][ T8519] team0: Port device team_slave_0 added [ 342.278086][ T8511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.313279][ T8517] device hsr_slave_0 entered promiscuous mode [ 342.322708][ T8517] device hsr_slave_1 entered promiscuous mode [ 342.330867][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.338435][ T8517] Cannot create hsr debugfs directory [ 342.346148][ T8519] team0: Port device team_slave_1 added [ 342.391742][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.398718][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.427632][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.449100][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.459435][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.485570][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.500808][ T8513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.524898][ T8513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.536200][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.544503][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.571476][ T8519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.608775][ T8513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.626284][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.635394][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.662354][ T8519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.695669][ T8536] device hsr_slave_0 entered promiscuous mode [ 342.704461][ T8536] device hsr_slave_1 entered promiscuous mode [ 342.713017][ T8536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.713077][ T8536] Cannot create hsr debugfs directory [ 342.729162][ T8513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.823892][ T8515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.835601][ T8515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.842885][ T8861] Bluetooth: hci0: command 0x041b tx timeout [ 342.885798][ T8515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.897003][ T8515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.964550][ T8519] device hsr_slave_0 entered promiscuous mode [ 342.971347][ T8519] device hsr_slave_1 entered promiscuous mode [ 342.977855][ T8519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.985777][ T8519] Cannot create hsr debugfs directory [ 343.079806][ T8861] Bluetooth: hci1: command 0x041b tx timeout [ 343.224813][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.284981][ T8517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.306227][ T8517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.320094][ T8600] Bluetooth: hci2: command 0x041b tx timeout [ 343.335277][ T8517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.356374][ T8517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.386443][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.394932][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.405994][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.448986][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.465930][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.491204][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.499007][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.532078][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.551612][ T8536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.566574][ T8861] Bluetooth: hci3: command 0x041b tx timeout [ 343.578460][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.590703][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.599120][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.606405][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.616307][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.626580][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.635324][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.642464][ T8509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.653380][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.661913][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.670950][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.679251][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.686379][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.698506][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.708011][ T8536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 343.718549][ T8536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 343.744992][ T8536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.779265][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.791677][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.804520][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.814118][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.821375][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.834550][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.843089][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.856170][ T8861] Bluetooth: hci4: command 0x041b tx timeout [ 343.873834][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.889840][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.898682][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.907932][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.917561][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.927174][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.941295][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.971690][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.981217][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.991120][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.001178][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.010627][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.045678][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.055211][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.068400][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.077402][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.088834][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.095956][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.135313][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.143648][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.153208][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.162433][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.169518][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.178661][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.187297][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.196443][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.207313][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.216370][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.225530][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.234426][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.246730][ T8861] Bluetooth: hci5: command 0x041b tx timeout [ 344.251112][ T8519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.268963][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.302120][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.309092][ T8519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.330106][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.338839][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.348871][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.388241][ T8519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.399102][ T8513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.421235][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.438788][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.458179][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.467432][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.476584][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.485551][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.495515][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.512818][ T8519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 344.553575][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.565031][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.575335][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.584122][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.592682][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.626065][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.635240][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.650400][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.667327][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.675999][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.693330][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.700710][ T8600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.708985][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.723498][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.732435][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.740189][ T8600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.749262][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.821173][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.832200][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.841170][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.848710][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.876492][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.891880][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.920272][ T8600] Bluetooth: hci0: command 0x040f tx timeout [ 344.938074][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.947375][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.958887][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.967643][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.992322][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.015968][ T8536] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.025697][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.036399][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.045747][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.056421][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.066597][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.076230][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.085680][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.094943][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.103177][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.134793][ T8517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.147137][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.163044][ T4615] Bluetooth: hci1: command 0x040f tx timeout [ 345.187105][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.204862][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.279372][ T8511] device veth0_vlan entered promiscuous mode [ 345.308961][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.349477][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.358773][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.368651][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.378142][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.385465][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.393875][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.403664][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.413044][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.420261][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.428767][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.438737][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.447345][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.461352][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.469432][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.481402][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.500662][ T8600] Bluetooth: hci2: command 0x040f tx timeout [ 345.508068][ T8511] device veth1_vlan entered promiscuous mode [ 345.553378][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.562632][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.572153][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.582408][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.594483][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.604397][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.612217][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.636427][ T8513] device veth0_vlan entered promiscuous mode [ 345.659029][ T8519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.682978][ T8861] Bluetooth: hci3: command 0x040f tx timeout [ 345.696136][ T8513] device veth1_vlan entered promiscuous mode [ 345.706595][ T8515] device veth0_vlan entered promiscuous mode [ 345.714678][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.724334][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.733448][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.742805][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.751823][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.761613][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.770992][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.779426][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.830712][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.841441][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.849221][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.858545][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.867170][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.875615][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.883887][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.892286][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.900457][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.909070][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.927104][ T8511] device veth0_macvtap entered promiscuous mode [ 345.933608][ T4615] Bluetooth: hci4: command 0x040f tx timeout [ 345.981063][ T8519] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.988885][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.999077][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.008619][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.018035][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.027548][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.037022][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.046345][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.055369][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.064652][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.077810][ T8515] device veth1_vlan entered promiscuous mode [ 346.094721][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.114548][ T8511] device veth1_macvtap entered promiscuous mode [ 346.162212][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.175849][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.185362][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.196627][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.203853][ T9811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.213625][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.222570][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.235749][ T8517] device veth0_vlan entered promiscuous mode [ 346.280354][ T4615] Bluetooth: hci5: command 0x040f tx timeout [ 346.286508][ T8513] device veth0_macvtap entered promiscuous mode [ 346.300908][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.309038][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.317994][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.327658][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.337452][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.346709][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.353840][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.362612][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.372833][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.382512][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.409378][ T8517] device veth1_vlan entered promiscuous mode [ 346.422411][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.451348][ T8513] device veth1_macvtap entered promiscuous mode [ 346.461359][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.476461][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.484844][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.498281][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.506573][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.514687][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.524620][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.534117][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.543426][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.554493][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.577889][ T8536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.594824][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.606501][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.623511][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.632883][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.642464][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.651788][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.661308][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.695765][ T8515] device veth0_macvtap entered promiscuous mode [ 346.709164][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.719414][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.737368][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.746766][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.757013][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.766570][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.775784][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.790751][ T8511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.804728][ T8511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.817315][ T8511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.832711][ T8511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.857160][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 346.867873][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.882160][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.894708][ T8519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.924052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.934488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.974377][ T8515] device veth1_macvtap entered promiscuous mode [ 346.988419][ T8517] device veth0_macvtap entered promiscuous mode [ 347.013245][ T8600] Bluetooth: hci0: command 0x0419 tx timeout [ 347.013304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.029638][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.038357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.047108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.055992][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 347.066993][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.080941][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.133447][ T8517] device veth1_macvtap entered promiscuous mode [ 347.155381][ T8519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.169411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.180410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.188771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.208733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.240067][ T4615] Bluetooth: hci1: command 0x0419 tx timeout [ 347.252592][ T8513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.289601][ T8513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.298355][ T8513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.307464][ T8513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.333146][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 347.347423][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.359339][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 347.359393][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.364193][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.409938][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.434827][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.472930][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 347.485192][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.510853][ T8515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 347.537745][ T8515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.551049][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.568215][ T4615] Bluetooth: hci2: command 0x0419 tx timeout [ 347.583907][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.598355][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.609229][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.619962][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.648783][ T8515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.661530][ T8515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.678695][ T8515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.691678][ T8515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.720511][ T4615] Bluetooth: hci3: command 0x0419 tx timeout [ 347.752536][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 347.763501][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.774820][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 347.785362][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.795290][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 347.805981][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.817879][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.834807][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.844986][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.855754][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.864656][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.873929][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.887254][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.897020][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.905820][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.914853][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.936448][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 347.960221][ T4615] Bluetooth: hci4: command 0x0419 tx timeout [ 347.970743][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.982507][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 347.993556][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.003890][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 348.014884][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.026560][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.044695][ T8517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.053618][ T8517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.062934][ T8517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.072202][ T8517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.106998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.116962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.127103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.136321][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.155693][ T8536] device veth0_vlan entered promiscuous mode [ 348.198581][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.207836][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.226248][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.301720][ T8536] device veth1_vlan entered promiscuous mode [ 348.328496][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.345548][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.390673][ T9822] Bluetooth: hci5: command 0x0419 tx timeout [ 348.452836][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.475858][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.504990][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.527392][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.543469][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.560618][ T8519] device veth0_vlan entered promiscuous mode [ 348.573262][ T9222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.585189][ T9222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.662317][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.728724][ T8536] device veth0_macvtap entered promiscuous mode [ 348.761570][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.798370][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.819322][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.840688][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.848247][ T8536] device veth1_macvtap entered promiscuous mode [ 348.848770][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.878211][ T8519] device veth1_vlan entered promiscuous mode [ 348.889660][ T9811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 348.926167][ T9867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.968854][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.986885][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.988104][ T9867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.008851][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.028811][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.046746][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.082899][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.108943][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.122277][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.134628][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.158065][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.171337][ T9811] usb 1-1: Using ep0 maxpacket: 8 [ 349.178382][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.205145][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.225725][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.246067][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.281564][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.295906][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.312707][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.327844][ T9851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 349.339024][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.351564][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.364177][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.376185][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.387131][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.398061][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 349.411273][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.424148][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.437789][ T8664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.467017][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.473599][ T8664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.477189][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.493360][ T9811] usb 1-1: New USB device found, idVendor=0411, idProduct=00d9, bcdDevice=92.9d [ 349.503436][ T9811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.513062][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.521822][ T9811] usb 1-1: Product: syz [ 349.526155][ T9811] usb 1-1: Manufacturer: syz [ 349.533591][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.543084][ T9811] usb 1-1: SerialNumber: syz [ 349.556200][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.574206][ T9811] usb 1-1: config 0 descriptor?? [ 349.584747][ T9851] usb 2-1: Using ep0 maxpacket: 16 [ 349.597579][ T8536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.616796][ T8536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.636921][ T8536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.663889][ T8536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.691282][ T8519] device veth0_macvtap entered promiscuous mode [ 349.716154][ T8664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.717892][ T8519] device veth1_macvtap entered promiscuous mode [ 349.741658][ T9851] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 349.751992][ T9851] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 349.763157][ T8664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.777062][ T9851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.808710][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.823513][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.845921][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.875277][ T20] usb 1-1: USB disconnect, device number 2 [ 349.904933][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.950592][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.999471][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.019903][ T9851] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.029006][ T9851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.041577][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.067719][ T9851] usb 2-1: Product: syz [ 350.073230][ T9851] usb 2-1: Manufacturer: syz [ 350.077003][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.082438][ T9851] usb 2-1: SerialNumber: syz [ 350.117888][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.142529][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.182685][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.198629][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 350.211592][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.226000][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.243764][ T4052] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 350.261371][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.292607][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.337064][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.368964][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.386649][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.397545][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.408044][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.419067][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.429442][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.442275][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.455562][ T8519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.466067][ T9851] usb 2-1: 0:2 : does not exist [ 350.513136][ T8519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.529829][ T4052] usb 3-1: Using ep0 maxpacket: 16 [ 350.543568][ T9851] usb 2-1: USB disconnect, device number 2 [ 350.583447][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.630090][ T9484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 350.649666][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 350.680914][ T4052] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 350.690860][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.695215][ T4052] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 350.722252][ T4052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.732174][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.773151][ T8519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.781604][ T9867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.784288][ T8519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.799994][ T8519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.809014][ T8519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.864109][ T9867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.900124][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 350.920522][ T4052] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.947528][ T4052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.972397][ T4052] usb 3-1: Product: syz [ 350.982813][ T4052] usb 3-1: Manufacturer: syz [ 350.987904][ T4052] usb 3-1: SerialNumber: syz [ 351.010462][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.032666][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 351.035221][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.048027][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 351.063243][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.108884][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.128493][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.161074][ T9851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 351.179911][ T20] usb 1-1: New USB device found, idVendor=0411, idProduct=00d9, bcdDevice=92.9d [ 351.189044][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.258533][ T20] usb 1-1: Product: syz [ 351.269965][ T20] usb 1-1: Manufacturer: syz [ 351.278065][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.287572][ T20] usb 1-1: SerialNumber: syz [ 351.300417][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.311396][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.313321][ T20] usb 1-1: config 0 descriptor?? [ 351.326817][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.357497][ T9484] usb 4-1: Product: syz [ 351.369787][ T4052] usb 3-1: 0:2 : does not exist [ 351.377480][ T9484] usb 4-1: SerialNumber: syz [ 351.396737][ T9222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.404270][ T4052] usb 3-1: USB disconnect, device number 2 [ 351.413599][ T9851] usb 2-1: Using ep0 maxpacket: 16 [ 351.418768][ T9222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.452864][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.470746][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.555311][ T9851] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 351.574729][ T9851] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 14:52:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000140)) [ 