[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts. 2020/05/23 08:37:16 fuzzer started 2020/05/23 08:37:16 dialing manager at 10.128.0.26:38661 2020/05/23 08:37:16 syscalls: 3055 2020/05/23 08:37:16 code coverage: enabled 2020/05/23 08:37:16 comparison tracing: enabled 2020/05/23 08:37:16 extra coverage: enabled 2020/05/23 08:37:16 setuid sandbox: enabled 2020/05/23 08:37:16 namespace sandbox: enabled 2020/05/23 08:37:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 08:37:16 fault injection: enabled 2020/05/23 08:37:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 08:37:16 net packet injection: enabled 2020/05/23 08:37:16 net device setup: enabled 2020/05/23 08:37:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 08:37:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 08:37:16 USB emulation: enabled 08:39:51 executing program 0: syzkaller login: [ 223.658446][ T6820] IPVS: ftp: loaded support on port[0] = 21 08:39:52 executing program 1: [ 223.817791][ T6820] chnl_net:caif_netlink_parms(): no params data found [ 223.967433][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.981230][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.000220][ T6820] device bridge_slave_0 entered promiscuous mode [ 224.012847][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.020385][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.031887][ T6820] device bridge_slave_1 entered promiscuous mode [ 224.059157][ T6950] IPVS: ftp: loaded support on port[0] = 21 [ 224.096551][ T6820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 08:39:52 executing program 2: [ 224.127380][ T6820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.203188][ T6820] team0: Port device team_slave_0 added [ 224.223221][ T6820] team0: Port device team_slave_1 added [ 224.309606][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.325066][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.392533][ T6820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.460268][ T6820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.468537][ T6820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 08:39:52 executing program 3: [ 224.503448][ T6820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.529547][ T6950] chnl_net:caif_netlink_parms(): no params data found [ 224.601542][ T7069] IPVS: ftp: loaded support on port[0] = 21 [ 224.649308][ T6820] device hsr_slave_0 entered promiscuous mode [ 224.733980][ T6820] device hsr_slave_1 entered promiscuous mode [ 224.868308][ T7099] IPVS: ftp: loaded support on port[0] = 21 08:39:53 executing program 4: [ 224.959141][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.982077][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.991219][ T6950] device bridge_slave_0 entered promiscuous mode [ 225.041896][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.049183][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.072671][ T6950] device bridge_slave_1 entered promiscuous mode [ 225.180053][ T7168] IPVS: ftp: loaded support on port[0] = 21 [ 225.204278][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.280310][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.351648][ T6950] team0: Port device team_slave_0 added [ 225.373409][ T6950] team0: Port device team_slave_1 added [ 225.418084][ T7069] chnl_net:caif_netlink_parms(): no params data found [ 225.481597][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.489119][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 08:39:53 executing program 5: [ 225.521912][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.537888][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.548641][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.576244][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.682977][ T6820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.736883][ T6820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.865126][ T6950] device hsr_slave_0 entered promiscuous mode [ 225.921713][ T6950] device hsr_slave_1 entered promiscuous mode [ 225.971434][ T6950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.979998][ T6950] Cannot create hsr debugfs directory [ 226.025160][ T6820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.063856][ T6820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.135191][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 226.160818][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.175046][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.175895][ T7417] IPVS: ftp: loaded support on port[0] = 21 [ 226.184633][ T7069] device bridge_slave_0 entered promiscuous mode [ 226.232153][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.239892][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.249097][ T7069] device bridge_slave_1 entered promiscuous mode [ 226.344602][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.359669][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.372070][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.382669][ T7099] device bridge_slave_0 entered promiscuous mode [ 226.394319][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.402438][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.410352][ T7099] device bridge_slave_1 entered promiscuous mode [ 226.438393][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.541720][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.569752][ T7069] team0: Port device team_slave_0 added [ 226.596922][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.619483][ T7069] team0: Port device team_slave_1 added [ 226.672405][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.680648][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.709397][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.722848][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 226.747374][ T7099] team0: Port device team_slave_0 added [ 226.765675][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.777283][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.807288][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.833649][ T7099] team0: Port device team_slave_1 added [ 226.924317][ T6950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.968580][ T6950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.019896][ T6950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.112862][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.121027][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.150884][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.167258][ T6950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.254472][ T7069] device hsr_slave_0 entered promiscuous mode [ 227.302215][ T7069] device hsr_slave_1 entered promiscuous mode [ 227.361328][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.369102][ T7069] Cannot create hsr debugfs directory [ 227.385510][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.396917][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.406352][ T7168] device bridge_slave_0 entered promiscuous mode [ 227.415788][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.423968][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.455863][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.472061][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 227.493767][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.504655][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.514481][ T7168] device bridge_slave_1 entered promiscuous mode [ 227.596201][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.645029][ T7099] device