Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. 2020/09/08 14:48:32 fuzzer started 2020/09/08 14:48:32 dialing manager at 10.128.0.26:45095 2020/09/08 14:48:32 syscalls: 3333 2020/09/08 14:48:32 code coverage: enabled 2020/09/08 14:48:32 comparison tracing: enabled 2020/09/08 14:48:32 extra coverage: enabled 2020/09/08 14:48:32 setuid sandbox: enabled 2020/09/08 14:48:32 namespace sandbox: enabled 2020/09/08 14:48:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/08 14:48:32 fault injection: enabled 2020/09/08 14:48:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/08 14:48:32 net packet injection: enabled 2020/09/08 14:48:32 net device setup: enabled 2020/09/08 14:48:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/08 14:48:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/08 14:48:32 USB emulation: enabled 2020/09/08 14:48:32 hci packet injection: enabled 14:51:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1}, &(0x7f0000000300)=0x14) 14:51:54 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x3000000) 14:51:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x200) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) socket$inet6_udp(0xa, 0x2, 0x0) kexec_load(0x0, 0x2, &(0x7f0000000780)=[{0x0}, {0x0, 0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)=0xffffffffffffffff) 14:51:55 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x81, 0x40, 0x1, 0x6, 0x0, 0x81, 0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x31, 0x80}, 0x18901, 0x4, 0x5, 0x6, 0x4, 0x8, 0xf3}, 0x0, 0xc, r0, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfddf) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffc0}, 0x220e, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 14:51:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'ipvlan1\x00'}}, 0x1e) 14:51:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b61, &(0x7f0000000000)={0x400001ea, &(0x7f0000000100)}) syzkaller login: [ 262.478612][ T6869] IPVS: ftp: loaded support on port[0] = 21 [ 262.626989][ T6871] IPVS: ftp: loaded support on port[0] = 21 [ 262.684580][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 262.770743][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.779336][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.789673][ T6869] device bridge_slave_0 entered promiscuous mode [ 262.801871][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.810623][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.820742][ T6869] device bridge_slave_1 entered promiscuous mode [ 262.851886][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.882479][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.963386][ T6873] IPVS: ftp: loaded support on port[0] = 21 [ 262.987786][ T6869] team0: Port device team_slave_0 added [ 263.011985][ T6869] team0: Port device team_slave_1 added [ 263.197864][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.223250][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.235596][ T6875] IPVS: ftp: loaded support on port[0] = 21 [ 263.255772][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.293304][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.313742][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.341058][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.355210][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 263.412481][ T6877] IPVS: ftp: loaded support on port[0] = 21 [ 263.516196][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 263.561982][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 263.571986][ T6869] device hsr_slave_0 entered promiscuous mode [ 263.592024][ T6869] device hsr_slave_1 entered promiscuous mode [ 263.816038][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.823125][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.831900][ T6871] device bridge_slave_0 entered promiscuous mode [ 263.904680][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.911771][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.926510][ T6871] device bridge_slave_1 entered promiscuous mode [ 263.971572][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 264.001238][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.009061][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.017404][ T6873] device bridge_slave_0 entered promiscuous mode [ 264.045035][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.057191][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.068290][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.076083][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.084330][ T6873] device bridge_slave_1 entered promiscuous mode [ 264.207951][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.230225][ T6871] team0: Port device team_slave_0 added [ 264.272315][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.287731][ T6871] team0: Port device team_slave_1 added [ 264.380363][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 264.428875][ T6873] team0: Port device team_slave_0 added [ 264.440252][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.447605][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.455815][ T6875] device bridge_slave_0 entered promiscuous mode [ 264.467011][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.474491][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.482367][ T6875] device bridge_slave_1 entered promiscuous mode [ 264.489668][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 264.502172][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.510368][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.536384][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.549763][ T6873] team0: Port device team_slave_1 added [ 264.557424][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 264.569385][ T6869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.589841][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.597107][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.623305][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.643902][ T2648] Bluetooth: hci1: command 0x0409 tx timeout [ 264.659275][ T6869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.696426][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.704617][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.733297][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.760029][ T6869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.771234][ T6869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.791587][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.805726][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.812695][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.839907][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.888123][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.893555][ T2618] Bluetooth: hci2: command 0x0409 tx timeout [ 264.943183][ T6871] device hsr_slave_0 entered promiscuous mode [ 264.950110][ T6871] device hsr_slave_1 entered promiscuous mode [ 264.957738][ T6871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.966128][ T6871] Cannot create hsr debugfs directory [ 265.002993][ T6873] device hsr_slave_0 entered promiscuous mode [ 265.010357][ T6873] device hsr_slave_1 entered promiscuous mode [ 265.017654][ T6873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.025658][ T6873] Cannot create hsr debugfs directory [ 265.064535][ T6875] team0: Port device team_slave_0 added [ 265.092733][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.100689][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.109183][ T6879] device bridge_slave_0 entered promiscuous mode [ 265.119721][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.123828][ T2648] Bluetooth: hci3: command 0x0409 tx timeout [ 265.132747][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.140753][ T6879] device bridge_slave_1 entered promiscuous mode [ 265.154439][ T6875] team0: Port device team_slave_1 added [ 265.160337][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.171317][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.180938][ T6877] device bridge_slave_0 entered promiscuous mode [ 265.222711][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.231701][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.241523][ T6877] device bridge_slave_1 entered promiscuous mode [ 265.267503][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.283645][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 