Warning: Permanently added '[localhost]:40523' (ECDSA) to the list of known hosts. 2021/03/20 00:27:30 fuzzer started 2021/03/20 00:27:30 dialing manager at localhost:40977 2021/03/20 00:27:31 syscalls: 3628 2021/03/20 00:27:31 code coverage: enabled 2021/03/20 00:27:31 comparison tracing: enabled 2021/03/20 00:27:31 extra coverage: enabled 2021/03/20 00:27:31 setuid sandbox: enabled 2021/03/20 00:27:31 namespace sandbox: enabled 2021/03/20 00:27:31 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/20 00:27:31 fault injection: enabled 2021/03/20 00:27:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/20 00:27:31 net packet injection: enabled 2021/03/20 00:27:31 net device setup: enabled 2021/03/20 00:27:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/20 00:27:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/20 00:27:31 USB emulation: enabled 2021/03/20 00:27:31 hci packet injection: enabled 2021/03/20 00:27:31 wifi device emulation: enabled 2021/03/20 00:27:31 802.15.4 emulation: enabled 2021/03/20 00:27:31 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/20 00:27:31 fetching corpus: 50, signal 33697/37494 (executing program) 2021/03/20 00:27:31 fetching corpus: 100, signal 60391/65862 (executing program) 2021/03/20 00:27:32 fetching corpus: 150, signal 81331/88360 (executing program) 2021/03/20 00:27:32 fetching corpus: 200, signal 91468/100117 (executing program) 2021/03/20 00:27:32 fetching corpus: 250, signal 98528/108787 (executing program) 2021/03/20 00:27:33 fetching corpus: 300, signal 108522/120292 (executing program) 2021/03/20 00:27:33 fetching corpus: 350, signal 114180/127438 (executing program) 2021/03/20 00:27:33 fetching corpus: 400, signal 121042/135736 (executing program) 2021/03/20 00:27:34 fetching corpus: 450, signal 131483/147467 (executing program) 2021/03/20 00:27:34 fetching corpus: 500, signal 137614/155017 (executing program) 2021/03/20 00:27:34 fetching corpus: 550, signal 141513/160359 (executing program) 2021/03/20 00:27:35 fetching corpus: 600, signal 152053/172018 (executing program) 2021/03/20 00:27:35 fetching corpus: 650, signal 160665/181811 (executing program) 2021/03/20 00:27:35 fetching corpus: 700, signal 165678/188118 (executing program) 2021/03/20 00:27:36 fetching corpus: 750, signal 170055/193799 (executing program) 2021/03/20 00:27:36 fetching corpus: 800, signal 174755/199800 (executing program) 2021/03/20 00:27:37 fetching corpus: 850, signal 180653/206854 (executing program) 2021/03/20 00:27:37 fetching corpus: 900, signal 186677/214046 (executing program) 2021/03/20 00:27:37 fetching corpus: 950, signal 190182/218794 (executing program) 2021/03/20 00:27:38 fetching corpus: 1000, signal 194172/223955 (executing program) 2021/03/20 00:27:38 fetching corpus: 1050, signal 197516/228479 (executing program) 2021/03/20 00:27:38 fetching corpus: 1100, signal 201608/233677 (executing program) 2021/03/20 00:27:38 fetching corpus: 1150, signal 205094/238260 (executing program) 2021/03/20 00:27:39 fetching corpus: 1200, signal 207967/242313 (executing program) 2021/03/20 00:27:39 fetching corpus: 1250, signal 210819/246343 (executing program) 2021/03/20 00:27:39 fetching corpus: 1300, signal 215201/251760 (executing program) syzkaller login: [ 102.203240][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.217573][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/20 00:27:40 fetching corpus: 1350, signal 218411/256030 (executing program) 2021/03/20 00:27:40 fetching corpus: 1400, signal 221990/260625 (executing program) 2021/03/20 00:27:40 fetching corpus: 1450, signal 230845/270000 (executing program) 2021/03/20 00:27:41 fetching corpus: 1500, signal 233965/274099 (executing program) 2021/03/20 00:27:41 fetching corpus: 1550, signal 236118/277323 (executing program) 2021/03/20 00:27:41 fetching corpus: 1600, signal 240528/282580 (executing program) 2021/03/20 00:27:42 fetching corpus: 1650, signal 242460/285566 (executing program) 2021/03/20 00:27:42 fetching corpus: 1700, signal 244674/288862 (executing program) 2021/03/20 00:27:42 fetching corpus: 1750, signal 246844/292058 (executing program) 2021/03/20 00:27:43 fetching corpus: 1800, signal 248833/295104 (executing program) 2021/03/20 00:27:43 fetching corpus: 1850, signal 251886/299038 (executing program) 2021/03/20 00:27:43 fetching corpus: 1900, signal 254675/302786 (executing program) 2021/03/20 00:27:44 fetching corpus: 1950, signal 256366/305480 (executing program) 2021/03/20 00:27:44 fetching corpus: 2000, signal 258472/308565 (executing program) 2021/03/20 00:27:44 fetching corpus: 2050, signal 261027/311986 (executing program) 2021/03/20 00:27:45 fetching corpus: 2100, signal 262711/314671 (executing program) 2021/03/20 00:27:45 fetching corpus: 2150, signal 264336/317274 (executing program) 2021/03/20 00:27:45 fetching corpus: 2200, signal 265984/319882 (executing program) 2021/03/20 00:27:46 fetching corpus: 2250, signal 269355/324003 (executing program) 2021/03/20 00:27:46 fetching corpus: 2300, signal 270369/326089 (executing program) 2021/03/20 00:27:46 fetching corpus: 2350, signal 272298/328956 (executing program) 2021/03/20 00:27:46 fetching corpus: 2400, signal 274901/332322 (executing program) 2021/03/20 00:27:47 fetching corpus: 2450, signal 277474/335678 (executing program) 2021/03/20 00:27:47 fetching corpus: 2500, signal 278802/337953 (executing program) 2021/03/20 00:27:47 fetching corpus: 2550, signal 280081/340156 (executing program) 2021/03/20 00:27:48 fetching corpus: 2600, signal 281474/342494 (executing program) 2021/03/20 00:27:48 fetching corpus: 2649, signal 282734/344695 (executing program) 2021/03/20 00:27:48 fetching corpus: 2699, signal 284430/347253 (executing program) 2021/03/20 00:27:48 fetching corpus: 2749, signal 287359/350850 (executing program) 2021/03/20 00:27:49 fetching corpus: 2799, signal 288986/353345 (executing program) 2021/03/20 00:27:49 fetching corpus: 2849, signal 290946/356076 (executing program) 2021/03/20 00:27:50 fetching corpus: 2899, signal 293486/359300 (executing program) 2021/03/20 00:27:50 fetching corpus: 2949, signal 295444/362019 (executing program) 2021/03/20 00:27:50 fetching corpus: 2999, signal 296874/364375 (executing program) 2021/03/20 00:27:51 fetching corpus: 3049, signal 298200/366551 (executing program) 2021/03/20 00:27:51 fetching corpus: 3099, signal 300269/369364 (executing program) 2021/03/20 00:27:51 fetching corpus: 3149, signal 301618/371517 (executing program) 2021/03/20 00:27:52 fetching corpus: 3199, signal 303858/374376 (executing program) 2021/03/20 00:27:52 fetching corpus: 3248, signal 305519/376745 (executing program) 2021/03/20 00:27:53 fetching corpus: 3298, signal 309512/381012 (executing program) 2021/03/20 00:27:53 fetching corpus: 3348, signal 312437/384397 (executing program) 2021/03/20 00:27:53 fetching corpus: 3398, signal 313988/386727 (executing program) 2021/03/20 00:27:53 fetching corpus: 3448, signal 315375/388872 (executing program) 2021/03/20 00:27:54 fetching corpus: 3498, signal 316819/391109 (executing program) 2021/03/20 00:27:54 fetching corpus: 3548, signal 317758/392899 (executing program) 2021/03/20 00:27:55 fetching corpus: 3597, signal 319518/395277 (executing program) 2021/03/20 00:27:55 fetching corpus: 3647, signal 320720/397239 (executing program) 2021/03/20 00:27:55 fetching corpus: 3697, signal 322987/400042 (executing program) 2021/03/20 00:27:56 fetching corpus: 3747, signal 324178/402000 (executing program) 2021/03/20 00:27:56 fetching corpus: 3797, signal 325559/404087 (executing program) 2021/03/20 00:27:57 fetching corpus: 3847, signal 327288/406429 (executing program) 2021/03/20 00:27:57 fetching corpus: 3897, signal 328635/408541 (executing program) 2021/03/20 00:27:57 fetching corpus: 3947, signal 329795/410444 (executing program) 2021/03/20 00:27:58 fetching corpus: 3997, signal 330691/412153 (executing program) 2021/03/20 00:27:58 fetching corpus: 4047, signal 333887/415570 (executing program) 2021/03/20 00:27:59 fetching corpus: 4097, signal 334669/417098 (executing program) 2021/03/20 00:27:59 fetching corpus: 4147, signal 335957/419041 (executing program) 2021/03/20 00:28:00 fetching corpus: 4197, signal 337750/421355 (executing program) 2021/03/20 00:28:00 fetching corpus: 4247, signal 338649/423052 (executing program) 2021/03/20 00:28:00 fetching corpus: 4297, signal 339823/424885 (executing program) 2021/03/20 00:28:01 fetching corpus: 4347, signal 340886/426657 (executing program) 2021/03/20 00:28:01 fetching corpus: 4397, signal 343143/429315 (executing program) 2021/03/20 00:28:01 fetching corpus: 4447, signal 345939/432362 (executing program) 2021/03/20 00:28:01 fetching corpus: 4497, signal 347175/434212 (executing program) 2021/03/20 00:28:02 fetching corpus: 4547, signal 348372/436037 (executing program) 2021/03/20 00:28:02 fetching corpus: 4597, signal 349552/437813 (executing program) 2021/03/20 00:28:02 fetching corpus: 4647, signal 350792/439673 (executing program) 2021/03/20 00:28:02 fetching corpus: 4696, signal 352644/441930 (executing program) 2021/03/20 00:28:03 fetching corpus: 4746, signal 354744/444393 (executing program) 2021/03/20 00:28:03 fetching corpus: 4796, signal 355706/445977 (executing program) 2021/03/20 00:28:03 fetching corpus: 4845, signal 356421/447434 (executing program) 2021/03/20 00:28:03 fetching corpus: 4895, signal 357456/449134 (executing program) 2021/03/20 00:28:04 fetching corpus: 4945, signal 359192/451260 (executing program) 2021/03/20 00:28:04 fetching corpus: 4995, signal 360135/452829 (executing program) 2021/03/20 00:28:04 fetching corpus: 5045, signal 361102/454427 (executing program) 2021/03/20 00:28:05 fetching corpus: 5095, signal 363380/456962 (executing program) 2021/03/20 00:28:05 fetching corpus: 5145, signal 365192/459099 (executing program) 2021/03/20 00:28:05 fetching corpus: 5195, signal 366059/460609 (executing program) 2021/03/20 00:28:06 fetching corpus: 5245, signal 367285/462347 (executing program) 2021/03/20 00:28:06 fetching corpus: 5295, signal 368378/463975 (executing program) 2021/03/20 00:28:06 fetching corpus: 5345, signal 369494/465569 (executing program) 2021/03/20 00:28:07 fetching corpus: 5395, signal 370997/467467 (executing program) 2021/03/20 00:28:07 fetching corpus: 5445, signal 371781/468880 (executing program) 2021/03/20 00:28:07 fetching corpus: 5495, signal 372625/470332 (executing program) 2021/03/20 00:28:08 fetching corpus: 5545, signal 373701/471913 (executing program) 2021/03/20 00:28:08 fetching corpus: 5595, signal 376827/474842 (executing program) 2021/03/20 00:28:09 fetching corpus: 5645, signal 378359/476689 (executing program) 2021/03/20 00:28:09 fetching corpus: 5695, signal 379522/478289 (executing program) 2021/03/20 00:28:10 fetching corpus: 5745, signal 380293/479639 (executing program) 2021/03/20 00:28:10 fetching corpus: 5795, signal 381010/480944 (executing program) 2021/03/20 00:28:10 fetching corpus: 5845, signal 382516/482749 (executing program) 2021/03/20 00:28:11 fetching corpus: 5895, signal 383865/484440 (executing program) 2021/03/20 00:28:11 fetching corpus: 5945, signal 385202/486192 (executing program) 2021/03/20 00:28:11 fetching corpus: 5995, signal 387182/488281 (executing program) 2021/03/20 00:28:12 fetching corpus: 6045, signal 388353/489820 (executing program) 2021/03/20 00:28:12 fetching corpus: 6095, signal 389112/491104 (executing program) 2021/03/20 00:28:12 fetching corpus: 6145, signal 390384/492749 (executing program) 2021/03/20 00:28:13 fetching corpus: 6195, signal 391708/494404 (executing program) 2021/03/20 00:28:13 fetching corpus: 6245, signal 392992/496035 (executing program) 2021/03/20 00:28:13 fetching corpus: 6295, signal 394143/497591 (executing program) 2021/03/20 00:28:14 fetching corpus: 6345, signal 395079/498996 (executing program) 2021/03/20 00:28:14 fetching corpus: 6395, signal 396052/500394 (executing program) 2021/03/20 00:28:14 fetching corpus: 6445, signal 396730/501578 (executing program) 2021/03/20 00:28:15 fetching corpus: 6495, signal 398311/503327 (executing program) 2021/03/20 00:28:15 fetching corpus: 6545, signal 399421/504728 (executing program) 2021/03/20 00:28:16 fetching corpus: 6595, signal 401694/506865 (executing program) 2021/03/20 00:28:16 fetching corpus: 6645, signal 402442/508090 (executing program) 2021/03/20 00:28:16 fetching corpus: 6695, signal 404257/509984 (executing program) 2021/03/20 00:28:17 fetching corpus: 6745, signal 405276/511374 (executing program) 2021/03/20 00:28:17 fetching corpus: 6795, signal 405955/512549 (executing program) 2021/03/20 00:28:18 fetching corpus: 6845, signal 407002/513921 (executing program) 2021/03/20 00:28:18 fetching corpus: 6895, signal 408014/515283 (executing program) 2021/03/20 00:28:19 fetching corpus: 6945, signal 409045/516726 (executing program) 2021/03/20 00:28:19 fetching corpus: 6995, signal 410054/518061 (executing program) 2021/03/20 00:28:19 fetching corpus: 7045, signal 410667/519191 (executing program) 2021/03/20 00:28:20 fetching corpus: 7095, signal 411265/520264 (executing program) 2021/03/20 00:28:21 fetching corpus: 7145, signal 411925/521371 (executing program) 2021/03/20 00:28:21 fetching corpus: 7195, signal 412750/522586 (executing program) 2021/03/20 00:28:21 fetching corpus: 7245, signal 413364/523673 (executing program) 2021/03/20 00:28:22 fetching corpus: 7295, signal 413904/524714 (executing program) 2021/03/20 00:28:22 fetching corpus: 7345, signal 414936/526001 (executing program) 2021/03/20 00:28:22 fetching corpus: 7395, signal 415700/527139 (executing program) 2021/03/20 00:28:23 fetching corpus: 7445, signal 416628/528366 (executing program) 2021/03/20 00:28:23 fetching corpus: 7495, signal 417742/529693 (executing program) 2021/03/20 00:28:23 fetching corpus: 7545, signal 418600/530932 (executing program) 2021/03/20 00:28:24 fetching corpus: 7595, signal 419511/532143 (executing program) 2021/03/20 00:28:24 fetching corpus: 7645, signal 420749/533551 (executing program) 2021/03/20 00:28:25 fetching corpus: 7695, signal 421511/534688 (executing program) 2021/03/20 00:28:25 fetching corpus: 7745, signal 422321/535848 (executing program) 2021/03/20 00:28:25 fetching corpus: 7795, signal 423059/536980 (executing program) 2021/03/20 00:28:26 fetching corpus: 7845, signal 423890/538180 (executing program) 2021/03/20 00:28:26 fetching corpus: 7895, signal 424958/539457 (executing program) 2021/03/20 00:28:26 fetching corpus: 7945, signal 425499/540429 (executing program) 2021/03/20 00:28:27 fetching corpus: 7995, signal 426279/541556 (executing program) 2021/03/20 00:28:27 fetching corpus: 8045, signal 426713/542529 (executing program) 2021/03/20 00:28:27 fetching corpus: 8095, signal 428203/543988 (executing program) 2021/03/20 00:28:28 fetching corpus: 8145, signal 428791/545024 (executing program) 2021/03/20 00:28:28 fetching corpus: 8195, signal 430122/546473 (executing program) 2021/03/20 00:28:28 fetching corpus: 8245, signal 430629/547435 (executing program) 2021/03/20 00:28:29 fetching corpus: 8295, signal 432421/549002 (executing program) 2021/03/20 00:28:29 fetching corpus: 8345, signal 433460/550181 (executing program) 2021/03/20 00:28:29 fetching corpus: 8395, signal 434081/551191 (executing program) 2021/03/20 00:28:30 fetching corpus: 8445, signal 434800/552243 (executing program) 2021/03/20 00:28:30 fetching corpus: 8495, signal 435411/553255 (executing program) 2021/03/20 00:28:30 fetching corpus: 8545, signal 435994/554251 (executing program) 2021/03/20 00:28:30 fetching corpus: 8595, signal 436995/555398 (executing program) 2021/03/20 00:28:31 fetching corpus: 8645, signal 437691/556435 (executing program) 2021/03/20 00:28:31 fetching corpus: 8695, signal 438175/557366 (executing program) 2021/03/20 00:28:32 fetching corpus: 8745, signal 439008/558435 (executing program) 2021/03/20 00:28:32 fetching corpus: 8795, signal 439574/559377 (executing program) 2021/03/20 00:28:33 fetching corpus: 8845, signal 441906/561197 (executing program) 2021/03/20 00:28:33 fetching corpus: 8895, signal 442607/562214 (executing program) 2021/03/20 00:28:33 fetching corpus: 8945, signal 443550/563346 (executing program) 2021/03/20 00:28:34 fetching corpus: 8995, signal 445180/564697 (executing program) 2021/03/20 00:28:34 fetching corpus: 9045, signal 446168/565820 (executing program) 2021/03/20 00:28:35 fetching corpus: 9095, signal 446874/566792 (executing program) 2021/03/20 00:28:35 fetching corpus: 9145, signal 447920/567970 (executing program) 2021/03/20 00:28:35 fetching corpus: 9195, signal 448366/568804 (executing program) 2021/03/20 00:28:36 fetching corpus: 9245, signal 450037/570185 (executing program) 2021/03/20 00:28:36 fetching corpus: 9295, signal 455675/573355 (executing program) 2021/03/20 00:28:36 fetching corpus: 9345, signal 456123/574222 (executing program) 2021/03/20 00:28:37 fetching corpus: 9395, signal 456847/575141 (executing program) 2021/03/20 00:28:37 fetching corpus: 9445, signal 458309/576412 (executing program) 2021/03/20 00:28:37 fetching corpus: 9495, signal 458880/577287 (executing program) 2021/03/20 00:28:38 fetching corpus: 9545, signal 459560/578182 (executing program) 2021/03/20 00:28:38 fetching corpus: 9595, signal 460201/579094 (executing program) 2021/03/20 00:28:38 fetching corpus: 9645, signal 462848/580735 (executing program) 2021/03/20 00:28:39 fetching corpus: 9695, signal 463634/581661 (executing program) 2021/03/20 00:28:39 fetching corpus: 9745, signal 464434/582610 (executing program) 2021/03/20 00:28:39 fetching corpus: 9795, signal 465028/583461 (executing program) 2021/03/20 00:28:39 fetching corpus: 9845, signal 465583/584297 (executing program) 2021/03/20 00:28:40 fetching corpus: 9895, signal 466296/585211 (executing program) 2021/03/20 00:28:40 fetching corpus: 