351.604188][ T9851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.614780][ T20] usb 1-1: USB disconnect, device number 3 [ 351.730574][ T9484] usb 4-1: 0:2 : does not exist [ 351.761604][ T9484] usb 4-1: USB disconnect, device number 2 14:52:37 executing program 0: bpf$OBJ_GET_PROG(0xd, 0x0, 0x0) [ 351.809964][ T9851] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.821409][ T9947] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 351.849985][ T9851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.868694][ T9851] usb 2-1: Product: syz [ 351.890028][ T9851] usb 2-1: Manufacturer: syz [ 351.910781][ T9851] usb 2-1: SerialNumber: syz 14:52:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]]}, 0x33fe0}}, 0x0) [ 351.969590][ T8861] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 351.989812][ T9851] usb 2-1: can't set config #1, error -71 [ 352.018195][ T9851] usb 2-1: USB disconnect, device number 3 14:52:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000a00)={&(0x7f0000000000), 0xc, &(0x7f00000009c0)={0x0}}, 0x24004080) 14:52:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x2, r0, 0x0) [ 352.092214][ T4052] usb 3-1: new high-speed USB device number 3 using dummy_hcd 14:52:38 executing program 0: r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='[qsectl\x00', &(0x7f00000001c0)='./file1/file0\x00', 0xffffffffffffff9c) 14:52:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 352.213225][ T8861] usb 5-1: Using ep0 maxpacket: 16 [ 352.219600][ T9947] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 14:52:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@broadcast, @empty}, 0x4) [ 352.330074][ T8861] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 352.338829][ T8861] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 352.349564][ T4052] usb 3-1: Using ep0 maxpacket: 16 [ 352.374454][ T8861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.410551][ T9947] usb 6-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.40 [ 352.426760][ T9947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.449001][ T9947] usb 6-1: Product: syz [ 352.462079][ T9484] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 352.469805][ T4052] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 352.478513][ T4052] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 352.506739][ T9947] usb 6-1: Manufacturer: syz [ 352.512625][ T9947] usb 6-1: SerialNumber: syz [ 352.517420][ T4052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.575585][ T8861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.584867][ T8861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.595329][ T8861] usb 5-1: Product: syz [ 352.601987][ T8861] usb 5-1: Manufacturer: syz [ 352.627292][ T8861] usb 5-1: SerialNumber: syz [ 352.710036][ T4052] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.719145][ T4052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.739537][ T4052] usb 3-1: Product: syz [ 352.743752][ T4052] usb 3-1: Manufacturer: syz [ 352.748338][ T4052] usb 3-1: SerialNumber: syz 14:52:38 executing program 2: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x30, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) [ 352.832437][ T9947] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 352.851623][ T9947] usb 6-1: USB disconnect, device number 2 [ 352.889706][ T4052] usb 3-1: can't set config #1, error -71 [ 352.897827][ T9484] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 352.917094][ T4052] usb 3-1: USB disconnect, device number 3 [ 352.925509][ T9484] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 352.943756][ T9484] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.979777][ T8861] usb 5-1: 0:2 : does not exist [ 353.017331][ T8861] usb 5-1: USB disconnect, device number 2 [ 353.149779][ T9484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.158886][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.217797][ T9484] usb 4-1: Product: syz [ 353.248865][ T9484] usb 4-1: SerialNumber: syz [ 353.369408][ T4052] usb 3-1: new high-speed USB device number 4 using dummy_hcd 14:52:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x44}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]]}, 0x30}}, 0x0) [ 353.493902][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.510986][ T9484] usb 4-1: 0:2 : does not exist [ 353.574606][ T9484] usb 4-1: USB disconnect, device number 3 [ 353.580218][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.649666][ T4052] usb 3-1: Using ep0 maxpacket: 16 [ 353.689518][ T8861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 353.789686][ T4052] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 353.819675][ T4052] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 353.850563][ T4052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.959914][ T8861] usb 5-1: Using ep0 maxpacket: 16 [ 354.079686][ T8861] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 354.079756][ T4052] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.088433][ T8861] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 354.107701][ T4052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.107732][ T4052] usb 3-1: Product: syz [ 354.107751][ T4052] usb 3-1: Manufacturer: syz [ 354.127122][ T8861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.168303][ T4052] usb 3-1: SerialNumber: syz [ 354.289721][ T8861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.298900][ T8861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.311133][ T8861] usb 5-1: Product: syz [ 354.315354][ T8861] usb 5-1: Manufacturer: syz [ 354.321612][ T8861] usb 5-1: SerialNumber: syz [ 354.509770][ T4052] usb 3-1: 0:2 : does not exist [ 354.531300][ T4052] usb 3-1: USB disconnect, device number 4 14:52:40 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) 14:52:40 executing program 3: bpf$OBJ_GET_PROG(0x12, 0x0, 0x0) 14:52:40 executing program 0: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x44040) 14:52:40 executing program 5: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0xffffffffffffffff) 14:52:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') [ 354.649542][ T8861] usb 5-1: 0:2 : does not exist [ 354.677475][ T8861] usb 5-1: USB disconnect, device number 3 [ 354.725524][ C0] hrtimer: interrupt took 88414 ns 14:52:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x6681, 0x0) 14:52:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa}, @val={0xc}}}}, 0x28}}, 0x0) 14:52:40 executing program 3: bpf$OBJ_GET_PROG(0x14, 0x0, 0x0) [ 354.842573][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:52:40 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x8c600, 0x0) 14:52:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000001280)) 14:52:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:52:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0)=0x412f, 0x4) [ 355.219994][ T8861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 355.480329][ T8861] usb 5-1: Using ep0 maxpacket: 16 [ 355.599653][ T8861] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 355.616409][ T8861] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 355.638152][ T8861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.809987][ T8861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.819103][ T8861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.830159][ T8861] usb 5-1: Product: syz [ 355.834384][ T8861] usb 5-1: Manufacturer: syz [ 355.839001][ T8861] usb 5-1: SerialNumber: syz [ 356.189668][ T8861] usb 5-1: 0:2 : does not exist [ 356.228324][ T8861] usb 5-1: USB disconnect, device number 4 14:52:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x31, 0x0, 0x0) 14:52:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000f000000080017"], 0x28}}, 0x0) 14:52:42 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00') pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 14:52:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000f00000008000a"], 0x28}}, 0x0) 14:52:42 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x127041) 14:52:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') [ 356.790634][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.810572][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:52:42 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x127041) 14:52:42 executing program 2: bpf$OBJ_GET_PROG(0x3, 0x0, 0x0) [ 356.863762][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.882137][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:52:42 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x6000, 0x0) 14:52:42 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x40001) 14:52:42 executing program 0: r0 = fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 357.013646][T10260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:52:43 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x127041) 14:52:43 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 357.194438][T10275] Error parsing options; rc = [-22] 14:52:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x1}, 0x40) 14:52:43 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000740)) 14:52:43 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34000}}, 0x0) 14:52:43 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x127041) [ 362.198219][T10308] IPVS: ftp: loaded support on port[0] = 21 [ 362.402224][T10308] chnl_net:caif_netlink_parms(): no params data found [ 362.475186][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.482581][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.491505][T10308] device bridge_slave_0 entered promiscuous mode [ 362.501560][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.508693][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.521202][T10308] device bridge_slave_1 entered promiscuous mode [ 362.547804][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.560445][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.588228][T10308] team0: Port device team_slave_0 added [ 362.596408][T10308] team0: Port device team_slave_1 added [ 362.618636][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.627325][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.655285][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.669465][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.676434][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.702556][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.737200][T10308] device hsr_slave_0 entered promiscuous mode [ 362.744222][T10308] device hsr_slave_1 entered promiscuous mode [ 362.751152][T10308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.758737][T10308] Cannot create hsr debugfs directory [ 362.887617][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.894896][T10308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.903212][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.910395][T10308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.982093][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.004732][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.014616][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.023356][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.034188][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 363.050010][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.066080][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.075697][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.082897][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.113821][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.123896][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.131078][ T9822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.152436][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.161450][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.184040][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.197612][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.216673][T10308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.228862][T10308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.247399][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.267947][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.276015][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.297297][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.376649][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.390932][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.421190][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.431272][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.440825][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.448623][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.467624][T10308] device veth0_vlan entered promiscuous mode [ 363.485486][T10308] device veth1_vlan entered promiscuous mode [ 363.517522][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.525598][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.535685][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.545382][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.560294][T10308] device veth0_macvtap entered promiscuous mode [ 363.575461][T10308] device veth1_macvtap entered promiscuous mode [ 363.602545][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.613194][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.623511][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.635257][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.645382][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.656345][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.667145][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.677791][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.687745][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.699488][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.710974][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 363.724889][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.736997][T10308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.746879][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.755842][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.764636][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.774482][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.787889][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.809330][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.821887][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.832916][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.845312][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.855856][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.865846][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.876378][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.887033][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.898929][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.908779][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 363.919508][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.933540][T10308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.942876][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.952155][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.077603][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.107826][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.137754][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.163345][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.173900][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.185940][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 364.199319][ T9822] Bluetooth: hci1: command 0x0409 tx timeout [ 364.297981][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:52:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 14:52:50 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) 14:52:50 executing program 3: bpf$OBJ_GET_PROG(0xe, 0x0, 0x0) 14:52:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:52:50 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x8}, 0x0) 14:52:50 executing program 5: socketpair(0x11, 0x3, 0x3, &(0x7f0000000200)) 14:52:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x1, 0x0, 0x1, 0x4}, {0x6}]}) 14:52:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x40286608, &(0x7f0000000040)) 14:52:51 executing program 3: io_setup(0x4, &(0x7f00000009c0)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 14:52:51 executing program 5: fsopen(&(0x7f0000002100)='ramfs\x00', 0x0) 14:52:51 executing program 0: io_setup(0x4, &(0x7f00000009c0)=0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) [ 365.185374][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.228722][ T36] audit: type=1326 audit(1608216771.164:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10556 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 