hsr_slave_0 entered promiscuous mode [ 227.681539][ T7099] device hsr_slave_1 entered promiscuous mode [ 227.731293][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.738887][ T7099] Cannot create hsr debugfs directory [ 227.777826][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.913659][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.920941][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.929987][ T7417] device bridge_slave_0 entered promiscuous mode [ 227.940635][ T7168] team0: Port device team_slave_0 added [ 227.960966][ T7168] team0: Port device team_slave_1 added [ 227.977173][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.986562][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.999857][ T7417] device bridge_slave_1 entered promiscuous mode [ 228.045213][ T6820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.123381][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.137692][ T7069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.164878][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.173245][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.201841][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.224857][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.235336][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.247449][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.271848][ T7069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.325058][ T7069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.387381][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.394890][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.424337][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.438913][ T7417] team0: Port device team_slave_0 added [ 228.450322][ T7417] team0: Port device team_slave_1 added [ 228.460654][ T7069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.513164][ T6820] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.580480][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.589213][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.616394][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.640111][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.647241][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.674059][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.735779][ T7168] device hsr_slave_0 entered promiscuous mode [ 228.782030][ T7168] device hsr_slave_1 entered promiscuous mode [ 228.821283][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.828868][ T7168] Cannot create hsr debugfs directory [ 228.848408][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.860062][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.870446][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.878328][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.888475][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.898786][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.907408][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.914556][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.003836][ T7417] device hsr_slave_0 entered promiscuous mode [ 229.051833][ T7417] device hsr_slave_1 entered promiscuous mode [ 229.091301][ T7417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.091341][ T7417] Cannot create hsr debugfs directory [ 229.107485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.117584][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.128154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.149369][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.181267][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.196545][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.207080][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.238528][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.249104][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.305442][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.318921][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.352434][ T7099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.386000][ T7099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.433864][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.443053][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.453501][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.462284][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.480762][ T6820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.503999][ T6950] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.513791][ T7099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.569192][ T7099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.642372][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.652798][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.663730][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.671763][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.686220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.746132][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.759158][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.770979][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.778407][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.839243][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.850930][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.861084][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.869980][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.890717][ T6820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.916640][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.929947][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.939381][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.989868][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.009824][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.022069][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.030785][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.056783][ T6950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.070063][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.080720][ T7417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.147906][ T7417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.197415][ T7417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.264519][ T7417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.328815][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.340917][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.383278][ T7069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.393101][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.405513][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.454485][ T7168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.497117][ T7168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.544353][ T7168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.598656][ T7168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.694145][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.704687][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.714413][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.723140][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.735166][ T7069] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.759038][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.805721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.816228][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.826137][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.834022][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.843818][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.853856][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.879582][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.892489][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.905513][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.915140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.925029][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.934869][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.943955][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.951458][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.993533][ T6820] device veth0_vlan entered promiscuous mode [ 231.001979][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.010798][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.022003][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.030713][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.043390][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.055808][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.128038][ T6950] device veth0_vlan entered promiscuous mode [ 231.139026][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.155121][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.166250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.176514][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.189726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.199692][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.210836][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.236076][ T7069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.250302][ T7069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.267448][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.279270][ T6820] device veth1_vlan entered promiscuous mode [ 231.300785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.312029][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.323413][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.334667][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.347030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.358533][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.368589][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.380538][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.399278][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.456188][ T6950] device veth1_vlan entered promiscuous mode [ 231.468113][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.478216][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.489807][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.498431][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.507808][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.518621][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.528972][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.537455][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.550429][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.584501][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.606091][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.632619][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.645264][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.654990][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.664358][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.673773][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.687979][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.698673][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.722010][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.731662][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.755410][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.767640][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.777706][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.787513][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.798132][ T6820] device veth0_macvtap entered promiscuous mode [ 231.812652][ T7069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.840740][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.856155][ T6820] device veth1_macvtap entered promiscuous mode [ 231.881438][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.893194][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.906571][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.916113][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.925739][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.936507][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.947053][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.956217][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.970876][ T7099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.992305][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.050568][ T6950] device veth0_macvtap entered promiscuous mode [ 232.070225][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.080144][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.091168][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.099564][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.109492][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.120088][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.129761][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.136919][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.146266][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.157387][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.167220][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.176622][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.185785][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.195395][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.204286][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.211689][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.220036][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.229030][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.239191][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.269461][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.278775][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.287849][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.297664][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.308069][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.316524][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.337612][ T6950] device veth1_macvtap entered promiscuous mode [ 232.363576][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.377050][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.395281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.405729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.418776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.428463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.439188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.449124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.462409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.473575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.483248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.515538][ T6820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.530258][ T7069] device veth0_vlan entered promiscuous mode [ 