9945, signal 466754/585976 (executing program) 2021/03/20 00:28:40 fetching corpus: 9995, signal 467228/586748 (executing program) 2021/03/20 00:28:41 fetching corpus: 10045, signal 467721/587518 (executing program) [ 163.641974][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.657652][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/20 00:28:41 fetching corpus: 10095, signal 468399/588407 (executing program) 2021/03/20 00:28:41 fetching corpus: 10145, signal 468771/589149 (executing program) 2021/03/20 00:28:42 fetching corpus: 10195, signal 469354/589958 (executing program) 2021/03/20 00:28:42 fetching corpus: 10245, signal 469975/590758 (executing program) 2021/03/20 00:28:42 fetching corpus: 10295, signal 470378/591509 (executing program) 2021/03/20 00:28:43 fetching corpus: 10345, signal 471849/592651 (executing program) 2021/03/20 00:28:43 fetching corpus: 10395, signal 472817/593590 (executing program) 2021/03/20 00:28:43 fetching corpus: 10445, signal 473536/594443 (executing program) 2021/03/20 00:28:44 fetching corpus: 10495, signal 474017/595223 (executing program) 2021/03/20 00:28:44 fetching corpus: 10545, signal 474433/595975 (executing program) 2021/03/20 00:28:44 fetching corpus: 10595, signal 475515/596931 (executing program) 2021/03/20 00:28:45 fetching corpus: 10645, signal 476229/597767 (executing program) 2021/03/20 00:28:45 fetching corpus: 10695, signal 477140/598606 (executing program) 2021/03/20 00:28:45 fetching corpus: 10745, signal 477900/599484 (executing program) 2021/03/20 00:28:46 fetching corpus: 10795, signal 478379/600225 (executing program) 2021/03/20 00:28:46 fetching corpus: 10845, signal 479777/601275 (executing program) 2021/03/20 00:28:46 fetching corpus: 10895, signal 480357/602077 (executing program) 2021/03/20 00:28:46 fetching corpus: 10945, signal 480989/602859 (executing program) 2021/03/20 00:28:47 fetching corpus: 10995, signal 481759/603685 (executing program) 2021/03/20 00:28:47 fetching corpus: 11045, signal 482739/604550 (executing program) 2021/03/20 00:28:47 fetching corpus: 11095, signal 483249/605253 (executing program) 2021/03/20 00:28:47 fetching corpus: 11145, signal 483904/605996 (executing program) 2021/03/20 00:28:48 fetching corpus: 11195, signal 484428/606737 (executing program) 2021/03/20 00:28:48 fetching corpus: 11245, signal 484884/607426 (executing program) 2021/03/20 00:28:48 fetching corpus: 11295, signal 485388/608164 (executing program) 2021/03/20 00:28:48 fetching corpus: 11345, signal 485990/608887 (executing program) 2021/03/20 00:28:49 fetching corpus: 11395, signal 486489/609574 (executing program) 2021/03/20 00:28:49 fetching corpus: 11445, signal 487016/610245 (executing program) 2021/03/20 00:28:49 fetching corpus: 11495, signal 487792/610991 (executing program) 2021/03/20 00:28:50 fetching corpus: 11545, signal 488174/611627 (executing program) 2021/03/20 00:28:50 fetching corpus: 11595, signal 488620/612281 (executing program) 2021/03/20 00:28:50 fetching corpus: 11645, signal 489129/612988 (executing program) 2021/03/20 00:28:50 fetching corpus: 11695, signal 489549/613652 (executing program) 2021/03/20 00:28:51 fetching corpus: 11745, signal 490120/614353 (executing program) 2021/03/20 00:28:51 fetching corpus: 11795, signal 493376/615833 (executing program) 2021/03/20 00:28:51 fetching corpus: 11845, signal 493936/616520 (executing program) 2021/03/20 00:28:52 fetching corpus: 11895, signal 494487/617205 (executing program) 2021/03/20 00:28:52 fetching corpus: 11945, signal 494983/617878 (executing program) 2021/03/20 00:28:52 fetching corpus: 11995, signal 495428/618471 (executing program) 2021/03/20 00:28:53 fetching corpus: 12045, signal 495792/619095 (executing program) 2021/03/20 00:28:53 fetching corpus: 12095, signal 496276/619760 (executing program) 2021/03/20 00:28:53 fetching corpus: 12145, signal 496727/620370 (executing program) 2021/03/20 00:28:54 fetching corpus: 12195, signal 497358/621024 (executing program) 2021/03/20 00:28:54 fetching corpus: 12245, signal 497842/621637 (executing program) 2021/03/20 00:28:54 fetching corpus: 12295, signal 498193/622201 (executing program) 2021/03/20 00:28:55 fetching corpus: 12345, signal 498658/622873 (executing program) 2021/03/20 00:28:55 fetching corpus: 12395, signal 499116/623463 (executing program) 2021/03/20 00:28:55 fetching corpus: 12445, signal 499809/624095 (executing program) 2021/03/20 00:28:56 fetching corpus: 12495, signal 500653/624816 (executing program) 2021/03/20 00:28:56 fetching corpus: 12545, signal 501082/625413 (executing program) 2021/03/20 00:28:56 fetching corpus: 12595, signal 501510/625999 (executing program) 2021/03/20 00:28:57 fetching corpus: 12645, signal 501956/626566 (executing program) 2021/03/20 00:28:57 fetching corpus: 12695, signal 502459/627198 (executing program) 2021/03/20 00:28:57 fetching corpus: 12745, signal 502888/627789 (executing program) 2021/03/20 00:28:57 fetching corpus: 12795, signal 503488/628445 (executing program) 2021/03/20 00:28:58 fetching corpus: 12845, signal 504293/629131 (executing program) 2021/03/20 00:28:58 fetching corpus: 12895, signal 505060/629759 (executing program) 2021/03/20 00:28:58 fetching corpus: 12945, signal 505392/630368 (executing program) 2021/03/20 00:28:59 fetching corpus: 12995, signal 505900/630952 (executing program) 2021/03/20 00:28:59 fetching corpus: 13045, signal 506406/631513 (executing program) 2021/03/20 00:28:59 fetching corpus: 13095, signal 506920/632110 (executing program) 2021/03/20 00:29:00 fetching corpus: 13145, signal 507772/632733 (executing program) 2021/03/20 00:29:00 fetching corpus: 13195, signal 508088/633251 (executing program) 2021/03/20 00:29:00 fetching corpus: 13245, signal 508484/633801 (executing program) 2021/03/20 00:29:01 fetching corpus: 13295, signal 508964/634408 (executing program) 2021/03/20 00:29:01 fetching corpus: 13345, signal 509844/635062 (executing program) 2021/03/20 00:29:01 fetching corpus: 13395, signal 510497/635666 (executing program) 2021/03/20 00:29:02 fetching corpus: 13445, signal 511193/636258 (executing program) 2021/03/20 00:29:02 fetching corpus: 13495, signal 511637/636823 (executing program) 2021/03/20 00:29:02 fetching corpus: 13545, signal 512066/637370 (executing program) 2021/03/20 00:29:03 fetching corpus: 13595, signal 512627/637944 (executing program) 2021/03/20 00:29:03 fetching corpus: 13645, signal 513106/638479 (executing program) 2021/03/20 00:29:03 fetching corpus: 13695, signal 513589/639029 (executing program) 2021/03/20 00:29:03 fetching corpus: 13745, signal 514069/639589 (executing program) 2021/03/20 00:29:04 fetching corpus: 13795, signal 515083/640179 (executing program) 2021/03/20 00:29:04 fetching corpus: 13845, signal 515541/640745 (executing program) 2021/03/20 00:29:04 fetching corpus: 13895, signal 516424/641370 (executing program) 2021/03/20 00:29:04 fetching corpus: 13945, signal 516814/641888 (executing program) 2021/03/20 00:29:05 fetching corpus: 13995, signal 517079/642385 (executing program) 2021/03/20 00:29:05 fetching corpus: 14045, signal 518366/643053 (executing program) 2021/03/20 00:29:05 fetching corpus: 14095, signal 519053/643583 (executing program) 2021/03/20 00:29:06 fetching corpus: 14145, signal 519645/644102 (executing program) 2021/03/20 00:29:06 fetching corpus: 14195, signal 520295/644625 (executing program) 2021/03/20 00:29:07 fetching corpus: 14245, signal 520938/645174 (executing program) 2021/03/20 00:29:07 fetching corpus: 14295, signal 521471/645691 (executing program) 2021/03/20 00:29:07 fetching corpus: 14345, signal 522128/646235 (executing program) 2021/03/20 00:29:07 fetching corpus: 14395, signal 522599/646710 (executing program) 2021/03/20 00:29:08 fetching corpus: 14445, signal 523798/647323 (executing program) 2021/03/20 00:29:08 fetching corpus: 14495, signal 524419/647819 (executing program) 2021/03/20 00:29:08 fetching corpus: 14545, signal 525361/648400 (executing program) 2021/03/20 00:29:08 fetching corpus: 14595, signal 525809/648872 (executing program) 2021/03/20 00:29:09 fetching corpus: 14645, signal 526185/649355 (executing program) 2021/03/20 00:29:09 fetching corpus: 14695, signal 526477/649829 (executing program) 2021/03/20 00:29:10 fetching corpus: 14745, signal 526885/650291 (executing program) 2021/03/20 00:29:10 fetching corpus: 14795, signal 527291/650740 (executing program) 2021/03/20 00:29:10 fetching corpus: 14845, signal 527527/651169 (executing program) 2021/03/20 00:29:10 fetching corpus: 14895, signal 527923/651596 (executing program) 2021/03/20 00:29:11 fetching corpus: 14945, signal 528286/652048 (executing program) 2021/03/20 00:29:12 fetching corpus: 14995, signal 528689/652509 (executing program) 2021/03/20 00:29:12 fetching corpus: 15045, signal 529299/653007 (executing program) 2021/03/20 00:29:12 fetching corpus: 15095, signal 529678/653437 (executing program) 2021/03/20 00:29:12 fetching corpus: 15145, signal 530057/653865 (executing program) 2021/03/20 00:29:13 fetching corpus: 15195, signal 531161/654368 (executing program) 2021/03/20 00:29:13 fetching corpus: 15245, signal 531768/654819 (executing program) 2021/03/20 00:29:13 fetching corpus: 15295, signal 532116/655242 (executing program) 2021/03/20 00:29:14 fetching corpus: 15345, signal 532575/655656 (executing program) 2021/03/20 00:29:14 fetching corpus: 15395, signal 533010/656089 (executing program) 2021/03/20 00:29:14 fetching corpus: 15445, signal 533468/656527 (executing program) 2021/03/20 00:29:15 fetching corpus: 15495, signal 533999/656965 (executing program) 2021/03/20 00:29:15 fetching corpus: 15545, signal 534568/657418 (executing program) 2021/03/20 00:29:15 fetching corpus: 15595, signal 538729/658033 (executing program) 2021/03/20 00:29:15 fetching corpus: 15645, signal 539003/658443 (executing program) 2021/03/20 00:29:16 fetching corpus: 15695, signal 539452/658883 (executing program) 2021/03/20 00:29:16 fetching corpus: 15745, signal 540059/659318 (executing program) 2021/03/20 00:29:16 fetching corpus: 15795, signal 540580/659746 (executing program) 2021/03/20 00:29:17 fetching corpus: 15845, signal 541249/660151 (executing program) 2021/03/20 00:29:17 fetching corpus: 15895, signal 541691/660522 (executing program) 2021/03/20 00:29:17 fetching corpus: 15945, signal 542528/660939 (executing program) 2021/03/20 00:29:18 fetching corpus: 15995, signal 542873/661322 (executing program) 2021/03/20 00:29:18 fetching corpus: 16045, signal 543735/661731 (executing program) 2021/03/20 00:29:18 fetching corpus: 16095, signal 544289/662129 (executing program) 2021/03/20 00:29:19 fetching corpus: 16145, signal 544876/662505 (executing program) 2021/03/20 00:29:19 fetching corpus: 16195, signal 545276/662902 (executing program) 2021/03/20 00:29:20 fetching corpus: 16245, signal 546074/663271 (executing program) 2021/03/20 00:29:20 fetching corpus: 16295, signal 548141/663685 (executing program) 2021/03/20 00:29:20 fetching corpus: 16345, signal 548429/664031 (executing program) 2021/03/20 00:29:20 fetching corpus: 16395, signal 548912/664407 (executing program) 2021/03/20 00:29:21 fetching corpus: 16445, signal 549650/664758 (executing program) 2021/03/20 00:29:21 fetching corpus: 16495, signal 550034/665079 (executing program) 2021/03/20 00:29:21 fetching corpus: 16545, signal 550433/665425 (executing program) 2021/03/20 00:29:22 fetching corpus: 16595, signal 551441/665715 (executing program) 2021/03/20 00:29:22 fetching corpus: 16645, signal 551970/665715 (executing program) 2021/03/20 00:29:23 fetching corpus: 16695, signal 552714/665715 (executing program) 2021/03/20 00:29:23 fetching corpus: 16745, signal 553087/665715 (executing program) 2021/03/20 00:29:23 fetching corpus: 16795, signal 553511/665715 (executing program) 2021/03/20 00:29:24 fetching corpus: 16845, signal 554010/665715 (executing program) 2021/03/20 00:29:24 fetching corpus: 16895, signal 554269/665715 (executing program) 2021/03/20 00:29:24 fetching corpus: 16945, signal 554685/665715 (executing program) 2021/03/20 00:29:24 fetching corpus: 16995, signal 555011/665715 (executing program) 2021/03/20 00:29:25 fetching corpus: 17045, signal 555389/665715 (executing program) 2021/03/20 00:29:25 fetching corpus: 17095, signal 555901/665715 (executing program) 2021/03/20 00:29:26 fetching corpus: 17145, signal 556254/665715 (executing program) 2021/03/20 00:29:26 fetching corpus: 17195, signal 556749/665715 (executing program) 2021/03/20 00:29:26 fetching corpus: 17245, signal 557079/665715 (executing program) 2021/03/20 00:29:27 fetching corpus: 17295, signal 558013/665715 (executing program) 2021/03/20 00:29:27 fetching corpus: 17345, signal 558383/665715 (executing program) 2021/03/20 00:29:27 fetching corpus: 17395, signal 559008/665715 (executing program) 2021/03/20 00:29:27 fetching corpus: 17445, signal 559545/665715 (executing program) 2021/03/20 00:29:28 fetching corpus: 17495, signal 560116/665715 (executing program) 2021/03/20 00:29:28 fetching corpus: 17545, signal 560539/665715 (executing program) 2021/03/20 00:29:28 fetching corpus: 17595, signal 561002/665715 (executing program) 2021/03/20 00:29:29 fetching corpus: 17645, signal 561433/665715 (executing program) 2021/03/20 00:29:29 fetching corpus: 17695, signal 561870/665715 (executing program) 2021/03/20 00:29:29 fetching corpus: 17745, signal 562219/665715 (executing program) 2021/03/20 00:29:30 fetching corpus: 17795, signal 562651/665715 (executing program) 2021/03/20 00:29:31 fetching corpus: 17845, signal 563033/665715 (executing program) 2021/03/20 00:29:31 fetching corpus: 17895, signal 563617/665715 (executing program) 2021/03/20 00:29:31 fetching corpus: 17945, signal 564358/665715 (executing program) 2021/03/20 00:29:32 fetching corpus: 17995, signal 564745/665715 (executing program) 2021/03/20 00:29:32 fetching corpus: 18045, signal 565270/665715 (executing program) 2021/03/20 00:29:32 fetching corpus: 18095, signal 565604/665715 (executing program) 2021/03/20 00:29:33 fetching corpus: 18145, signal 566420/665715 (executing program) 2021/03/20 00:29:33 fetching corpus: 18195, signal 566785/665715 (executing program) 2021/03/20 00:29:33 fetching corpus: 18245, signal 567198/665715 (executing program) 2021/03/20 00:29:33 fetching corpus: 18295, signal 567548/665715 (executing program) 2021/03/20 00:29:34 fetching corpus: 18345, signal 568248/665715 (executing program) 2021/03/20 00:29:34 fetching corpus: 18395, signal 568951/665715 (executing program) 2021/03/20 00:29:35 fetching corpus: 18445, signal 569336/665717 (executing program) 2021/03/20 00:29:35 fetching corpus: 18495, signal 570089/665717 (executing program) 2021/03/20 00:29:35 fetching corpus: 18545, signal 570418/665717 (executing program) 2021/03/20 00:29:35 fetching corpus: 18595, signal 570989/665717 (executing program) 2021/03/20 00:29:36 fetching corpus: 18645, signal 571402/665721 (executing program) 2021/03/20 00:29:36 fetching corpus: 18695, signal 572158/665721 (executing program) 2021/03/20 00:29:36 fetching corpus: 18745, signal 572369/665721 (executing program) 2021/03/20 00:29:37 fetching corpus: 18795, signal 573524/665721 (executing program) 2021/03/20 00:29:38 fetching corpus: 18845, signal 573973/665721 (executing program) 2021/03/20 00:29:38 fetching corpus: 18895, signal 574193/665721 (executing program) 2021/03/20 00:29:38 fetching corpus: 18945, signal 574708/665721 (executing program) 2021/03/20 00:29:39 fetching corpus: 18995, signal 574994/665721 (executing program) 2021/03/20 00:29:39 fetching corpus: 19045, signal 575406/665721 (executing program) 2021/03/20 00:29:39 fetching corpus: 19095, signal 575982/665721 (executing program) 2021/03/20 00:29:39 fetching corpus: 19145, signal 576315/665721 (executing program) 2021/03/20 00:29:40 fetching corpus: 19195, signal 576825/665721 (executing program) 2021/03/20 00:29:40 fetching corpus: 19245, signal 577439/665721 (executing program) 2021/03/20 00:29:40 fetching corpus: 19295, signal 577772/665721 (executing program) 2021/03/20 00:29:40 fetching corpus: 19345, signal 578039/665721 (executing program) 2021/03/20 00:29:41 fetching corpus: 19395, signal 578419/665721 (executing program) 2021/03/20 00:29:41 fetching corpus: 19445, signal 578690/665721 (executing program) 2021/03/20 00:29:41 fetching corpus: 19495, signal 578964/665721 (executing program) 2021/03/20 00:29:42 fetching corpus: 19545, signal 580279/665721 (executing program) 2021/03/20 00:29:42 fetching corpus: 19595, signal 581257/665721 (executing program) 2021/03/20 00:29:42 fetching corpus: 19645, signal 582078/665721 (executing program) 2021/03/20 00:29:42 fetching corpus: 19695, signal 582311/665721 (executing program) [ 225.083855][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.102650][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/20 00:29:43 fetching corpus: 19745, signal 582745/665721 (executing program) 2021/03/20 00:29:43 fetching corpus: 19795, signal 583851/665721 (executing program) 2021/03/20 00:29:43 fetching corpus: 19845, signal 584325/665721 (executing program) 2021/03/20 00:29:44 fetching corpus: 19895, signal 584670/665723 (executing program) 2021/03/20 00:29:44 fetching corpus: 19945, signal 584872/665723 (executing program) 2021/03/20 00:29:44 fetching corpus: 19995, signal 585075/665723 (executing program) 2021/03/20 00:29:45 fetching corpus: 20045, signal 585422/665723 (executing program) 2021/03/20 00:29:45 fetching corpus: 20095, signal 586051/665723 (executing program) 2021/03/20 00:29:45 fetching corpus: 20145, signal 586402/665723 (executing program) 2021/03/20 00:29:45 fetching corpus: 20195, signal 586828/665723 (executing program) 2021/03/20 00:29:46 fetching corpus: 20245, signal 587071/665723 (executing program) 2021/03/20 00:29:46 fetching corpus: 20295, signal 587456/665723 (executing