[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. Debian GNU/Linux 9 syzkaller ttyS0 2020/10/07 15:57:23 fuzzer started 2020/10/07 15:57:23 dialing manager at 10.128.0.26:34727 2020/10/07 15:57:24 syscalls: 3448 2020/10/07 15:57:24 code coverage: enabled 2020/10/07 15:57:24 comparison tracing: enabled 2020/10/07 15:57:24 extra coverage: enabled 2020/10/07 15:57:24 setuid sandbox: enabled 2020/10/07 15:57:24 namespace sandbox: enabled 2020/10/07 15:57:24 Android sandbox: enabled 2020/10/07 15:57:24 fault injection: enabled 2020/10/07 15:57:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/07 15:57:24 net packet injection: enabled 2020/10/07 15:57:24 net device setup: enabled 2020/10/07 15:57:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/07 15:57:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/07 15:57:24 USB emulation: enabled 2020/10/07 15:57:24 hci packet injection: enabled 2020/10/07 15:57:24 wifi device emulation: enabled 16:00:58 executing program 0: r0 = socket(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x140, &(0x7f0000001dc0)={0x0, 0x989680}) syzkaller login: [ 285.413142][ T26] audit: type=1400 audit(1602086458.582:8): avc: denied { execmem } for pid=6876 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:00:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x880) 16:00:59 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 16:00:59 executing program 3: process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 16:00:59 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000240)="ef", 0x1, 0x24020040, &(0x7f0000000180)=@abs, 0x6e) 16:00:59 executing program 5: timer_create(0x0, 0x0, &(0x7f0000002900)) timer_settime(0x0, 0x1, &(0x7f0000000140), 0x0) [ 286.689022][ T6877] IPVS: ftp: loaded support on port[0] = 21 [ 286.904313][ T6879] IPVS: ftp: loaded support on port[0] = 21 [ 287.185361][ T6881] IPVS: ftp: loaded support on port[0] = 21 [ 287.203345][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 287.465480][ T6883] IPVS: ftp: loaded support on port[0] = 21 [ 287.494347][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 287.706969][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.725688][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.735749][ T6877] device bridge_slave_0 entered promiscuous mode [ 287.781903][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.787380][ T6885] IPVS: ftp: loaded support on port[0] = 21 [ 287.788975][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.815561][ T6877] device bridge_slave_1 entered promiscuous mode [ 287.964727][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.973047][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.981969][ T6879] device bridge_slave_0 entered promiscuous mode [ 287.996306][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.005080][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.013620][ T6879] device bridge_slave_1 entered promiscuous mode [ 288.053648][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.116507][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.145847][ T6898] IPVS: ftp: loaded support on port[0] = 21 [ 288.170776][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.193244][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 288.232952][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.262983][ T6877] team0: Port device team_slave_0 added [ 288.312545][ T6877] team0: Port device team_slave_1 added [ 288.346169][ T6879] team0: Port device team_slave_0 added [ 288.385571][ T6879] team0: Port device team_slave_1 added [ 288.430700][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.438137][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.466045][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.485977][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 288.518898][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.526345][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.553648][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.630346][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.638109][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.662049][ T2471] Bluetooth: hci0: command 0x0409 tx timeout [ 288.667086][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.691524][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.698487][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.725103][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.759159][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.767362][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.777417][ T6881] device bridge_slave_0 entered promiscuous mode [ 288.824026][ T6877] device hsr_slave_0 entered promiscuous mode [ 288.831394][ T6877] device hsr_slave_1 entered promiscuous mode [ 288.838367][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.847038][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.857626][ T6881] device bridge_slave_1 entered promiscuous mode [ 288.901268][ T2471] Bluetooth: hci1: command 0x0409 tx timeout [ 289.058832][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.074402][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.086569][ T6879] device hsr_slave_0 entered promiscuous mode [ 289.097000][ T6879] device hsr_slave_1 entered promiscuous mode [ 289.104101][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.112149][ T6879] Cannot create hsr debugfs directory [ 289.138698][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.147277][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 289.154471][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.163591][ T6883] device bridge_slave_0 entered promiscuous mode [ 289.182072][ T6885] chnl_net:caif_netlink_parms(): no params data found [ 289.216646][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 289.227846][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.236187][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.246118][ T6883] device bridge_slave_1 entered promiscuous mode [ 289.308879][ T6881] team0: Port device team_slave_0 added [ 289.352749][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.364326][ T6881] team0: Port device team_slave_1 added [ 289.388685][ T2594] Bluetooth: hci3: command 0x0409 tx timeout [ 289.402291][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.514136][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.525955][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.560176][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.574294][ T6883] team0: Port device team_slave_0 added [ 289.587611][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.595911][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.622450][ T2594] Bluetooth: hci4: command 0x0409 tx timeout [ 289.628473][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.654906][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.662132][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.674414][ T6885] device bridge_slave_0 entered promiscuous mode [ 289.689376][ T6883] team0: Port device team_slave_1 added [ 289.712959][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.720075][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.728877][ T6885] device bridge_slave_1 entered promiscuous mode [ 