265.293784][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.329360][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.342853][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.350940][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.377859][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.410168][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.426637][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.434408][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.461405][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.464131][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 265.498914][ T6879] team0: Port device team_slave_0 added [ 265.531876][ T6875] device hsr_slave_0 entered promiscuous mode [ 265.542317][ T6875] device hsr_slave_1 entered promiscuous mode [ 265.549232][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.560451][ T6875] Cannot create hsr debugfs directory [ 265.567474][ T6879] team0: Port device team_slave_1 added [ 265.613564][ T6877] team0: Port device team_slave_0 added [ 265.626275][ T6877] team0: Port device team_slave_1 added [ 265.701456][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.709608][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.736089][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.776372][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.783338][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.810449][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.837170][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.844355][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.871206][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.893910][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.900892][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.928383][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.999404][ T6879] device hsr_slave_0 entered promiscuous mode [ 266.006769][ T6879] device hsr_slave_1 entered promiscuous mode [ 266.013372][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.021644][ T6879] Cannot create hsr debugfs directory [ 266.065292][ T6877] device hsr_slave_0 entered promiscuous mode [ 266.072095][ T6877] device hsr_slave_1 entered promiscuous mode [ 266.080303][ T6877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.088742][ T6877] Cannot create hsr debugfs directory [ 266.127207][ T6873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.142755][ T6873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.187686][ T6873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.202354][ T6873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.317320][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.333926][ T6871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.389906][ T6871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.401320][ T6871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.445761][ T6871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.480064][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.491770][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.506899][ T6875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.529994][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.560458][ T6875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.583776][ T6875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.591876][ T2618] Bluetooth: hci0: command 0x041b tx timeout [ 266.616792][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.625747][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.634520][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.641754][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.650813][ T6875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.686337][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.701085][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.710682][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.719765][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.726922][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.733531][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 266.759497][ T6879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.792468][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.826035][ T6879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.846840][ T6879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.905660][ T6879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.916778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.940160][ T6877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.957853][ T6877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.973759][ T7792] Bluetooth: hci2: command 0x041b tx timeout [ 266.987561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.005536][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.015752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.024935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.035273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.063230][ T6877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.081460][ T6877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.125610][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.134323][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.142939][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.152314][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.187133][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.204004][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 267.216905][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.240306][ T6873] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.257111][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.265198][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.272963][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.318662][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.328184][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.338076][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.345216][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.353037][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.362543][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.371580][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.373669][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 267.378734][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.400519][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.432400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.442789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.452567][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.460930][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.469434][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.477596][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.486869][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.495690][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.502749][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.514921][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.524251][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.526186][ T7792] Bluetooth: hci5: command 0x041b tx timeout [ 267.584579][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.593322][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.603311][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.612917][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.621881][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.630669][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.639260][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.646400][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.654424][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.665268][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.673943][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.682464][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.691657][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.700545][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.709341][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.718280][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.733925][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.761453][ T6871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.774425][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.790308][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.799147][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.807205][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.817195][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.826432][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.836287][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.845960][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.855263][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.871833][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.902268][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.913931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.921649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.931417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.950736][ T6873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.964237][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.992608][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.005434][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.018469][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.027690][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.036295][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.043483][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.075719][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.086663][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.096019][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.113798][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.121642][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.131297][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.145065][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.156880][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.163959][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.187846][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.195753][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.203254][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.229960][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.241455][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.265191][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.284083][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.292859][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.304781][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.314570][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.323129][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.333938][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.342311][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.351872][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.396927][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.406507][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.416881][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.426877][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.434021][ T7792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.441852][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.451059][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.460219][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.467348][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.475858][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.485253][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.493499][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.512301][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.541043][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.551097][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.575646][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.595419][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.604945][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.616230][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.624651][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.632341][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.641754][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.650871][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.662299][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.671825][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.680913][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.689896][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.700453][ T7792] Bluetooth: hci0: command 0x040f tx timeout [ 268.708398][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.729052][ T6869] device veth0_vlan entered promiscuous mode [ 268.744412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.753270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.762363][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.769514][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.779243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.788617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.798217][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.806720][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.815572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.824347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.836101][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.843787][ T8175] Bluetooth: hci1: command 0x040f tx timeout [ 268.870414][ T6869] device veth1_vlan entered promiscuous mode [ 268.894673][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.902846][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.913666][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.922447][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.937197][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.946181][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.954816][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.963190][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.975807][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.002692][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.021353][ T6871] device veth0_vlan entered promiscuous mode [ 269.039085][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.048998][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.058507][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.068290][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.093370][ T6871] device veth1_vlan entered promiscuous mode [ 269.101660][ T7792] Bluetooth: hci2: command 0x040f tx timeout [ 269.128627][ T6873] device veth0_vlan entered promiscuous mode [ 269.136752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.145906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.153842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.162475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.171771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.181056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.189766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.197381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.206049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.215701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.250268][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.266110][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.275409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.283130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.291699][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.300565][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.309376][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.318017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.326639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.334655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.342265][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 269.346833][ T6879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.361683][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.376235][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.395900][ T6869] device veth0_macvtap entered promiscuous mode [ 269.403608][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.411711][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.422797][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.466604][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 269.476241][ T6873] device veth1_vlan entered promiscuous mode [ 269.496845][ T6871] device veth0_macvtap