365.321449][T10564] EXT4-fs warning (device sda1): ext4_group_add:1660: No reserved GDT blocks, can't resize 14:52:51 executing program 5: fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) 14:52:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 14:52:51 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000003c0)) 14:52:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 14:52:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000f000000080010"], 0x28}}, 0x0) 14:52:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @local}, 0x7, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 14:52:51 executing program 5: pipe2$9p(&(0x7f0000000040), 0x88000) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) [ 365.748220][T10583] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 365.814885][T10587] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 365.978789][T10591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.020707][ T36] audit: type=1326 audit(1608216771.964:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10556 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 14:52:52 executing program 2: timer_create(0xb00, 0x0, 0x0) 14:52:52 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0xffffffffffffffff) 14:52:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:52:52 executing program 0: socketpair(0x2, 0x3, 0x40, &(0x7f0000000240)) 14:52:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="0500a30002"], 0x28}}, 0x0) [ 366.288908][ T9851] Bluetooth: hci1: command 0x041b tx timeout 14:52:52 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x6612, 0x0) 14:52:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x25, 0x0, 0x0) [ 366.722310][T10585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.596848][T10627] IPVS: ftp: loaded support on port[0] = 21 [ 370.771296][T10627] chnl_net:caif_netlink_parms(): no params data found [ 370.836338][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.843993][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.854309][T10627] device bridge_slave_0 entered promiscuous mode [ 370.868088][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.875680][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.884389][T10627] device bridge_slave_1 entered promiscuous mode [ 370.912739][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.926336][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.956152][T10627] team0: Port device team_slave_0 added [ 370.966538][T10627] team0: Port device team_slave_1 added [ 370.994030][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.001478][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.027800][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.041907][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.048917][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.075449][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.111852][T10627] device hsr_slave_0 entered promiscuous mode [ 371.118848][T10627] device hsr_slave_1 entered promiscuous mode [ 371.125344][T10627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.133400][T10627] Cannot create hsr debugfs directory [ 371.246513][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.253626][T10627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.261347][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.268442][T10627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.345215][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.363710][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.373138][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.383413][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.393327][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 371.413633][T10627] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.430948][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.439610][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.446735][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.463856][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.472368][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.479502][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.511121][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.520041][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.535093][ T9484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.560984][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.571062][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.586025][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.611556][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.620874][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.639624][T10627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.726279][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.764314][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.772876][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.784183][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.793363][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.806319][T10627] device veth0_vlan entered promiscuous mode [ 371.827511][T10627] device veth1_vlan entered promiscuous mode [ 371.862734][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.871113][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.880980][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.891276][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.907171][T10627] device veth0_macvtap entered promiscuous mode [ 371.922375][T10627] device veth1_macvtap entered promiscuous mode [ 371.947145][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.959552][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.970288][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.981165][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.992760][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.003622][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.014923][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.025772][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.036443][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.049918][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.059836][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.070431][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.080693][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.091815][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.104791][T10627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.115315][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.124460][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.134300][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.143969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.156762][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.167956][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.178221][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.189440][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.201309][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.213809][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.223755][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.236763][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.246649][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.257131][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.267025][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.277539][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.287753][T10627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.298921][T10627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.311089][T10627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.320964][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.329909][ T9811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.446013][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.463897][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.503130][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.525332][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.540645][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.553169][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.599967][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 372.690030][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:52:58 executing program 0: r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x6, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 14:52:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r3) 14:52:58 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x28}, 0x10) 14:52:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 14:52:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), 0x4) 14:52:58 executing program 1: r0 = socket(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:52:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) 14:52:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@loopback}}, 0xe8) 14:52:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 14:52:59 executing program 3: r0 = socket(0x1, 0x5, 0x0) accept(r0, 0x0, 0x0) 14:52:59 executing program 5: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 14:52:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000), 0x4) 14:52:59 executing program 0: syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 14:52:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) 14:52:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') read$FUSE(r0, 0x0, 0x0) 14:52:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/route\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 14:52:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 373.820743][ T8664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.836316][ T8664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:52:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1, 0x5, 0x0) 14:52:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) 14:52:59 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) 14:52:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) 14:52:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004380)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 14:52:59 executing program 2: r0 = socket(0x2, 0xa, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) [ 374.030761][T10909] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 374.047315][T10910] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 14:53:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) 14:53:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006200)='clear_refs\x00') write$FUSE_GETXATTR(r0, &(0x7f0000006180)={0x18}, 0x18) 14:53:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@hopopts={0x0, 0x2, [], [@generic={0x0, 0x0, "99fc75f8e5f31e63b74f8f8379f5c51de48a96c1fc6be2852cfad1d84ca9d6ae681dc4211dbc42e8dba6dfa324fe8cde5d212fe64b0923d9c6fa5fe089ef52dc8f7f568868fc89be12f31a647afe4e07631d3d30d8ee5b0823fca73b39e6b7660da825d975db94b5ad5ce04f3c504a5b13fe86e258af29e0a9294a079ac0a454b72f4c91a3f133bd"}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x1b) 14:53:00 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, 0x0, &(0x7f0000000100)={r0}, 0x0) 14:53:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) 14:53:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 14:53:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:53:00 executing program 0: r0 = socket(0x1, 0x1, 0x0) bind$netlink(r0, 0x0, 0x0) 14:53:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') read$FUSE(r0, &(0x7f00000087c0)={0x2020}, 0x2020) 14:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) 14:53:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) 14:53:00 executing program 1: syz_open_dev$loop(&(0x7f0000002e80)='/dev/loop#\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:53:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) 14:53:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:53:00 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$netlink(r0, &(0x7f0000008e80)={0x0, 0x0, 0x0}, 0x0) [ 374.678992][ T20] Bluetooth: hci1: command 0x041b tx timeout 14:53:00 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x4) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055600)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x3f, "6da30b05765f70"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)={0x88, r4, 0x0, 0x70bd27, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c0c5}, 0x200040c1) 14:53:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 14:53:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x40) 14:53:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:53:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000000200)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) 14:53:00 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000001180)={0x44, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8570}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x40040) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055600)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x3f, "6da30b05765f70"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) 14:53:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 14:53:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 14:53:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) 14:53:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 14:53:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}, 0x0) 14:53:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:53:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000) 14:53:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x2}) 14:53:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x1c) 14:53:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:53:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) 14:53:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x1c) 14:53:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000001000)=""/94, &(0x7f0000000fc0)=0x5e) 14:53:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004380)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 14:53:01 executing program 2: socket$inet(0x2, 0x0, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{}, {r1}], 0x2, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0, 0x0) socket$inet(0x2, 0xa, 0xcb8) r3 = socket$netlink(0x10, 0x3, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = dup(r0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040), 0xc) 14:53:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x40040) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)) 14:53:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) clock_gettime(0x2, &(0x7f0000000100)) [ 375.840345][T11013] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 375.874123][T11013] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 14:53:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004380)={0x44, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0) 14:53:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x108) 14:53:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {0xc}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x24000080) 14:53:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, &(0x7f0000000040)=0x20) [ 376.085292][T11029] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:53:02 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:53:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x3}, 0x40) [ 376.247069][T11037] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 14:53:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 14:53:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@delneigh={0x0, 0x1d, 0x0, 0x0, 0x0, {}, [@NDA_PORT, @NDA_VNI, @NDA_LLADDR={0x0, 0x2, @link_local}, @NDA_DST_MAC={0x0, 0x1, @random="54182322cc34"}, @NDA_CACHEINFO, @NDA_PROBES, @NDA_MASTER]}, 0x14}}, 0x0) 14:53:02 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 14:53:02 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 14:53:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read$FUSE(r0, 0x0, 0x0) [ 376.758746][ T20] Bluetooth: hci1: command 0x040f tx timeout 14:53:02 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x40040) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) 14:53:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 14:53:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000)=0x200, 0x4) 14:53:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x10142, 0x0) 14:53:02 executing program 