program) 2021/03/20 00:29:46 fetching corpus: 20345, signal 587791/665723 (executing program) 2021/03/20 00:29:46 fetching corpus: 20395, signal 588134/665723 (executing program) 2021/03/20 00:29:47 fetching corpus: 20445, signal 588592/665723 (executing program) 2021/03/20 00:29:47 fetching corpus: 20495, signal 588863/665723 (executing program) 2021/03/20 00:29:47 fetching corpus: 20545, signal 589143/665723 (executing program) 2021/03/20 00:29:47 fetching corpus: 20595, signal 589602/665723 (executing program) 2021/03/20 00:29:48 fetching corpus: 20645, signal 589949/665723 (executing program) 2021/03/20 00:29:48 fetching corpus: 20695, signal 590326/665723 (executing program) 2021/03/20 00:29:48 fetching corpus: 20745, signal 590669/665723 (executing program) 2021/03/20 00:29:49 fetching corpus: 20795, signal 591023/665723 (executing program) 2021/03/20 00:29:49 fetching corpus: 20845, signal 591423/665723 (executing program) 2021/03/20 00:29:49 fetching corpus: 20895, signal 591781/665723 (executing program) 2021/03/20 00:29:49 fetching corpus: 20945, signal 592285/665723 (executing program) 2021/03/20 00:29:50 fetching corpus: 20995, signal 592677/665723 (executing program) 2021/03/20 00:29:50 fetching corpus: 21045, signal 593108/665723 (executing program) 2021/03/20 00:29:50 fetching corpus: 21095, signal 593296/665723 (executing program) 2021/03/20 00:29:51 fetching corpus: 21145, signal 593781/665723 (executing program) 2021/03/20 00:29:51 fetching corpus: 21195, signal 594289/665723 (executing program) 2021/03/20 00:29:51 fetching corpus: 21245, signal 594751/665723 (executing program) 2021/03/20 00:29:51 fetching corpus: 21295, signal 595025/665723 (executing program) 2021/03/20 00:29:52 fetching corpus: 21345, signal 595725/665723 (executing program) 2021/03/20 00:29:52 fetching corpus: 21395, signal 596138/665723 (executing program) 2021/03/20 00:29:52 fetching corpus: 21445, signal 596517/665723 (executing program) 2021/03/20 00:29:52 fetching corpus: 21495, signal 596879/665723 (executing program) 2021/03/20 00:29:53 fetching corpus: 21545, signal 597152/665723 (executing program) 2021/03/20 00:29:53 fetching corpus: 21595, signal 597578/665723 (executing program) 2021/03/20 00:29:53 fetching corpus: 21645, signal 597933/665723 (executing program) 2021/03/20 00:29:54 fetching corpus: 21695, signal 598721/665723 (executing program) 2021/03/20 00:29:54 fetching corpus: 21745, signal 598956/665723 (executing program) 2021/03/20 00:29:54 fetching corpus: 21795, signal 599279/665723 (executing program) 2021/03/20 00:29:54 fetching corpus: 21845, signal 599634/665723 (executing program) 2021/03/20 00:29:55 fetching corpus: 21895, signal 600552/665723 (executing program) 2021/03/20 00:29:55 fetching corpus: 21945, signal 600845/665723 (executing program) 2021/03/20 00:29:55 fetching corpus: 21995, signal 601152/665723 (executing program) 2021/03/20 00:29:55 fetching corpus: 22045, signal 601470/665724 (executing program) 2021/03/20 00:29:56 fetching corpus: 22095, signal 601871/665724 (executing program) 2021/03/20 00:29:56 fetching corpus: 22145, signal 602097/665724 (executing program) 2021/03/20 00:29:56 fetching corpus: 22195, signal 602991/665724 (executing program) 2021/03/20 00:29:56 fetching corpus: 22245, signal 603357/665724 (executing program) 2021/03/20 00:29:57 fetching corpus: 22295, signal 603995/665724 (executing program) 2021/03/20 00:29:57 fetching corpus: 22345, signal 604197/665727 (executing program) 2021/03/20 00:29:57 fetching corpus: 22395, signal 604745/665727 (executing program) 2021/03/20 00:29:58 fetching corpus: 22445, signal 605010/665727 (executing program) 2021/03/20 00:29:58 fetching corpus: 22495, signal 605340/665727 (executing program) 2021/03/20 00:29:58 fetching corpus: 22545, signal 605617/665727 (executing program) 2021/03/20 00:29:58 fetching corpus: 22595, signal 605887/665727 (executing program) 2021/03/20 00:29:59 fetching corpus: 22645, signal 606180/665727 (executing program) 2021/03/20 00:29:59 fetching corpus: 22695, signal 606454/665727 (executing program) 2021/03/20 00:29:59 fetching corpus: 22745, signal 606820/665727 (executing program) 2021/03/20 00:29:59 fetching corpus: 22795, signal 607306/665727 (executing program) 2021/03/20 00:29:59 fetching corpus: 22845, signal 607680/665727 (executing program) 2021/03/20 00:30:00 fetching corpus: 22895, signal 608184/665727 (executing program) 2021/03/20 00:30:00 fetching corpus: 22945, signal 608534/665727 (executing program) 2021/03/20 00:30:00 fetching corpus: 22995, signal 608779/665730 (executing program) 2021/03/20 00:30:00 fetching corpus: 23045, signal 609032/665730 (executing program) 2021/03/20 00:30:01 fetching corpus: 23095, signal 609283/665730 (executing program) 2021/03/20 00:30:01 fetching corpus: 23145, signal 609681/665730 (executing program) 2021/03/20 00:30:01 fetching corpus: 23195, signal 611174/665730 (executing program) 2021/03/20 00:30:01 fetching corpus: 23245, signal 611369/665730 (executing program) 2021/03/20 00:30:02 fetching corpus: 23295, signal 611603/665730 (executing program) 2021/03/20 00:30:02 fetching corpus: 23345, signal 611867/665730 (executing program) 2021/03/20 00:30:02 fetching corpus: 23395, signal 612290/665730 (executing program) 2021/03/20 00:30:02 fetching corpus: 23445, signal 612747/665730 (executing program) 2021/03/20 00:30:02 fetching corpus: 23495, signal 613072/665730 (executing program) 2021/03/20 00:30:03 fetching corpus: 23545, signal 613495/665730 (executing program) 2021/03/20 00:30:03 fetching corpus: 23595, signal 613801/665730 (executing program) 2021/03/20 00:30:03 fetching corpus: 23645, signal 614087/665730 (executing program) 2021/03/20 00:30:03 fetching corpus: 23695, signal 614353/665730 (executing program) 2021/03/20 00:30:04 fetching corpus: 23745, signal 614673/665730 (executing program) 2021/03/20 00:30:04 fetching corpus: 23795, signal 615024/665730 (executing program) 2021/03/20 00:30:04 fetching corpus: 23845, signal 615255/665730 (executing program) 2021/03/20 00:30:05 fetching corpus: 23895, signal 615498/665730 (executing program) 2021/03/20 00:30:05 fetching corpus: 23945, signal 615739/665730 (executing program) 2021/03/20 00:30:05 fetching corpus: 23995, signal 615972/665730 (executing program) 2021/03/20 00:30:06 fetching corpus: 24045, signal 616304/665730 (executing program) 2021/03/20 00:30:06 fetching corpus: 24095, signal 616542/665730 (executing program) 2021/03/20 00:30:06 fetching corpus: 24145, signal 616774/665730 (executing program) 2021/03/20 00:30:06 fetching corpus: 24195, signal 617289/665730 (executing program) 2021/03/20 00:30:07 fetching corpus: 24245, signal 617598/665730 (executing program) 2021/03/20 00:30:07 fetching corpus: 24295, signal 618157/665730 (executing program) 2021/03/20 00:30:07 fetching corpus: 24345, signal 618481/665730 (executing program) 2021/03/20 00:30:07 fetching corpus: 24395, signal 619058/665730 (executing program) 2021/03/20 00:30:08 fetching corpus: 24445, signal 619389/665730 (executing program) 2021/03/20 00:30:08 fetching corpus: 24495, signal 619678/665730 (executing program) 2021/03/20 00:30:08 fetching corpus: 24545, signal 619924/665730 (executing program) 2021/03/20 00:30:08 fetching corpus: 24595, signal 620174/665730 (executing program) 2021/03/20 00:30:09 fetching corpus: 24645, signal 620478/665730 (executing program) 2021/03/20 00:30:09 fetching corpus: 24695, signal 620827/665730 (executing program) 2021/03/20 00:30:09 fetching corpus: 24745, signal 621110/665730 (executing program) 2021/03/20 00:30:10 fetching corpus: 24795, signal 621441/665730 (executing program) 2021/03/20 00:30:10 fetching corpus: 24845, signal 621712/665730 (executing program) 2021/03/20 00:30:10 fetching corpus: 24895, signal 621950/665730 (executing program) 2021/03/20 00:30:10 fetching corpus: 24945, signal 622335/665730 (executing program) 2021/03/20 00:30:11 fetching corpus: 24995, signal 622546/665730 (executing program) 2021/03/20 00:30:11 fetching corpus: 25045, signal 622745/665730 (executing program) 2021/03/20 00:30:11 fetching corpus: 25095, signal 623252/665730 (executing program) 2021/03/20 00:30:12 fetching corpus: 25145, signal 623936/665730 (executing program) 2021/03/20 00:30:12 fetching corpus: 25195, signal 624473/665730 (executing program) 2021/03/20 00:30:12 fetching corpus: 25245, signal 624721/665730 (executing program) 2021/03/20 00:30:12 fetching corpus: 25295, signal 624929/665730 (executing program) 2021/03/20 00:30:13 fetching corpus: 25345, signal 625226/665730 (executing program) 2021/03/20 00:30:13 fetching corpus: 25395, signal 625566/665730 (executing program) 2021/03/20 00:30:13 fetching corpus: 25445, signal 626025/665730 (executing program) 2021/03/20 00:30:13 fetching corpus: 25495, signal 626359/665730 (executing program) 2021/03/20 00:30:13 fetching corpus: 25545, signal 626636/665730 (executing program) 2021/03/20 00:30:14 fetching corpus: 25595, signal 626812/665730 (executing program) 2021/03/20 00:30:14 fetching corpus: 25645, signal 627164/665730 (executing program) 2021/03/20 00:30:14 fetching corpus: 25695, signal 627678/665730 (executing program) 2021/03/20 00:30:14 fetching corpus: 25745, signal 627928/665731 (executing program) 2021/03/20 00:30:15 fetching corpus: 25795, signal 628347/665731 (executing program) 2021/03/20 00:30:15 fetching corpus: 25845, signal 628568/665731 (executing program) 2021/03/20 00:30:15 fetching corpus: 25895, signal 628977/665731 (executing program) 2021/03/20 00:30:15 fetching corpus: 25945, signal 629152/665731 (executing program) 2021/03/20 00:30:16 fetching corpus: 25995, signal 629400/665731 (executing program) 2021/03/20 00:30:16 fetching corpus: 26045, signal 629852/665731 (executing program) 2021/03/20 00:30:16 fetching corpus: 26095, signal 630020/665731 (executing program) 2021/03/20 00:30:17 fetching corpus: 26145, signal 630259/665731 (executing program) 2021/03/20 00:30:17 fetching corpus: 26195, signal 630515/665731 (executing program) 2021/03/20 00:30:17 fetching corpus: 26245, signal 630975/665731 (executing program) 2021/03/20 00:30:17 fetching corpus: 26295, signal 631299/665731 (executing program) 2021/03/20 00:30:18 fetching corpus: 26345, signal 631573/665731 (executing program) 2021/03/20 00:30:18 fetching corpus: 26395, signal 631789/665731 (executing program) 2021/03/20 00:30:18 fetching corpus: 26445, signal 632074/665731 (executing program) 2021/03/20 00:30:19 fetching corpus: 26495, signal 632270/665731 (executing program) 2021/03/20 00:30:19 fetching corpus: 26545, signal 632464/665731 (executing program) 2021/03/20 00:30:19 fetching corpus: 26595, signal 632671/665731 (executing program) 2021/03/20 00:30:20 fetching corpus: 26645, signal 632873/665732 (executing program) 2021/03/20 00:30:20 fetching corpus: 26695, signal 633141/665732 (executing program) 2021/03/20 00:30:20 fetching corpus: 26745, signal 633337/665732 (executing program) 2021/03/20 00:30:20 fetching corpus: 26795, signal 633601/665732 (executing program) 2021/03/20 00:30:21 fetching corpus: 26845, signal 633883/665732 (executing program) 2021/03/20 00:30:21 fetching corpus: 26895, signal 634120/665732 (executing program) 2021/03/20 00:30:21 fetching corpus: 26945, signal 634397/665732 (executing program) 2021/03/20 00:30:21 fetching corpus: 26995, signal 634626/665733 (executing program) 2021/03/20 00:30:22 fetching corpus: 27045, signal 634996/665733 (executing program) 2021/03/20 00:30:22 fetching corpus: 27095, signal 635427/665733 (executing program) 2021/03/20 00:30:22 fetching corpus: 27145, signal 635772/665733 (executing program) 2021/03/20 00:30:22 fetching corpus: 27195, signal 636005/665733 (executing program) 2021/03/20 00:30:23 fetching corpus: 27245, signal 636333/665733 (executing program) 2021/03/20 00:30:23 fetching corpus: 27295, signal 636538/665733 (executing program) 2021/03/20 00:30:23 fetching corpus: 27345, signal 636819/665733 (executing program) 2021/03/20 00:30:23 fetching corpus: 27395, signal 637068/665733 (executing program) 2021/03/20 00:30:24 fetching corpus: 27445, signal 637351/665733 (executing program) 2021/03/20 00:30:24 fetching corpus: 27495, signal 637619/665733 (executing program) 2021/03/20 00:30:24 fetching corpus: 27545, signal 637913/665733 (executing program) 2021/03/20 00:30:25 fetching corpus: 27595, signal 638203/665733 (executing program) 2021/03/20 00:30:25 fetching corpus: 27645, signal 638460/665733 (executing program) 2021/03/20 00:30:25 fetching corpus: 27695, signal 638980/665733 (executing program) 2021/03/20 00:30:26 fetching corpus: 27745, signal 639123/665733 (executing program) 2021/03/20 00:30:26 fetching corpus: 27795, signal 639361/665733 (executing program) 2021/03/20 00:30:26 fetching corpus: 27845, signal 640143/665733 (executing program) 2021/03/20 00:30:27 fetching corpus: 27895, signal 640355/665733 (executing program) 2021/03/20 00:30:27 fetching corpus: 27945, signal 640758/665733 (executing program) 2021/03/20 00:30:27 fetching corpus: 27995, signal 641011/665733 (executing program) 2021/03/20 00:30:27 fetching corpus: 28045, signal 641336/665733 (executing program) 2021/03/20 00:30:28 fetching corpus: 28095, signal 641737/665733 (executing program) 2021/03/20 00:30:28 fetching corpus: 28145, signal 642017/665733 (executing program) 2021/03/20 00:30:28 fetching corpus: 28195, signal 642782/665733 (executing program) 2021/03/20 00:30:29 fetching corpus: 28245, signal 642994/665733 (executing program) 2021/03/20 00:30:29 fetching corpus: 28295, signal 643174/665733 (executing program) 2021/03/20 00:30:29 fetching corpus: 28345, signal 643393/665733 (executing program) 2021/03/20 00:30:29 fetching corpus: 28395, signal 643620/665733 (executing program) 2021/03/20 00:30:30 fetching corpus: 28445, signal 643934/665733 (executing program) 2021/03/20 00:30:30 fetching corpus: 28495, signal 644217/665733 (executing program) 2021/03/20 00:30:30 fetching corpus: 28545, signal 644549/665733 (executing program) 2021/03/20 00:30:30 fetching corpus: 28595, signal 644819/665733 (executing program) 2021/03/20 00:30:31 fetching corpus: 28645, signal 645077/665733 (executing program) 2021/03/20 00:30:31 fetching corpus: 28695, signal 645319/665733 (executing program) 2021/03/20 00:30:31 fetching corpus: 28745, signal 645836/665733 (executing program) 2021/03/20 00:30:32 fetching corpus: 28795, signal 646009/665733 (executing program) 2021/03/20 00:30:32 fetching corpus: 28845, signal 646329/665733 (executing program) 2021/03/20 00:30:32 fetching corpus: 28895, signal 646555/665733 (executing program) 2021/03/20 00:30:32 fetching corpus: 28945, signal 646904/665733 (executing program) 2021/03/20 00:30:33 fetching corpus: 28995, signal 647101/665733 (executing program) 2021/03/20 00:30:33 fetching corpus: 29045, signal 647388/665733 (executing program) 2021/03/20 00:30:33 fetching corpus: 29095, signal 647668/665733 (executing program) 2021/03/20 00:30:33 fetching corpus: 29145, signal 648067/665733 (executing program) 2021/03/20 00:30:33 fetching corpus: 29195, signal 648248/665733 (executing program) 2021/03/20 00:30:34 fetching corpus: 29245, signal 648463/665733 (executing program) 2021/03/20 00:30:34 fetching corpus: 29295, signal 648735/665733 (executing program) 2021/03/20 00:30:34 fetching corpus: 29345, signal 649042/665733 (executing program) 2021/03/20 00:30:35 fetching corpus: 29395, signal 649319/665733 (executing program) 2021/03/20 00:30:35 fetching corpus: 29445, signal 649566/665733 (executing program) 2021/03/20 00:30:35 fetching corpus: 29495, signal 649812/665733 (executing program) 2021/03/20 00:30:35 fetching corpus: 29545, signal 650114/665733 (executing program) 2021/03/20 00:30:36 fetching corpus: 29595, signal 650362/665733 (executing program) 2021/03/20 00:30:37 fetching corpus: 29645, signal 650571/665733 (executing program) 2021/03/20 00:30:37 fetching corpus: 29695, signal 650764/665733 (executing program) 2021/03/20 00:30:37 fetching corpus: 29745, signal 651019/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29795, signal 651479/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29845, signal 651910/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29895, signal 652058/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29945, signal 652371/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29977, signal 652496/665737 (executing program) 2021/03/20 00:30:38 fetching corpus: 29977, signal 652496/665737 (executing program) 2021/03/20 00:30:41 starting 4 fuzzer processes 00:30:42 executing program 0: socket$inet6(0x18, 0x78a3da725ab7baca, 0x0) 00:30:42 executing program 1: munmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000) 00:30:42 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) 00:30:43 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) [ 285.743795][ T8651] IPVS: ftp: loaded support on port[0] = 21 [ 285.893139][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 285.972790][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.984472][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.999689][ T8651] device bridge_slave_0 entered promiscuous mode [ 286.013896][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.025129][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.038656][ T8651] device bridge_slave_1 entered promiscuous mode [ 286.075780][ T8653] IPVS: ftp: loaded support on port[0] = 21 [ 286.084124][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.102416][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.152250][ T8651] team0: Port device team_slave_0 added [ 286.165501][ T8651] team0: Port device team_slave_1 added [ 