entered promiscuous mode [ 269.509095][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.517912][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.533048][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.542633][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.566003][ T6869] device veth1_macvtap entered promiscuous mode [ 269.594921][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.603156][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.616513][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.626547][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.635419][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.644776][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.655600][ T6871] device veth1_macvtap entered promiscuous mode [ 269.673962][ T2618] Bluetooth: hci5: command 0x040f tx timeout [ 269.689194][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.704267][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.725210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.733252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.751372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.775105][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.792873][ T6875] device veth0_vlan entered promiscuous mode [ 269.812390][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.825879][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.837420][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.859675][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.868605][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.879062][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.890257][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.899802][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.909023][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.920650][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.929896][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.940716][ T6869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.950540][ T6869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.961027][ T6869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.970292][ T6869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.987072][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.999755][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.015090][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.047756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.059996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.076156][ T6871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.087037][ T6871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.096494][ T6871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.105583][ T6871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.130185][ T6873] device veth0_macvtap entered promiscuous mode [ 270.141055][ T6875] device veth1_vlan entered promiscuous mode [ 270.165127][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.176139][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.185169][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.194269][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.203833][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.215415][ T6873] device veth1_macvtap entered promiscuous mode [ 270.293624][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.301813][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.312379][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.375854][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.393650][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.418960][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.435466][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.448996][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.462271][ T6877] device veth0_vlan entered promiscuous mode [ 270.502543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.524462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.533150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.552345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.574008][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.592198][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.603006][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.615620][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.628875][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.652113][ T6877] device veth1_vlan entered promiscuous mode [ 270.661292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.671766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.681522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.699120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.710681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.734812][ T2618] Bluetooth: hci0: command 0x0419 tx timeout [ 270.915115][ T8194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.925587][ T2618] Bluetooth: hci1: command 0x0419 tx timeout [ 270.969080][ T6873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.981335][ T6873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.993154][ T6873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.002004][ T6873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.124081][ T2618] Bluetooth: hci2: command 0x0419 tx timeout 14:52:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) 14:52:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 271.272134][ T8194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.308079][ T6875] device veth0_macvtap entered promiscuous mode [ 271.324417][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.333129][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.364278][ T2618] Bluetooth: hci3: command 0x0419 tx timeout 14:52:04 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x8}]}, 0x1c}}, 0x0) [ 271.371168][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.404281][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.413716][ T6879] device veth0_vlan entered promiscuous mode [ 271.445695][ T6875] device veth1_macvtap entered promiscuous mode [ 271.523885][ T8160] Bluetooth: hci4: command 0x0419 tx timeout [ 271.684062][ T8160] Bluetooth: hci5: command 0x0419 tx timeout [ 271.738792][ T8194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.761402][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.770420][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.779077][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.991062][ T8194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.016243][ T6879] device veth1_vlan entered promiscuous mode [ 272.052343][ T6877] device veth0_macvtap entered promiscuous mode [ 272.070008][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.078912][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.089551][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.099848][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.111596][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.123631][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.134777][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.145266][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.156370][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.168832][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.181278][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.192466][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.206017][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.217305][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.228045][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.239242][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.251616][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.263013][ T6877] device veth1_macvtap entered promiscuous mode [ 272.280014][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.292855][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.302439][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.311506][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.321128][ T2648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.335634][ T6875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.348151][ T6875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.357330][ T6875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.366179][ T6875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.411938][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.421835][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.437901][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.451957][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.464587][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.476776][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.488492][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.508358][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.519241][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.530642][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.546672][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.559995][ T8194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.591855][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.603112][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.617161][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:52:05 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 272.641281][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.653031][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.672653][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:52:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000030002707000000000000000000000000480001004400010007000100637400001c000280"], 0x5c}}, 0x0) [ 272.712254][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.737246][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.755791][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.773326][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.792455][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.802713][ T6879] device veth0_macvtap entered promiscuous mode [ 272.828424][ T8194] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.847730][ T8194] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.862934][ T8194] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 14:52:06 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)) [ 272.872610][ T8233] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.882798][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.909557][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 14:52:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendto$l2tp6(r0, &(0x7f00000000c0)="f2", 0x1, 0x8041, &(0x7f0000000180)={0xa, 0x0, 0x6, @private1}, 0x20) 14:52:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xab}, 0x5800, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x10000, 0xc, {0x77359400}, {0x5, 0x2, 0x1, 0x3, 0x5, 0x1, "242a1547"}, 0x9, 0x4, @planes=&(0x7f0000000000)={0x79, 0x9, @mem_offset, 0x3}, 0x0, 0x0, r0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r4, 0x401, 0x0, 0x0, {0x25}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x90}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x188, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x100000000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x1ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc, 0x90, 0x7ff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x81f}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4040880}, 0xc040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 272.927023][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.959621][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.985941][ T6877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.015386][ C1] hrtimer: interrupt took 59536 ns [ 273.020423][ T6877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 14:52:06 executing program 1: io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4134, 0x20, 0x1}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000035000535d25a80648c63940d0424fc60100000000a000900051a82c137153e6704020a8003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 273.073289][ T6877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.082026][ T6877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.253493][ T8254] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 273.282339][ T8254] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.389208][ T8259] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 273.426257][ T8259] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.750155][ T8245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.804985][ T6879] device veth1_macvtap entered promiscuous mode [ 273.827443][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.117736][ T8245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.136127][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.147427][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.158704][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.170861][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.182087][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.193494][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.203919][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.215073][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.225599][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.237661][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.250027][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.279534][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.289958][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 14:52:07 executing program 3: r0 = socket(0x5, 0x1, 0x10001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0x2, 0x40}, 0x18) [ 274.605367][ T8278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 274.710957][ T8245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.749743][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.761680][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.782867][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.793452][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.810514][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.831507][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.863289][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.879497][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.901177][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.934445][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.946382][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.995345][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.004429][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:52:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bd9cbcb9"}, 0x0, 0x2, @offset=0xa04901, 0x300}) [ 275.325595][ T8245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.383790][ T6879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.410685][ T6879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.430135][ T6879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.449958][ T6879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.530268][ T8245] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.543084][ T8245] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.572574][ T8245] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.587483][ T8245] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 14:52:08 executing program 5: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xee01, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x2, 0x4, 0xde34, 0x9}, 0x40) 14:52:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001540)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 14:52:08 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2b3aa84b, 0x0) dup3(r0, r1, 0x0) 14:52:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 14:52:08 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x401}, 0x20) 14:52:08 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 14:52:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14:52:09 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="87", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x2, 0x48045) 14:52:09 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000280)=@ipx={0x2, 0x0, 0x0, "18b02a976031"}, 0x80, 0x0}, 0x0) 14:52:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x0, 0x80}) 14:52:09 executing program 3: r0 = socket(0x2, 0x3, 0x6) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="ba55bb4305ace08244857084daf70e76d0844fc585f2a6b20e4925070162090ece2970c89a2774a76703a4294595ccd0f2f2a541", 0x34}], 0x1}, 0x0) 14:52:09 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10280, 0x0) r1 = socket(0x0, 0x80002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2000003, 