1: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) pipe(&(0x7f0000000000)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64]) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x40040) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "de1a08d109a2600016b805c5f22649d39dd61efb6a8fe1499a703b276268402dbf4f83c59bdc717ffcfebe9f392c5ddc6b9858a5c997228763ecbe47ca6120f9dbe6af4dc5ddf03d83dae2f3578f67758eb1997bd26057850bef94a276eabdb35416104d943614ebd6b08c52bd15f21bd633e56c701467469015c5e735f4980cd2a97ac4b44a0c57827e073448de0cf94a23ba56b4e8c65427dd813b73ca25c5d288a07e8fefd761c0331fc44608023d55bccdd233509a1cfb62142200f5a38ab24efd0db485239269c49995ccd123f04adecd88bf6598770939ce99665f111eac5a7bc7ebabdfeae082af09febefeccac14f5707226384346f32ea940e586e4", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) 14:53:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:53:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30}, 0x0) 14:53:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 14:53:03 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) [ 377.431910][ T9867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.446172][ T9867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:53:03 executing program 2: r0 = socket(0x1, 0x1, 0x0) bind$netlink(r0, &(0x7f0000000000), 0xc) 14:53:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8) 14:53:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:53:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0xfffffffffffffffe) 14:53:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 14:53:03 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 14:53:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 14:53:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 14:53:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 377.864114][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.884120][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:53:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 14:53:03 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) 14:53:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 14:53:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@loopback}}, 0xe8) 14:53:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:53:04 executing program 5: syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x22082) 14:53:04 executing program 3: clock_gettime(0x7, &(0x7f0000000280)) 14:53:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b900)={0x0, 0x0, &(0x7f000000b880)=[{&(0x7f0000006500)={0x10, 0x1f, 0x1}, 0x10}], 0x1}, 0x0) 14:53:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xfc9a}, 0x0) [ 378.317437][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.336801][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:53:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=@srh={0x0, 0x0, 0x4, 0x0, 0x3}, 0x8) 14:53:04 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee00}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast1}}, 0xe8) 14:53:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 14:53:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004380)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 14:53:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 14:53:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ppoll(&(0x7f0000000140)=[{r4}, {r2}], 0x2, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000002000e7ef007b00000000000000a1", 0x64, 0x0, 0x0, 0x0) 14:53:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020) 14:53:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) 14:53:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 378.755596][ T9222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.775809][ T9222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.839014][ T20] Bluetooth: hci1: command 0x0419 tx timeout 14:53:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000080)={0x14, 0x0, 0x9, 0x301}, 0x14}}, 0x0) 14:53:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) 14:53:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat\x00') read$FUSE(r0, 0x0, 0x0) 14:53:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$FUSE_IOCTL(r0, 0x0, 0x0) 14:53:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) 14:53:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x5a) 14:53:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x306, @local}, 0x0, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'}) 14:53:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/246, 0x29, 0xf6, 0x1}, 0x20) 14:53:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ppoll(&(0x7f0000000140)=[{r4}, {r2}], 0x2, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000002000e7ef007b00000000000000a1", 0x64, 0x0, 0x0, 0x0) 14:53:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r0, 0x0, 0x0) 14:53:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)=""/233, &(0x7f0000000140)=0xe9) 14:53:05 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='lock_acquire\x00'}, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYBLOB="54d6d70daa7a19cf2929e207549bfd4d53b07a8a210c0700b7a8e6c18941a7360552bf4be88483a11ec582654134845b022daacd74763b28a506b359074932d0ef5aa6d65e41775e2270e1fb22222c13922a918aa65dc8db4d43acf1ab", @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 14:53:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) 14:53:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB='^X'], 0x108) 14:53:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x6e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}], 0x2, 0x0) 14:53:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="59ef0d3df388ec2e2b1e6de57ac6d373a622fc3cb8798e125009ca318105725cedaa03d8db765afeedf95a0fb6fb9862b06792cbdbd734d26f697f", 0x3b}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}}], 0x1, 0x22040810) 14:53:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 14:53:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 14:53:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x6e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}], 0x2, 0x0) 14:53:06 executing program 2: openat$fuse(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) 14:53:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ppoll(&(0x7f0000000140)=[{r4}, {r2}], 0x2, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000002000e7ef007b00000000000000a1", 0x64, 0x0, 0x0, 0x0) 14:53:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ppoll(&(0x7f0000000140)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0) 14:53:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 14:53:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080), 0x4) 14:53:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x6e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}], 0x2, 0x0) 14:53:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b32, 0x0) 14:53:06 executing program 1: r0 = socket(0x11, 0x802, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x198}}, 0x0) 14:53:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 14:53:06 executing program 2: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 14:53:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x6e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}], 0x2, 0x0) 14:53:06 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000002e80)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "2dc787ee647d04c53a2476ee2a56d163ef4b791c2bf91acc93d24a63a0bebd0a551060d409ed28e9756be0332ca8c8edbf7333e6a7e5e4a89100472b65997d7f", "0380348baa1faf0e3af6b3d57562c7c71368c64751ed1b6a7626d2fa3012e8d3"}) 14:53:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 14:53:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ppoll(&(0x7f0000000140)=[{r4}, {r2}], 0x2, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000002000e7ef007b00000000000000a1", 0x64, 0x0, 0x0, 0x0) 14:53:07 executing program 2: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 14:53:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) creat(0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x191) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 14:53:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$FUSE_IOCTL(r0, 0x0, 0x0) 14:53:07 executing program 1: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000002c0)=""/244, &(0x7f00000000c0)=0xf4) 14:53:07 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={0x0, 0x198}}, 0x0) 14:53:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 14:53:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) 14:53:07 executing program 0: r0 = socket(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x43}}], 0x1, 0x0, 0x0) 14:53:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 14:53:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, &(0x7f0000001180)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) 14:53:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) 14:53:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 14:53:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 14:53:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bbe}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) [ 384.591068][ T36] audit: type=1800 audit(1608216790.525:4): pid=11258 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=15912 res=0 errno=0 14:53:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 14:53:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:53:10 executing program 3: mount$fuseblk(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) 14:53:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) faccessat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14:53:10 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000003c0)) 14:53:10 executing program 1: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:10 executing program 5: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:10 executing program 2: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 14:53:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) faccessat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14:53:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:53:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040), 0x4) 14:53:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) faccessat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14:53:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) 14:53:11 executing program 4: syz_open_dev$evdev(&(0x7f0000002e80)='/dev/input/event#\x00', 0x0, 0x0) 14:53:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) faccessat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14:53:11 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/233, 0xe9}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 14:53:14 executing program 1: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) sync() truncate(&(0x7f0000000100)='./file0\x00', 0x0) 14:53:14 executing program 2: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:14 executing program 3: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2}, 0x1c) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') 14:53:14 executing program 5: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:14 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x5) setsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, 0x0) 14:53:15 executing program 4: r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='cpuacct.usage_sys\x00', &(0x7f0000000100)="15", 0x1) [ 389.027697][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:53:15 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)) [ 389.116353][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.186326][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:53:15 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback=0x7f000002}, {0x2, 0x0, @broadcast=0x5}, {0x2, 0x0, @broadcast}}) [ 389.859365][T11379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.879112][T11390] IPVS: ftp: loaded support on port[0] = 21 14:53:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={0x0}}, 0x0) [ 390.030964][T11379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.139107][T11379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:53:16 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) [ 390.541747][T11398] IPVS: ftp: loaded support on port[0] = 21 14:53:16 executing program 3: open_tree(0xffffffffffffffff, 0x0, 0x9480) 14:53:19 executing program 1: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:19 executing program 0: syz_usbip_server_init(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x4000, 0x0) 14:53:19 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$audio1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0)='wireguard\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:53:19 executing program 5: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 14:53:19 executing program 2: dup(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xa2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 393.136015][T11446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 14:53:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:53:19 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 393.773970][T11446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 14:53:19 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) 14:53:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c, 0x0}, 0x0) 14:53:24 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x77359400}) 14:53:24 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 14:53:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={0x0}}, 0x0) 14:53:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:53:24 executing program 1: ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) 14:53:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 14:53:24 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000780)) 14:53:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x40) 14:53:24 executing program 1: mq_notify(0xffffffffffffffff, 0x0) 14:53:24 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) 14:53:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc9}}) 14:53:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 14:53:24 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002240)={0xffffffffffffffff}, 0x4) 14:53:24 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f00000022c0)) 14:53:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1e}) 14:53:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 14:53:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x20000118) 14:53:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0xe8030000, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 14:53:25 executing program 3: ioprio_set$pid(0x3, 0x0, 0x4004) 14:53:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x68}}, 0x0) 14:53:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000a00)=""/134) 14:53:25 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x2}) 14:53:25 executing program 5: getresuid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) 14:53:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 14:53:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000a00)=""/134) 14:53:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 14:53:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) 14:53:25 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 14:53:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000a00)=""/134) 14:53:26 executing program 5: r0 = getpid() process_vm_readv(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000001880)=""/244, 0xf4}], 0x3, &(0x7f0000001640)=[{&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000580)=""/116, 0x74}, {0x0}], 0x3, 0x0) 14:53:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 14:53:26 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000140)) 14:53:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 14:53:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x107276) 14:53:26 executing program 5: process_vm_readv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000000)=""/12, 0xc}, {0x0}], 0x2, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/144, 0x90}], 0x1, 0x0) 14:53:26 executing program 2: rt_sigsuspend(&(0x7f0000000100), 0x8) 14:53:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000a00)=""/134) 14:53:26 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x5450, 0x0) 14:53:26 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x10000) 14:53:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 14:53:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 14:53:26 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f00000002c0)) 14:53:26 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000200), 0x10) 14:53:27 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3caaa14a"}, 0x0, 0x0, @fd, 0x7e800000}) 14:53:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}}]}, 0x78}}, 0x0) 14:53:27 executing program 0: openat$fb0(0xffffffffffffff9c, 0x0, 0x581642, 0x0) 14:53:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "83f809fb"}, 0x0, 0x0, @planes=0x0}) 14:53:27 executing program 2: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x986f1570a36e1468) 14:53:27 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 14:53:27 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40002, 