286.202697][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.211457][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.242622][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.261488][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.270027][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.302080][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.342310][ T8651] device hsr_slave_0 entered promiscuous mode [ 286.352856][ T8651] device hsr_slave_1 entered promiscuous mode [ 286.476728][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 286.483130][ T8655] IPVS: ftp: loaded support on port[0] = 21 [ 286.532803][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.543754][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.595382][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 286.689876][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.698644][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.709914][ T8653] device bridge_slave_0 entered promiscuous mode [ 286.747901][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.758252][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.770161][ T8653] device bridge_slave_1 entered promiscuous mode [ 286.819968][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.865299][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.896821][ T8651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.916106][ T8653] team0: Port device team_slave_0 added [ 286.931138][ T8653] team0: Port device team_slave_1 added [ 286.966032][ T8651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.010100][ T8651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.069886][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 287.086651][ T8651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.113941][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.127505][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.188022][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.212334][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.222399][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.255168][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.350080][ T8653] device hsr_slave_0 entered promiscuous mode [ 287.358774][ T8653] device hsr_slave_1 entered promiscuous mode [ 287.375674][ T8653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.389162][ T8653] Cannot create hsr debugfs directory [ 287.425348][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 287.569249][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.583999][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.602400][ T8655] device bridge_slave_0 entered promiscuous mode [ 287.623895][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.640432][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.660123][ T8657] device bridge_slave_0 entered promiscuous mode [ 287.680896][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.699758][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.718052][ T8655] device bridge_slave_1 entered promiscuous mode [ 287.720399][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 287.748443][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.766420][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.778085][ T8657] device bridge_slave_1 entered promiscuous mode [ 287.816259][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.854137][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.912774][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.957738][ T8655] team0: Port device team_slave_0 added [ 287.979247][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.022358][ T8655] team0: Port device team_slave_1 added [ 288.043977][ T8657] team0: Port device team_slave_0 added [ 288.049134][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 288.065237][ T8657] team0: Port device team_slave_1 added [ 288.113634][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.123812][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.161817][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.205573][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.221805][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.273979][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.300546][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.309931][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.362386][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.393350][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.407983][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.461316][ T37] Bluetooth: hci2: command 0x0409 tx timeout [ 288.461995][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.572754][ T8657] device hsr_slave_0 entered promiscuous mode [ 288.590507][ T8657] device hsr_slave_1 entered promiscuous mode [ 288.599463][ T30] Bluetooth: hci3: command 0x0409 tx timeout [ 288.628434][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.647721][ T8657] Cannot create hsr debugfs directory [ 288.703420][ T8655] device hsr_slave_0 entered promiscuous mode [ 288.718310][ T8655] device hsr_slave_1 entered promiscuous mode [ 288.729526][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.750688][ T8655] Cannot create hsr debugfs directory [ 288.793798][ T8653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.803965][ T8653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.847584][ T8653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.864489][ T8653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.941466][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.040245][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.085973][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.097703][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.154408][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.171595][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.200112][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.215421][ T9260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.233483][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.253088][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.268514][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.282097][ T9260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.300107][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.341826][ T8655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.356524][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.370237][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.382016][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.398645][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.413648][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.430341][ T8655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.459848][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.477641][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.503836][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.529054][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.552400][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.588612][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.611886][ T8655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.627995][ T8655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.669878][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.749146][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.770948][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.804972][ T9421] Bluetooth: hci0: command 0x041b tx timeout [ 289.822546][ T8657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.846867][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.862955][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.879400][ T8657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.908687][ T8657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.929848][ T8657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.991729][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.003668][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.028024][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.105567][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.120346][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.130032][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 290.133190][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.153433][ T3997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.169995][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.185050][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.198680][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.209777][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.220673][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.233746][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.245135][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.256010][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.268300][ T3997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.309093][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.332427][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.346916][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.371232][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.385990][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.403292][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.414544][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.426316][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.437726][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.447366][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.466441][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.476413][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.489640][ T8651] device veth0_vlan entered promiscuous mode [ 290.519306][ T3038] Bluetooth: hci2: command 0x041b tx timeout [ 290.524232][ T8653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.545195][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.558095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.571283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.585106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.596166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.644164][ T8651] device veth1_vlan entered promiscuous mode [ 290.657620][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.683706][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 290.697009][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.722185][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.745639][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.767179][ T3952] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.779054][ T3952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.830702][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.840989][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.864489][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.888179][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.905198][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.931042][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.944518][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.964056][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.978652][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.993203][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.008632][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.039600][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.069776][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.093071][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.111309][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.129512][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.148413][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.178768][ T8651] device veth0_macvtap entered promiscuous mode [ 291.197901][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.214245][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.234655][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.256469][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.273160][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.312671][ T8651] device veth1_macvtap entered promiscuous mode [ 291.338122][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.375426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.400154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.441748][ T8655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.476830][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.515441][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.533900][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.556350][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.567822][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.579663][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.591120][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.616841][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.629205][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.640666][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.655024][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.667532][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.676799][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.686930][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.708245][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.743769][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.780883][ T3952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.810790][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.850297][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.881544][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.900402][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.914993][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 291.934529][ T8651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.952373][ T8651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.979718][ T8651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.001142][ T8651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.068432][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.081726][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.108685][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.121639][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.133957][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.145871][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.155993][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.165759][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.177015][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.186895][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.199431][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 292.204541][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.249737][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.262712][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.280597][ T8653] device veth0_vlan entered promiscuous mode [ 292.321052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.333157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.343598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.355665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.404594][ T8653] device veth1_vlan entered promiscuous mode [ 292.421957][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.438082][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.454696][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.484760][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.559562][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.575877][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.588734][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.603842][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.609069][ T3038] Bluetooth: hci2: command 0x040f tx timeout [ 292.636851][ T9406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.638132][ T9514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.653438][ T9406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.669950][ T9514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.696287][ T9514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.716041][ T8653] device veth0_macvtap entered promiscuous mode [ 292.734749][ T8653] device veth1_macvtap entered promiscuous mode [ 292.748724][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.759713][ T9260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.769337][ T9532] Bluetooth: hci3: command 0x040f tx timeout [ 292.817288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.846106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.873703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.893854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.914708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.933844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.947570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.980690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.994754][ T8655] device veth0_vlan entered promiscuous mode [ 293.027395][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.039345][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.050583][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 293.087854][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.105778][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.116550][ T8657] device veth0_vlan entered promiscuous mode [ 293.150601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.168683][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.189551][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.229658][ T8655] device veth1_vlan entered promiscuous mode [ 293.265081][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 293.281521][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.301285][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.314655][ T8657] device veth1_vlan entered