forked to background, child pid 3048 no interfaces have a carrier [ 68.173438][ T3049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.201153][ T3049] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 95.132942][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. 2022/06/17 13:46:03 fuzzer started 2022/06/17 13:46:03 dialing manager at 10.128.0.169:34859 [ 103.649673][ T3476] cgroup: Unknown subsys name 'net' [ 103.781482][ T3476] cgroup: Unknown subsys name 'rlimit' 2022/06/17 13:46:04 syscalls: 3647 2022/06/17 13:46:04 code coverage: enabled 2022/06/17 13:46:04 comparison tracing: enabled 2022/06/17 13:46:04 extra coverage: enabled 2022/06/17 13:46:04 delay kcov mmap: enabled 2022/06/17 13:46:04 setuid sandbox: enabled 2022/06/17 13:46:04 namespace sandbox: enabled 2022/06/17 13:46:04 Android sandbox: /sys/fs/selinux/policy does not exist 2022/06/17 13:46:04 fault injection: enabled 2022/06/17 13:46:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/06/17 13:46:04 net packet injection: enabled 2022/06/17 13:46:04 net device setup: enabled 2022/06/17 13:46:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/06/17 13:46:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/06/17 13:46:04 USB emulation: enabled 2022/06/17 13:46:04 hci packet injection: enabled 2022/06/17 13:46:04 wifi device emulation: enabled 2022/06/17 13:46:04 802.15.4 emulation: enabled 2022/06/17 13:46:05 fetching corpus: 0, signal 0/2000 (executing program) 2022/06/17 13:46:05 fetching corpus: 47, signal 16074/19752 (executing program) 2022/06/17 13:46:05 fetching corpus: 97, signal 23977/29255 (executing program) 2022/06/17 13:46:05 fetching corpus: 147, signal 29849/36689 (executing program) 2022/06/17 13:46:05 fetching corpus: 197, signal 34859/43198 (executing program) 2022/06/17 13:46:05 fetching corpus: 247, signal 39246/48980 (executing program) 2022/06/17 13:46:05 fetching corpus: 297, signal 44950/55930 (executing program) 2022/06/17 13:46:05 fetching corpus: 347, signal 47743/60081 (executing program) 2022/06/17 13:46:05 fetching corpus: 397, signal 50283/63946 (executing program) 2022/06/17 13:46:05 fetching corpus: 447, signal 53388/68298 (executing program) 2022/06/17 13:46:06 fetching corpus: 497, signal 57125/73104 (executing program) 2022/06/17 13:46:06 fetching corpus: 547, signal 59662/76794 (executing program) 2022/06/17 13:46:06 fetching corpus: 597, signal 62150/80380 (executing program) 2022/06/17 13:46:06 fetching corpus: 647, signal 64193/83536 (executing program) 2022/06/17 13:46:06 fetching corpus: 697, signal 66177/86559 (executing program) 2022/06/17 13:46:06 fetching corpus: 747, signal 69809/90996 (executing program) 2022/06/17 13:46:06 fetching corpus: 797, signal 71177/93497 (executing program) 2022/06/17 13:46:06 fetching corpus: 847, signal 73876/96961 (executing program) 2022/06/17 13:46:06 fetching corpus: 897, signal 76600/100462 (executing program) 2022/06/17 13:46:06 fetching corpus: 947, signal 78806/103500 (executing program) 2022/06/17 13:46:07 fetching corpus: 997, signal 81328/106754 (executing program) 2022/06/17 13:46:07 fetching corpus: 1047, signal 83098/109329 (executing program) 2022/06/17 13:46:07 fetching corpus: 1097, signal 84691/111712 (executing program) 2022/06/17 13:46:07 fetching corpus: 1147, signal 86015/113942 (executing program) 2022/06/17 13:46:07 fetching corpus: 1197, signal 87977/116605 (executing program) 2022/06/17 13:46:07 fetching corpus: 1247, signal 88956/118472 (executing program) 2022/06/17 13:46:07 fetching corpus: 1296, signal 90305/120652 (executing program) 2022/06/17 13:46:07 fetching corpus: 1345, signal 91657/122778 (executing program) 2022/06/17 13:46:08 fetching corpus: 1393, signal 93226/125017 (executing program) 2022/06/17 13:46:08 fetching corpus: 1442, signal 94102/126724 (executing program) 2022/06/17 13:46:08 fetching corpus: 1492, signal 95445/128770 (executing program) 2022/06/17 13:46:08 fetching corpus: 1542, signal 96964/130914 (executing program) 2022/06/17 13:46:08 fetching corpus: 1591, signal 98198/132814 (executing program) 2022/06/17 13:46:08 fetching corpus: 1640, signal 99668/134887 (executing program) 2022/06/17 13:46:08 fetching corpus: 1690, signal 101224/136988 (executing program) 2022/06/17 13:46:08 fetching corpus: 1740, signal 102686/138973 (executing program) 2022/06/17 13:46:08 fetching corpus: 1789, signal 103765/140680 (executing program) 2022/06/17 13:46:08 fetching corpus: 1839, signal 104698/142265 (executing program) 2022/06/17 13:46:08 fetching corpus: 1889, signal 105583/143825 (executing program) 2022/06/17 13:46:09 fetching corpus: 1939, signal 106725/145541 (executing program) 2022/06/17 13:46:09 fetching corpus: 1989, signal 108070/147362 (executing program) 2022/06/17 13:46:09 fetching corpus: 2039, signal 110569/149766 (executing program) 2022/06/17 13:46:09 fetching corpus: 2088, signal 111409/151191 (executing program) 2022/06/17 13:46:09 fetching corpus: 2138, signal 112283/152619 (executing program) 2022/06/17 13:46:09 fetching corpus: 2188, signal 113312/154155 (executing program) 2022/06/17 13:46:09 fetching corpus: 2237, signal 114377/155645 (executing program) 2022/06/17 13:46:09 fetching corpus: 2287, signal 115773/157294 (executing program) 2022/06/17 13:46:09 fetching corpus: 2337, signal 116659/158605 (executing program) 2022/06/17 13:46:10 fetching corpus: 2387, signal 117528/159910 (executing program) 2022/06/17 13:46:10 fetching corpus: 2437, signal 118513/161260 (executing program) 2022/06/17 13:46:10 fetching corpus: 2487, signal 119240/162402 (executing program) 2022/06/17 13:46:10 fetching corpus: 2537, signal 120564/163896 (executing program) 2022/06/17 13:46:10 fetching corpus: 2586, signal 121177/165005 (executing program) 2022/06/17 13:46:10 fetching corpus: 2636, signal 122415/166458 (executing program) 2022/06/17 13:46:10 fetching corpus: 2685, signal 123616/167800 (executing program) 2022/06/17 13:46:10 fetching corpus: 2735, signal 124194/168868 (executing program) 2022/06/17 13:46:11 fetching corpus: 2785, signal 125315/170179 (executing program) 2022/06/17 13:46:11 fetching corpus: 2833, signal 125827/171230 (executing program) 2022/06/17 13:46:11 fetching corpus: 2883, signal 127121/172546 (executing program) 2022/06/17 13:46:11 fetching corpus: 2933, signal 128045/173717 (executing program) 2022/06/17 13:46:11 fetching corpus: 2983, signal 128891/174860 (executing program) 2022/06/17 13:46:12 fetching corpus: 3033, signal 129764/175940 (executing program) 2022/06/17 13:46:12 fetching corpus: 3083, signal 130553/176970 (executing program) 2022/06/17 13:46:12 fetching corpus: 3133, signal 131752/178150 (executing program) 2022/06/17 13:46:12 fetching corpus: 3183, signal 132402/179140 (executing program) 2022/06/17 13:46:12 fetching corpus: 3233, signal 133492/180263 (executing program) 2022/06/17 13:46:12 fetching corpus: 3283, signal 134711/181396 (executing program) 2022/06/17 13:46:12 fetching corpus: 3333, signal 135674/182389 (executing program) 2022/06/17 13:46:12 fetching corpus: 3383, signal 136695/183366 (executing program) 2022/06/17 13:46:12 fetching corpus: 3433, signal 137339/184209 (executing program) 2022/06/17 13:46:13 fetching corpus: 3483, signal 138187/185178 (executing program) 2022/06/17 13:46:13 fetching corpus: 3533, signal 138803/186045 (executing program) 2022/06/17 13:46:13 fetching corpus: 3583, signal 139484/186912 (executing program) 2022/06/17 13:46:13 fetching corpus: 3633, signal 139938/187684 (executing program) 2022/06/17 13:46:13 fetching corpus: 3683, signal 140673/188559 (executing program) 2022/06/17 13:46:13 fetching corpus: 3733, signal 141708/189502 (executing program) 2022/06/17 13:46:13 fetching corpus: 3783, signal 142322/190368 (executing program) 2022/06/17 13:46:14 fetching corpus: 3833, signal 143072/191183 (executing program) 2022/06/17 13:46:14 fetching corpus: 3883, signal 144765/192204 (executing program) 2022/06/17 13:46:14 fetching corpus: 3933, signal 145487/192961 (executing program) 2022/06/17 13:46:14 fetching corpus: 3983, signal 145926/193634 (executing program) 2022/06/17 13:46:14 fetching corpus: 4032, signal 146800/194344 (executing program) 2022/06/17 13:46:14 fetching corpus: 4082, signal 147331/195061 (executing program) 2022/06/17 13:46:14 fetching corpus: 4132, signal 148293/195841 (executing program) 2022/06/17 13:46:14 fetching corpus: 4181, signal 148841/196539 (executing program) 2022/06/17 13:46:14 fetching corpus: 4231, signal 149701/197280 (executing program) 2022/06/17 13:46:15 fetching corpus: 4281, signal 150215/197939 (executing program) 2022/06/17 13:46:15 fetching corpus: 4331, signal 150810/198594 (executing program) 2022/06/17 13:46:15 fetching corpus: 4381, signal 151908/199292 (executing program) 2022/06/17 13:46:15 fetching corpus: 4431, signal 152791/199966 (executing program) 2022/06/17 13:46:15 fetching corpus: 4480, signal 153307/200556 (executing program) 2022/06/17 13:46:15 fetching corpus: 4530, signal 153890/201136 (executing program) 2022/06/17 13:46:15 fetching corpus: 4580, signal 154438/201722 (executing program) 2022/06/17 13:46:15 fetching corpus: 4630, signal 155091/202261 (executing program) 2022/06/17 13:46:15 fetching corpus: 4680, signal 155839/202815 (executing program) 2022/06/17 13:46:16 fetching corpus: 4729, signal 156352/203360 (executing program) 2022/06/17 13:46:16 fetching corpus: 4779, signal 157142/203866 (executing program) 2022/06/17 13:46:16 fetching corpus: 4829, signal 157827/204384 (executing program) 2022/06/17 13:46:16 fetching corpus: 4878, signal 158362/204913 (executing program) 2022/06/17 13:46:16 fetching corpus: 4928, signal 158781/205391 (executing program) 2022/06/17 13:46:16 fetching corpus: 4978, signal 159330/205867 (executing program) 2022/06/17 13:46:16 fetching corpus: 5028, signal 163977/206401 (executing program) 2022/06/17 13:46:16 fetching corpus: 5078, signal 165661/206856 (executing program) 2022/06/17 13:46:16 fetching corpus: 5128, signal 166167/207089 (executing program) 2022/06/17 13:46:16 fetching corpus: 5178, signal 166710/207089 (executing program) 2022/06/17 13:46:16 fetching