0x0) 14:53:27 executing program 0: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) 14:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xa4801, 0x0) 14:53:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000180)) 14:53:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x38) 14:53:27 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 14:53:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x2400, &(0x7f00000000c0)=0x2) 14:53:27 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:27 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x5460, 0x0) 14:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xa4801, 0x0) 14:53:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4611, &(0x7f0000000040)) 14:53:28 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:53:28 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 14:53:28 executing program 2: socketpair(0x23, 0x0, 0x9, &(0x7f0000000040)) 14:53:28 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:28 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xa4801, 0x0) 14:53:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4611, &(0x7f0000000040)) 14:53:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x578, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1e}) 14:53:28 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 14:53:28 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4611, &(0x7f0000000040)) 14:53:28 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xa4801, 0x0) 14:53:28 executing program 5: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002280)) 14:53:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800, 0x3, 0x0, 0x9, 0x0, 0x0, 0x6}) 14:53:28 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:28 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4611, &(0x7f0000000040)) 14:53:28 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$l2tp(r0, 0x0, &(0x7f0000000100)) 14:53:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x4600, 0x0) 14:53:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 14:53:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="f8ffffff20"]) 14:53:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 14:53:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 14:53:29 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4810) socketpair(0x0, 0x0, 0x3, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:53:29 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002700)='/dev/loop-control\x00', 0x80000, 0x0) 14:53:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 14:53:29 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x5, 0x0) 14:53:29 executing program 1: socketpair(0x3, 0x0, 0xf7f, &(0x7f00000002c0)) 14:53:29 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x10180, 0x0) 14:53:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:53:29 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 14:53:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 14:53:29 executing program 0: sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4ef4a4f0b960402d) 14:53:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:53:29 executing program 3: socketpair(0x28, 0x0, 0x5, &(0x7f0000000080)) 14:53:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfd5e, &(0x7f0000000140)={0x0}}, 0x0) [ 403.868535][ T36] audit: type=1804 audit(1608216809.795:5): pid=11715 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/54/bus" dev="sda1" ino=16035 res=1 errno=0 14:53:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 14:53:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000540)) [ 404.005848][ T36] audit: type=1804 audit(1608216809.885:6): pid=11719 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/54/bus" dev="sda1" ino=16035 res=1 errno=0 14:53:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 14:53:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x3}) 14:53:30 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) 14:53:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11"], 0x68}}, 0x0) [ 404.176611][ T36] audit: type=1804 audit(1608216809.925:7): pid=11721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/54/bus" dev="sda1" ino=16035 res=1 errno=0 14:53:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 14:53:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x2, 0x0) [ 404.310160][ T36] audit: type=1804 audit(1608216809.925:8): pid=11719 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/54/bus" dev="sda1" ino=16035 res=1 errno=0 [ 404.439207][ T36] audit: type=1804 audit(1608216810.335:9): pid=11737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/55/bus" dev="sda1" ino=16030 res=1 errno=0 14:53:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x2, &(0x7f0000000040)) 14:53:30 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200), 0x4) 14:53:30 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:53:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) [ 404.590453][ T36] audit: type=1804 audit(1608216810.395:10): pid=11740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/55/bus" dev="sda1" ino=16030 res=1 errno=0 14:53:30 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 14:53:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 14:53:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9}) 14:53:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) [ 404.870953][ T36] audit: type=1804 audit(1608216810.805:11): pid=11760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/56/bus" dev="sda1" ino=15984 res=1 errno=0 [ 405.005914][ T36] audit: type=1804 audit(1608216810.925:12): pid=11768 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/56/bus" dev="sda1" ino=15984 res=1 errno=0 14:53:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000600)) 14:53:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 14:53:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 14:53:31 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:31 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 14:53:31 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:53:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 14:53:31 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 405.440515][T11779] hub 9-0:1.0: USB hub found [ 405.473663][T11779] hub 9-0:1.0: 8 ports detected 14:53:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 14:53:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) [ 405.631874][ T36] audit: type=1804 audit(1608216811.566:13): pid=11787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/57/bus" dev="sda1" ino=16037 res=1 errno=0 [ 405.740914][ T36] audit: type=1804 audit(1608216811.676:14): pid=11797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922710797/syzkaller.atOoK4/57/bus" dev="sda1" ino=16037 res=1 errno=0 14:53:31 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 405.850044][T11779] hub 9-0:1.0: USB hub found 14:53:31 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 405.887657][T11779] hub 9-0:1.0: 8 ports detected 14:53:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="11"], 0x68}}, 0x0) 14:53:31 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000300)=@hat={'permhat '}, 0x1b) 14:53:31 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:32 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/self/attr/current\x00', 0x2, 0x0) 14:53:32 executing program 1: wait4(0x0, 0x0, 0x1000000, &(0x7f0000000140)) 14:53:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:53:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d7a3ba53"}, 0x0, 0x0, @fd, 0x7}) 14:53:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x0) 14:53:32 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:53:32 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x401, 0x0) 14:53:32 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xb83, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:53:32 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0x8d, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "65aaf205955082f85b00070a3b2e56a5"}) [ 406.120047][T11809] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 406.778532][T11834] hub 9-0:1.0: USB hub found 14:53:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x5451, 0x0) [ 406.838922][T11834] hub 9-0:1.0: 8 ports detected 14:53:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 406.989392][T11847] ubi0: attaching mtd0 [ 407.073560][T11847] ubi0: scanning is finished [ 407.101521][T11847] ubi0: empty MTD device detected 14:53:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0xc020660b, 0x0) 14:53:33 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 14:53:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x5452, &(0x7f0000000040)) 14:53:33 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x538181, 0x0) 14:53:33 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) [ 407.523959][T11863] hub 9-0:1.0: USB hub found [ 407.552429][T11863] hub 9-0:1.0: 8 ports detected 14:53:33 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 14:53:33 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000003}, 0x0) [ 407.709475][T11847] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 407.738867][T11847] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 407.777612][T11847] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 407.829217][T11847] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 407.836642][T11847] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 407.863167][T11847] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 407.887565][T11847] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1389197235 [ 407.926712][T11847] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 407.954794][T11875] ubi0: background thread "ubi_bgt0d" started, PID 11875 [ 407.962968][T11849] ubi0: detaching mtd0 [ 407.995487][T11849] ubi0: mtd0 is detached 14:53:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:34 executing program 0: socketpair(0x22, 0x0, 0x1, &(0x7f0000000140)) 14:53:34 executing program 5: futex(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 14:53:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5}) 14:53:34 executing program 4: socketpair(0x9, 0x0, 0x0, &(0x7f0000000280)) 14:53:34 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x8402) 14:53:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4605, &(0x7f0000000040)) 14:53:34 executing program 3: modify_ldt$read_default(0x2, &(0x7f00000004c0)=""/4096, 0x1000) 14:53:34 executing program 4: syz_open_dev$vim2m(0x0, 0x0, 0x2) 14:53:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r1) [ 408.265001][T11901] ubi0: attaching mtd0 14:53:34 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) [ 408.386165][T11901] ubi0: scanning is finished 14:53:34 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x101000) [ 408.699889][T11901] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 408.718347][T11901] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 408.725668][T11901] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 408.749480][T11901] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 408.757057][T11901] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 408.779618][T11901] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 408.797830][T11901] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1389197235 [ 408.817592][T11901] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 408.847496][T11919] ubi0: background thread "ubi_bgt0d" started, PID 11919 [ 408.847652][T11903] ubi0: detaching mtd0 [ 408.873267][T11903] ubi0: mtd0 is detached 14:53:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x13b, 0x0, 0x0, 0x0, 0x0, 0x7}) 14:53:34 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:34 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:53:34 executing program 1: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:53:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800, 0x3, 0x5}) [ 409.035953][T11931] hub 9-0:1.0: USB hub found 14:53:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) [ 409.068623][T11931] hub 9-0:1.0: 8 ports detected 14:53:35 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0}) [ 409.146143][T11938] ubi0: attaching mtd0 [ 409.204354][T11936] hub 9-0:1.0: USB hub found 14:53:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 409.256401][T11938] ubi0: scanning is finished [ 409.276533][T11936] hub 9-0:1.0: 8 ports detected 14:53:35 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) 14:53:35 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:35 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 409.640786][T11938] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 409.672696][T11938] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 409.714182][T11938] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 409.746942][T11938] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 409.779538][T11938] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 409.812637][T11961] hub 9-0:1.0: USB hub found [ 409.824352][T11961] hub 9-0:1.0: 8 ports detected [ 409.832289][T11938] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 409.876292][T11938] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 409.939592][T11938] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 409.964148][T11957] ubi0: background thread "ubi_bgt0d" started, PID 11957 [ 409.971557][T11940] ubi0: detaching mtd0 [ 409.993885][T11940] ubi0: mtd0 is detached 14:53:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 14:53:36 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:53:36 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:53:36 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:36 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 410.202273][T11977] hub 9-0:1.0: USB hub found 14:53:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x93}) [ 410.235336][T11977] hub 9-0:1.0: 8 ports detected 14:53:36 executing program 1: getrusage(0x0, &(0x7f00000027c0)) [ 410.333968][T11988] ubi0: attaching mtd0 [ 410.392296][T11988] ubi0: scanning is finished [ 410.426109][T11986] hub 9-0:1.0: USB hub found [ 410.448458][T11986] hub 9-0:1.0: 8 ports detected 14:53:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:36 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:36 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 410.712445][T11988] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 410.729719][T11988] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 410.756751][T11988] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 410.783604][T12009] hub 9-0:1.0: USB hub found [ 410.799511][T11988] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 410.816765][T12009] hub 9-0:1.0: 8 ports detected [ 410.835558][T11988] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 410.857481][T11988] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 410.865591][T11988] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 410.893192][T11988] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 410.922810][T12005] ubi0: background thread "ubi_bgt0d" started, PID 12005 [ 410.931208][T11993] ubi0: detaching mtd0 [ 410.951562][T11993] ubi0: mtd0 is detached [ 410.961790][T12008] ubi0: attaching mtd0 [ 411.055643][T12008] ubi0: scanning is finished 14:53:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 14:53:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000140)=""/65) 14:53:37 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r0, 0x0) 14:53:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 14:53:37 executing program 3: sched_setparam(0x0, &(0x7f0000000000)) [ 411.375318][T12008] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 411.389355][T12008] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 14:53:37 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 14:53:37 executing program 1: bind$l2tp(0xffffffffffffffff, 0x0, 0x0) 14:53:37 executing program 2: mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 411.420957][T12008] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 411.449008][T12008] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 411.483097][T12008] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 411.507132][T12008] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 411.571657][T12008] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 411.607386][T12008] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 411.655305][T12030] ubi0: background thread "ubi_bgt0d" started, PID 12030 [ 411.655327][T12013] ubi0: detaching mtd0 [ 411.681190][T12013] ubi0: mtd0 is detached [ 411.694698][T12039] ubi0: attaching mtd0 [ 411.709577][T12039] ubi0: scanning is finished 14:53:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:37 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 14:53:37 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 14:53:37 