0x8, '9P2000.L'}, 0xcf) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x24, 0x0, 0x281, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x0, 0x0]}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x382}, 0x4) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006b, 0x68001) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) r5 = socket(0x1f, 0x4, 0x6000000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x30, 0x1407, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x816}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\f\x00', @ANYRES16, @ANYBLOB="080003000000fcdbdf2502000000050006009a000000050006006500000014000100ff01000000000000000000000000000105000600ff00000014000100fc0000000000000000000000000000010500060002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24002890}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000000)={0x382}, 0x4) [ 275.938477][ T8344] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 14:52:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000001c0)={'syzkaller1\x00', @ifru_data=&(0x7f0000000000)="03000000c2cd12c79ea4a34f56000000000000fa3e1515dd157540cd9400"}) 14:52:09 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 14:52:09 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) 14:52:09 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x3000009, 0x4012, r0, 0x82000000) 14:52:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000600)) clone3(&(0x7f0000000280)={0x45040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) 14:52:09 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 14:52:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/248, 0xf8}], 0x5, 0x16, 0x0) 14:52:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980903, 0x0, [], @ptr}}) [ 276.409315][ T8365] overlayfs: failed to resolve 'file0': -2 14:52:09 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3772", 0xff7c}], 0x1) 14:52:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40002, 0x0) write$sequencer(r1, &(0x7f0000000000)=[@l={0x92, 0x0, 0xc0}], 0x8) 14:52:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) 14:52:09 executing program 1: r0 = syz_io_uring_setup(0x9c0, &(0x7f00000010c0), &(0x7f0000e91000/0x1000)=nil, &(0x7f0000e1c000/0x4000)=nil, &(0x7f0000001140), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1) [ 276.675486][ T8372] IPVS: ftp: loaded support on port[0] = 21 14:52:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 14:52:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) read$midi(0xffffffffffffffff, 0x0, 0x0) 14:52:10 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0xd) add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:52:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0)=0x20) [ 277.440190][ T8377] IPVS: ftp: loaded support on port[0] = 21 [ 277.598583][ T8412] IPVS: ftp: loaded support on port[0] = 21 [ 278.055482][ T8414] IPVS: ftp: loaded support on port[0] = 21 [ 280.131120][ T21] tipc: TX() has been purged, node left! 14:52:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) 14:52:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc7539(ctr-twofish-3way,blake2s-128-generic))\x00'}, 0x58) 14:52:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 14:52:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40301, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x94, 0x0, 0x52, 0x64, 0x0, 0x9c, 0x100, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x40, 0xfffffffffffffffc, 0xffffffff, 0x4, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x103102) write$char_usb(r2, 0x0, 0x0) clone3(&(0x7f0000000640)={0x1e78fb1ca4f36aac, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=0x0, {0x39}, &(0x7f0000000480)=""/186, 0xba, &(0x7f0000000540)=""/173, &(0x7f0000000600)=[r0, r0, 0xffffffffffffffff, r0, 0x0, 0x0], 0x6, {r1}}, 0x58) clone3(&(0x7f0000000700)={0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x39}, &(0x7f00000001c0)=""/127, 0x7f, &(0x7f0000000240)=""/167, &(0x7f00000006c0)=[r3, 0x0], 0x2}, 0x58) 14:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4068aea3, 0x0) 14:52:54 executing program 3: timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000000)) 14:52:54 executing program 5: r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee3000/0x2000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 14:52:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) 14:52:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) [ 321.364018][ T8464] IPVS: ftp: loaded support on port[0] = 21 14:52:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000007c0)={[{@fat=@errors_remount='errors=remount-ro'}]}) 14:52:54 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='cgroup2\x00', 0x0, 0x0) 14:52:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r1, 0x0) [ 321.756775][ T8507] FAT-fs (loop5): bogus number of reserved sectors [ 321.763860][ T8507] FAT-fs (loop5): Can't find a valid FAT filesystem [ 321.829585][ T8507] FAT-fs (loop5): bogus number of reserved sectors [ 321.839541][ T8507] FAT-fs (loop5): Can't find a valid FAT filesystem 14:52:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454ca, 0x40d601) 14:52:56 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x201) write$qrtrtun(r0, &(0x7f0000000200)='D', 0x20000201) 14:52:56 executing program 5: r0 = socket(0x2, 0x3, 0xff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000002000)) 14:52:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x0, 0x10, 0x0, 0x1ab}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xd22, &(0x7f0000000340)={0x0, 0x4d38, 0x0, 0x3, 0xca}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, r1, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0\x00', 0x82, 0x420001, 0x23456}, 0x1ff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032abd70000000000006000000080018007f000001457b5a0379802464e54d402d71990c8933caa64ddd3d099d1b68712a770770b337d6f0d9dcf3b8a8eac5c96e4a840817de4270533688fe8f05c361b253a84cb4e183997805f5f05b39c62b"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:52:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$rxrpc(r0, &(0x7f00000006c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 14:52:56 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 14:52:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000001140)='./file0\x00', 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x7}, {0xa, 0x4e20, 0x0, @empty, 0x80000001}, r4, 0x7ff}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r4, 0x0, 0x2, 0x4}}, 0x20) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0x8, {{0xa, 0x4e20, 0x4, @private0, 0x10000}}}, 0x88) sendfile(r0, r1, 0x0, 0x800000080004103) [ 322.945396][ T21] tipc: TX() has been purged, node left! 14:52:56 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) [ 323.062583][ T8563] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 14:52:56 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x121802) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd6f) [ 323.122451][ T8568] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 14:52:56 executing program 2: syz_usb_connect$uac1(0x1, 0x86, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7, 0x24, 0x7, 0x0, 0x9b62016568284b60, 0xea}, @extension_unit={0x7, 0x24, 0x8, 0x0, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2f, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xea, 0x77, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x0, 0x1, [{0x41, &(0x7f0000001a00)=ANY=[]}]}) clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x401000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clone3(0x0, 0x0) 14:52:56 executing program 4: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="0f2698a344b5c811479455e6447aade3b5144114c534e63ae2c996e04d3207c6dda5b1bbe54667ae2ee02c2a78bdd9e79f3221dbf0d087be19fb92a60efb0517ed59b962398247e6b8cc0eaff2c046613ad73c4db46bbc9ebbc3887281ac683e79855b3a23", 0x65}], 0x1}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:52:56 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000040)={0x0, r1+30000000}, 0x0) [ 323.453136][ T2648] usb (null): failed to copy DMA map [ 323.603523][ T2648] usb 3-1: new low-speed USB device number 2 using dummy_hcd 14:52:57 executing program 4: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) init_module(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 14:52:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x11, 0x0, &(0x7f0000000080)) [ 