corpus: 5228, signal 167449/207097 (executing program) 2022/06/17 13:46:16 fetching corpus: 5278, signal 168180/207097 (executing program) 2022/06/17 13:46:17 fetching corpus: 5328, signal 168646/207097 (executing program) 2022/06/17 13:46:17 fetching corpus: 5378, signal 169135/207098 (executing program) 2022/06/17 13:46:17 fetching corpus: 5428, signal 169668/207098 (executing program) 2022/06/17 13:46:17 fetching corpus: 5478, signal 170248/207098 (executing program) 2022/06/17 13:46:17 fetching corpus: 5528, signal 170872/207145 (executing program) 2022/06/17 13:46:17 fetching corpus: 5578, signal 171503/207145 (executing program) 2022/06/17 13:46:17 fetching corpus: 5628, signal 172084/207145 (executing program) 2022/06/17 13:46:17 fetching corpus: 5678, signal 172550/207180 (executing program) 2022/06/17 13:46:17 fetching corpus: 5728, signal 173800/207180 (executing program) 2022/06/17 13:46:17 fetching corpus: 5778, signal 174344/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 5828, signal 174725/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 5878, signal 175199/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 5928, signal 175745/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 5978, signal 176160/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 6028, signal 177070/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 6077, signal 177786/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 6125, signal 178361/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 6174, signal 178838/207180 (executing program) 2022/06/17 13:46:18 fetching corpus: 6224, signal 179248/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6274, signal 179743/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6324, signal 180410/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6374, signal 180861/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6423, signal 181445/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6473, signal 181953/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6522, signal 182364/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6572, signal 182931/207180 (executing program) 2022/06/17 13:46:19 fetching corpus: 6622, signal 183429/207180 (executing program) 2022/06/17 13:46:20 fetching corpus: 6671, signal 184014/207180 (executing program) 2022/06/17 13:46:20 fetching corpus: 6721, signal 184710/207182 (executing program) 2022/06/17 13:46:20 fetching corpus: 6771, signal 185263/207187 (executing program) 2022/06/17 13:46:20 fetching corpus: 6821, signal 185542/207187 (executing program) 2022/06/17 13:46:20 fetching corpus: 6871, signal 185935/207187 (executing program) 2022/06/17 13:46:20 fetching corpus: 6920, signal 186353/207195 (executing program) 2022/06/17 13:46:20 fetching corpus: 6970, signal 186804/207195 (executing program) 2022/06/17 13:46:20 fetching corpus: 7020, signal 187764/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7070, signal 188150/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7118, signal 188690/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7167, signal 189150/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7217, signal 189555/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7267, signal 190051/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7317, signal 190530/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7367, signal 190849/207195 (executing program) 2022/06/17 13:46:21 fetching corpus: 7417, signal 191332/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7467, signal 191904/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7517, signal 192256/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7567, signal 192636/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7617, signal 193121/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7667, signal 193616/207195 (executing program) 2022/06/17 13:46:22 fetching corpus: 7717, signal 193983/207197 (executing program) 2022/06/17 13:46:22 fetching corpus: 7766, signal 194382/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 7816, signal 194901/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 7866, signal 195793/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 7915, signal 196166/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 7965, signal 196793/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 8015, signal 197138/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 8065, signal 197695/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 8115, signal 197947/207208 (executing program) 2022/06/17 13:46:22 fetching corpus: 8165, signal 198469/207208 (executing program) 2022/06/17 13:46:23 fetching corpus: 8215, signal 198818/207208 (executing program) 2022/06/17 13:46:23 fetching corpus: 8265, signal 199274/207208 (executing program) 2022/06/17 13:46:23 fetching corpus: 8315, signal 199835/207210 (executing program) 2022/06/17 13:46:23 fetching corpus: 8365, signal 200317/207210 (executing program) 2022/06/17 13:46:23 fetching corpus: 8415, signal 200704/207247 (executing program) 2022/06/17 13:46:23 fetching corpus: 8464, signal 201260/207247 (executing program) 2022/06/17 13:46:23 fetching corpus: 8514, signal 201725/207247 (executing program) 2022/06/17 13:46:23 fetching corpus: 8564, signal 201932/207247 (executing program) 2022/06/17 13:46:23 fetching corpus: 8614, signal 202435/207247 (executing program) 2022/06/17 13:46:23 fetching corpus: 8664, signal 202959/207247 (executing program) 2022/06/17 13:46:24 fetching corpus: 8714, signal 203488/207247 (executing program) 2022/06/17 13:46:24 fetching corpus: 8764, signal 204033/207249 (executing program) 2022/06/17 13:46:24 fetching corpus: 8814, signal 204472/207249 (executing program) 2022/06/17 13:46:24 fetching corpus: 8864, signal 204974/207249 (executing program) 2022/06/17 13:46:24 fetching corpus: 8914, signal 205347/207249 (executing program) 2022/06/17 13:46:24 fetching corpus: 8941, signal 205636/207249 (executing program) 2022/06/17 13:46:24 fetching corpus: 8941, signal 205636/207249 (executing program) 2022/06/17 13:46:28 starting 6 fuzzer processes 13:46:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) 13:46:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 13:46:28 executing program 2: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:46:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x32) truncate(&(0x7f0000000040)='./file0\x00', 0xffff) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="dd", 0x0, 0x0, 0x0}) 13:46:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:46:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a37f0000000000000000670000000c002b01"], 0x20}}, 0x0) [ 128.898656][ T3500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.906899][ T3500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.915073][ T3500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.925069][ T3500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.933941][ T3500] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 128.942009][ T3500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.066714][ T44] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.077460][ T3504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.085853][ T3504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.094968][ T3504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.095320][ T3498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.113117][ T3505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.117913][ T3498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.122204][ T3505] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.136423][ T3505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.147047][ T3507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.155808][ T3507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.161048][ T3500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.165451][ T3507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.172079][ T3500] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.186530][ T3507] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.200561][ T3500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.232491][ T44] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.244418][ T44] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.320529][ T44] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.330328][ T3500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.349548][ T3500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.360317][ T3500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.373778][ T3500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.381652][ T3500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.417697][ T44] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.426415][ T44] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.435635][ T44] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.446166][ T44] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.456986][ T44] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.466024][ T44] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.511694][ T3492] chnl_net:caif_netlink_parms(): no params data found [ 130.057496][ T3493] chnl_net:caif_netlink_parms(): no params data found [ 130.162110][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.169495][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.179420][ T3492] device bridge_slave_0 entered promiscuous mode [ 130.279166][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.286931][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.296452][ T3492] device bridge_slave_1 entered promiscuous mode [ 130.486771][ T3492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.608197][ T3494] chnl_net:caif_netlink_parms(): no params data found [ 130.630652][ T3492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.725239][ T3497] chnl_net:caif_netlink_parms(): no params data found [ 130.906974][ T3492] team0: Port device team_slave_0 added [ 130.914145][ T3495] chnl_net:caif_netlink_parms(): no params data found [ 130.932334][ T3492] team0: Port device team_slave_1 added [ 