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/self/attr/current\x00', 0x2, 0x0) 14:53:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x13b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}) 14:53:37 executing program 4: process_vm_readv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000000)=""/12, 0xc}, {0x0}], 0x2, &(0x7f0000001280)=[{0x0}], 0x1, 0x0) [ 411.789966][T12039] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 14:53:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 14:53:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:53:37 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) 14:53:37 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x800) 14:53:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) [ 412.054882][T12062] ubi0: attaching mtd0 [ 412.123218][T12062] ubi0: scanning is finished 14:53:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4) [ 412.451119][T12062] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 412.462981][T12062] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 412.477252][T12062] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 412.497547][T12062] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 412.514919][T12062] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 412.534227][T12062] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 412.574865][T12062] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 412.601658][T12062] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 412.625070][T12080] ubi0: background thread "ubi_bgt0d" started, PID 12080 [ 412.633151][T12063] ubi0: detaching mtd0 [ 412.651710][T12063] ubi0: mtd0 is detached 14:53:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:38 executing program 4: socketpair(0x0, 0x6, 0x0, &(0x7f0000000d00)) 14:53:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) 14:53:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x48004) sendmmsg$inet6(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x70}}, {{&(0x7f00000005c0)={0x2, 0x4e21, 0xe0000000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffff", @ANYBLOB="9315412c"], 0x28}}], 0x2, 0x0) 14:53:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 412.882468][T12095] ubi0: attaching mtd0 14:53:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0)='TIPC\x00') 14:53:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/4096) [ 412.970785][T12095] ubi0: scanning is finished 14:53:39 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0}) 14:53:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, &(0x7f0000000000), 0x64}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:39 executing program 2: mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 14:53:39 executing program 3: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 413.273543][T12095] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 413.297708][T12095] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 14:53:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002700)='/dev/loop-control\x00', 0x80000, 0x0) [ 413.321096][T12095] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 413.348156][T12095] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 413.385474][T12095] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 14:53:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @multicast2}}}, 0xa0) [ 413.413366][T12095] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 413.461750][T12095] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 413.494961][T12095] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 413.525618][T12112] ubi0: background thread "ubi_bgt0d" started, PID 12112 [ 413.533780][T12100] ubi0: detaching mtd0 [ 413.545565][T12100] ubi0: mtd0 is detached [ 413.562882][T12118] ubi0: attaching mtd0 [ 413.604577][T12118] ubi0: scanning is finished 14:53:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f00000005c0)) 14:53:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$efs(&(0x7f0000000000)='efs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000340)="0be5a941", 0x4}, {0x0, 0x0, 0xfffffffffffffffb}], 0x0, &(0x7f0000000800)) [ 413.793944][T12118] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 413.804097][T12118] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 413.815588][T12118] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 413.824112][T12118] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 413.834108][T12118] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 413.836300][T12132] loop3: detected capacity change from 16383 to 0 [ 413.843308][T12118] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 413.856958][T12118] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 413.887293][T12132] efs: SGI disklabel: checksum bad, label corrupted [ 413.895420][T12118] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 413.907817][T12134] ubi0: background thread "ubi_bgt0d" started, PID 12134 [ 413.915239][T12121] ubi0: detaching mtd0 [ 413.925150][T12121] ubi0: mtd0 is detached [ 413.929854][T12100] ubi0: attaching mtd0 [ 413.935288][T12100] ubi0: scanning is finished 14:53:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) 14:53:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0x10, &(0x7f0000000280)={0x0}}, 0x0) 14:53:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 14:53:40 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr, 0x4}, 0x10) [ 414.082751][T12100] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 14:53:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 14:53:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:40 executing program 1: socketpair(0x2b, 0x1, 0x2, &(0x7f0000000000)) 14:53:40 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e449e04f"}}) 14:53:40 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x2, 0x31435641, 0x1, @stepwise={0x9, 0x9, 0x2, 0xb9, 0x334, 0x7}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$char_raw(&(0x7f0000000300)='/dev/raw/raw#\x00', 0x0, 0x40000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x220880, 0x0) write$binfmt_script(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="0a0000000000000000001c6a"], 0x3e) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x1, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r4, 0x80047213, &(0x7f00000000c0)) 14:53:40 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) [ 414.365158][T12158] ubi0: attaching mtd0 [ 414.447347][T12158] ubi0: scanning is finished 14:53:40 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x40081, 0x0) [ 414.675288][T12171] loop5: detected capacity change from 264192 to 0 [ 414.682892][T12158] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 414.701964][T12158] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 414.713163][T12158] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 414.723687][T12158] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 414.731370][T12158] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 414.738482][T12158] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 414.746569][T12158] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 414.757293][T12158] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 414.768716][T12177] ubi0: background thread "ubi_bgt0d" started, PID 12177 [ 414.776068][T12159] ubi0: detaching mtd0 [ 414.783362][T12159] ubi0: mtd0 is detached [ 414.795986][T12164] ubi0: attaching mtd0 [ 414.825701][T12164] ubi0: scanning is finished 14:53:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x5, 0x200000) 14:53:40 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)) [ 414.957471][T12164] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 414.965171][T12164] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 414.978563][T12164] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 414.985713][T12164] ubi0: VID header offset: 64 (aligned 64), data offset: 128 14:53:40 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) [ 415.014125][T12164] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 415.021444][T12164] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 415.029675][T12164] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 415.040901][T12164] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 415.051629][T12170] ubi0: detaching mtd0 [ 415.051967][T12184] ubi0: background thread "ubi_bgt0d" started, PID 12184 [ 415.103204][T12170] ubi0: mtd0 is detached 14:53:41 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 14:53:41 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 415.245126][T12192] ubi0: attaching mtd0 14:53:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:41 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x2, 0x31435641, 0x1, @stepwise={0x9, 0x9, 0x2, 0xb9, 0x334, 0x7}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$char_raw(&(0x7f0000000300)='/dev/raw/raw#\x00', 0x0, 0x40000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x220880, 0x0) write$binfmt_script(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="0a0000000000000000001c6a"], 0x3e) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x1, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r4, 0x80047213, &(0x7f00000000c0)) [ 415.313635][T12192] ubi0: scanning is finished 14:53:41 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:53:41 executing program 3: connect$l2tp(0xffffffffffffffff, 0x0, 0x0) [ 415.532981][T12206] hub 9-0:1.0: USB hub found [ 415.572363][T12206] hub 9-0:1.0: 8 ports detected [ 415.652809][T12192] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 415.665960][T12192] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 415.733416][T12192] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 14:53:41 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1c0, 0x0) 14:53:41 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x2, 0x31435641, 0x1, @stepwise={0x9, 0x9, 0x2, 0xb9, 0x334, 0x7}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$char_raw(&(0x7f0000000300)='/dev/raw/raw#\x00', 0x0, 0x40000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x220880, 0x0) write$binfmt_script(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="0a0000000000000000001c6a"], 0x3e) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x1, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r4, 0x80047213, &(0x7f00000000c0)) [ 415.804766][T12192] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 415.871749][T12192] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 415.900786][T12192] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 415.934581][T12192] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 415.967933][T12192] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 416.002598][T12214] ubi0: background thread "ubi_bgt0d" started, PID 12214 [ 416.010330][T12196] ubi0: detaching mtd0 [ 416.028374][T12196] ubi0: mtd0 is detached [ 416.052125][T12207] ubi0: attaching mtd0 [ 416.105170][T12207] ubi0: scanning is finished [ 416.140589][T12228] loop5: detected capacity change from 264192 to 0 14:53:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000280)={0x6}, 0x1) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2018d) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)="1f", 0x1}], 0x1, &(0x7f0000001740)=[@sndrcv={0x2c}], 0x2c}, 0x0) 14:53:42 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) write$fb(r0, 0x0, 0x0) [ 416.351946][T12207] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 416.361733][T12207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 416.369879][T12207] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 416.380031][T12207] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 416.387799][T12207] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 14:53:42 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f0000002680)) [ 416.394912][T12207] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 416.404039][T12207] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 416.414910][T12207] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 416.425828][T12246] ubi0: background thread "ubi_bgt0d" started, PID 12246 [ 416.435935][T12210] ubi0: detaching mtd0 14:53:42 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x2, 0x31435641, 0x1, @stepwise={0x9, 0x9, 0x2, 0xb9, 0x334, 0x7}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$char_raw(&(0x7f0000000300)='/dev/raw/raw#\x00', 0x0, 0x40000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x220880, 0x0) write$binfmt_script(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="0a0000000000000000001c6a"], 0x3e) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x1, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r4, 0x80047213, &(0x7f00000000c0)) [ 416.504151][T12210] ubi0: mtd0 is detached [ 416.561167][T12241] ubi0: attaching mtd0 [ 416.616210][T12241] ubi0: scanning is finished 14:53:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/178, 0xb2}, 0x0}, 0x20) munlockall() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 14:53:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 14:53:42 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 14:53:42 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:42 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x200200, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 14:53:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff}) [ 416.991811][T12241] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 417.049192][T12241] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 417.074845][T12241] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 417.111683][T12241] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 417.160556][T12241] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 417.179938][T12241] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 417.211894][T12241] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 417.224304][T12241] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 417.255984][T12274] ubi0: background thread "ubi_bgt0d" started, PID 12274 [ 417.265492][T12244] ubi0: detaching mtd0 [ 417.272747][T12244] ubi0: mtd0 is detached [ 417.281794][T12264] ubi0: attaching mtd0 [ 417.313876][T12264] ubi0: scanning is finished 14:53:43 executing program 1: socketpair(0x11, 0x2, 0x0, &(0x7f0000000280)) 14:53:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2b, 0x1}) 14:53:43 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 14:53:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000003c0)={0x3d}) 14:53:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004550c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:53:43 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x201020, 0x4) [ 417.633861][T12264] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 417.656270][T12264] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 417.707130][T12264] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 417.714196][T12264] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 417.745100][T12264] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 417.767034][T12264] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 417.775087][T12264] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 417.800207][T12264] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 417.823535][T12294] ubi0: background thread "ubi_bgt0d" started, PID 12294 [ 417.823560][T12268] ubi0: detaching mtd0 [ 417.839131][T12268] ubi0: mtd0 is detached 14:53:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080), 0x10) 14:53:43 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1ff, 0x4000) 14:53:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2b, 0x1}) 14:53:43 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) 14:53:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x25000) 14:53:43 executing program 4: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 14:53:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2b, 0x1}) 14:53:44 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0xc0189436, &(0x7f0000000040)) 14:53:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x984, 0x1}, 0x40) 14:53:44 executing program 2: socketpair(0x0, 0xbb4cd2d6e126b933, 0x0, 0x0) 14:53:44 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x571000) 14:53:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2b, 0x1}) 14:53:44 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) 14:53:44 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffff00000000, 0x0) 14:53:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004550c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:53:44 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000100)=""/22, 0x16) 14:53:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x2, 0x3ff, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 14:53:44 executing program 4: munlockall() r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) 