323.872297][ T2648] usb 3-1: device descriptor read/64, error 18 [ 324.262613][ T2648] usb 3-1: device descriptor read/64, error 18 14:52:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) [ 324.382936][ T2648] usb (null): failed to copy DMA map [ 324.532556][ T2648] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 324.802150][ T2648] usb 3-1: device descriptor read/64, error 18 [ 325.212081][ T2648] usb 3-1: device descriptor read/64, error 18 [ 325.342582][ T2648] usb usb3-port1: attempt power cycle [ 325.689732][ T2648] usb (null): failed to copy DMA map 14:52:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000040)={0x5000, 0x0}) 14:52:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1a1802, 0x0) setreuid(0x0, r0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000140)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x0, 0x0) 14:52:59 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001500)='/dev/snd/seq\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r1, r0, 0x0) 14:52:59 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x2, 0x82031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x1cb}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000300)) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000780)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x4000010, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x9e7a, 0x8, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) syz_io_uring_setup(0x3c38, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000600)) sync() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x8000, 0x0) syz_io_uring_setup(0x709f, &(0x7f00000006c0)={0x0, 0x0, 0x23, 0x2, 0x63, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000640), 0x0) ioctl$SIOCGETLINKNAME(r2, 0xc0189436, &(0x7f0000000080)={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7]}) syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x801) 14:52:59 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x10) 14:52:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 326.072885][ T2648] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 326.162998][ T2648] usb 3-1: Invalid ep0 maxpacket: 0 [ 326.168773][ T2648] usb (null): failed to copy DMA map 14:52:59 executing program 2: socket$inet_sctp(0x2, 0xa, 0x84) bind$rose(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x30, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x334) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xfffffd24, 0x0, 0x1, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff00}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x0, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x7c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0) 14:52:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108) 14:52:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3ff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x6, 0x80, 0x6, 0x0, 0x0, 0x100a, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x3000, 0x7, 0x0, 0x1, 0x80000000000000, 0x5, 0x1}, 0xffffffffffffffff, 0xd, r2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400019) write$cgroup_subtree(r0, 0x0, 0x0) 14:52:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r0, 0x29, 0x5, 0x0, &(0x7f00000063c0)) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 14:52:59 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) [ 326.352607][ T2648] usb 3-1: new low-speed USB device number 5 using dummy_hcd 14:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) read$midi(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x80, 0x7, 0x6, 0x0, 0xb9, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xb7, 0x0, 0x3, 0x9, 0x0, 0x2}, r0, 0xb, r1, 0x2) [ 326.531758][ T8663] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 14:52:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000002a80)={&(0x7f0000001680)=@l2tp6={0xa, 0x6, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x41}, 0x80, 0x0}, 0x0) 14:52:59 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x40000, 0x0, 0x0) [ 326.842061][ T2648] usb 3-1: device not accepting address 5, error -71 [ 326.849177][ T2648] usb usb3-port1: unable to enumerate USB device 14:53:00 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x3, 0x0) [ 327.038515][ T8664] IPVS: ftp: loaded support on port[0] = 21 [ 327.202119][ T29] audit: type=1326 audit(1599576780.481:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 327.275567][ T8666] IPVS: ftp: loaded support on port[0] = 21 [ 327.371894][ T8663] IPVS: ftp: loaded support on port[0] = 21 [ 327.422295][ T29] audit: type=1326 audit(1599576780.481:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 327.692672][ T29] audit: type=1326 audit(1599576780.481:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x416e41 code=0x7fc00000 [ 327.888041][ T8669] IPVS: ftp: loaded support on port[0] = 21 [ 327.919225][ T29] audit: type=1326 audit(1599576780.481:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=231 compat=0 ip=0x45d5b9 code=0x7fc00000 [ 328.150483][ T29] audit: type=1326 audit(1599576780.551:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x7fc00000 [ 385.441046][ T2618] Bluetooth: hci1: command 0x0406 tx timeout [ 385.447116][ T2618] Bluetooth: hci4: command 0x0406 tx timeout [ 385.450825][ T2648] Bluetooth: hci0: command 0x0406 tx timeout [ 385.459168][ T2648] Bluetooth: hci3: command 0x0406 tx timeout [ 385.474519][ T2648] Bluetooth: hci2: command 0x0406 tx timeout [ 390.560927][ T2618] Bluetooth: hci5: command 0x0406 tx timeout [ 472.959357][ T1176] INFO: task syz-executor.3:8684 can't die for more than 143 seconds. [ 472.967720][ T1176] task:syz-executor.3 state:D stack:27640 pid: 8684 ppid: 6875 flags:0x00004004 [ 472.977369][ T1176] Call Trace: [ 472.983058][ T1176] __schedule+0xea9/0x2230 [ 472.987513][ T1176] ? io_schedule_timeout+0x140/0x140 [ 472.993360][ T1176] ? lockdep_hardirqs_on+0x53/0x100 [ 472.998580][ T1176] schedule+0xd0/0x2a0 [ 473.002754][ T1176] schedule_timeout+0x1d8/0x250 [ 473.007609][ T1176] ? usleep_range+0x170/0x170 [ 473.014189][ T1176] ? lock_downgrade+0x830/0x830 [ 473.020893][ T1176] ? do_raw_spin_lock+0x120/0x2b0 [ 473.025937][ T1176] ? _raw_spin_unlock_irq+0x1f/0x80 [ 473.033009][ T1176] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 473.041324][ T1176] ? _raw_spin_unlock_irq+0x1f/0x80 [ 473.046701][ T1176] wait_for_completion+0x163/0x260 [ 473.055682][ T1176] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 473.064381][ T1176] io_uring_setup+0x1495/0x29a0 [ 473.071403][ T1176] ? io_sq_thread+0xe00/0xe00 [ 473.076161][ T1176] ? io_issue_sqe+0x5bb0/0x5bb0 [ 473.084015][ T1176] ? io_wake_function+0x2e0/0x2e0 [ 473.093568][ T1176] ? put_timespec64+0xcb/0x120 [ 473.098464][ T1176] ? ns_to_timespec64+0xc0/0xc0 [ 473.105374][ T1176] ? check_preemption_disabled+0x50/0x130 [ 473.111573][ T1176] ? syscall_enter_from_user_mode+0x20/0x290 [ 473.117637][ T1176] ? lockdep_hardirqs_on+0x53/0x100 [ 473.124127][ T1176] do_syscall_64+0x2d/0x70 [ 473.128567][ T1176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.134900][ T1176] RIP: 0033:0x45d5b9 [ 473.138800][ T1176] Code: Bad RIP value. [ 473.143252][ T1176] RSP: 002b:00007f89bedc4bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 473.152083][ T1176] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 000000000045d5b9 [ 473.160420][ T1176] RDX: 0000000020ffc000 RSI: 00000000200006c0 RDI: 000000000000709f [ 473.168405][ T1176] RBP: 000000000118d038 R08: 0000000000000000 R09: 0000000000000000 [ 473.176827][ T1176] R10: 0000000020000640 R11: 0000000000000206 R12: 0000000020ffc000 [ 473.185224][ T1176] R13: 0000000020ffa000 R14: 0000000000000000 R15: 0000000020000640 [ 473.193614][ T1176] INFO: task syz-executor.3:8684 blocked for more than 143 seconds. [ 473.203217][ T1176] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 473.210326][ T1176] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.219070][ T1176] task:syz-executor.3 state:D stack:27640 pid: 8684 ppid: 6875 flags:0x00004004 [ 473.228396][ T1176] Call Trace: [ 473.231768][ T1176] __schedule+0xea9/0x2230 [ 473.236262][ T1176] ? io_schedule_timeout+0x140/0x140 [ 473.241627][ T1176] ? lockdep_hardirqs_on+0x53/0x100 [ 473.246834][ T1176] schedule+0xd0/0x2a0 [ 473.250997][ T1176] schedule_timeout+0x1d8/0x250 [ 473.255847][ T1176] ? usleep_range+0x170/0x170 [ 473.260618][ T1176] ? lock_downgrade+0x830/0x830 [ 473.265463][ T1176] ? do_raw_spin_lock+0x120/0x2b0 [ 473.270586][ T1176] ? _raw_spin_unlock_irq+0x1f/0x80 [ 473.275784][ T1176] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 473.282344][ T1176] ? _raw_spin_unlock_irq+0x1f/0x80 [ 473.287559][ T1176] wait_for_completion+0x163/0x260 [ 473.292779][ T1176] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 473.299372][ T1176] io_uring_setup+0x1495/0x29a0 [ 473.304224][ T1176] ? io_sq_thread+0xe00/0xe00 [ 473.308879][ T1176] ? io_issue_sqe+0x5bb0/0x5bb0 [ 473.315918][ T1176] ? io_wake_function+0x2e0/0x2e0 [ 473.321008][ T1176] ? put_timespec64+0xcb/0x120 [ 473.325789][ T1176] ? ns_to_timespec64+0xc0/0xc0 [ 473.330746][ T1176] ? check_preemption_disabled+0x50/0x130 [ 473.336517][ T1176] ? syscall_enter_from_user_mode+0x20/0x290 [ 473.342590][ T1176] ? lockdep_hardirqs_on+0x53/0x100 [ 473.347832][ T1176] do_syscall_64+0x2d/0x70 [ 473.352494][ T1176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.358386][ T1176] RIP: 0033:0x45d5b9 [ 473.362466][ T1176] Code: Bad RIP value. [ 473.366528][ T1176] RSP: 002b:00007f89bedc4bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 473.375022][ T1176] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 000000000045d5b9 [ 473.383145][ T1176] RDX: 0000000020ffc000 RSI: 00000000200006c0 RDI: 000000000000709f [ 473.391203][ T1176] RBP: 000000000118d038 R08: 0000000000000000 R09: 0000000000000000 [ 473.399246][ T1176] R10: 0000000020000640 R11: 0000000000000206 R12: 0000000020ffc000 [ 473.407219][ T1176] R13: 0000000020ffa000 R14: 0000000000000000 R15: 0000000020000640 [ 473.415385][ T1176] INFO: task io_uring-sq:8686 blocked for more than 143 seconds. [ 473.424609][ T1176] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 473.431726][ T1176] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.440488][ T1176] task:io_uring-sq state:D stack:31120 pid: 8686 ppid: 2 flags:0x00004000 [ 473.449796][ T1176] Call Trace: [ 473.453085][ T1176] __schedule+0xea9/0x2230 [ 473.457575][ T1176] ? io_schedule_timeout+0x140/0x140 [ 473.462943][ T1176] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 473.468757][ T1176] schedule+0xd0/0x2a0 [ 473.472936][ T1176] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 473.478845][ T1176] schedule_preempt_disabled+0xf/0x20 [ 473.484380][ T1176] kthread+0x2ac/0x4a0 [ 473.488470][ T1176] ? __kthread_bind_mask+0xc0/0xc0 [ 473.493797][ T1176] ret_from_fork+0x1f/0x30 [ 473.498233][ T1176] [ 473.498233][ T1176] Showing all locks held in the system: [ 473.506011][ T1176] 1 lock held by khungtaskd/1176: [ 473.511141][ T1176] #0: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 473.521515][ T1176] 1 lock held by systemd-journal/3895: [ 473.526970][ T1176] #0: ffff8880ae635fd8 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x270/0x2230 [ 473.537583][ T1176] 1 lock held by in:imklog/6553: [ 473.542639][ T1176] [ 473.544960][ T1176] ============================================= [ 473.544960][ T1176] [ 473.553469][ T1176] NMI backtrace for cpu 1 [ 473.557798][ T1176] CPU: 1 PID: 1176 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 473.567224][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.577256][ T1176] Call Trace: [ 473.580617][ T1176] dump_stack+0x198/0x1fd [ 473.584929][ T1176] nmi_cpu_backtrace.cold+0x44/0xd7 [ 473.590143][ T1176] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 473.595771][ T1176] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 473.601832][ T1176] watchdog+0xd89/0xf30 [ 473.605970][ T1176] ? trace_sched_process_hang+0x2e0/0x2e0 [ 473.611684][ T1176] kthread+0x3b5/0x4a0 [ 473.615729][ T1176] ? __kthread_bind_mask+0xc0/0xc0 [ 473.620840][ T1176] ret_from_fork+0x1f/0x30 [ 473.625412][ T1176] Sending NMI from CPU 1 to CPUs 0: [ 473.631384][ C0] NMI backtrace for cpu 0 [ 473.631392][ C0] CPU: 0 PID: 3895 Comm: systemd-journal Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 473.631398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.631403][ C0] RIP: 0010:unwind_next_frame+0x12a0/0x1f90 [ 473.631415][ C0] Code: 02 48 b9 00 00 00 00 00 fc ff df 49 8d 57 40 48 89 f8 48 c1 e8 03 0f b6 34 08 49 8d 40 03 49 89 c1 49 c1 e9 03 41 0f b6 0c 09 <49> 89 f9 41 83 e1 07 44 38 ce 41 0f 9e c1 40 84 f6 40 0f 95 c6 41 [ 473.631419][ C0] RSP: 0018:ffffc90001217978 EFLAGS: 00000a02 [ 473.631428][ C0] RAX: ffffffff8b32fa63 RBX: 1ffff92000242f37 RCX: 0000000000000000 [ 473.631433][ C0] RDX: ffffc90001217a90 RSI: 0000000000000000 RDI: ffffffff8b32fa62 [ 473.631439][ C0] RBP: 0000000000000001 R08: ffffffff8b32fa60 R09: 1ffffffff1665f4c [ 473.631444][ C0] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90001217e68 [ 473.631449][ C0] R13: ffffc90001217a85 R14: ffffc90001217aa0 R15: ffffc90001217a50 [ 473.631455][ C0] FS: 00007f7032d348c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 473.631460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.631465][ C0] CR2: 00007f7030064000 CR3: 0000000096e2e000 CR4: 00000000001506f0 [ 473.631471][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.631476][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.631479][ C0] Call Trace: [ 473.631484][ C0] ? getname_flags.part.0+0x50/0x4f0 [ 473.631488][ C0] ? lock_downgrade+0x830/0x830 [ 473.631492][ C0] ? deref_stack_reg+0x150/0x150 [ 473.631495][ C0] ? __unwind_start+0x517/0x800 [ 473.631499][ C0] ? profile_setup.cold+0xc1/0xc1 [ 473.631503][ C0] arch_stack_walk+0x81/0xf0 [ 473.631506][ C0] ? getname_flags+0x9a/0xe0 [ 473.631510][ C0] stack_trace_save+0x8c/0xc0 [ 473.631514][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 473.631518][ C0] kasan_save_stack+0x1b/0x40 [ 473.631522][ C0] ? kasan_save_stack+0x1b/0x40 [ 473.631526][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 473.631530][ C0] ? kmem_cache_alloc+0x13a/0x3a0 [ 473.631534][ C0] ? getname_flags.part.0+0x50/0x4f0 [ 473.631537][ C0] ? __put_cred+0x1de/0x250 [ 473.631541][ C0] ? __zone_watermark_ok+0x3f0/0x3f0 [ 473.631545][ C0] ? kasan_save_stack+0x32/0x40 [ 473.631549][ C0] ? lock_acquire+0x1f3/0xae0 [ 473.631552][ C0] ? cache_grow_end+0x46/0x170 [ 473.631556][ C0] ? lock_is_held_type+0xbb/0xf0 [ 473.631560][ C0] ? find_held_lock+0x2d/0x110 [ 473.631564][ C0] ? cache_alloc_refill+0x2fd/0x340 [ 473.631567][ C0] ? lock_downgrade+0x830/0x830 [ 473.631571][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 473.631575][ C0] ? kasan_unpoison_shadow+0x33/0x40 [ 473.631579][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 473.631583][ C0] kmem_cache_alloc+0x13a/0x3a0 [ 473.631587][ C0] getname_flags.part.0+0x50/0x4f0 [ 473.631590][ C0] getname_flags+0x9a/0xe0 [ 473.631594][ C0] do_mkdirat+0x8d/0x2d0 [ 473.631598][ C0] ? user_path_create+0xf0/0xf0 [ 473.631601][ C0] ? __secure_computing+0x104/0x360 [ 473.631605][ C0] do_syscall_64+0x2d/0x70 [ 473.631609][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.631613][ C0] RIP: 0033:0x7f7031ff0687 [ 473.631625][ C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 473.631629][ C0] RSP: 002b:00007ffc6f2abc78 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 473.631638][ C0] RAX: ffffffffffffffda RBX: 00007ffc6f2aeb90 RCX: 00007f7031ff0687 [ 473.631644][ C0] RDX: 00007f7032a61a00 RSI: 00000000000001ed RDI: 000056227ce528a0 [ 473.631649][ C0] RBP: 00007ffc6f2abcb0 R08: 0000000000000000 R09: 0000000000000000 [ 473.631654][ C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 473.631659][ C0] R13: 0000000000000000 R14: 00007ffc6f2aeb90 R15: 00007ffc6f2ac1a0 [ 473.631740][ T1176] Kernel panic - not syncing: hung_task: blocked tasks [ 474.018115][ T1176] CPU: 1 PID: 1176 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 474.027542][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.037577][ T1176] Call Trace: [ 474.040854][ T1176] dump_stack+0x198/0x1fd [ 474.045216][ T1176] panic+0x347/0x7c0 [ 474.049093][ T1176] ? __warn_printk+0xf3/0xf3 [ 474.053685][ T1176] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 474.059295][ T1176] ? preempt_schedule_thunk+0x16/0x18 [ 474.064644][ T1176] ? watchdog.cold+0x22d/0x24b [ 474.069385][ T1176] ? watchdog+0xc59/0xf30 [ 474.073694][ T1176] watchdog.cold+0x23e/0x24b [ 474.078263][ T1176] ? trace_sched_process_hang+0x2e0/0x2e0 [ 474.083960][ T1176] kthread+0x3b5/0x4a0 [ 474.088005][ T1176] ? __kthread_bind_mask+0xc0/0xc0 [ 474.093094][ T1176] ret_from_fork+0x1f/0x30 [ 474.098777][ T1176] Kernel Offset: disabled [ 474.103107][ T1176] Rebooting in 86400 seconds..