232.539512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.554281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.565459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.579264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.596738][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.612520][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.624715][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.687540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.698851][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.712567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.722692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.738188][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.751521][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.766522][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.791907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.800544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.812635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.822919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.834207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.844301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.855441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.869493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.878958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.890194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.902067][ T7069] device veth1_vlan entered promiscuous mode [ 232.921300][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.936518][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.018296][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.028202][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.039617][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.049766][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.136739][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.157980][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.193838][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.207628][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.225669][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 08:40:01 executing program 0: [ 233.239140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 08:40:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) [ 233.329138][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.450251][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.463443][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.567452][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.587753][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.600628][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 08:40:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x0, "3a28f46c4e41daafb358186c80a7ed113cf960"}) [ 233.619089][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.628720][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.644896][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.683322][ T7069] device veth0_macvtap entered promiscuous mode [ 233.714879][ T7099] device veth0_vlan entered promiscuous mode 08:40:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x8001a0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 233.740501][ T7069] device veth1_macvtap entered promiscuous mode [ 233.778025][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.804380][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.838464][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.865312][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.884532][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 08:40:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x0, 0x0}) [ 233.920087][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.940647][ T7099] device veth1_vlan entered promiscuous mode [ 234.061700][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:40:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "85184dadd2ab5860f7e7caf538774b5dd5363f"}) [ 234.109401][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.145478][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.182334][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.227575][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.281447][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.302409][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.352284][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.382199][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:40:02 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={0x0, 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, 0x0}, 0x8, &(0x7f00000004c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) pause() [ 234.414647][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.461921][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.494967][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_1 08:40:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 234.527520][ T7099] device veth0_macvtap entered promiscuous mode [ 234.594295][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.617124][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.654516][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.683476][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.779565][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.796322][ T7099] device veth1_macvtap entered promiscuous mode [ 234.940671][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.955944][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 08:40:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) [ 234.994967][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.032730][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.051501][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.087215][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.112575][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.123803][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.137851][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.169728][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.184922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.194115][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.203187][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.227597][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.239032][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.249686][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.272487][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.282427][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.292983][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.305063][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.332586][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.344564][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.353966][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.362984][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.371784][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.381736][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.391652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.401035][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.416825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.428953][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.446399][ T7168] device veth0_vlan entered promiscuous mode [ 235.458602][ T7417] device veth0_vlan entered promiscuous mode [ 235.511867][ T7417] device veth1_vlan entered promiscuous mode [ 235.577877][ T7168] device veth1_vlan entered promiscuous mode [ 235.647997][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.656877][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.665913][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.741091][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.751337][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.773571][ T7417] device veth0_macvtap entered promiscuous mode 08:40:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 235.810519][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.828859][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.840039][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.859873][ T7417] device veth1_macvtap entered promiscuous mode [ 235.889820][ T7168] device veth0_macvtap entered promiscuous mode [ 235.949131][ T7168] device veth1_macvtap entered promiscuous mode [ 235.965525][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.978230][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.988850][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.010469][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.027923][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.051700][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.069272][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.081422][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.097236][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.111255][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.122401][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.131990][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.140338][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.150342][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.172575][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.188315][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.200418][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.212113][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.222399][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.233261][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.244179][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.255086][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.267577][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.286260][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.296635][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.308753][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.324340][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.335376][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.346891][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.360502][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.371658][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.382719][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.395088][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.405455][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.416304][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.428050][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.445408][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.456576][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.468115][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.479560][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.490220][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.502785][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.515035][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.528891][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.539870][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.554243][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.566069][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.576596][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.588426][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.634218][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.643867][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:40:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) 08:40:05 executing program 1: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() 08:40:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fchown(r0, 0x0, 0xffffffffffffffff) 08:40:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) dup3(r2, r3, 0x0) 08:40:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x8001a0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:40:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/252) close(r3) 08:40:05 executing program 0: prctl$PR_SET_FPEMU(0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\xa8\x02#?\xd6\xd0\xac\"$\xa3\x183\x8a U\xec\xa1\xb1b\xb2\x83\x89', 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [ 237.039229][ C0] hrtimer: interrupt took 43609 ns [ 237.083117][ T8165] xt_CT: You must specify a L4 protocol and not use inversions on it 08:40:05 executing program 1: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() 08:40:05 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() 08:40:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) 08:40:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000004c0)) 08:40:05 executing program 1: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() 08:40:05 executing program 5: lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket(0x0, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34) 08:40:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080), 0x4) 08:40:05 executing program 1: lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000016c0)='smaps_rollup\x00') syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket(0x0, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x208200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x6, 0x81, 0xff, 0x1f, 0x0, 0x7c7169b3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdae1, 0x0, @perf_config_ext={0x0, 0x3}, 0x41800, 0x2, 0xc224, 0x5, 0x0, 0x3, 0x20}, 0x0, 0xf, r3, 0x8) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34) [ 237.513807][ T8197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.550212][ T8203] xt_CT: You must specify a L4 protocol and not use inversions on it 08:40:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) [ 237.825624][ T8216] FAT-fs (loop1): bogus number of FAT sectors [ 237.867201][ T8223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.897921][ T8207] FAT-fs (loop5): bogus number of FAT sectors [ 237.913354][ T8216] FAT-fs (loop1): Can't find a valid FAT filesystem [ 237.917297][ T8207] FAT-fs (loop5): Can't find a valid FAT filesystem 08:40:06 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x8001a0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:40:06 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 08:40:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x43, &(0x7f0000000140)="d0de1d4514b17016710cc1c29814fa6d62ebb8282600b573c42ecf01ea53cda6645fe32efeffffffffffffff7143bdb9957316c88aa909000000000000000c216250f2"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 08:40:06 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() [ 238.374018][ T8244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.442611][ T8227] FAT-fs (loop5): bogus number of FAT sectors [ 238.472695][ T8227] FAT-fs (loop5): Can't find a valid FAT filesystem [ 238.524518][ T28] audit: type=1804 audit(1590223206.843:2): pid=8219 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir654515134/syzkaller.2XXKvy/3/bus" dev="sda1" ino=15783 res=1 [ 238.572009][ T8216] FAT-fs (loop1): bogus number of FAT sectors [ 238.578239][ T8216] FAT-fs (loop1): Can't find a valid FAT filesystem [ 238.709489][ T28] audit: type=1804 audit(1590223206.843:3): pid=8251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir654515134/syzkaller.2XXKvy/3/bus" dev="sda1" ino=15783 