14:53:44 executing program 1: socketpair(0x1, 0x0, 0x5, &(0x7f0000000040)) 14:53:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) munlockall() ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 14:53:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x13b}) 14:53:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004550c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:53:44 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) 14:53:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:53:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x6}) [ 418.858373][T12347] ubi0: attaching mtd0 14:53:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x2, 0x3ff, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 418.943833][T12347] ubi0: scanning is finished 14:53:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) 14:53:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 14:53:45 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 14:53:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x2, 0x3ff, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 14:53:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) [ 419.232674][T12347] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 419.272219][T12347] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 419.331030][T12347] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 419.386662][T12347] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 419.403345][T12347] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 419.443324][T12347] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 419.469968][T12347] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1389197235 [ 419.502735][T12347] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 419.514562][T12366] ubi0: background thread "ubi_bgt0d" started, PID 12366 14:53:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) munlockall() ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 14:53:45 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000) [ 419.549280][T12347] ubi: mtd0 is already attached to ubi0 14:53:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004550c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:53:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0xc0045878, 0x0) 14:53:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) 14:53:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x2, 0x3ff, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 14:53:45 executing program 4: syz_open_dev$sndctrl(&(0x7f00000009c0)='/dev/snd/controlC#\x00', 0x0, 0xa0000) [ 419.772384][T12378] ubi: mtd0 is already attached to ubi0 14:53:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) 14:53:45 executing program 1: getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) 14:53:45 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 14:53:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) munlockall() ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 14:53:45 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006a40)="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", 0x2000, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 14:53:46 executing program 2: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:53:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 420.065813][T12398] ubi: mtd0 is already attached to ubi0 14:53:46 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 14:53:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x5980, 0x1, 0x0, 0x0, 0x39dbd15b}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) munlockall() ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 14:53:46 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:53:46 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:53:46 executing program 0: socketpair(0x11, 0x0, 0x0, &(0x7f0000000280)) 14:53:46 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$l2tp(r0, &(0x7f00000001c0), &(0x7f0000000100)=0x10) [ 420.828214][T12424] ubi: mtd0 is already attached to ubi0 14:53:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4020940d, 0x0) 14:53:46 executing program 0: setuid(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) 14:53:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 462.435529][ T9822] Bluetooth: hci0: command 0x0406 tx timeout [ 462.441643][ T9822] Bluetooth: hci2: command 0x0406 tx timeout [ 462.455696][ T9822] Bluetooth: hci3: command 0x0406 tx timeout [ 462.475319][ T9822] Bluetooth: hci4: command 0x0406 tx timeout [ 462.481449][ T9822] Bluetooth: hci5: command 0x0406 tx timeout [ 493.154485][ T9822] Bluetooth: hci1: command 0x0406 tx timeout [ 583.860502][ T1649] INFO: task syz-executor.4:12403 can't die for more than 143 seconds. [ 583.869049][ T1649] task:syz-executor.4 state:D stack:27808 pid:12403 ppid: 8519 flags:0x00004004 [ 583.909870][ T1649] Call Trace: [ 583.913201][ T1649] __schedule+0x8eb/0x21b0 [ 583.917696][ T1649] ? io_schedule_timeout+0x140/0x140 [ 583.937481][ T1649] ? mark_held_locks+0x9f/0xe0 [ 583.959853][ T1649] ? rwlock_bug.part.0+0x90/0x90 [ 583.964858][ T1649] schedule+0xcf/0x270 [ 583.968950][ T1649] rwsem_down_write_slowpath+0x809/0x1220 [ 583.977119][ T1649] ? rwsem_mark_wake+0x830/0x830 [ 583.989881][ T1649] ? lock_release+0x710/0x710 [ 583.994621][ T1649] down_write+0x132/0x150 [ 583.998968][ T1649] ? down_write_killable_nested+0x170/0x170 [ 584.031336][ T1649] ? alloc_vfsmnt+0x680/0x680 [ 584.036106][ T1649] lock_mount+0x8a/0x2e0 [ 584.044409][ T1649] path_mount+0x1678/0x1e70 [ 584.048973][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 584.069896][ T1649] ? strncpy_from_user+0x2a0/0x3e0 [ 584.075073][ T1649] ? finish_automount+0xb20/0xb20 [ 584.099843][ T1649] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 584.106196][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 584.115063][ T1649] __x64_sys_mount+0x27f/0x300 [ 584.129866][ T1649] ? copy_mnt_ns+0xae0/0xae0 [ 584.134604][ T1649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 584.149933][ T1649] do_syscall_64+0x2d/0x70 [ 584.154404][ T1649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 584.179912][ T1649] RIP: 0033:0x45e149 [ 584.184015][ T1649] RSP: 002b:00007efcb5f3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.199916][ T1649] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e149 [ 584.207935][ T1649] RDX: 0000000020002000 RSI: 00000000200042c0 RDI: 0000000000000000 [ 584.239821][ T1649] RBP: 000000000119bfd0 R08: 0000000020002140 R09: 0000000000000000 [ 584.251582][ T1649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 584.259594][ T1649] R13: 00007ffec65f50bf R14: 00007efcb5f3c9c0 R15: 000000000119bf8c [ 584.308650][ T1649] INFO: task syz-executor.4:12403 blocked for more than 143 seconds. [ 584.329970][ T1649] Not tainted 5.10.0-next-20201217-syzkaller #0 [ 584.336775][ T1649] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.379836][ T1649] task:syz-executor.4 state:D stack:27808 pid:12403 ppid: 8519 flags:0x00004004 [ 584.389105][ T1649] Call Trace: [ 584.401989][ T1649] __schedule+0x8eb/0x21b0 [ 584.406481][ T1649] ? io_schedule_timeout+0x140/0x140 [ 584.427855][ T1649] ? mark_held_locks+0x9f/0xe0 [ 584.433542][ T1649] ? rwlock_bug.part.0+0x90/0x90 [ 584.438515][ T1649] schedule+0xcf/0x270 [ 584.459804][ T1649] rwsem_down_write_slowpath+0x809/0x1220 [ 584.465577][ T1649] ? rwsem_mark_wake+0x830/0x830 [ 584.479890][ T1649] ? lock_release+0x710/0x710 [ 584.484648][ T1649] down_write+0x132/0x150 [ 584.489000][ T1649] ? down_write_killable_nested+0x170/0x170 [ 584.512064][ T1649] ? alloc_vfsmnt+0x680/0x680 [ 584.516815][ T1649] lock_mount+0x8a/0x2e0 [ 584.529928][ T1649] path_mount+0x1678/0x1e70 [ 584.534491][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 584.550078][ T1649] ? strncpy_from_user+0x2a0/0x3e0 [ 584.555925][ T1649] ? finish_automount+0xb20/0xb20 [ 584.589893][ T1649] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 584.596197][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 584.609879][ T1649] __x64_sys_mount+0x27f/0x300 [ 584.614710][ T1649] ? copy_mnt_ns+0xae0/0xae0 [ 584.619323][ T1649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 584.650677][ T1649] do_syscall_64+0x2d/0x70 [ 584.655927][ T1649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 584.669864][ T1649] RIP: 0033:0x45e149 [ 584.673806][ T1649] RSP: 002b:00007efcb5f3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.694526][ T1649] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e149 [ 584.703592][ T1649] RDX: 0000000020002000 RSI: 00000000200042c0 RDI: 0000000000000000 [ 584.712558][ T1649] RBP: 000000000119bfd0 R08: 0000000020002140 R09: 0000000000000000 [ 584.721634][ T1649] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 584.729648][ T1649] R13: 00007ffec65f50bf R14: 00007efcb5f3c9c0 R15: 000000000119bf8c [ 584.741838][ T1649] INFO: task syz-executor.4:12410 can't die for more than 144 seconds. [ 584.751316][ T1649] task:syz-executor.4 state:R running task stack:27168 pid:12410 ppid: 8519 flags:0x00004006 [ 584.764780][ T1649] Call Trace: [ 584.768086][ T1649] ? lock_acquire+0x29d/0x750 [ 584.775540][ T1649] ? find_held_lock+0x2d/0x110 [ 584.782106][ T1649] ? lock_acquire+0xb8/0x750 [ 584.786728][ T1649] ? lock_release+0x710/0x710 [ 584.792792][ T1649] ? io_schedule_timeout+0x140/0x140 [ 584.798111][ T1649] ? lock_release+0x710/0x710 [ 584.805709][ T1649] ? rwlock_bug.part.0+0x90/0x90 [ 584.811475][ T1649] ? preempt_schedule_thunk+0x16/0x18 [ 584.816892][ T1649] ? iget5_locked+0xac/0x2d0 [ 584.822959][ T1649] ? iget5_locked+0xcc/0x2d0 [ 584.827573][ T1649] ? fuse_inode_eq+0x80/0x80 [ 584.834017][ T1649] ? fuse_iget+0x271/0x610 [ 584.838466][ T1649] ? fuse_change_attributes+0x610/0x610 [ 584.845412][ T1649] ? fuse_simple_request+0x3e8/0xd90 [ 584.853638][ T1649] ? fuse_lookup_name+0x447/0x630 [ 584.859434][ T1649] ? fuse_create+0x30/0x30 [ 584.865257][ T1649] ? find_held_lock+0x2d/0x110 [ 584.872224][ T1649] ? mark_held_locks+0x9f/0xe0 [ 584.877030][ T1649] ? fuse_lookup.part.0+0xdf/0x390 [ 584.883499][ T1649] ? d_alloc_parallel+0x938/0x1ae0 [ 584.888641][ T1649] ? fuse_lookup_name+0x630/0x630 [ 584.894938][ T1649] ? lock_downgrade+0x6d0/0x6d0 [ 584.900793][ T1649] ? __d_lookup+0x477/0x760 [ 584.905332][ T1649] ? fuse_atomic_open+0x2de/0x440 [ 584.913186][ T1649] ? fuse_lookup+0x90/0x90 [ 584.917639][ T1649] ? lookup_open.isra.0+0xc3d/0x13d0 [ 584.924313][ T1649] ? vfs_unlink+0x600/0x600 [ 584.928881][ T1649] ? path_openat+0x9af/0x27a0 [ 584.934857][ T1649] ? path_lookupat+0x830/0x830 [ 584.939654][ T1649] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 584.946969][ T1649] ? do_filp_open+0x17e/0x3c0 [ 584.952483][ T1649] ? may_open_dev+0xf0/0xf0 [ 584.957017][ T1649] ? do_raw_spin_lock+0x120/0x2b0 [ 584.966258][ T1649] ? rwlock_bug.part.0+0x90/0x90 [ 584.972613][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 584.978898][ T1649] ? _raw_spin_unlock+0x24/0x40 [ 584.985968][ T1649] ? alloc_fd+0x2da/0x650 [ 584.991106][ T1649] ? do_sys_openat2+0x16d/0x420 [ 584.995991][ T1649] ? build_open_flags+0x680/0x680 [ 585.002321][ T1649] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 585.008592][ T1649] ? put_timespec64+0xcb/0x120 [ 585.014751][ T1649] ? ns_to_timespec64+0xc0/0xc0 [ 585.019632][ T1649] ? __x64_sys_openat+0x13f/0x1f0 [ 585.027484][ T1649] ? __ia32_sys_open+0x1c0/0x1c0 [ 585.033300][ T1649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.039226][ T1649] ? do_syscall_64+0x2d/0x70 [ 585.045166][ T1649] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.052198][ T1649] [ 585.052198][ T1649] Showing all locks held in the system: [ 585.060832][ T1649] 1 lock held by khungtaskd/1649: [ 585.066598][ T1649] #0: ffffffff8b793ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x28c [ 585.081667][ T1649] 1 lock held by in:imklog/8188: [ 585.086619][ T1649] #0: ffff888021a194f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 585.098860][ T1649] 2 locks held by kworker/u4:3/9867: [ 585.105093][ T1649] #0: ffff8880b9d34c58 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x235/0x21b0 [ 585.114772][ T1649] #1: ffffc9001640fda8 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1630 [ 585.128298][ T1649] 1 lock held by syz-executor.4/12403: [ 585.136126][ T1649] #0: ffff88807b430150 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: lock_mount+0x8a/0x2e0 [ 585.147325][ T1649] 2 locks held by syz-executor.4/12410: [ 585.153758][ T1649] [ 585.156091][ T1649] ============================================= [ 585.156091][ T1649] [ 585.167080][ T1649] NMI backtrace for cpu 0 [ 585.171519][ T1649] CPU: 0 PID: 1649 Comm: khungtaskd Not tainted 5.10.0-next-20201217-syzkaller #0 [ 585.180724][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.190797][ T1649] Call Trace: [ 585.194095][ T1649] dump_stack+0x107/0x163 [ 585.198458][ T1649] nmi_cpu_backtrace.cold+0x3c/0xef [ 585.203667][ T1649] ? lapic_can_unplug_cpu+0x80/0x80 [ 585.208889][ T1649] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 585.214896][ T1649] watchdog+0xe75/0x1020 [ 585.219155][ T1649] ? trace_sched_process_hang+0x2a0/0x2a0 [ 585.224888][ T1649] kthread+0x3b1/0x4a0 [ 585.228965][ T1649] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 585.234873][ T1649] ret_from_fork+0x1f/0x30 [ 585.239711][ T1649] Sending NMI from CPU 0 to CPUs 1: [ 585.245313][ C1] NMI backtrace for cpu 1 [ 585.245322][ C1] CPU: 1 PID: 9867 Comm: kworker/u4:3 Not tainted 5.10.0-next-20201217-syzkaller #0 [ 585.245332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.245341][ C1] Workqueue: bat_events batadv_nc_worker [ 585.245352][ C1] RIP: 0010:mark_lock+0xb1/0x1720 [ 585.245362][ C1] Code: 00 00 41 83 fc 08 48 89 f5 0f 84 ff 00 00 00 41 bd 01 00 00 00 44 89 e1 41 d3 e5 4d 63 ed 48 8d 45 20 48 89 c2 48 89 44 24 08 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 [ 585.245378][ C1] RSP: 0018:ffffc9001640f918 EFLAGS: 00000002 [ 585.245389][ C1] RAX: ffff88806fb0a500 RBX: 1ffff92002c81f29 RCX: 0000000000000004 [ 585.245397][ C1] RDX: ffff88806fb0a500 RSI: ffff88806fb0a4e0 RDI: ffff88806fb0a502 [ 585.245406][ C1] RBP: ffff88806fb0a4e0 R08: 0000000000000000 R09: ffffffff8f51d877 [ 585.245414][ C1] R10: fffffbfff1ea3b0e R11: 0000000000000000 R12: 0000000000000009 [ 585.245422][ C1] R13: 0000000000000200 R14: dffffc0000000000 R15: ffff88806fb0a490 [ 585.245431][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 585.245440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.245447][ C1] CR2: 0000555bd30c5180 CR3: 0000000029a50000 CR4: 00000000001506e0 [ 585.245456][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.245465][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.245471][ C1] Call Trace: [ 585.245476][ C1] ? lock_chain_count+0x20/0x20 [ 585.245481][ C1] ? mark_lock+0xf7/0x1720 [ 585.245486][ C1] ? lock_chain_count+0x20/0x20 [ 585.245491][ C1] __lock_acquire+0x8bf/0x54b0 [ 585.245497][ C1] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 585.245503][ C1] lock_acquire+0x29d/0x750 [ 585.245508][ C1] ? batadv_nc_worker+0xf3/0xe80 [ 585.245513][ C1] ? lock_release+0x710/0x710 [ 585.245519][ C1] ? batadv_nc_worker+0x7bb/0xe80 [ 585.245524][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 585.245530][ C1] batadv_nc_worker+0x12d/0xe80 [ 585.245535][ C1] ? batadv_nc_worker+0xf3/0xe80 [ 585.245541][ C1] process_one_work+0x98d/0x1630 [ 585.245546][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 585.245552][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 585.245557][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 585.245563][ C1] worker_thread+0x64c/0x1120 [ 585.245568][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 585.245574][ C1] ? process_one_work+0x1630/0x1630 [ 585.245579][ C1] kthread+0x3b1/0x4a0 [ 585.245584][ C1] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 585.245590][ C1] ret_from_fork+0x1f/0x30 [ 585.502739][ T1649] Kernel panic - not syncing: hung_task: blocked tasks [ 585.509621][ T1649] CPU: 0 PID: 1649 Comm: khungtaskd Not tainted 5.10.0-next-20201217-syzkaller #0 [ 585.518825][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.528890][ T1649] Call Trace: [ 585.532178][ T1649] dump_stack+0x107/0x163 [ 585.536530][ T1649] panic+0x343/0x77f [ 585.540437][ T1649] ? __warn_printk+0xf3/0xf3 [ 585.545042][ T1649] ? lapic_can_unplug_cpu+0x80/0x80 [ 585.550255][ T1649] ? preempt_schedule_thunk+0x16/0x18 [ 585.555641][ T1649] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 585.561821][ T1649] ? watchdog.cold+0x146/0x31d [ 585.566608][ T1649] watchdog.cold+0x157/0x31d [ 585.571213][ T1649] ? trace_sched_process_hang+0x2a0/0x2a0 [ 585.576960][ T1649] kthread+0x3b1/0x4a0 [ 585.581041][ T1649] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 585.586951][ T1649] ret_from_fork+0x1f/0x30 [ 585.592335][ T1649] Kernel Offset: disabled [ 585.600615][ T1649] Rebooting in 86400 seconds..