130.972534][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 131.101199][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.108721][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.118337][ T3493] device bridge_slave_0 entered promiscuous mode [ 131.130100][ T3492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.137424][ T3492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.164180][ T3492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.206042][ T3492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.213392][ T3492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.222265][ T34] Bluetooth: hci1: command 0x0409 tx timeout [ 131.239848][ T3492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.266861][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.274593][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.284349][ T3493] device bridge_slave_1 entered promiscuous mode [ 131.292046][ T3138] Bluetooth: hci3: command 0x0409 tx timeout [ 131.314618][ T34] Bluetooth: hci2: command 0x0409 tx timeout [ 131.400474][ T3496] chnl_net:caif_netlink_parms(): no params data found [ 131.425480][ T3493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.457378][ T6] Bluetooth: hci4: command 0x0409 tx timeout [ 131.541995][ T34] Bluetooth: hci5: command 0x0409 tx timeout [ 131.553786][ T3493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.604476][ T3492] device hsr_slave_0 entered promiscuous mode [ 131.621235][ T3492] device hsr_slave_1 entered promiscuous mode [ 131.799680][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.807220][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.817362][ T3494] device bridge_slave_0 entered promiscuous mode [ 131.827561][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.835221][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.844956][ T3497] device bridge_slave_0 entered promiscuous mode [ 131.871021][ T3493] team0: Port device team_slave_0 added [ 131.877886][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.885436][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.895279][ T3497] device bridge_slave_1 entered promiscuous mode [ 131.905558][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.913221][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.923257][ T3494] device bridge_slave_1 entered promiscuous mode [ 132.003547][ T3493] team0: Port device team_slave_1 added [ 132.135527][ T3494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.216339][ T3493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.224516][ T3493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.251349][ T3493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.269174][ T3494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.280125][ T3493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.287386][ T3493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.314666][ T3493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.343532][ T3497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.368177][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.375864][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.385278][ T3495] device bridge_slave_0 entered promiscuous mode [ 132.440001][ T3497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.477330][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.484927][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.494738][ T3495] device bridge_slave_1 entered promiscuous mode [ 132.634479][ T3494] team0: Port device team_slave_0 added [ 132.763681][ T3494] team0: Port device team_slave_1 added [ 132.779311][ T3493] device hsr_slave_0 entered promiscuous mode [ 132.787911][ T3493] device hsr_slave_1 entered promiscuous mode [ 132.795886][ T3493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.803827][ T3493] Cannot create hsr debugfs directory [ 132.831329][ T3497] team0: Port device team_slave_0 added [ 132.844162][ T3495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.862593][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.869963][ T3496] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.879802][ T3496] device bridge_slave_0 entered promiscuous mode [ 132.895187][ T3495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.971423][ T3497] team0: Port device team_slave_1 added [ 133.012340][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.019735][ T3496] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.030001][ T3496] device bridge_slave_1 entered promiscuous mode [ 133.058995][ T3535] Bluetooth: hci0: command 0x041b tx timeout [ 133.182705][ T3496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.193960][ T3494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.201102][ T3494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.227535][ T3494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.299456][ T3495] team0: Port device team_slave_0 added [ 133.306608][ T3535] Bluetooth: hci1: command 0x041b tx timeout [ 133.307580][ T3497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.319955][ T3497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.346332][ T3497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.367524][ T3496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.379347][ T3494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.381968][ T3535] Bluetooth: hci2: command 0x041b tx timeout [ 133.387045][ T3494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.393326][ T3535] Bluetooth: hci3: command 0x041b tx timeout [ 133.419294][ T3494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.458353][ T3497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.465786][ T3497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.492551][ T3497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.508572][ T3495] team0: Port device team_slave_1 added [ 133.559730][ T6] Bluetooth: hci4: command 0x041b tx timeout [ 133.587393][ T3496] team0: Port device team_slave_0 added [ 133.614923][ T3496] team0: Port device team_slave_1 added [ 133.623080][ T3138] Bluetooth: hci5: command 0x041b tx timeout [ 133.789879][ T3495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.797188][ T3495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.823445][ T3495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.846010][ T3492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.861985][ T3496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.869062][ T3496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.895281][ T3496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.972222][ T3494] device hsr_slave_0 entered promiscuous mode [ 133.980443][ T3494] device hsr_slave_1 entered promiscuous mode [ 133.988562][ T3494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.996333][ T3494] Cannot create hsr debugfs directory [ 134.003958][ T3495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.011002][ T3495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.037621][ T3495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.070392][ T3492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.087850][ T3496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.095187][ T3496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.122001][ T3496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.142480][ T3497] device hsr_slave_0 entered promiscuous mode [ 134.151854][ T3497] device hsr_slave_1 entered promiscuous mode [ 134.159486][ T3497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.167384][ T3497] Cannot create hsr debugfs directory [ 134.257959][ T3492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.356117][ T3492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.449169][ T3495] device hsr_slave_0 entered promiscuous mode [ 134.464141][ T3495] device hsr_slave_1 entered promiscuous mode [ 134.472536][ T3495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.480194][ T3495] Cannot create hsr debugfs directory [ 134.634657][ T3496] device hsr_slave_0 entered promiscuous mode [ 134.646356][ T3496] device hsr_slave_1 entered promiscuous mode [ 134.654656][ T3496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.662692][ T3496] Cannot create hsr debugfs directory [ 135.132527][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 135.158495][ T3493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.248935][ T3493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.325141][ T3493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.351603][ T3493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.382264][ T3535] Bluetooth: hci1: command 0x040f tx timeout [ 135.382647][ T3494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.452073][ T3537] Bluetooth: hci3: command 0x040f tx timeout [ 135.472414][ T3537] Bluetooth: hci2: command 0x040f tx timeout [ 135.483482][ T3494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.519636][ T3494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.549473][ T3494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.614714][ T3537] Bluetooth: hci4: command 0x040f tx timeout [ 135.692463][ T121] Bluetooth: hci5: command 0x040f tx timeout [ 135.826110][ T3497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.917432][ T3492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.934833][ T3497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.953625][ T3497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.990314][ T3497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.009773][ T3495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.121520][ T3495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.145475][ T3495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.180130][ T3495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.242637][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.274698][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.337645][ T3492] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.367863][ T3496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.390259][ T3496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.412424][ T3496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.490528][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.501687][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.511588][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.519206][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.528619][ T3496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.593633][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.627453][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.637827][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.647753][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.655174][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.810695][ T3493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.847383][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.858966][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.944319][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.956428][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.967290][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.978113][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.038873][ T3494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.085350][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.095774][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.106463][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.116505][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.125943][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.164891][ T3497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.191022][ T3492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.212892][ T3493] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.228972][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.239199][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.252931][ T3548] Bluetooth: hci0: command 0x0419 tx timeout [ 137.279717][ T3494] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.287777][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.297240][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.333399][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.343843][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.353662][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.361053][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.370635][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.381294][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.391075][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.398777][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.408889][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.424528][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.485724][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 137.493441][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.502999][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.512873][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.523074][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.532746][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.540373][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.549749][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.563796][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.580627][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 137.587748][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 137.590727][ T3497] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.633480][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.643836][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.654538][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.662009][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.671172][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.682999][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.786794][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.797796][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.809399][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.817470][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.825638][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.837151][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.847414][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.857131][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.864595][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.874082][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.884883][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.895768][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.906494][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.917268][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.927379][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.937562][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.947588][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.959562][ T121] Bluetooth: hci4: command 0x0419 tx timeout [ 137.972844][ T25] Bluetooth: hci5: command 0x0419 tx timeout [ 137.979499][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.989218][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.999568][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.010065][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.020044][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.027505][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.053492][ T3495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.079714][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.091452][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.102768][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.175059][ T3492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.189478][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.202318][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.211667][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.221222][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.231287][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.241398][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.280268][ T3496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.324950][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.335887][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.346783][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.356873][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.366961][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.377821][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.418125][ T3495] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.456477][ T3493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.467340][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.479415][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.487429][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.495438][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.505761][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.574903][ T3496] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.600523][ T3494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.610704][ T3497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.624412][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.657156][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.666696][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.676187][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.686309][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.696562][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.706828][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.716584][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.724007][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.733445][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.744126][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.754478][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.762192][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.770864][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.790705][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.874446][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.882767][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.890647][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.901845][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.911460][ T3138] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.919010][ T3138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.928346][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.940101][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.951149][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.967628][ T3493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.142603][ T3495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.153245][ T3495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.174994][ T3497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.249727][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.259483][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.270110][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.280782][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.290697][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.298189][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.308383][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.319789][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.331119][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.343067][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.350977][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.359162][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.371021][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.381340][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.392887][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.403170][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.413486][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.424980][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.435977][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.447123][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.519762][ T3496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.531353][ T3496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.650615][ T3495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.905288][ T3496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.030018][ T3492] device veth0_vlan entered promiscuous mode [ 140.137997][ T3492] device veth1_vlan entered promiscuous mode [ 140.206024][ T3494] device veth0_vlan entered promiscuous mode [ 140.263308][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.273388][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.283782][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.294125][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.305391][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.315818][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.325986][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.334101][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.342175][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.350108][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.358378][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.369639][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.380469][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.390929][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.402527][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.412803][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.423056][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.433859][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.444597][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.455018][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.475105][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.485718][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.495970][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.505857][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.515647][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.557818][ T3494] device veth1_vlan entered promiscuous mode [ 140.699158][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.710541][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.721359][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.733232][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.796015][ T3492] device veth0_macvtap entered promiscuous mode [ 140.900498][ T3492] device veth1_macvtap entered promiscuous mode [ 140.930791][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.942206][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.952259][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.962933][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.016000][ T3493] device veth0_vlan entered promiscuous mode [ 141.037282][ T3494] device veth0_macvtap entered promiscuous mode [ 141.065329][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.075508][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.085969][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.097355][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.107994][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.147031][ T3494] device veth1_macvtap entered promiscuous mode [ 141.206212][ T3493] device veth1_vlan entered promiscuous mode [ 141.273326][ T3492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.290784][ T3495] device veth0_vlan entered promiscuous mode [ 141.346954][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.357768][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.367641][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.377535][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.387627][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.397750][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.408188][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.419522][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.430300][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.454317][ T3494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.465125][ T3494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.479566][ T3494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.504607][ T3495] device veth1_vlan entered promiscuous mode [ 141.533868][ T3492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.542791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.552574][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.562275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.572852][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.583982][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.595606][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.658902][ T3493] device veth0_macvtap entered promiscuous mode [ 141.672329][ T3494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.683527][ T3494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.697648][ T3494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.718381][ T3492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.728005][ T3492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.737231][ T3492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.746268][ T3492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.769217][ T3493] device veth1_macvtap entered promiscuous mode [ 141.826102][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.837262][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.847787][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.857737][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.868411][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.889266][ T3494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.899121][ T3494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.908228][ T3494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.917360][ T3494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.933770][ T3493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.944453][ T3493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.954503][ T3493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.965191][ T3493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.979651][ T3493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.101051][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.111697][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.123244][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.134054][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.145170][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.155949][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.167192][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.214132][ T3495] device veth0_macvtap entered promiscuous mode [ 142.263867][ T3497] device veth0_vlan entered promiscuous mode [ 142.293234][ T3495] device veth1_macvtap entered promiscuous mode [ 142.335460][ T3493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.346406][ T3493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.356591][ T3493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.368253][ T3493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.382821][ T3493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.401038][ T3497] device veth1_vlan entered promiscuous mode [ 142.443510][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.453712][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.463718][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.474333][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.485703][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.496298][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.507070][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.580478][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.591608][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.601650][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.612364][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.622343][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.632969][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.647484][ T3495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.717391][ T3493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.727242][ T3493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.736355][ T3493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.745384][ T3493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.759843][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.769745][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.780030][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.790629][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.801298][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.812051][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.828475][ T3497] device veth0_macvtap entered promiscuous mode [ 142.852734][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.863462][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.873682][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.884385][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.894659][ T3495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.905342][ T3495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.919674][ T3495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.937778][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.947966][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.958708][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.983367][ T3497] device veth1_macvtap entered promiscuous mode [ 143.136978][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.148711][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.158914][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.169602][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.179765][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.190470][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.200861][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.211525][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.227044][ T3497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.252562][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.263866][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.274802][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.285727][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.296531][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.408448][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.419408][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.430534][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.441193][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.451282][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.462222][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.472264][ T3497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.483016][ T3497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.497533][ T3497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.508538][ T3495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.517710][ T3495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.527423][ T3495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.536415][ T3495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.553681][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.564639][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.584757][ T3497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.593851][ T3497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.602928][ T3497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.612108][ T3497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.650214][ T3496] device veth0_vlan entered promiscuous mode [ 143.661172][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.672251][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.766848][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.776886][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.886957][ T3496] device veth1_vlan entered promiscuous mode [ 144.103652][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.114026][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.124256][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.135144][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.183284][ T3496] device veth0_macvtap entered promiscuous mode [ 144.228950][ T3496] device veth1_macvtap entered promiscuous mode [ 144.379407][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.390579][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.400642][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.411276][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.421299][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.431918][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.442055][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.452692][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.462685][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.473295][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.487933][ T3496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.513469][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.524275][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.534408][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.545095][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.835953][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.846639][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.856716][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.867494][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.877521][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.888241][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.899043][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.909664][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.919681][ T3496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.930397][ T3496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.945210][ T3496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.954302][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.965405][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.309503][ T3496] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.319065][ T3496] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.328132][ T3496] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.337127][ T3496] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.794323][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.802433][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.957227][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.965472][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.071630][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.082884][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.341328][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.347951][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.711014][ T936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.720225][ T936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.738988][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 13:46:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) [ 146.837719][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.846533][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.867803][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) [ 147.324532][ T3706] fs-verity: sha512 using implementation "sha512-generic" [ 147.426760][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.436340][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.484222][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.600697][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.609180][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.620774][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:46:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x32) truncate(&(0x7f0000000040)='./file0\x00', 0xffff) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="dd", 0x0, 0x0, 0x0}) 13:46:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) [ 148.032502][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.040486][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.059800][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.165700][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.174370][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.186082][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 13:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) [ 148.299402][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.307782][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.319288][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:46:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) [ 148.535100][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.543207][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.551235][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:46:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) [ 148.918923][ T3736] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 149.060029][ C1] hrtimer: interrupt took 129355 ns [ 149.139299][ T24] audit: type=1804 audit(1655473610.191:2): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir862343381/syzkaller.Xbmne2/0/bus" dev="sda1" ino=1152 res=1 errno=0 13:46:50 executing program 2: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:46:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x32) truncate(&(0x7f0000000040)='./file0\x00', 0xffff) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="dd", 0x0, 0x0, 0x0}) [ 150.005655][ T24] audit: type=1804 audit(1655473611.061:3): pid=3748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir862343381/syzkaller.Xbmne2/1/bus" dev="sda1" ino=1165 res=1 errno=0 [ 150.994556][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.002651][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.011215][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.099497][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.107578][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.116445][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:46:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x7f\x00\x9d\x98\x06\x00\xe1\xc1LV.i7M\xba\xbeVh\xf02)\xae\x8a\xe3\x7f\xa9\xe5\xc56\xb5\x82B\xbes\x00\x00\xa0\xf4', 0x0) 13:46:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 13:46:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x32) truncate(&(0x7f0000000040)='./file0\x00', 0xffff) eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="dd", 0x0, 0x0, 0x0}) 13:46:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:46:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a37f0000000000000000670000000c002b01"], 0x20}}, 0x0) [ 151.585701][ T3759] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 13:46:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 13:46:52 executing program 0: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:46:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:46:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a37f0000000000000000670000000c002b01"], 0x20}}, 0x0) [ 152.466539][ T3769] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 13:46:53 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) [ 152.859604][ T24] audit: type=1804 audit(1655473613.911:4): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir165381393/syzkaller.CDuyeJ/7/bus" dev="sda1" ino=1154 res=1 errno=0 [ 153.832438][ T3603] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.362823][ T3603] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 154.372362][ T3603] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 154.383042][ T3603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.023127][ T3603] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.033182][ T3603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.041560][ T3603] usb 2-1: Product: syz [ 155.046185][ T3603] usb 2-1: Manufacturer: syz [ 155.051128][ T3603] usb 2-1: SerialNumber: syz 13:46:56 executing program 2: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:46:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, 0x0}}], 0x2, 0x0) 13:46:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:46:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a37f0000000000000000670000000c002b01"], 