promiscuous mode [ 293.328064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.344678][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.381232][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.393525][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.433740][ T8653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.450486][ T8653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.468385][ T8653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.491504][ T8653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:30:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) [ 293.631134][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.651105][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.662802][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.681400][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:30:51 executing program 0: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0) [ 293.757446][ T8657] device veth0_macvtap entered promiscuous mode [ 293.780540][ T8657] device veth1_macvtap entered promiscuous mode [ 293.806750][ T8655] device veth0_macvtap entered promiscuous mode 00:30:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x310, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x101}}}, {{@ipv6={@ipv4={[], [], @rand_addr=0x64010101}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6gretap0\x00', 'veth1_vlan\x00'}, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148, 'sctp\x00'}, {[0x4e22, 0x4e20], [0x0, 0x4e21], [0x0, 0x4, 0xfffffffa, 0x9, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0x1, 0x60c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x4853, 0x5, 0x401000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x7fff, 0x8, 0x2ca2, 0x959, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xfff, 0x7fff, 0x7f, 0x9d98, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x8, 0x80000000, 0x9], 0x0, [{}, {0x9, 0x80}, {0x0, 0xef, 0xc3}], 0x4, 0x7, 0x4}}, @common=@hl={{0x28, 'hl\x00'}, {0x0, 0x80}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x100020}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x4, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x3, 0x9d, 0x3f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2], 0xf2}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) [ 293.927034][ T8655] device veth1_macvtap entered promiscuous mode [ 293.970258][ T9532] Bluetooth: hci0: command 0x0419 tx timeout 00:30:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x310, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ipv6={@ipv4={[], [], @rand_addr=0x64010101}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffffff], 'ip6gretap0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x68, 0x0, 0x35}, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148, 'sctp\x00'}, {[], [], [0x1, 0x4, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x200, 0x7fff, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4853, 0x5, 0x401000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7fff, 0x8, 0x2ca2, 0x959, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x7fff, 0x7f, 0x9d98, 0xfffffe00, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x80000000, 0x9, 0x80000001, 0x1da, 0x1], 0x3, [{0x2, 0x9, 0x33}, {0x0, 0x80, 0x5}]}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x80}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x3bf8, 0x4, 0x1, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x3, 0x9d, 0x3f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2], 0xf2}}, @common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) [ 294.008619][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.027102][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.049689][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.074245][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.118678][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.171760][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.208470][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.230161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.231023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.231932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.232751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.233336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.233957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.236780][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.299630][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 294.308042][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.397239][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.413337][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:30:52 executing program 0: open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffb, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 294.442741][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.467763][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.496945][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.512604][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.541007][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.563082][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.597897][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.642945][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.684151][ T30] Bluetooth: hci2: command 0x0419 tx timeout [ 294.687251][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.718179][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.746411][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.769307][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.798750][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.825170][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.839303][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 294.853600][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.865229][ T49] audit: type=1800 audit(1616200252.715:2): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14174 res=0 errno=0 [ 294.932033][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.967078][ T49] audit: type=1800 audit(1616200252.715:3): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14174 res=0 errno=0 [ 294.967956][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.027453][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.052740][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.067570][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.085202][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.102963][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.174126][ T8657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.191724][ T8657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.203299][ T8657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.214931][ T8657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.241131][ T8655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.257775][ T8655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.283564][ T8655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.303816][ T8655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.353222][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.365950][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.382349][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.521822][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.543746][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.554148][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.572775][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.598480][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.621316][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.656338][ T8812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.659599][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:30:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@shortname_mixed='shortname=mixed'}]}) [ 295.681610][ T8812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.706848][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.711520][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.734071][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:30:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x3090025, 0x0) 00:30:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x8000400) r1 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000000c0)=""/212, 0xd4}], 0x2, 0x0, 0x0) 00:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000001440)) 00:30:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8030000, 0x0, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) 00:30:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) 00:30:53 executing program 2: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x2}]) 00:30:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x14) 00:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@shortname_mixed='shortname=mixed'}]}) 00:30:54 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80) [ 296.901290][ T49] audit: type=1804 audit(1616200254.755:4): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir553447439/syzkaller.vvntLx/4/bus" dev="sda1" ino=14193 res=1 errno=0 00:30:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) [ 296.979235][ T49] audit: type=1804 audit(1616200254.825:5): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir553447439/syzkaller.vvntLx/4/bus" dev="sda1" ino=14193 res=1 errno=0 00:30:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) 00:30:54 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) [ 297.083032][ T49] audit: type=1800 audit(1616200254.825:6): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=14193 res=0 errno=0 [ 297.165130][ T49] audit: type=1800 audit(1616200254.825:7): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=14193 res=0 errno=0 [ 297.287910][ T49] audit: type=1804 audit(1616200255.135:8): pid=9695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir553447439/syzkaller.vvntLx/5/bus" dev="sda1" ino=14186 res=1 errno=0 00:30:55 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:55 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@shortname_mixed='shortname=mixed'}]}) [ 297.831386][ T49] audit: type=1804 audit(1616200255.685:9): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir221814097/syzkaller.5R2GNf/9/bus" dev="sda1" ino=14185 res=1 errno=0 [ 297.908562][ T49] audit: type=1804 audit(1616200255.695:10): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir610712345/syzkaller.3sFJRJ/5/bus" dev="sda1" ino=14189 res=1 errno=0 [ 297.996890][ T49] audit: type=1804 audit(1616200255.755:11): pid=9712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir553447439/syzkaller.vvntLx/6/bus" dev="sda1" ino=14195 res=1 errno=0 00:30:55 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:55 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:56 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xca042, 0x0) creat(0x0, 0x0) ftruncate(r1, 0x2007fff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x7632) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x88600, 0x0) 00:30:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x309002e, 0x0) [ 298.497801][ T9730] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:30:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_SET_PIT2(r2, 0xae64, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 298.557025][ T9730] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 298.676441][ T9737] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:30:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, &(0x7f0000001380), 0x0, &(0x7f0000001440)={[{@shortname_mixed='shortname=mixed'}]}) 00:30:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x309002e, 0x0) [ 298.759381][ T9742] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:30:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x309002e, 0x0) 00:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, &(0x7f0000001380), 0x50001, &(0x7f0000001440)=ANY=[]) syz_read_part_table(0x0, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0xad4, 0x2}]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) getresuid(&(0x7f0000001200), 0x0, 0x0) getresuid(&(0x7f0000001400), 0x0, 0x0) getresuid(0x0, &(0x7f0000001540), &(0x7f0000001580)) 00:30:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000240)=0x80002, 0x4) close(r0) [ 298.920979][ T9754] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:30:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x309002e, 0x0) 00:30:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20044000, &(0x7f00000002c0)="85f5154bf662b6efbce8220f293e25376fa61aeb1e55d6ad5f09e1bb1ab3266659e395a973757abb0f2380a41cb42ac654bc2058a6626b1ca787234a85742a14831d057e1b624a3322ef7398686f7802ee2a4cf9f127ebf28560115d460a37485f5fdb1b4474ea218b5affaf19c661b9849d5e0b68cb89cedfb271b43d2896cac933bc031e013a77425a59ceaccf1df5d2b09744cec3004a9bb75d1b9c2233494e6e92724179ee30a7b1582d352e650ad9f34fb3f59ed8ecbbe7883f13c2d8c7000000000000", &(0x7f0000000080), 0x0, &(0x7f0000000180)="fe5b8f095d48fc2a818473ab1c24bd132b94389d100c4236e61a891d85c844c69b72beb25881b3f9e3d99aa8987961fd2b54bac6c50cf9232d2d7958712376354c9621e640540831b0c4110392fd707abcb87c1988b6e1e7d87255fc53da") 00:30:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) unshare(0x8020000) [ 299.052231][ T9764] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. 00:30:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}}}]}}]}, 0x68}}, 0x0) 00:30:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fallocate(r0, 0x100000003, 0x0, 0x80019c) 00:30:57 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x16000000000}, {0x0}]) 00:30:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=@can, 0x80) [ 299.734403][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.749997][ T9785] sch_tbf: burst 0 is lower than device batadv_slave_1 mtu (1514) ! [ 299.765511][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:30:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}}}]}}]}, 0x68}}, 0x0) 00:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x8010aebc, &(0x7f00000002c0)) [ 299.877163][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.895989][ T9798] sch_tbf: burst 0 is lower than device hsr_slave_1 mtu (1514) ! 00:30:57 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x16000000000}, {0x0}]) 00:30:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}}}]}}]}, 0x68}}, 0x0) 00:30:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file1\x00', 0x0) 00:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x8010aebc, &(0x7f00000002c0)) [ 299.988292][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.015371][ T9809] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! 00:30:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) 00:30:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}}}]}}]}, 0x68}}, 0x0) [ 300.106783][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:30:57 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x41}, 0x20) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x9) [ 300.123732][ T9826] sch_tbf: burst 0 is lower than device virt_wifi0 mtu (1514) ! 00:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x8010aebc, &(0x7f00000002c0)) [ 300.151348][ T9829] ptrace attach of "/syz-executor.1"[9828] was attempted by "/syz-executor.1"[9829] 00:30:58 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x16000000000}, {0x0}]) 00:30:58 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) 00:30:58 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}}) [ 300.272963][ C0] hrtimer: interrupt took 30947 ns [ 300.276920][ T9847] fuse: Bad value for 'fd' 00:30:58 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x8010aebc, &(0x7f00000002c0)) 00:30:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000000200001900000060010000ffffffffffffffff0000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000180)) [ 300.651823][ T49] kauditd_printk_skb: 5 callbacks suppressed 00:30:58 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f00000005c0)=[{0x0, 0x0, 0x16000000000}, {0x0}]) [ 300.651840][ T49] audit: type=1800 audit(1616200258.505:17): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 300.728688][ T9868] loop3: detected capacity change from 0 to 1051 [ 300.766775][ T9868] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (512) 00:30:58 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:30:58 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:30:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000000200001900000060010000ffffffffffffffff0000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000180)) 00:30:58 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.034712][ T9891] loop3: detected capacity change from 0 to 1051 [ 301.051387][ T9891] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (512) 00:30:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000000200001900000060010000ffffffffffffffff0000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000180)) [ 301.294782][ T49] audit: type=1800 audit(1616200259.145:18): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 00:30:59 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.369992][ T49] audit: type=1800 audit(1616200259.145:19): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 301.436689][ T9900] loop3: detected capacity change from 0 to 1051 [ 301.449856][ T9900] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (512) 00:30:59 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.451872][ T49] audit: type=1800 audit(1616200259.305:20): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 00:30:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000000200001900000060010000ffffffffffffffff0000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000180)) 00:30:59 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.677371][ T9912] loop3: detected