289.848336][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.857792][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.866200][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.866615][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 289.876763][ T6898] device bridge_slave_0 entered promiscuous mode [ 289.888468][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.895573][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.922136][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.935943][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.944269][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.970929][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.987743][ T6881] device hsr_slave_0 entered promiscuous mode [ 289.996641][ T6881] device hsr_slave_1 entered promiscuous mode [ 290.003999][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.012288][ T6881] Cannot create hsr debugfs directory [ 290.029918][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.039325][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.047452][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.055775][ T6898] device bridge_slave_1 entered promiscuous mode [ 290.192951][ T6877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.224547][ T6883] device hsr_slave_0 entered promiscuous mode [ 290.235944][ T6883] device hsr_slave_1 entered promiscuous mode [ 290.242603][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.250189][ T6883] Cannot create hsr debugfs directory [ 290.260510][ T6885] team0: Port device team_slave_0 added [ 290.270797][ T6885] team0: Port device team_slave_1 added [ 290.286100][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.305478][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.326450][ T6877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.337033][ T6877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.405631][ T6877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.439895][ T6898] team0: Port device team_slave_0 added [ 290.453658][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.460621][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.488696][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.505577][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.512813][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.539017][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.560460][ T6898] team0: Port device team_slave_1 added [ 290.616747][ T6879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.628312][ T6879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.692206][ T6879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.718687][ T6885] device hsr_slave_0 entered promiscuous mode [ 290.730151][ T6885] device hsr_slave_1 entered promiscuous mode [ 290.737449][ T6885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.745768][ T2471] Bluetooth: hci0: command 0x041b tx timeout [ 290.753048][ T6885] Cannot create hsr debugfs directory [ 290.763868][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.770832][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.797251][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.809742][ T6879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.846917][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.854547][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.886895][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.987230][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 291.066912][ T6898] device hsr_slave_0 entered promiscuous mode [ 291.082993][ T6898] device hsr_slave_1 entered promiscuous mode [ 291.089646][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.098708][ T6898] Cannot create hsr debugfs directory [ 291.221363][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 291.249402][ T6881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.269889][ T6881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.325174][ T6881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.357091][ T6881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.435934][ T6883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.461229][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 291.483133][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.506994][ T6883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.526590][ T6883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.573859][ T6885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.584600][ T6885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.597803][ T6885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.607401][ T6883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.649619][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.656966][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.669445][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.680417][ T6885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.701875][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 291.721761][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.780110][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.790883][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.808494][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.815891][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.828265][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.836800][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.875066][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.893157][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.907008][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.915931][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.926240][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.933383][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.942210][ T2471] Bluetooth: hci5: command 0x041b tx timeout [ 291.984932][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.998539][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.008553][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.017974][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.025141][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.079161][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.088421][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.098282][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.107867][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.114989][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.123640][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.132658][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.141583][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.178704][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.188853][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.198425][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.208074][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.224757][ T6898] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.252384][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.262227][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.270778][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.298361][ T6877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.314222][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.324348][ T6898] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.359514][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.368306][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.393315][ T6898] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.420432][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.437009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.447034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.468410][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.482438][ T6898] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.509393][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.517538][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.525748][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.533882][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.543474][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.560547][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.611613][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.620109][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.631893][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.640246][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.649224][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.657568][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.666177][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.674545][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.684061][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.700015][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.712278][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.732138][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.750314][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.766921][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.776185][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.783351][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.793622][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.802379][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.810780][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.817910][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.829183][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 292.862074][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.870084][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.883200][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.893042][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.900092][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.909588][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.919262][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.928519][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.935684][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.019531][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.042176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.050395][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.072188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.089708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.099488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.113372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.125318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.136532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.146891][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.156379][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 293.196913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.207908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.217498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.227872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.237032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.245219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.253130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.262019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.303079][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 293.312268][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.321826][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.330225][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.337364][ T8176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.345740][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.357045][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.366133][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.374859][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.384756][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.393557][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.400604][ T8176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.408513][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.418319][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.430260][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.472835][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.480180][ T6877] device veth0_vlan entered promiscuous mode [ 293.499103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.507424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.516247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.525422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.534971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.541423][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 293.545044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.558841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.567957][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.576428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.584994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.630589][ T6883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.646821][ T6883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.667769][ T6877] device veth1_vlan entered promiscuous mode [ 293.683614][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.692557][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.700864][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.711386][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.729373][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.738455][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.747740][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.756600][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.784949][ T7215] Bluetooth: hci4: command 0x040f tx timeout [ 293.822166][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.834579][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.843373][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.853160][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.862766][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.870215][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.914960][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.929057][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.940551][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.958260][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.967694][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.979687][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.987844][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.001116][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.020463][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.028196][ T8176] Bluetooth: hci5: command 0x040f tx timeout [ 294.063945][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.071786][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.080232][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.105078][ T6877] device veth0_macvtap entered promiscuous mode [ 294.141314][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.149498][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.159895][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.169039][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.177949][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.191919][ T6877] device veth1_macvtap entered promiscuous mode [ 294.211390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.219505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.228688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.240387][ T6879] device veth0_vlan entered promiscuous mode [ 294.270284][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.293692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.306155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.315364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.324150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.335850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.345637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.355109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.364656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.373651][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.380692][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.412672][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.419865][ T6883] device veth0_vlan entered promiscuous mode [ 294.430391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.446954][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.455159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.464154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.472475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.508143][ T6881] device veth0_vlan entered promiscuous mode [ 294.525030][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.538263][ T6879] device veth1_vlan entered promiscuous mode [ 294.550053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.560226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.569935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.578725][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.585856][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.594179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.603525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.613378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.622310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.630834][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.678581][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.687419][ T6883] device veth1_vlan entered promiscuous mode [ 294.697022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.711608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.719633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.729273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.739369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.750075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.759387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.768647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.777227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.785798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.794404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.802844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.811674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.820416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.832886][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.854167][ T6881] device veth1_vlan entered promiscuous mode [ 294.868094][ T6877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.888077][ T6877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.897284][ T6877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.901448][ T2471] Bluetooth: hci0: command 0x0419 tx timeout [ 294.911608][ T6877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.023769][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.039055][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.049146][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.061542][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.099620][ T6881] device veth0_macvtap entered promiscuous mode [ 295.120095][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.134111][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.146406][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.157444][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.168785][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.188998][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.207341][ T6879] device veth0_macvtap entered promiscuous mode [ 295.223758][ T8176] Bluetooth: hci1: command 0x0419 tx timeout [ 295.248866][ T6885] device veth0_vlan entered promiscuous mode [ 295.258754][ T6881] device veth1_macvtap entered promiscuous mode [ 295.282879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.302613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.310796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.320520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.333047][ T6879] device veth1_macvtap entered promiscuous mode [ 295.349286][ T6885] device veth1_vlan entered promiscuous mode [ 295.379290][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.381368][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 295.394663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.421887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.429730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.475791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.487876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.514022][ T6883] device veth0_macvtap entered promiscuous mode [ 295.590056][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.612452][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.630881][ T2471] Bluetooth: hci3: command 0x0419 tx timeout [ 295.642293][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.653177][ T6883] device veth1_macvtap entered promiscuous mode [ 295.662144][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.670223][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.679648][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.688546][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.697724][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.728187][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.738964][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.751480][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.762150][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.773760][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.784811][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.796383][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.808191][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.832747][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.844039][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.862294][ T2471] Bluetooth: hci4: command 0x0419 tx timeout [ 295.872208][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.882776][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.891707][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.901725][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.910485][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.919493][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.928977][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.938097][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.963089][ T6885] device veth0_macvtap entered promiscuous mode [ 295.982484][ T6879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.000942][ T6879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.009660][ T6879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.030400][ T6879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.051698][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.059822][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.093567][ T6885] device veth1_macvtap entered promiscuous mode [ 296.102068][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 296.111547][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.126674][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.136964][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.147902][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.159808][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.197521][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.210235][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.223361][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.234375][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.244405][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.254943][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.268080][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.277088][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.286112][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.295212][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.304180][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.313023][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.321536][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.330069][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.339970][ T6898] device veth0_vlan entered promiscuous mode [ 296.356808][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.371938][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.383583][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.389671][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.393953][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.412132][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.423826][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.434384][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.446115][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.456327][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.465049][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.474016][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.482558][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.491823][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.518884][ T6898] device veth1_vlan entered promiscuous mode [ 296.533617][ T6881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.542516][ T6881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.560212][ T6881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.572347][ T6881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.588331][ T6883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 16:01:09 executing program 0: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xde37f5004fc64492) [ 296.620922][ T6883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.629660][ T6883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.683491][ T6883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 16:01:09 executing program 0: [ 296.723928][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.745711][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.759735][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.791652][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:01:10 executing program 0: [ 296.841047][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.853870][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.865428][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.909372][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.923715][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 16:01:10 executing program 0: [ 296.950945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.959165][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.977567][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 16:01:10 executing program 0: 16:01:10 executing program 0: [ 297.021656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.096829][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.134606][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:01:10 executing program 0: [ 297.170844][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.190831][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.201773][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.230833][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.240668][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.270821][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.284558][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.303756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.316073][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.388607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.407787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.492374][ T6885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.505926][ T6885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.526386][ T6885] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.542220][ T6885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.563738][ T6898] device veth0_macvtap entered promiscuous mode [ 297.626326][ T6898] device veth1_macvtap entered promiscuous mode [ 297.692302][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.732170][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.749301][ T455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.756392][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.771817][ T455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.805931][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.815853][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.826410][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.836946][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.847500][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.857387][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.867950][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.879451][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.890926][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.902871][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.914747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.929672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.938698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.953487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.965078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.975658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.014585][ T455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.053983][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.071030][ T455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.095517][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.120074][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.139825][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.149962][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.160584][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.170546][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.182392][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.192402][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.204948][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.216808][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.245252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.260129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.272603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.287540][ T6898] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.298359][ T6898] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.309140][ T6898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.321078][ T6898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.351198][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.361377][ T8219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.369312][ T8219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.420723][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:01:11 executing program 1: [ 298.489577][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.512213][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.607509][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.632752][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.640687][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.683999][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.719709][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.753616][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.772543][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.787226][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.791949][ T8309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.814342][ T8309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:01:12 executing program 0: 16:01:12 executing program 1: [ 298.894117][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.909409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.980069][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.025758][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.085197][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:01:12 executing program 4: 16:01:12 executing program 5: 16:01:12 executing program 3: 16:01:12 executing program 0: 16:01:12 executing program 1: 16:01:12 executing program 2: socketpair(0x2, 0x3, 0x1, &(0x7f0000000100)) 16:01:12 executing program 2: 16:01:12 executing program 3: 16:01:12 executing program 1: 16:01:12 executing program 0: 16:01:12 executing program 5: 16:01:12 executing program 4: 16:01:12 executing program 1: 16:01:12 executing program 2: 16:01:12 executing program 3: 16:01:12 executing program 0: 16:01:12 executing program 5: 16:01:12 executing program 4: 16:01:12 executing program 0: 16:01:12 executing program 1: 16:01:12 executing program 2: 16:01:12 executing program 3: 16:01:12 executing program 4: 16:01:12 executing program 0: 16:01:12 executing program 5: 16:01:13 executing program 2: 16:01:13 executing program 1: 16:01:13 executing program 4: 16:01:13 executing program 0: 16:01:13 executing program 5: 16:01:13 executing program 3: 16:01:13 executing program 2: 16:01:13 executing program 1: 16:01:13 executing program 0: 16:01:13 executing program 5: 16:01:13 executing program 3: 16:01:13 executing program 4: 16:01:13 executing program 2: 16:01:13 executing program 1: 16:01:13 executing program 5: 16:01:13 executing program 0: 16:01:13 executing program 2: 16:01:13 executing program 4: 16:01:13 executing program 1: 16:01:13 executing program 2: 16:01:13 executing program 5: 16:01:13 executing program 3: syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') 16:01:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername(r0, 0x0, 0x0) 16:01:13 executing program 1: 16:01:13 executing program 4: 16:01:13 executing program 2: 16:01:13 executing program 5: 16:01:13 executing program 0: 16:01:13 executing program 1: 16:01:13 executing program 4: 16:01:14 executing program 2: 16:01:14 executing program 5: 16:01:14 executing program 3: 16:01:14 executing program 5: 16:01:14 executing program 0: 16:01:14 executing program 1: bpf$BPF_GET_PROG_INFO(0x1d, 0x0, 0x0) 16:01:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc01047d0, 0x0) 16:01:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x8001, 0x2, 0x80000, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/input/event#\x00'}, {0x20, '{-'}, {}, {0x20, '/dev/input/event#\x00'}], 0xa, "6625385336af68b73519339935f1a2af315b965787d050e901b29bad946d"}, 0x53) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x7c5e, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r4 = io_uring_setup(0x706, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r2, r3], 0x3) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/219, 0xdb}], 0x2, &(0x7f0000000440)=""/145, 0x91}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCGPHYS(r0, 0x4004550f, 0x0) 16:01:14 executing program 0: 16:01:14 executing program 3: 16:01:14 executing program 4: 16:01:14 executing program 1: 16:01:14 executing program 5: 16:01:14 executing program 0: 16:01:14 executing program 4: 16:01:14 executing program 1: 16:01:14 executing program 3: 16:01:14 executing program 5: 16:01:14 executing program 0: 16:01:15 executing program 2: 16:01:15 executing program 3: 16:01:15 executing program 4: 16:01:15 executing program 1: 16:01:15 executing program 5: 16:01:15 executing program 0: 16:01:15 executing program 3: 16:01:15 executing program 0: 16:01:15 executing program 4: 16:01:15 executing program 5: 16:01:15 executing program 1: 16:01:15 executing program 2: 16:01:15 executing program 3: 16:01:15 executing program 5: 16:01:15 executing program 0: 16:01:15 executing program 2: 16:01:15 executing program 4: 16:01:15 executing program 1: 16:01:15 executing program 3: 16:01:15 executing program 2: 16:01:15 executing program 5: 16:01:15 executing program 4: 16:01:15 executing program 0: 16:01:15 executing program 3: 16:01:16 executing program 1: 16:01:16 executing program 5: 16:01:16 executing program 2: 16:01:16 executing program 0: 16:01:16 executing program 4: 16:01:16 executing program 3: 16:01:16 executing program 1: 16:01:16 executing program 5: 16:01:16 executing program 2: 16:01:16 executing program 3: 16:01:16 executing program 0: 16:01:16 executing program 4: 16:01:16 executing program 5: 16:01:16 executing program 1: 16:01:16 executing program 2: 16:01:16 executing program 4: 16:01:16 executing program 0: 16:01:16 executing program 3: 16:01:16 executing program 5: 16:01:16 executing program 1: 16:01:16 executing program 3: 