0x20}}, 0x0) 13:46:56 executing program 0: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 155.684354][ T3781] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 13:46:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, 0x0}}], 0x2, 0x0) 13:46:57 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xfffffca6, 0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:46:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000000)=0x8) [ 156.107458][ T24] audit: type=1804 audit(1655473617.161:5): pid=3785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir862343381/syzkaller.Xbmne2/2/bus" dev="sda1" ino=1170 res=1 errno=0 [ 156.134190][ T3603] usb 2-1: 0:2 : does not exist [ 156.357221][ T3603] usb 2-1: USB disconnect, device number 2 13:46:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, 0x0}}], 0x2, 0x0) 13:46:57 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) [ 156.960978][ T3727] udevd[3727]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 13:46:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000000)=0x8) 13:46:58 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xfffffca6, 0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 157.690240][ T24] audit: type=1804 audit(1655473618.741:6): pid=3800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir165381393/syzkaller.CDuyeJ/8/bus" dev="sda1" ino=1171 res=1 errno=0 [ 159.002207][ T121] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.383576][ T121] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 159.392876][ T121] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 159.403584][ T121] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.603605][ T121] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.613349][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.624523][ T121] usb 2-1: Product: syz [ 159.629826][ T121] usb 2-1: Manufacturer: syz [ 159.634919][ T121] usb 2-1: SerialNumber: syz [ 160.483095][ T121] usb 2-1: 0:2 : does not exist [ 160.649871][ T121] usb 2-1: USB disconnect, device number 3 [ 160.836981][ T3727] udevd[3727]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 13:47:03 executing program 2: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:47:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, 0x0}}], 0x2, 0x0) 13:47:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000000)=0x8) 13:47:03 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xfffffca6, 0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 162.970959][ T24] audit: type=1804 audit(1655473624.021:7): pid=3818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir862343381/syzkaller.Xbmne2/3/bus" dev="sda1" ino=1161 res=1 errno=0 13:47:04 executing program 0: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x180, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000001}, 0x1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r4, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 13:47:04 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) 13:47:04 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) 13:47:04 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xfffffca6, 0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:47:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000000)=0x8) 13:47:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x210400, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) [ 164.285114][ T3603] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.293971][ T24] audit: type=1804 audit(1655473625.341:8): pid=3831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir165381393/syzkaller.CDuyeJ/9/bus" dev="sda1" ino=1163 res=1 errno=0 [ 164.332125][ T3545] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.694707][ T3603] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 164.704069][ T3603] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 164.714661][ T3603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 13:47:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 164.953213][ T3603] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.962833][ T3603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.971396][ T3603] usb 4-1: Product: syz [ 164.976617][ T3603] usb 4-1: Manufacturer: syz [ 164.981567][ T3603] usb 4-1: SerialNumber: syz [ 165.192445][ T3545] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 165.192554][ T3545] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 165.192655][ T3545] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 13:47:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 165.356579][ T3545] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.356716][ T3545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.356828][ T3545] usb 2-1: Product: syz [ 165.356914][ T3545] usb 2-1: Manufacturer: syz [ 165.357003][ T3545] usb 2-1: SerialNumber: syz [ 165.786793][ T3603] usb 4-1: 0:2 : does not exist [ 165.916804][ T3603] usb 4-1: USB disconnect, device number 2 [ 166.092646][ T3545] usb 2-1: 0:2 : does not exist [ 166.185539][ T3545] usb 2-1: USB disconnect, device number 4 [ 166.400609][ T3727] udevd[3727]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 13:47:07 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x210400, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 13:47:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:47:07 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) 13:47:07 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) [ 167.482328][ T3545] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.492995][ T121] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.843180][ T3545] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.852162][ T3545] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.863106][ T3545] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.880319][ T121] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.889320][ T121] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.899993][ T121] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.032720][ T3545] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.042411][ T3545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.050644][ T3545] usb 4-1: Product: syz [ 168.055168][ T3545] usb 4-1: Manufacturer: syz [ 168.059893][ T3545] usb 4-1: SerialNumber: syz [ 168.087640][ T121] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.101626][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.109901][ T121] usb 2-1: Product: syz [ 168.114287][ T121] usb 2-1: Manufacturer: syz [ 168.119022][ T121] usb 2-1: SerialNumber: syz 13:47:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:47:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:47:09 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x210400, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 13:47:09 executing program 4: futex(&(0x7f0000000580), 0xb, 0x2, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600), 0x0) 13:47:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0x2ce3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 13:47:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:47:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0x2ce3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 13:47:10 executing program 4: futex(&(0x7f0000000580), 0xb, 0x2, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600), 0x0) 13:47:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 168.850261][ T3856] device bridge_slave_1 left promiscuous mode [ 168.850949][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.900584][ T3856] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 169.003437][ T3545] usb 4-1: 0:2 : does not exist [ 169.056950][ T3545] usb 4-1: USB disconnect, device number 3 [ 169.293370][ T121] usb 2-1: 0:2 : does not exist [ 169.369328][ T121] usb 2-1: USB disconnect, device number 5 13:47:10 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64afdd33ba04dbdf}}}, 0x0) [ 169.467232][ T3794] udevd[3794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.478334][ T3863] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 13:47:10 executing program 4: futex(&(0x7f0000000580), 0xb, 0x2, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600), 0x0) 13:47:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:47:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0x2ce3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 13:47:11 executing program 4: futex(&(0x7f0000000580), 0xb, 0x2, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600), 0x0) [ 169.631582][ T3794] udevd[3794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 170.052287][ T121] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.374120][ T3874] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 170.412895][ T121] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 170.413007][ T121] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 170.413109][ T121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.583075][ T121] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.583212][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.583317][ T121] usb 4-1: Product: syz [ 170.583400][ T121] usb 4-1: Manufacturer: syz [ 170.583482][ T121] usb 4-1: SerialNumber: syz [ 171.302804][ T121] usb 4-1: 0:2 : does not exist [ 171.344754][ T121] usb 4-1: USB disconnect, device number 4 [ 171.420748][ T3727] udevd[3727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 13:47:14 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x210400, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 13:47:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x8f, 0x2, [{}]}, @func_proto]}}, &(0x7f0000001240)=""/204, 0x3a, 0xcc, 0x1}, 0x20) 13:47:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x1c, &(0x7f0000000380)={0x0, 0x0, 0x80000001}) 13:47:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MTU={0x8, 0x4, 0x2ce3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}}, 0x0) 13:47:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xf2, &(0x7f0000000500)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 13:47:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x8f, 