capacity change from 0 to 1051 [ 301.696188][ T9912] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (512) [ 301.846109][ T49] audit: type=1800 audit(1616200259.695:21): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 00:30:59 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.907965][ T9919] overlayfs: overlapping lowerdir path 00:30:59 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 301.946542][ T49] audit: type=1800 audit(1616200259.795:22): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 00:30:59 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 302.060178][ T49] audit: type=1800 audit(1616200259.905:23): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 00:31:00 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 302.306459][ T49] audit: type=1800 audit(1616200260.155:24): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 00:31:00 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 302.418640][ T49] audit: type=1800 audit(1616200260.155:25): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 302.456931][ T49] audit: type=1800 audit(1616200260.155:26): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 00:31:00 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 302.762494][ T9942] overlayfs: overlapping lowerdir path 00:31:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x8000400) recvmsg(0xffffffffffffffff, 0x0, 0x0) 00:31:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0xfe16, &(0x7f0000001440)) 00:31:00 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:31:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001440)) mkdir(&(0x7f0000000180)='./file0\x00', 0xa0) 00:31:00 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:31:01 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 303.217493][ T9967] FAT-fs (loop2): bogus number of reserved sectors [ 303.225155][ T9967] FAT-fs (loop2): Can't find a valid FAT filesystem [ 303.360571][ T9967] FAT-fs (loop2): bogus number of reserved sectors [ 303.367333][ T9967] FAT-fs (loop2): Can't find a valid FAT filesystem 00:31:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0x1, &(0x7f00000019c0)=@raw=[@func], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x1) 00:31:01 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0xb223, 0xab, &(0x7f0000000300)=""/171, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:01 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000b80)=@framed, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:31:01 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:31:01 executing program 3: bpf$ITER_CREATE(0x1a, 0x0, 0x0) 00:31:01 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus/file0\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000080)='overlay\x00', 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000850, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, &(0x7f0000000280)=""/64, 0x40}, 0x1ff0}], 0x1, 0x2000, &(0x7f0000000300)={0x0, 0x989680}) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000003000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 00:31:01 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 00:31:01 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x20000, 0x0) 00:31:01 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0xc0400, 0x0) 00:31:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000002c0)='syzkaller\x00', 0xb223, 0xab, &(0x7f0000000300)=""/171, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:01 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x420040, 0x0) 00:31:01 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 00:31:01 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:31:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 00:31:02 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000002fc0)=@framed, &(0x7f0000003000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:02 executing program 3: bpf$ITER_CREATE(0x15, 0x0, 0x0) 00:31:02 executing program 0: perf_event_open(&(0x7f0000001b40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) 00:31:02 executing program 3: unlink(&(0x7f0000003400)='./file0\x00') 00:31:02 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 00:31:02 executing program 2: perf_event_open(&(0x7f0000001c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:31:02 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200050fd25a80648c63940d0524fc60100010400a000a00053582c137153e370248038035000000d1bd", 0x33fe0}], 0x1}, 0x0) 00:31:02 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) 00:31:02 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003280)={0x0, 0x0, 0xff}, 0x10, 0x903}, 0x78) unlink(0x0) [ 304.363271][T10031] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 304.394887][T10031] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:31:02 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000003400)='./file0\x00') [ 304.417727][T10031] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. 00:31:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@initr0]}, &(0x7f00000002c0)='syzkaller\x00', 0xb223, 0xab, &(0x7f0000000300)=""/171, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:02 executing program 3: bpf$ITER_CREATE(0xd, &(0x7f0000000100), 0x8) 00:31:02 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) 00:31:02 executing program 0: bpf$ITER_CREATE(0x14, 0x0, 0x0) 00:31:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:31:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe907}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:31:02 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005140)={@cgroup, 0xffffffffffffffff, 0x24}, 0x10) 00:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x40800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40004, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000200)=""/4083}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, &(0x7f00000031c0)=""/102380}, 0x20) 00:31:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x12db}, @TCA_TBF_BURST={0x8, 0x6, 0x23a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xf81c}}]}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:31:02 executing program 1: bpf$ITER_CREATE(0x16, 0x0, 0x0) [ 304.656086][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 00:31:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 304.702324][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:02 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:31:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x12db}, @TCA_TBF_BURST={0x8, 0x6, 0x23a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xf81c}}]}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:31:02 executing program 2: bpf$ITER_CREATE(0x1d, &(0x7f0000000100), 0x8) 00:31:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000001140)=@framed, &(0x7f00000011c0)='GPL\x00', 0x3f, 0x0, 0x0, 0x40e00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:02 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x10) [ 304.881214][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x2, &(0x7f0000004f00)=@raw=[@btf_id], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:02 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x213280, 0x0) 00:31:02 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={0x0}, 0x10) 00:31:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x12db}, @TCA_TBF_BURST={0x8, 0x6, 0x23a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xf81c}}]}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:31:02 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:31:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 305.031312][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:02 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 00:31:02 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 00:31:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x12db}, @TCA_TBF_BURST={0x8, 0x6, 0x23a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xf81c}}]}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:31:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005d40), 0x10}, 0x78) 00:31:02 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 00:31:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 305.194865][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x2, &(0x7f0000004f00)=@raw=[@btf_id], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0xbc, &(0x7f0000004f80)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000001140)=@framed, &(0x7f00000011c0)='GPL\x00', 0x0, 0x71, &(0x7f0000001200)=""/113, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005d40), 0x10}, 0x78) 00:31:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:31:03 executing program 2: bpf$ITER_CREATE(0xb, 0x0, 0x0) 00:31:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x0, 0x0, &(0x7f0000004f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000000c0)={0x2, 0x0, [0x0, 0x0]}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) 00:31:03 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x18}, 0x10) 00:31:03 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') unlink(&(0x7f0000000080)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000003000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003240), 0x8, 0x10, 0x0}, 0x78) unlink(&(0x7f0000003400)='./file0\x00') 00:31:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x1, &(0x7f0000004f00)=@raw=[@exit], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:31:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005d00), 0x8, 0x10, 0x0}, 0x78) 00:31:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 00:31:03 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0xfb) 00:31:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x8, 0x1, &(0x7f00000019c0)=@raw=[@func], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 3: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:31:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 00:31:03 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 00:31:03 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f00000005c0)) 00:31:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 1: bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) 00:31:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000049c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="1fa3f216f1e1ccda3447e2c3e5f9a415757954a226e682e998eef4cf0091095df3bc80de8b647b80", 0x28}, {&(0x7f0000000100)="188ca901ca0e026db9222a68c80024d251dbeec6e7ac7007db5c7a38b11022ece23c6f0e1ac2e2f37b90bf258d8d869febd6832cf0176a09c5283047899dc78f22062b4a68eb3a586348a684519eb28dad3232b7349f4eb16db1", 0x5a}, {&(0x7f0000000180)="ea28236c8f9fcba7a139fbdd805dffe319d8b562b9e2e49bf102b4c19a13d5269162ceb217c81a529d27c18c0e25777be611b10214cd5822e6f345efebde42b49824e90ae6964a732e2a626a1eb7326603a8cdab", 0x54}, {&(0x7f0000000200)="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", 0xdeb}], 0x4}, 0x0) 00:31:03 executing program 1: perf_event_open(&(0x7f0000001c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:31:03 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 00:31:03 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x20000108) 00:31:03 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x18}, 0xc) 00:31:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5326e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:31:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x4) 00:31:03 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={0xffffffffffffffff, 0x0}, 0x20) 00:31:03 executing program 0: perf_event_open(&(0x7f0000001b40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:31:03 executing program 2: bpf$ITER_CREATE(0x14, &(0x7f0000000100), 0x8) 00:31:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000001140)=@framed, &(0x7f00000011c0)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') unlink(&(0x7f0000000080)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/145, 0x91}], 0x1}, 0x12041) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001940)={0x2, 0x70, 0x0, 0x0, 0x71, 0x5, 0x0, 0xfffffffffffffffb, 0x4000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x10002, 0x3, 0x8, 0x7, 0x6, 0x9, 0xbf}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000002fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@jmp={0x5, 0x0, 0x6, 0x539e3a7e784ac28b, 0x0, 0xc4f13e230cc771ce, 0x10}, @exit]}, &(0x7f0000003000)='syzkaller\x00', 0x80000001, 0x74, &(0x7f0000003040)=""/116, 0x41100, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003280)={0x1, 0x10, 0xff, 0x800}, 0x10}, 0x78) unlink(&(0x7f0000003400)='./file0\x00') 00:31:03 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:03 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/net/tun\x00', 0x103b80, 0x0) 00:31:03 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, 0xffffffffffffffff, 0x0) 00:31:03 executing program 2: bpf$ITER_CREATE(0x13, &(0x7f0000000100), 0x8) 00:31:03 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)={0x0, 0x0, 0x4}, 0x10) 00:31:04 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') unlink(0x0) unlink(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 00:31:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x5, &(0x7f0000001140)=@framed={{}, [@exit, @alu]}, &(0x7f00000011c0)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x8, 0x10, 0x0}, 0x78) 00:31:04 executing program 1: bpf$ITER_CREATE(0x15, &(0x7f0000000100), 0x8) 00:31:04 executing program 0: bpf$ITER_CREATE(0x1e, &(0x7f0000000100), 0x8) 00:31:04 executing program 3: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:31:04 executing program 2: unlink(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000003400)='./file0\x00') 00:31:04 executing program 1: bpf$ITER_CREATE(0x17, 0x0, 0x0) 00:31:04 executing program 3: socketpair(0x28, 0x0, 0x80000001, &(0x7f00000005c0)) 00:31:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:31:04 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x2, &(0x7f0000004f00)=@raw=[@btf_id], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0xbc, &(0x7f0000004f80)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x18, 0x3, &(0x7f0000005c40)=@framed, &(0x7f0000005c80)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'wlan1\x00'}) 00:31:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x0, 0x4, &(0x7f0000004f00)=@raw=[@btf_id={0x18, 0x2}, @exit, @exit], &(0x7f0000004f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 00:31:04 executing program 2: bpf$ITER_CREATE(0x12, 0x0, 0x0) 00:31:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 00:31:04 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) 00:31:04 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/net/tun\x00', 0x0, 0x0) 00:31:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x2d25da) write$cgroup_type(r1, 0x0, 0x0) 00:31:04 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') unlink(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)={0x0}, 0x10) 00:31:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) 00:31:04 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 00:31:04 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)='X', 0x1}], 0x1, 0x0, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:31:04 executing program 2: clock_gettime(0x3, &(0x7f0000002300)) 00:31:04 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0xc0e01, 0x0) 00:31:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 00:31:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x2d25da) write$cgroup_type(r1, 0x0, 0x0) 00:31:04 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 00:31:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) userfaultfd(0x0) [ 306.742012][T10283] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 00:31:04 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 00:31:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x2a0000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 00:31:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 00:31:04 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:31:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:04 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000001e80)) 00:31:04 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000001e80)) 00:31:04 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) 00:31:04 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000980)={[{@grpquota='grpquota'}]}) 00:31:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:04 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) 00:31:04 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 00:31:04 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000740), 0x0, 0x0, 0x0) 00:31:05 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 00:31:05 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000740), 0x0, 0x0, &(0x7f0000001840)={0x0}) 00:31:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 00:31:05 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) 00:31:05 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:31:05 executing program 3: fork() add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) r0 = fork() tkill(r0, 0x26) tkill(0x0, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_rr_get_interval(0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000000)) 00:31:05 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) 00:31:05 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0}) socketpair(0x2, 0x0, 0x0, &(0x7f0000001e80)) 00:31:05 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) 00:31:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x0, 0xb5, &(0x7f00000005c0)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:06 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) 00:31:06 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) 00:31:06 executing program 3: clock_getres(0x0, &(0x7f0000000440)) 00:31:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 00:31:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000940)) 00:31:06 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rtc0\x00', 0x0, 0x0) 00:31:06 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 00:31:06 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 00:31:06 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 00:31:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x8001) 00:31:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:06 executing program 2: r0 = mq_open(&(0x7f0000000100)=']\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0x0) 00:31:06 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:31:06 executing program 2: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000003500)=""/175) 00:31:06 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:06 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201090097e61d084c05c10666d50000000109022400010000000009040000020d22060009dfa9fce80200000009050a16"], 0x0) [ 308.819243][ T3038] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 309.079092][ T3038] usb 6-1: Using ep0 maxpacket: 8 [ 309.200580][ T3038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 309.212270][ T3038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 309.225263][ T3038] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.256101][ T3038] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=d5.66 [ 309.267629][ T3038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:31:07 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 00:31:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 00:31:07 executing program 3: r0 = mq_open(&(0x7f0000000100)=']\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) [ 309.282981][ T3038] usb 6-1: config 0 descriptor?? 