res=1 [ 238.832002][ T28] audit: type=1804 audit(1590223206.843:4): pid=8254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir654515134/syzkaller.2XXKvy/3/bus" dev="sda1" ino=15783 res=1 [ 238.892932][ T28] audit: type=1804 audit(1590223207.063:5): pid=8212 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 08:40:07 executing program 5: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) alarm(0x0) 08:40:07 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 239.061622][ T28] audit: type=1804 audit(1590223207.063:6): pid=8228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 08:40:07 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x3f, &(0x7f00000003c0)={&(0x7f0000000300)="c4838178adca0a775912f0411053322e430f01dcc401f850e8f30f5312f041fe8b00000000672665660f38dd0496c401d9eb8dcab400006626660f73f402c4217711d1", 0x90000001, &(0x7f0000000380)="400ffb8b45530000460fd5f53e36889b034500006442dde7c44179f81ef3f031a0de000000f342af837aa8009964f20f9f94268b000000"}, &(0x7f0000000480)={&(0x7f0000000400)="64f04719b4d500000000c4c17f1073efd353acd9eb2ed8d5efc4e27190b42202000100c461fc2b12c421f82fa6000000008f0970024a43", 0x0, &(0x7f0000000440)="c461fc117800660f3a62a9d700000019c402abf512c481f173f8c3c48191e801c482f93238dfebf30faec7f30f1efe660f3acf5100ec"}, 0x8, &(0x7f00000004c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x4c000000, 0x0, 0x108, 0x0, 0x8f, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77], 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pause() [ 239.250674][ T28] audit: type=1804 audit(1590223207.063:7): pid=8230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 [ 239.257171][ T8269] xt_CT: You must specify a L4 protocol and not use inversions on it 08:40:07 executing program 5: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) alarm(0x0) [ 239.410105][ T28] audit: type=1804 audit(1590223207.523:8): pid=8216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 08:40:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 08:40:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x8001a0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 239.540494][ T28] audit: type=1804 audit(1590223207.523:9): pid=8258 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 [ 239.658374][ T28] audit: type=1804 audit(1590223207.523:10): pid=8260 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir780663417/syzkaller.ORGySG/6/bus" dev="sda1" ino=15786 res=1 08:40:08 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f00000001c0)=[{r0}, {}, {r3}], 0x3, 0x0) 08:40:08 executing program 5: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) alarm(0x0) 08:40:08 executing program 5: setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) alarm(0x0) 08:40:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 08:40:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x211c, 0x4) 08:40:09 executing program 2: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:40:09 executing program 5: alarm(0x0) 08:40:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f75", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:40:09 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}]}, 0x44}}, 0x0) 08:40:09 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x8001a0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:40:09 executing program 5: alarm(0x0) 08:40:09 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) 08:40:09 executing program 5: alarm(0x0) 08:40:09 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) 08:40:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 08:40:09 executing program 5: setitimer(0x0, 0x0, 0x0) alarm(0x0) 08:40:10 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) [ 241.700218][ T8336] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 08:40:10 executing program 2: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:40:10 executing program 5: setitimer(0x0, 0x0, 0x0) alarm(0x0) 08:40:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f75", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:40:12 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) 08:40:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 08:40:12 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 08:40:12 executing program 5: setitimer(0x0, 0x0, 0x0) alarm(0x0) 08:40:12 executing program 2: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:40:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x24, 0x5, 0x0, 0x0, 0x1000, 0x0, {0x0, 0x5, 0xfefd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, "00000748000000000200"}}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xa360, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b9332563"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\rJ\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000080000000d000100534b16caa63d646d61746368616c6d00000000400002003c000200380001000b0001007369"], 0x74}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 08:40:12 executing program 3: 08:40:12 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) 08:40:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 08:40:12 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) [ 244.579135][ T8380] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:12 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) dup2(0xffffffffffffffff, r0) 08:40:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f75", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x29) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 08:40:15 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x400000b, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0xf00a, 0x0, 0x4d97) 08:40:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) 08:40:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x24, 0x5, 0x0, 0x0, 0x1000, 0x0, {0x0, 0x5, 0xfefd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, "00000748000000000200"}}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xa360, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b9332563"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\rJ\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000080000000d000100534b16caa63d646d61746368616c6d00000000400002003c000200380001000b0001007369"], 0x74}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 08:40:15 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) dup2(0xffffffffffffffff, r0) 08:40:15 executing program 2: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:40:15 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) dup2(0xffffffffffffffff, r0) [ 247.545703][ T8411] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x54c, 0x3d5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 08:40:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x24, 0x5, 0x0, 0x0, 0x1000, 0x0, {0x0, 0x5, 0xfefd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, "00000748000000000200"}}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xa360, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e567a42767a7b89b65e4841c9695825a4b10dd5cb8b24f84b29ceef0a428124050e273c65dbfb96b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58d8b6222d2e21ac715547dff0000000000000000000000000000000025820c9874ab4a1d7499dde60f692672a47457c9f57e9b2b8980b97fd09945c3573c4ab652b9332563"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\rJ\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000080000000d000100534b16caa63d646d61746368616c6d00000000400002003c000200380001000b0001007369"], 0x74}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 08:40:16 