16:01:16 executing program 4: 16:01:16 executing program 2: 16:01:16 executing program 0: 16:01:16 executing program 5: 16:01:16 executing program 4: 16:01:16 executing program 1: 16:01:16 executing program 3: 16:01:16 executing program 2: 16:01:16 executing program 0: 16:01:16 executing program 5: 16:01:16 executing program 1: 16:01:17 executing program 4: 16:01:17 executing program 2: 16:01:17 executing program 3: 16:01:17 executing program 5: 16:01:17 executing program 4: 16:01:17 executing program 1: 16:01:17 executing program 3: 16:01:17 executing program 0: 16:01:17 executing program 2: 16:01:17 executing program 5: 16:01:17 executing program 1: 16:01:17 executing program 4: 16:01:17 executing program 2: 16:01:17 executing program 3: 16:01:17 executing program 5: 16:01:17 executing program 0: 16:01:17 executing program 4: 16:01:17 executing program 2: 16:01:17 executing program 1: 16:01:17 executing program 5: 16:01:17 executing program 3: 16:01:17 executing program 4: 16:01:17 executing program 0: 16:01:17 executing program 2: 16:01:17 executing program 5: 16:01:17 executing program 3: 16:01:18 executing program 4: 16:01:18 executing program 1: 16:01:18 executing program 0: 16:01:18 executing program 5: 16:01:18 executing program 2: 16:01:18 executing program 3: 16:01:18 executing program 1: 16:01:18 executing program 4: 16:01:18 executing program 0: 16:01:18 executing program 5: 16:01:18 executing program 2: 16:01:18 executing program 3: 16:01:18 executing program 1: 16:01:18 executing program 4: 16:01:18 executing program 0: 16:01:18 executing program 5: 16:01:18 executing program 1: 16:01:18 executing program 3: 16:01:18 executing program 2: 16:01:18 executing program 4: 16:01:18 executing program 0: 16:01:18 executing program 1: 16:01:18 executing program 5: 16:01:18 executing program 3: 16:01:18 executing program 2: 16:01:18 executing program 4: 16:01:18 executing program 0: 16:01:18 executing program 1: 16:01:18 executing program 5: 16:01:18 executing program 3: 16:01:18 executing program 2: 16:01:19 executing program 4: 16:01:19 executing program 0: 16:01:19 executing program 1: 16:01:19 executing program 3: 16:01:19 executing program 5: 16:01:19 executing program 2: 16:01:19 executing program 4: 16:01:19 executing program 0: 16:01:19 executing program 3: 16:01:19 executing program 1: 16:01:19 executing program 5: 16:01:19 executing program 2: 16:01:19 executing program 4: 16:01:19 executing program 3: 16:01:19 executing program 0: 16:01:19 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[{&(0x7f0000000080)="ca", 0x1}, {&(0x7f0000000940)="ad", 0x1, 0xfffffffffffffbff}, {&(0x7f0000000580)='G', 0x1, 0x1001}], 0x0, &(0x7f0000000b00)=ANY=[]) 16:01:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, 0x0) 16:01:19 executing program 4: 16:01:19 executing program 2: 16:01:19 executing program 0: 16:01:19 executing program 3: 16:01:19 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0xc020660b, 0x0) 16:01:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227c, 0x0) 16:01:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x127b, &(0x7f0000000040)) 16:01:19 executing program 3: madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x64) 16:01:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) 16:01:19 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 16:01:19 executing program 3: 16:01:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x1277, 0x0) 16:01:20 executing program 2: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x9}, {0x1, 0x0, 0x1000}], 0x2, 0x0) 16:01:20 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000001c0)="ba", 0x1, 0xfffffffffffffffc) 16:01:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000d80)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x4, 0x100000001, 0x0, 0x0, {0x0, 0x6, 0x400, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x0, 0x4}}}, 0xa0) 16:01:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x938) 16:01:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) 16:01:20 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x199040, 0x0) 16:01:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88041, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)) 16:01:20 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 16:01:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000380)) 16:01:20 executing program 1: statx(0xffffffffffffff9c, 0x0, 0xb3ed1db763c5539d, 0x0, 0x0) 16:01:20 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) 16:01:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000003c0)=""/68, &(0x7f0000000040)=0x44) 16:01:20 executing program 0: ioprio_get$uid(0x0, 0x0) 16:01:20 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 16:01:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, 0x2}) 16:01:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/122) 16:01:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="e6") 16:01:20 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 16:01:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff0f, &(0x7f0000000280)) 16:01:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="fbd0bcb2280c", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000002600)=@req={0x0, 0x0, 0x0, 0x9}, 0x10) 16:01:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0xb, &(0x7f0000000500)=0x3, 0x4) 16:01:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file1\x00', 0x80000001, 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)="bbe9ba0627b111df81e07d95", 0xc, 0x3}], 0x8000, &(0x7f00000003c0)) 16:01:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="fbd0bcb2280c711af25f1081f2f3e8c6cba8fa252e7ff15cd6cf72bb6c56ad8a9e", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040080) 16:01:21 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x228641, 0x0) 16:01:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x101, 0x4) 16:01:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETX(r0, 0x5433, 0x0) 16:01:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1268, &(0x7f0000000040)) [ 307.977509][ C0] sd 0:0:1:0: [sg0] tag#1548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 307.990240][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB: opcode=0xfb (vendor) [ 307.997235][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[00]: fb d0 bc b2 28 0c 71 1a f2 5f 10 81 f2 f3 e8 c6 [ 308.006843][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[10]: cb a8 fa 25 2e 7f f1 5c d6 cf 72 bb 6c 56 ad 8a [ 308.016623][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[20]: 9e 16:01:21 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)="ab", 0x1}, {&(0x7f0000000200)='}', 0x1, 0x550e}], 0x0, 0x0) [ 308.051714][ T8694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8694 comm=syz-executor.4 16:01:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x5385, 0x0) 16:01:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 16:01:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) 16:01:21 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:01:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="42e7e6080800", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002340)={{}, 0x0, 0x6, @unused=[0x3ff, 0x2, 0x0, 0x6], @name="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"}) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xea60}, 