00:31:07 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) [ 309.332273][ T3038] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint 00:31:07 executing program 3: r0 = mq_open(&(0x7f0000000100)=']\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x77359400}) 00:31:07 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 00:31:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x181180, 0x0) [ 309.536615][ T3038] usb 6-1: USB disconnect, device number 2 [ 310.341902][ T9260] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 310.588980][ T9260] usb 6-1: Using ep0 maxpacket: 8 [ 310.709268][ T9260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 310.724044][ T9260] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 310.751465][ T9260] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.771547][ T9260] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=d5.66 [ 310.787311][ T9260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.804487][ T9260] usb 6-1: config 0 descriptor?? [ 310.849869][ T9260] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 311.060248][ T3038] usb 6-1: USB disconnect, device number 3 00:31:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000940)=0x1) 00:31:08 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x369400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:31:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 00:31:08 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000740), &(0x7f0000000780)=""/98, 0x62, &(0x7f0000001840)={0x0, &(0x7f0000000840)="0692f44298bb57e62ce70d292b35c001fa10f87599d06018c7a1bc47b32d9af442ee84c74a4ea665d1843ba9302920cc6aed2973afb162cb1786a381210cf3480d", 0x41}) 00:31:08 executing program 0: r0 = mq_open(&(0x7f0000000100)=']\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/216, 0xd8, 0x0, &(0x7f0000000500)={0x77359400}) 00:31:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x4da9, 0xb5, &(0x7f00000005c0)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', r0) 00:31:09 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002340)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:31:09 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-vsock\x00', 0x2, 0x0) 00:31:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000540)=@raw=[@map], &(0x7f0000000580)='GPL\x00', 0x4da9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:31:09 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002340)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:31:09 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) 00:31:09 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, &(0x7f0000000080), 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 00:31:09 executing program 2: syz_open_dev$binderN(&(0x7f0000000600)='/dev/binder#\x00', 0x0, 0x0) 00:31:09 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) 00:31:09 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsu\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 00:31:09 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 00:31:09 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 00:31:09 executing program 2: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000001940)={0xffffffffffffffff}, 0xc) 00:31:10 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) 00:31:10 executing program 0: setreuid(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:10 executing program 2: mkdir(&(0x7f0000001380)='./file0\x00', 0x0) mknod(&(0x7f00000016c0)='./file0/file0\x00', 0x0, 0x0) 00:31:10 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) mknod(0x0, 0x0, 0xffffffff) 00:31:10 executing program 0: mknod(&(0x7f0000000d40)='./file0/file0\x00', 0x0, 0xffffffff) 00:31:10 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:31:10 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 312.529253][ T9515] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 312.589258][ T3038] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 312.630118][ T9532] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 312.679094][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 312.751563][ T9515] usb 6-1: device descriptor read/64, error 18 [ 312.809157][ T3038] usb 7-1: device descriptor read/64, error 18 [ 312.839159][ T9532] usb 8-1: device descriptor read/64, error 18 [ 312.881986][ T5] usb 5-1: device descriptor read/64, error 18 [ 313.039370][ T9515] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 313.089088][ T3038] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 313.109818][ T9532] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 313.169129][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 313.259043][ T9515] usb 6-1: device descriptor read/64, error 18 [ 313.289169][ T3038] usb 7-1: device descriptor read/64, error 18 [ 313.319285][ T9532] usb 8-1: device descriptor read/64, error 18 [ 313.389056][ T5] usb 5-1: device descriptor read/64, error 18 [ 313.392058][ T9515] usb usb6-port1: attempt power cycle [ 313.420030][ T3038] usb usb7-port1: attempt power cycle [ 313.459233][ T9532] usb usb8-port1: attempt power cycle [ 313.509264][ T5] usb usb5-port1: attempt power cycle [ 314.129602][ T3038] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 314.132987][ T9515] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 314.230438][ T9532] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 314.249131][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 314.255584][ T9515] usb 6-1: Invalid ep0 maxpacket: 0 [ 314.269443][ T3038] usb 7-1: Invalid ep0 maxpacket: 0 [ 314.341847][ T9532] usb 8-1: Invalid ep0 maxpacket: 0 [ 314.360177][ T5] usb 5-1: Invalid ep0 maxpacket: 0 [ 314.420499][ T3038] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 314.441676][ T9515] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 314.500092][ T9532] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 314.520658][ T3038] usb 7-1: Invalid ep0 maxpacket: 0 [ 314.522083][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 314.534119][ T3038] usb usb7-port1: unable to enumerate USB device [ 314.559652][ T9515] usb 6-1: Invalid ep0 maxpacket: 0 [ 314.567120][ T9515] usb usb6-port1: unable to enumerate USB device [ 314.599161][ T9532] usb 8-1: Invalid ep0 maxpacket: 0 [ 314.615542][ T9532] usb usb8-port1: unable to enumerate USB device [ 314.650010][ T5] usb 5-1: Invalid ep0 maxpacket: 0 [ 314.661044][ T5] usb usb5-port1: unable to enumerate USB device 00:31:13 executing program 1: symlinkat(&(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00') 00:31:13 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:31:13 executing program 1: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:13 executing program 3: socketpair(0x33, 0x0, 0x3, 0x0) 00:31:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[], 0xa, 0x0, 0x0, 0x0, 0x18}, 0x0) 00:31:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights], 0x10}, 0x0) 00:31:13 executing program 1: fork() setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f00000008c0), 0xc) 00:31:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 00:31:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r3, 0x0) setregid(r1, 0x0) [ 315.808989][ T48] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 316.019158][ T48] usb 7-1: device descriptor read/64, error 18 [ 316.309313][ T48] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 316.529053][ T48] usb 7-1: device descriptor read/64, error 18 [ 316.659161][ T48] usb usb7-port1: attempt power cycle [ 317.369377][ T48] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 317.469217][ T48] usb 7-1: Invalid ep0 maxpacket: 0 [ 317.629535][ T48] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 317.729990][ T48] usb 7-1: Invalid ep0 maxpacket: 0 [ 317.745182][ T48] usb usb7-port1: unable to enumerate USB device 00:31:16 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x7011, 0xffffffffffffffff, 0x0) 00:31:16 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) 00:31:16 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) acct(&(0x7f0000000080)='./file0\x00') 00:31:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="53ad65b275ca34b6b123e52fe92fa9279658088fd7551eab463d1e697bc9c257e90dd62c49e6b7028ccb291fbd846f4e015ddad5cce9d88d687400dc4dc822cb54f998bbbe3428a74953b95196dfa02f8f36d54ff37f88f128b840f84e", 0x5d}], 0x1, &(0x7f0000000440)=[@rights], 0x10}, 0x5) 00:31:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000840)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 00:31:16 executing program 0: mprotect(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./file\x00', 0x0) madvise(&(0x7f0000c87000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000f78000/0x2000)=nil, 0x2000) 00:31:16 executing program 3: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) 00:31:16 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x10288, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) 00:31:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x844, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 00:31:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) fork() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001640)) 00:31:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x100}) 00:31:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x24, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8}, @IFLA_GTP_ROLE={0x8}]}}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) 00:31:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008004, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 00:31:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fchmod(r0, 0x0) 00:31:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x2276) 00:31:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:31:16 executing program 2: syz_open_dev$cec(&(0x7f0000001000)='/dev/cec#\x00', 0x3, 0x2) 00:31:16 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000003280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200001) 00:31:16 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') unlink(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/net/tun\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000002fc0)=@framed, &(0x7f0000003000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003340)='freezer.self_freezing\x00', 0x0, 0x0) unlink(&(0x7f0000003400)='./file0\x00') 00:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)={[{@uni_xlate='uni_xlate=1'}, {@shortname_winnt='shortname=winnt'}]}) 00:31:16 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc, 0xa}}) 00:31:16 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default, @null, @bcast]}, 0x40) 00:31:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) [ 318.905113][T10655] FAT-fs (loop3): bogus number of reserved sectors 00:31:16 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)={0xc, 0x0, "bf9e5e98"}, 0x0) 00:31:16 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x208481, 0x0) fcntl$setown(r0, 0x8, 0x0) 00:31:16 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="92", 0x1, 0xfffffffffffffffb) [ 318.935190][T10655] FAT-fs (loop3): Can't find a valid FAT filesystem 00:31:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ipx\x00') [ 319.040478][T10655] FAT-fs (loop3): bogus number of reserved sectors [ 319.051840][T10655] FAT-fs (loop3): Can't find a valid FAT filesystem 00:31:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) 00:31:16 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)={0x8}, 0x0) 00:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) 00:31:16 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000100)) 00:31:17 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x22802, 0x0) 00:31:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 00:31:17 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:31:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x123402) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="ae88bff8240b01005aa6f57f01003aef5c1fb78e3a63c22dff50695fb63722772e10a8f41b0b760a45f6d7210baf55f922a210218ed429d7b9ef822bfadefaff3b2a9f8889d70a3d2fde2143d66c2159e3d30ce4cba457c6a155d6ed18c335e62c2dfd6f16811c0f49e40f21319d411723ac", 0x72}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 328.207337][T10713] sg_write: data in/out 68352/72 bytes for SCSI command 0x1b-- guessing data in; [ 328.207337][T10713] program syz-executor.0 not setting count and/or reply_len properly [ 328.250100][T10713] sg_write: data in/out 68352/72 bytes for SCSI command 0x1b-- guessing data in; [ 328.250100][T10713] program syz-executor.0 not setting count and/or reply_len properly [ 348.507774][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.521808][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.404037][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.421705][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.489257][ T9515] Bluetooth: hci1: command 0x0406 tx timeout [ 411.499308][ T9515] Bluetooth: hci3: command 0x0406 tx timeout [ 411.514368][ T9515] Bluetooth: hci2: command 0x0406 tx timeout [ 414.359530][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 470.851290][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.860621][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.280938][ T3407] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.290765][ T3407] ieee802154 phy1 wpan1: encryption failed: -22 00:35:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x227c) 00:35:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x123402) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "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"}, 0xefb) writev(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 00:35:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000540)='.pending_reads\x00', 0x220180, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x0, r1, 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r2) socket(0x0, 0x0, 0x40000000) 00:35:24 executing program 3: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) [ 566.865762][T10731] sg_write: data in/out 2112180851/3789 bytes for SCSI command 0xe3-- guessing data in; [ 566.865762][T10731] program syz-executor.2 not setting count and/or reply_len properly 00:35:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000300)) 00:35:25 executing program 2: open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)={0x8}, 0x0) 00:35:26 executing program 0: socketpair(0x1, 0x0, 0x101, &(0x7f0000000100)) [ 568.341273][ T9406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.011874][ T9406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.384255][ T9406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:35:27 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) dup3(r0, r1, 0x0) 00:35:27 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 00:35:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008004, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 570.040918][ T9406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:35:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x123402) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="53000000fcffffff060000000200040000009600000000000000a40000000000348a67b68c4cc357f70d748bc0ec6c000000001b1bab0525dcda9f60dd1685812c76d61bd85f96051133e085e09d08b7dc5c1e23926250ec", 0x58}, {&(0x7f00000000c0)="baf48ef546ffcf14beaa116a5c366fe077c89670d61c0c8cc5450791281ff453dbf21816f1d02ac78d923cd2c48d3f8a", 0x30}], 0x2) [ 573.448493][T10804] IPVS: ftp: loaded support on port[0] = 21 [ 573.974012][T10804] chnl_net:caif_netlink_parms(): no params data found [ 574.550004][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.623340][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.693188][T10804] device bridge_slave_0 entered promiscuous mode [ 574.733536][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.756763][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.787480][T10804] device bridge_slave_1 entered promiscuous mode [ 574.902462][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.999489][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.329402][ T9515] Bluetooth: hci3: command 0x0409 tx