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x400000b, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0xf00a, 0x0, 0x4d97) 08:40:16 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 247.833216][ T8429] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:16 executing program 1: socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 248.050460][ T2494] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 248.450636][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.462506][ T2494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.474398][ T2494] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 248.484865][ T2494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.497349][ T2494] usb 1-1: config 0 descriptor?? [ 249.037172][ T2494] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0001/input/input5 [ 249.079013][ T2494] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 249.231588][ T2494] usb 1-1: USB disconnect, device number 2 [ 249.285600][ T2494] ================================================================== [ 249.294168][ T2494] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 249.302312][ T2494] Read of size 8 at addr ffff8880a293c150 by task kworker/0:3/2494 [ 249.310304][ T2494] [ 249.312904][ T2494] CPU: 0 PID: 2494 Comm: kworker/0:3 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 249.322428][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.332615][ T2494] Workqueue: usb_hub_wq hub_event [ 249.337618][ T2494] Call Trace: [ 249.340983][ T2494] dump_stack+0x18f/0x20d [ 249.345497][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 249.352442][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 249.358140][ T2494] print_address_description.constprop.0.cold+0xd3/0x413 [ 249.366218][ T2494] ? joydev_disconnect+0x3d/0xb0 [ 249.371477][ T2494] ? __input_unregister_device+0x1b0/0x430 [ 249.377844][ T2494] ? input_unregister_device+0xb4/0xf0 [ 249.384649][ T2494] ? hidinput_disconnect+0x15e/0x3d0 [ 249.392072][ T2494] ? hid_disconnect+0x13f/0x1a0 [ 249.403102][ T2494] ? vprintk_func+0x97/0x1a6 [ 249.410836][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 249.421048][ T2494] kasan_report.cold+0x1f/0x37 [ 249.430411][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 249.437023][ T2494] __mutex_lock+0x1033/0x13c0 [ 249.443185][ T2494] ? print_usage_bug+0x240/0x240 [ 249.451762][ T2494] ? joydev_cleanup+0x21/0x190 [ 249.456702][ T2494] ? trace_hardirqs_off+0x50/0x220 [ 249.463026][ T2494] ? mutex_trylock+0x2c0/0x2c0 [ 249.468206][ T2494] ? mark_held_locks+0x9f/0xe0 [ 249.476208][ T2494] ? kfree+0x1eb/0x2b0 [ 249.480483][ T2494] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 249.486547][ T2494] ? kfree_const+0x51/0x60 [ 249.491043][ T2494] ? dev_attr_show+0x90/0x90 [ 249.496387][ T2494] ? joydev_cleanup+0x21/0x190 [ 249.501791][ T2494] joydev_cleanup+0x21/0x190 [ 249.507301][ T2494] joydev_disconnect+0x45/0xb0 [ 249.512173][ T2494] __input_unregister_device+0x1b0/0x430 [ 249.518090][ T2494] input_unregister_device+0xb4/0xf0 [ 249.523643][ T2494] hidinput_disconnect+0x15e/0x3d0 [ 249.529067][ T2494] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 249.536350][ T2494] hid_disconnect+0x13f/0x1a0 [ 249.541438][ T2494] hid_hw_stop+0x12/0x70 [ 249.546306][ T2494] hid_device_remove+0xed/0x240 [ 249.551649][ T2494] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 249.558731][ T2494] ? hid_compare_device_paths+0xc0/0xc0 [ 249.565207][ T2494] device_release_driver_internal+0x231/0x500 [ 249.571731][ T2494] bus_remove_device+0x2dc/0x4a0 [ 249.576866][ T2494] device_del+0x481/0xd30 [ 249.581578][ T2494] ? device_link_add_missing_supplier_links+0x370/0x370 [ 249.589136][ T2494] ? mark_held_locks+0x9f/0xe0 [ 249.594793][ T2494] ? _raw_spin_unlock_irq+0x1f/0x80 [ 249.601997][ T2494] hid_destroy_device+0xe1/0x150 [ 249.608189][ T2494] usbhid_disconnect+0x9f/0xe0 [ 249.613474][ T2494] usb_unbind_interface+0x1bd/0x8a0 [ 249.618724][ T2494] ? __pm_runtime_idle+0xd1/0x320 [ 249.624373][ T2494] ? usb_autoresume_device+0x60/0x60 [ 249.629838][ T2494] device_release_driver_internal+0x432/0x500 [ 249.637863][ T2494] bus_remove_device+0x2dc/0x4a0 [ 249.643089][ T2494] device_del+0x481/0xd30 [ 249.648722][ T2494] ? device_link_add_missing_supplier_links+0x370/0x370 [ 249.656405][ T2494] ? usb_remove_ep_devs+0x3e/0x80 [ 249.661533][ T2494] ? remove_intf_ep_devs+0x13f/0x1d0 [ 249.666832][ T2494] usb_disable_device+0x211/0x690 [ 249.672988][ T2494] usb_disconnect+0x284/0x8d0 [ 249.677937][ T2494] hub_event+0x17ca/0x38f0 [ 249.682854][ T2494] ? hub_port_debounce+0x260/0x260 [ 249.688338][ T2494] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 249.694816][ T2494] ? debug_smp_processor_id+0x2f/0x185 [ 249.700406][ T2494] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 249.706147][ T2494] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 249.712464][ T2494] process_one_work+0x965/0x16a0 [ 249.717853][ T2494] ? lock_release+0x800/0x800 [ 249.722985][ T2494] ? pwq_dec_nr_in_flight+0x310/0x310 [ 249.729030][ T2494] ? rwlock_bug.part.0+0x90/0x90 [ 249.734325][ T2494] worker_thread+0x96/0xe20 [ 249.740435][ T2494] ? process_one_work+0x16a0/0x16a0 [ 249.745907][ T2494] kthread+0x3b5/0x4a0 [ 249.749993][ T2494] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 249.755703][ T2494] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 249.761681][ T2494] ret_from_fork+0x24/0x30 [ 249.766114][ T2494] [ 249.768421][ T2494] Allocated by task 2494: [ 249.772742][ T2494] save_stack+0x1b/0x40 [ 249.777074][ T2494] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 249.783186][ T2494] kmem_cache_alloc_trace+0x153/0x7d0 [ 249.790576][ T2494] joydev_connect+0x83/0xd2f [ 249.795268][ T2494] input_attach_handler+0x194/0x200 [ 249.801531][ T2494] input_register_device.cold+0xf5/0x246 [ 249.809215][ T2494] hidinput_connect+0x4f8f/0xdb30 [ 249.815533][ T2494] hid_connect+0x96b/0xbc0 [ 249.820826][ T2494] hid_hw_start+0xa2/0x130 [ 249.825804][ T2494] sony_probe+0x214/0x2d0 [ 249.830284][ T2494] hid_device_probe+0x2be/0x3f0 [ 249.835945][ T2494] really_probe+0x281/0x6d0 [ 249.840902][ T2494] driver_probe_device+0xfe/0x1d0 [ 249.845929][ T2494] __device_attach_driver+0x1c2/0x220 [ 249.851423][ T2494] bus_for_each_drv+0x162/0x1e0 [ 249.856453][ T2494] __device_attach+0x21a/0x360 [ 249.861311][ T2494] bus_probe_device+0x1e4/0x290 [ 249.866190][ T2494] device_add+0xaf1/0x1900 [ 249.870698][ T2494] hid_add_device+0x33c/0x9a0 [ 249.875395][ T2494] usbhid_probe+0xac8/0xff0 [ 249.880421][ T2494] usb_probe_interface+0x305/0x7a0 [ 249.885802][ T2494] really_probe+0x281/0x6d0 [ 249.891142][ T2494] driver_probe_device+0xfe/0x1d0 [ 249.896586][ T2494] __device_attach_driver+0x1c2/0x220 [ 249.902173][ T2494] bus_for_each_drv+0x162/0x1e0 [ 249.907081][ T2494] __device_attach+0x21a/0x360 [ 249.913460][ T2494] bus_probe_device+0x1e4/0x290 [ 249.918679][ T2494] device_add+0xaf1/0x1900 [ 249.923297][ T2494] usb_set_configuration+0xec5/0x1740 [ 249.928845][ T2494] usb_generic_driver_probe+0x9d/0xe0 [ 249.934483][ T2494] usb_probe_device+0xc6/0x1f0 [ 249.939417][ T2494] really_probe+0x281/0x6d0 [ 249.943917][ T2494] driver_probe_device+0xfe/0x1d0 [ 249.948948][ T2494] __device_attach_driver+0x1c2/0x220 [ 249.955030][ T2494] bus_for_each_drv+0x162/0x1e0 [ 249.959994][ T2494] __device_attach+0x21a/0x360 [ 249.964855][ T2494] bus_probe_device+0x1e4/0x290 [ 249.969787][ T2494] device_add+0xaf1/0x1900 [ 249.974664][ T2494] usb_new_device.cold+0x753/0x103d [ 249.980276][ T2494] hub_event+0x1eca/0x38f0 [ 249.986121][ T2494] process_one_work+0x965/0x16a0 [ 249.994189][ T2494] worker_thread+0x96/0xe20 [ 250.001160][ T2494] kthread+0x3b5/0x4a0 [ 250.005500][ T2494] ret_from_fork+0x24/0x30 [ 250.009896][ T2494] [ 250.012215][ T2494] Freed by task 2494: [ 250.016468][ T2494] save_stack+0x1b/0x40 [ 250.020624][ T2494] __kasan_slab_free+0xf7/0x140 [ 250.025550][ T2494] kfree+0x109/0x2b0 [ 250.029740][ T2494] device_release+0x71/0x200 [ 250.034342][ T2494] kobject_put+0x1c8/0x2f0 [ 250.038945][ T2494] cdev_device_del+0x69/0x80 [ 250.043631][ T2494] joydev_disconnect+0x3d/0xb0 [ 250.048397][ T2494] __input_unregister_device+0x1b0/0x430 [ 250.054342][ T2494] input_unregister_device+0xb4/0xf0 [ 250.059619][ T2494] hidinput_disconnect+0x15e/0x3d0 [ 250.064720][ T2494] hid_disconnect+0x13f/0x1a0 [ 250.069495][ T2494] hid_hw_stop+0x12/0x70 [ 250.073843][ T2494] hid_device_remove+0xed/0x240 [ 250.078747][ T2494] device_release_driver_internal+0x231/0x500 [ 250.085191][ T2494] bus_remove_device+0x2dc/0x4a0 [ 250.091613][ T2494] device_del+0x481/0xd30 [ 250.096049][ T2494] hid_destroy_device+0xe1/0x150 [ 250.101628][ T2494] usbhid_disconnect+0x9f/0xe0 [ 250.106903][ T2494] usb_unbind_interface+0x1bd/0x8a0 [ 250.112315][ T2494] device_release_driver_internal+0x432/0x500 [ 250.118715][ T2494] bus_remove_device+0x2dc/0x4a0 [ 250.123844][ T2494] device_del+0x481/0xd30 [ 250.128515][ T2494] usb_disable_device+0x211/0x690 [ 250.133854][ T2494] usb_disconnect+0x284/0x8d0 [ 250.138723][ T2494] hub_event+0x17ca/0x38f0 [ 250.144021][ T2494] process_one_work+0x965/0x16a0 [ 250.149140][ T2494] worker_thread+0x96/0xe20 [ 250.153674][ T2494] kthread+0x3b5/0x4a0 [ 250.157918][ T2494] ret_from_fork+0x24/0x30 [ 250.162437][ T2494] [ 250.164864][ T2494] The buggy address belongs to the object at ffff8880a293c000 [ 250.164864][ T2494] which belongs to the cache kmalloc-8k of size 8192 [ 250.179124][ T2494] The buggy address is located 336 bytes inside of [ 250.179124][ T2494] 8192-byte region [ffff8880a293c000, ffff8880a293e000) [ 250.192553][ T2494] The buggy address belongs to the page: [ 250.198198][ T2494] page:ffffea00028a4f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00028a4f00 order:2 compound_mapcount:0 compound_pincount:0 [ 250.213972][ T2494] flags: 0xfffe0000010200(slab|head) [ 250.220099][ T2494] raw: 00fffe0000010200 ffffea00014e2708 ffffea00023fda08 ffff8880aa0021c0 [ 250.229106][ T2494] raw: 0000000000000000 ffff8880a293c000 0000000100000001 0000000000000000 [ 250.238103][ T2494] page dumped because: kasan: bad access detected [ 250.244517][ T2494] [ 250.246840][ T2494] Memory state around the buggy address: [ 250.252497][ T2494] ffff8880a293c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.260566][ T2494] ffff8880a293c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.268620][ T2494] >ffff8880a293c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.277174][ T2494] ^ [ 250.283948][ T2494] ffff8880a293c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.292188][ T2494] ffff8880a293c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 250.300415][ T2494] ================================================================== [ 250.309430][ T2494] Disabling lock debugging due to kernel taint [ 250.320432][ T2494] Kernel panic - not syncing: panic_on_warn set ... [ 250.327054][ T2494] CPU: 0 PID: 2494 Comm: kworker/0:3 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 250.337974][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.352217][ T2494] Workqueue: usb_hub_wq hub_event [ 250.358919][ T2494] Call Trace: [ 250.362395][ T2494] dump_stack+0x18f/0x20d [ 250.368025][ T2494] ? __mutex_lock+0xf50/0x13c0 [ 250.372969][ T2494] panic+0x2e3/0x75c [ 250.376874][ T2494] ? __warn_printk+0xf3/0xf3 [ 250.381528][ T2494] ? preempt_schedule_common+0x5e/0xc0 [ 250.387199][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 250.392750][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 250.399467][ T2494] ? preempt_schedule_thunk+0x16/0x18 [ 250.405199][ T2494] ? trace_hardirqs_on+0x55/0x230 [ 250.410309][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 250.415337][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 250.420177][ T2494] end_report+0x4d/0x53 [ 250.424407][ T2494] kasan_report.cold+0xd/0x37 [ 250.429190][ T2494] ? __mutex_lock+0x1033/0x13c0 [ 250.435426][ T2494] __mutex_lock+0x1033/0x13c0 [ 250.443612][ T2494] ? print_usage_bug+0x240/0x240 [ 250.448666][ T2494] ? joydev_cleanup+0x21/0x190 [ 250.453427][ T2494] ? trace_hardirqs_off+0x50/0x220 [ 250.458731][ T2494] ? mutex_trylock+0x2c0/0x2c0 [ 250.464175][ T2494] ? mark_held_locks+0x9f/0xe0 [ 250.470391][ T2494] ? kfree+0x1eb/0x2b0 [ 250.474501][ T2494] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 250.480602][ T2494] ? kfree_const+0x51/0x60 [ 250.485006][ T2494] ? dev_attr_show+0x90/0x90 [ 250.489732][ T2494] ? joydev_cleanup+0x21/0x190 [ 250.495291][ T2494] joydev_cleanup+0x21/0x190 [ 250.499957][ T2494] joydev_disconnect+0x45/0xb0 [ 250.505146][ T2494] __input_unregister_device+0x1b0/0x430 [ 250.512078][ T2494] input_unregister_device+0xb4/0xf0 [ 250.518278][ T2494] hidinput_disconnect+0x15e/0x3d0 [ 250.525130][ T2494] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 250.530838][ T2494] hid_disconnect+0x13f/0x1a0 [ 250.535841][ T2494] hid_hw_stop+0x12/0x70 [ 250.540351][ T2494] hid_device_remove+0xed/0x240 [ 250.545893][ T2494] ? sony_register_touchpad.constprop.0+0x890/0x890 [ 250.554353][ T2494] ? hid_compare_device_paths+0xc0/0xc0 [ 250.559972][ T2494] device_release_driver_internal+0x231/0x500 [ 250.569499][ T2494] bus_remove_device+0x2dc/0x4a0 [ 250.575051][ T2494] device_del+0x481/0xd30 [ 250.579583][ T2494] ? device_link_add_missing_supplier_links+0x370/0x370 [ 250.586958][ T2494] ? mark_held_locks+0x9f/0xe0 [ 250.592587][ T2494] ? _raw_spin_unlock_irq+0x1f/0x80 [ 250.597872][ T2494] hid_destroy_device+0xe1/0x150 [ 250.604374][ T2494] usbhid_disconnect+0x9f/0xe0 [ 250.609152][ T2494] usb_unbind_interface+0x1bd/0x8a0 [ 250.614436][ T2494] ? __pm_runtime_idle+0xd1/0x320 [ 250.619566][ T2494] ? usb_autoresume_device+0x60/0x60 [ 250.624998][ T2494] device_release_driver_internal+0x432/0x500 [ 250.633332][ T2494] bus_remove_device+0x2dc/0x4a0 [ 250.638343][ T2494] device_del+0x481/0xd30 [ 250.642764][ T2494] ? device_link_add_missing_supplier_links+0x370/0x370 [ 250.649822][ T2494] ? usb_remove_ep_devs+0x3e/0x80 [ 250.655601][ T2494] ? remove_intf_ep_devs+0x13f/0x1d0 [ 250.661021][ T2494] usb_disable_device+0x211/0x690 [ 250.666772][ T2494] usb_disconnect+0x284/0x8d0 [ 250.671730][ T2494] hub_event+0x17ca/0x38f0 [ 250.676235][ T2494] ? hub_port_debounce+0x260/0x260 [ 250.681724][ T2494] ? usermodehelper_read_trylock+0xf0/0x2d0 [ 250.687830][ T2494] ? debug_smp_processor_id+0x2f/0x185 [ 250.693422][ T2494] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 250.699316][ T2494] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 250.706033][ T2494] process_one_work+0x965/0x16a0 [ 250.712399][ T2494] ? lock_release+0x800/0x800 [ 250.717085][ T2494] ? pwq_dec_nr_in_flight+0x310/0x310 [ 250.722553][ T2494] ? rwlock_bug.part.0+0x90/0x90 [ 250.727656][ T2494] worker_thread+0x96/0xe20 [ 250.732156][ T2494] ? process_one_work+0x16a0/0x16a0 [ 250.737704][ T2494] kthread+0x3b5/0x4a0 [ 250.741954][ T2494] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 250.748437][ T2494] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 250.755902][ T2494] ret_from_fork+0x24/0x30 [ 250.761642][ T2494] Kernel Offset: disabled [ 250.768724][ T2494] Rebooting in 86400 seconds..