0x2, [{}]}, @func_proto]}}, &(0x7f0000001240)=""/204, 0x3a, 0xcc, 0x1}, 0x20) 13:47:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xf2, &(0x7f0000000500)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) [ 173.516002][ T3887] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 13:47:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x1c, &(0x7f0000000380)={0x0, 0x0, 0x80000001}) 13:47:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x1c, &(0x7f0000000380)={0x0, 0x0, 0x80000001}) 13:47:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xf2, &(0x7f0000000500)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 13:47:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x8f, 0x2, [{}]}, @func_proto]}}, &(0x7f0000001240)=""/204, 0x3a, 0xcc, 0x1}, 0x20) 13:47:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x1c, &(0x7f0000000380)={0x0, 0x0, 0x80000001}) 13:47:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 13:47:18 executing program 2: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x8f, 0x2, [{}]}, @func_proto]}}, &(0x7f0000001240)=""/204, 0x3a, 0xcc, 0x1}, 0x20) 13:47:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000080)='GPL\x00', 0x3, 0xf2, &(0x7f0000000500)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 13:47:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000001ac0)={0x2020}, 0x2020) read$dsp(r0, &(0x7f00000001c0)=""/4081, 0xff1) 13:47:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 13:47:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x68141) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 13:47:19 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00') 13:47:19 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:19 executing program 0: r0 = openat$random(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x541b, 0x0) 13:47:19 executing program 2: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 13:47:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x68141) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 13:47:20 executing program 0: r0 = openat$random(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x541b, 0x0) 13:47:20 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:20 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00') 13:47:20 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 13:47:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x68141) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 13:47:20 executing program 2: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:20 executing program 0: r0 = openat$random(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x541b, 0x0) 13:47:20 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:20 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00') 13:47:20 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x68141) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 13:47:20 executing program 0: r0 = openat$random(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x541b, 0x0) 13:47:20 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:20 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:21 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00') 13:47:21 executing program 2: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:21 executing program 3: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:21 executing program 0: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 13:47:21 executing program 4: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:21 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:21 executing program 3: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:21 executing program 2: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0a186a4162d99c23b50a0a"], &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 13:47:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 13:47:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 13:47:21 executing program 4: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:21 executing program 0: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:22 executing program 3: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0xfffffffffffeffff, 0x81, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 13:47:22 executing program 2: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0a186a4162d99c23b50a0a"], &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 13:47:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 13:47:22 executing program 4: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:22 executing program 3: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:22 executing program 0: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) tgkill(r0, r0, 0x3f) 13:47:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 13:47:22 executing program 2: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0a186a4162d99c23b50a0a"], &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 13:47:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 13:47:23 executing program 4: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:23 executing program 3: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 13:47:23 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 13:47:23 executing program 2: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0a186a4162d99c23b50a0a"], &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 13:47:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x84b}, 0x10) write(r0, &(0x7f0000000080)="1c0000001a005f0214f9f407000904001f000000fe02000100020000", 0x1c) 13:47:23 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x4) 13:47:23 executing program 3: unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x5, 0x2, 0xbf22, 0x1}, 0x34) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000010c0)={r0, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) [ 182.309367][ T4035] ===================================================== [ 182.317188][ T4035] BUG: KMSAN: uninit-value in __page_symlink+0x2c2/0x350 [ 182.324444][ T4035] __page_symlink+0x2c2/0x350 [ 182.329198][ T4035] page_symlink+0x70/0x90 [ 182.333715][ T4035] ramfs_symlink+0x32c/0x650 [ 182.338378][ T4035] vfs_symlink+0x41c/0x610 [ 182.342971][ T4035] do_symlinkat+0x26c/0x930 [ 182.347509][ T4035] __ia32_sys_symlink+0xd0/0x120 [ 182.352589][ T4035] __do_fast_syscall_32+0x95/0xf0 [ 182.357662][ T4035] do_fast_syscall_32+0x33/0x70 [ 182.362774][ T4035] do_SYSENTER_32+0x1b/0x20 [ 182.367347][ T4035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 182.373838][ T4035] [ 182.376176][ T4035] Local variable fsdata created at: [ 182.381375][ T4035] __page_symlink+0x8c/0x350 [ 182.386114][ T4035] page_symlink+0x70/0x90 [ 182.390486][ T4035] [ 182.393011][ T4035] CPU: 0 PID: 4035 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 182.403363][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.413617][ T4035] ===================================================== [ 182.420565][ T4035] Disabling lock debugging due to kernel taint [ 182.426919][ T4035] Kernel panic - not syncing: kmsan.panic set ... [ 182.433353][ T4035] CPU: 0 PID: 4035 Comm: syz-executor.1 Tainted: G B 5.18.0-syzkaller-16263-g2d0ce79ea812 #0 [ 182.445102][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.455194][ T4035] Call Trace: [ 182.458477][ T4035] [ 182.461411][ T4035] dump_stack_lvl+0x1c8/0x256 [ 182.466132][ T4035] dump_stack+0x1a/0x1c [ 182.470316][ T4035] panic+0x4d3/0xc69 [ 182.474255][ T4035] ? get_taint+0x1/0x50 [ 182.478460][ T4035] ? add_taint+0x104/0x1a0 [ 182.482904][ T4035] ? console_unlock+0x1c70/0x20c0 [ 182.488046][ T4035] kmsan_report+0x2cc/0x2d0 [ 182.492604][ T4035] ? __filemap_get_folio+0x1703/0x1b30 [ 182.498098][ T4035] ? __msan_warning+0x92/0x110 [ 182.502897][ T4035] ? __page_symlink+0x2c2/0x350 [ 182.508304][ T4035] ? page_symlink+0x70/0x90 [ 182.512847][ T4035] ? ramfs_symlink+0x32c/0x650 [ 182.517661][ T4035] ? vfs_symlink+0x41c/0x610 [ 182.522319][ T4035] ? do_symlinkat+0x26c/0x930 [ 182.527122][ T4035] ? __ia32_sys_symlink+0xd0/0x120 [ 182.532277][ T4035] ? __do_fast_syscall_32+0x95/0xf0 [ 182.537519][ T4035] ? do_fast_syscall_32+0x33/0x70 [ 182.542664][ T4035] ? do_SYSENTER_32+0x1b/0x20 [ 182.547388][ T4035] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 182.553932][ T4035] ? kmsan_get_shadow_origin_ptr+0x85/0xf0 [ 182.559961][ T4035] ? kmsan_get_metadata+0x33/0x220 [ 182.565115][ T4035] ? kmsan_get_metadata+0x33/0x220 [ 182.570279][ T4035] ? kmsan_get_metadata+0x33/0x220 [ 182.575433][ T4035] ? kmsan_get_shadow_origin_ptr+0x85/0xf0 [ 182.581285][ T4035] ? zero_user_segments+0x554/0x870 [ 182.586528][ T4035] ? kmsan_get_metadata+0x33/0x220 [ 182.591682][ T4035] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 182.597984][ T4035] ? kmsan_get_metadata+0x33/0x220 [ 182.603329][ T4035] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 182.609271][ T4035] __msan_warning+0x92/0x110 [ 182.613898][ T4035] __page_symlink+0x2c2/0x350 [ 182.618629][ T4035] page_symlink+0x70/0x90 [ 182.622993][ T4035] ramfs_symlink+0x32c/0x650 [ 182.627739][ T4035] ? ramfs_create+0x200/0x200 [ 182.632454][ T4035] vfs_symlink+0x41c/0x610 [ 182.636915][ T4035] do_symlinkat+0x26c/0x930 [ 182.641470][ T4035] __ia32_sys_symlink+0xd0/0x120 [ 182.646444][ T4035] __do_fast_syscall_32+0x95/0xf0 [ 182.651510][ T4035] do_fast_syscall_32+0x33/0x70 [ 182.656399][ T4035] do_SYSENTER_32+0x1b/0x20 [ 182.661020][ T4035] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 182.667386][ T4035] RIP: 0023:0xf7fb7549 [ 182.671466][ T4035] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 182.691105][ T4035] RSP: 002b:00000000f7fb25cc EFLAGS: 00000296 ORIG_RAX: 0000000000000053 [ 182.699546][ T4035] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00000000200000c0 [ 182.707540][ T4035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.715534][ T4035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.723604][ T4035] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 182.731589][ T4035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.739588][ T4035] [ 182.742977][ T4035] Kernel Offset: disabled [ 182.747439][ T4035] Rebooting in 86400 seconds..