timeout [ 575.365334][T10804] team0: Port device team_slave_0 added [ 575.390249][T10804] team0: Port device team_slave_1 added [ 575.616078][ T9406] device hsr_slave_0 left promiscuous mode [ 575.672114][ T9406] device hsr_slave_1 left promiscuous mode [ 575.793976][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.810820][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.889336][ T9406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.923901][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.994482][ T9406] device bridge_slave_1 left promiscuous mode [ 576.043785][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.100780][ T9406] device bridge_slave_0 left promiscuous mode [ 576.116864][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.265507][ T9406] device veth1_macvtap left promiscuous mode [ 576.295767][ T9406] device veth0_macvtap left promiscuous mode [ 576.341953][ T9406] device veth1_vlan left promiscuous mode [ 576.356263][ T9406] device veth0_vlan left promiscuous mode [ 577.399228][ T3997] Bluetooth: hci3: command 0x041b tx timeout [ 579.490228][ T30] Bluetooth: hci3: command 0x040f tx timeout [ 581.530955][ T9406] team0 (unregistering): Port device team_slave_1 removed [ 581.559731][ T30] Bluetooth: hci3: command 0x0419 tx timeout [ 581.646408][ T9406] team0 (unregistering): Port device team_slave_0 removed [ 581.710840][ T9406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.763841][ T9406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.146795][ T9406] bond0 (unregistering): Released all slaves [ 582.283425][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.329263][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.445604][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.540378][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.586910][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.713876][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.861872][T10804] device hsr_slave_0 entered promiscuous mode [ 582.925904][T10804] device hsr_slave_1 entered promiscuous mode [ 582.976577][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.020511][T10804] Cannot create hsr debugfs directory [ 583.699282][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.888709][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.955580][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.000149][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.173719][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.206333][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.275445][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.303959][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.347775][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.436018][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.541753][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.589577][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.644122][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 584.727616][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.803903][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.877457][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.938101][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.000635][ T9532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.087070][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.156350][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.249338][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.302592][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.399507][T10804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.437139][T10804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.466685][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.492125][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.571537][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.600471][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.641350][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.031721][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.110717][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.286564][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.330581][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.391816][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.417948][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.563403][T10804] device veth0_vlan entered promiscuous mode [ 586.696191][T10804] device veth1_vlan entered promiscuous mode [ 586.761247][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.903636][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 586.977258][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.090736][T10804] device veth0_macvtap entered promiscuous mode [ 587.128712][T10804] device veth1_macvtap entered promiscuous mode [ 587.253598][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 587.322880][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.414043][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 587.501730][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.527034][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 587.584107][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.670036][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.773111][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 587.812980][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 587.864333][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.940600][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.983693][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 588.020157][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.101558][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 588.168126][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.260284][T10804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 588.305705][T10804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.396389][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.449656][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.511353][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 588.748754][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.834781][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.972447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.065241][ T8812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.094173][ T8812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.136536][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 00:35:47 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x0, 0x0) fchmod(r0, 0x0) 00:35:47 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x10000) 00:35:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x800) pread64(r0, 0x0, 0x0, 0x0) 00:35:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000014c0)) 00:35:47 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x0, 0x0) fchmod(r0, 0x0) 00:35:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x800) pread64(r0, 0x0, 0x0, 0x0) 00:35:47 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000001ec0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, 0x0) 00:35:47 executing program 1: socket$inet6_sctp(0xa, 0x0, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 00:35:48 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x0, 0x0) fchmod(r0, 0x0) 00:35:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x800) pread64(r0, 0x0, 0x0, 0x0) 00:35:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xfffc}]}) 00:35:48 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x0, 0x0) fchmod(r0, 0x0) 00:35:48 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000000040)=""/211, 0x26, 0xd3, 0x8}, 0x20) 00:35:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x800) pread64(r0, 0x0, 0x0, 0x0) 00:35:48 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x20000, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:35:48 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={0x0}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000300)="66b8b94a00000f23d00f21f866352000000c0f23f8660f38408800002e0f0139ba610066b83ae7ffde66ef6726d3b1eb000000660f2ce8baf80c66b87a1aa98766efbafc0ced0f309a4cbd4b00f390", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000140)=0x5000) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000880)) 00:35:48 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @volatile={0x0, 0x3, 0x0, 0x9, 0x4}]}}, &(0x7f0000000040)=""/211, 0x32, 0xd3, 0x8}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() setreuid(0xee00, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000540)) 00:35:48 executing program 1: socket$inet(0x2, 0x0, 0xfffffffd) [ 590.947806][T11100] BPF:[1] FUNC_PROTO (anon) [ 590.979654][T11105] BPF:[1] FUNC_PROTO (anon) [ 590.979870][T11105] BPF:return=4 args=( [ 590.979901][T11105] BPF:void [ 590.979913][T11105] BPF:) [ 590.979920][T11105] BPF: [ 590.979935][T11105] BPF:Invalid return type [ 590.979944][T11105] BPF: [ 590.979944][T11105] [ 591.144544][T11100] BPF:return=4 args=( [ 591.172123][T11100] BPF:void [ 591.204595][T11103] BPF:[2] VOLATILE (anon) [ 591.207440][T11100] BPF:) [ 591.218710][T11103] BPF:type_id=4 [ 591.218728][T11103] BPF: [ 591.218740][T11103] BPF:vlen != 0 [ 591.218751][T11103] BPF: [ 591.218751][T11103] [ 591.386248][T11100] BPF: [ 591.435407][T11100] BPF:Invalid return type [ 591.486178][T11100] BPF: [ 591.486178][T11100] [ 591.842346][T11092] debugfs: Directory '11092-4' with parent 'kvm' already present! 00:35:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000080)=@raw=[@btf_id, @map_val, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000240)='GPL\x00', 0x7, 0xa4, &(0x7f0000000440)=""/164, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000000040)=""/211, 0x26, 0xd3, 0x8}, 0x20) 00:35:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) [ 593.134113][T11092] general protection fault, probably for non-canonical address 0xdffffc0000003770: 0000 [#1] PREEMPT SMP KASAN [ 593.192079][T11092] KASAN: probably user-memory-access in range [0x000000000001bb80-0x000000000001bb87] [ 593.269092][T11092] CPU: 3 PID: 11092 Comm: syz-executor.0 Not tainted 5.12.0-rc1-syzkaller #0 [ 593.338796][T11092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 593.396808][T11092] RIP: 0010:vmx_vcpu_run+0x8b5/0x2bb0 [ 593.433310][T11092] Code: 55 00 44 39 eb 0f 8d 8d 00 00 00 e8 75 6d 55 00 48 8b 0c 24 48 63 c3 48 8d 04 40 4c 8d 2c c1 49 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 4e 1e 00 00 49 8d 7d 10 4d 8b 75 08 48 89 f8 [ 593.555312][T11092] RSP: 0018:ffffc900042f7a38 EFLAGS: 00010002 [ 593.599991][T11092] RAX: 0000000000003770 RBX: 0000000000000000 RCX: 000000000001bb7b [ 593.655209][T11092] RDX: 0000000000040000 RSI: ffffffff811dc9fb RDI: 000000000001bb83 [ 593.698663][T11092] RBP: ffff888013168000 R08: 0000000000000000 R09: 0000000000000000 [ 593.742988][T11092] R10: ffffffff811dc9b6 R11: 0000000000000000 R12: dffffc0000000000 [ 593.757769][T11092] R13: 000000000001bb7b R14: 0000000000152ee0 R15: ffff888013168030 [ 593.774263][T11092] FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:0000000000000000 [ 593.793956][T11092] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 593.810363][T11092] CR2: 000000000816f59c CR3: 000000007268d000 CR4: 0000000000152ee0 [ 593.824097][T11092] Call Trace: [ 593.830553][T11092] ? clear_atomic_switch_msr+0xad0/0xad0 [ 593.840375][T11092] ? lock_is_held_type+0xd5/0x130 [ 593.850032][T11092] vcpu_enter_guest+0x1de6/0x4630 [ 593.857716][T11092] ? lock_acquire+0x1bb/0x730 [ 593.864543][T11092] ? kvm_vcpu_reload_apic_access_page+0x70/0x70 [ 593.874984][T11092] ? lock_release+0x710/0x710 [ 593.883638][T11092] ? mark_held_locks+0x9f/0xe0 [ 593.892531][T11092] ? lock_is_held_type+0xd5/0x130 [ 593.902288][T11092] ? kvm_arch_vcpu_ioctl_run+0x47d/0x19b0 [ 593.913825][T11092] kvm_arch_vcpu_ioctl_run+0x47d/0x19b0 [ 593.928942][T11092] kvm_vcpu_ioctl+0x467/0xd90 [ 593.943810][T11092] ? kvm_io_bus_write+0x280/0x280 [ 593.961516][T11092] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 593.979357][T11092] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 593.989622][T11092] ? do_vfs_ioctl+0x27d/0x1090 [ 594.015174][T11092] ? generic_block_fiemap+0x60/0x60 [ 594.024054][T11092] ? lock_downgrade+0x6d0/0x6d0 [ 594.048215][T11092] ? kvm_dev_ioctl+0xdd/0x13a0 [ 594.054557][T11092] kvm_vcpu_compat_ioctl+0x1a2/0x340 [ 594.065590][T11092] ? kvm_vcpu_ioctl+0xd90/0xd90 [ 594.073191][T11092] ? __fget_files+0x288/0x3d0 [ 594.115199][T11092] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 594.135542][T11092] ? kvm_vcpu_ioctl+0xd90/0xd90 [ 594.143158][T11092] __do_compat_sys_ioctl+0x1d3/0x230 [ 594.158553][T11092] __do_fast_syscall_32+0x56/0x80 [ 594.168924][T11092] do_fast_syscall_32+0x2f/0x70 [ 594.189054][T11092] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 594.204864][T11092] RIP: 0023:0xf7f50549 [ 594.216761][T11092] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 594.317788][T11092] RSP: 002b:00000000f554a5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 594.347786][T11092] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 594.384782][T11092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.407521][T11092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.435307][T11092] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 594.456229][T11092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.472909][T11092] Modules linked in: [ 594.480528][T11092] ---[ end trace 8f66571a6e3e1edd ]--- [ 594.489958][T11092] RIP: 0010:vmx_vcpu_run+0x8b5/0x2bb0 [ 594.500024][T11092] Code: 55 00 44 39 eb 0f 8d 8d 00 00 00 e8 75 6d 55 00 48 8b 0c 24 48 63 c3 48 8d 04 40 4c 8d 2c c1 49 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 4e 1e 00 00 49 8d 7d 10 4d 8b 75 08 48 89 f8 [ 594.555096][T11092] RSP: 0018:ffffc900042f7a38 EFLAGS: 00010002 [ 594.584430][T11092] RAX: 0000000000003770 RBX: 0000000000000000 RCX: 000000000001bb7b [ 594.634644][T11092] RDX: 0000000000040000 RSI: ffffffff811dc9fb RDI: 000000000001bb83 [ 594.673681][T11092] RBP: ffff888013168000 R08: 0000000000000000 R09: 0000000000000000 [ 594.712912][T11092] R10: ffffffff811dc9b6 R11: 0000000000000000 R12: dffffc0000000000 [ 594.751503][T11092] R13: 000000000001bb7b R14: 0000000000152ee0 R15: ffff888013168030 [ 594.788836][T11092] FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:0000000000000000 [ 594.836846][T11092] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 594.862828][T11092] CR2: 000000000816f59c CR3: 000000007268d000 CR4: 0000000000152ee0 [ 594.875048][T11092] Kernel panic - not syncing: Fatal exception [ 594.905230][T11092] Kernel Offset: disabled [ 594.912619][T11092] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:35:51 Registers: info registers vcpu 0 RAX=00000000000ae25e RBX=ffffffff8bcbc400 RCX=ffffffff8902ddc0 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff890533ef RBP=fffffbfff1797880 RSP=ffffffff8bc07e40 R8 =0000000000000000 R9 =ffff88802ca3610b R10=ffffed1005946c21 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8dc63548 R15=0000000000000000 RIP=ffffffff8905302e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcc7553850 CR3=000000004a553000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000052 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000ec286 RBX=ffff88801105d340 RCX=ffffffff8902ddc0 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff890533ef RBP=ffffed100220ba68 RSP=ffffc9000041fdf8 R8 =0000000000000000 R9 =ffff88802cb3610b R10=ffffed1005966c21 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8dc63548 R15=0000000000000000 RIP=ffffffff8905302e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ea10001860 CR3=000000001547d000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffff000000000000ff00000000000000 XMM05=762f736563697665642f3d4854415056 XMM06=6f6f6c2f6b636f6c622f6c6175747269 XMM07=6f6c623d4d4554535953425553003170 XMM08=0000000000373d524f4a414d00323733 XMM09=6464318e6b9bef8464641b8aee28a464 XMM10=64646464646460d56464646464646454 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=ffff88801c7fe118 RCX=0000000000000000 RDX=0000000000000007 RSI=ffffffff838c6215 RDI=ffff88801c7fe127 RBP=ffffc90000d47838 RSP=ffffc90000d476f0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff838b3cd2 R11=000000000000001f R12=0000000000000000 R13=ffff88807079c180 R14=ffff88801c7fe128 R15=ffff888013b89920 RIP=ffffffff838c6282 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fee8c9cb8c0 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ea100402b0 CR3=000000001400f000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff000000000000ff00000000000000 XMM01=660065676e61686300746e657665752f XMM02=65766965636572206f742064656c6961 XMM03=ffff0000ff0000ffffffff00ffffffff XMM04=00000000000000000000000000000000 XMM05=ffffff00ffff0000ffff00000000ff00 XMM06=00000003ffffffff000055ea0ffe5b80 XMM07=00000000000000000000000000000000 XMM08=000000000000009000005500000000ff XMM09=6464318e6b9bef8464641b8aee28a464 XMM10=64646464646460d56464646464646454 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff841b4521 RDI=ffffffff9011a2e0 RBP=ffffffff9011a2a0 RSP=ffffc900042f7490 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff841b4512 R11=000000000000001f R12=0000000000000000 R13=0000000000000030 R14=ffffffff9011a2a0 R15=dffffc0000000000 RIP=ffffffff841b454a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000816f59c CR3=000000007268d000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000008 XMM01=00007fc2e40253a00000559ec97fbe10 XMM02=00000000000003f80000000000000000 XMM03=00007fc39243fc9b0000000000000000 XMM04=0f02000a0202000a0000000000000000 XMM05=00000000000000000000000000000600 XMM06=14000000000000000000000000000000 XMM07=00000050000000000000000016002eaf XMM08=dd3a5c4e87a660d68fb607b06773b60b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000