0x0, 0xfffb}, {{}, 0x11, 0x0, 0x7}, {{0x77359400}, 0x1f, 0x0, 0xff}, {{}, 0x0, 0xb0, 0x5}], 0x60) 16:01:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x0, 0x0}) 16:01:21 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) 16:01:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="fbd0bcb2280c711af25f1081f2f3e8c6cba8fa252e7ff15cd6cf72bb6c56ad8a9e", 0x0, 0x2, 0x10011, 0x1, &(0x7f0000000440)}) 16:01:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x80f, &(0x7f0000001a00)) 16:01:21 executing program 0: pipe(&(0x7f0000003e80)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r0, &(0x7f00000042c0)={0x7}, 0x7) write$P9_RRENAME(r0, &(0x7f0000004340)={0x7}, 0x7) [ 308.621068][ C1] hrtimer: interrupt took 74487 ns 16:01:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@uid={'uid', 0x3d, 0xee00}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}, {@huge_within_size='huge=within_size'}, {@huge_always='huge=always'}, {@huge_advise='huge=advise'}]}) [ 308.687436][ C0] sd 0:0:1:0: [sg0] tag#1551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 308.697885][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB: opcode=0xfb (vendor) [ 308.704830][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[00]: fb d0 bc b2 28 0c 71 1a f2 5f 10 81 f2 f3 e8 c6 [ 308.714436][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[10]: cb a8 fa 25 2e 7f f1 5c d6 cf 72 bb 6c 56 ad 8a [ 308.724049][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[20]: 9e 16:01:21 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000001000)='/dev/vcsu#\x00', 0x40, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 16:01:21 executing program 5: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/25) 16:01:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x24e880) select(0x40, &(0x7f0000000080), &(0x7f0000000140)={0x9}, 0x0, 0x0) 16:01:22 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:01:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002340)={{}, 0x0, 0x6, @unused=[0x3ff, 0x2, 0x0, 0x6], @name="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"}) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xea60}, 0x0, 0xfffb}, {{}, 0x11, 0x0, 0x7}, {{0x77359400}, 0x1f, 0x0, 0xff}, {{}, 0x0, 0xb0, 0x5}], 0x60) 16:01:22 executing program 3: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0xed, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 309.087359][ T8749] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:01:22 executing program 5: syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x20200) 16:01:22 executing program 0: syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x0) [ 309.180686][ T8749] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 16:01:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 16:01:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000001000)) 16:01:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x7fffffff) 16:01:22 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000004380)=ANY=[]) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', 0x0, 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="9e607eaa831f477154304ab44e2d2e239f79c6d4fb0f3713bfeb44bc5984caf8d4eeaf642a16474c1ab75ab50894221f021dacbb420fe7048eeed79dc06edad55d293fbfa580cf1f0eac9b4e2251ac748759263be357321a224fead96e3e2ef0372813dbc48e20f26fb0bbd5d8925a8faed58b53f362b0c539366bc9b3f05b690addeb11986b5042c48807cf3588f70ce14bcb3a07219ecda18cdee21b0cd2737598c4c4c866629fc679fe82acebf328009967b29a4b8a1dee9e8949dfe02d4d374002c84159b9ec", 0xc8}, {&(0x7f0000000240)="b7d56ebc366d1064b7ae227a38fbe28dbbaf69d0d7954b91bfd412f34da7076bdb92350c", 0x24, 0x2}], 0x0, &(0x7f0000004480)={[{@dots='dots'}], [{@euid_eq={'euid'}}, {@uid_lt={'uid<'}}, {@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 16:01:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000001280)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000c00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x4) 16:01:22 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x2}) 16:01:22 executing program 3: futex(0x0, 0x4, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 16:01:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) [ 309.608201][ T8776] FAT-fs (loop5): bogus number of reserved sectors [ 309.626202][ T8776] FAT-fs (loop5): Can't find a valid FAT filesystem 16:01:22 executing program 4: timerfd_create(0x0, 0x100800) 16:01:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:01:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:01:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) 16:01:23 executing program 3: socket(0x0, 0x500, 0x0) [ 309.819770][ T8776] FAT-fs (loop5): bogus number of reserved sectors [ 309.844429][ T8776] FAT-fs (loop5): Can't find a valid FAT filesystem 16:01:23 executing program 4: set_robust_list(&(0x7f0000000d00), 0x18) 16:01:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2284, &(0x7f0000000040)=0x1) [ 310.004633][ T8803] sd 0:0:1:0: device reset 16:01:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1263, &(0x7f0000000040)) 16:01:23 executing program 1: syz_mount_image$fuse(&(0x7f0000002080)='fuse\x00', &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@blksize={'blksize'}}]}}) 16:01:23 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0xfffffffffffffecc) 16:01:23 executing program 4: syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x7bb8a4ad6b9d5ec3, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 16:01:23 executing program 5: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x0, 0x0) 16:01:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) [ 310.183454][ T8812] fuse: Bad value for 'fd' [ 310.212155][ T8812] fuse: Bad value for 'fd' 16:01:23 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x11dc43) 16:01:23 executing program 4: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3544222ead70009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:01:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x5, @buffer={0x0, 0xc2, &(0x7f00000000c0)=""/194}, &(0x7f00000001c0)="42e7e6080800000000000000429078b5a3e89d739e88b2b6267009000000000000", &(0x7f0000000040)=""/45, 0x0, 0x0, 0x0, 0x0}) 16:01:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000300)) 16:01:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x5) 16:01:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x48009) 16:01:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') 16:01:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x80081270, &(0x7f0000000040)) 16:01:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x2008, &(0x7f0000000280)) 16:01:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x80000001) 16:01:23 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0xc0802) ioctl$SG_GET_ACCESS_COUNT(r0, 0x5450, 0x0) 16:01:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000440)={[{@fat=@showexec='showexec'}]}) 16:01:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000001c0)={0x0, 0x80}) 16:01:23 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0xffffffffffffffff) 16:01:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4007) 16:01:23 executing program 5: syz_mount_image$msdos(&(0x7f0000004740)='msdos\x00', &(0x7f0000004780)='./file0\x00', 0x0, 0x0, &(0x7f0000004980), 0x4600, &(0x7f0000004a00)={[{@fat=@sys_immutable='sys_immutable'}]}) 16:01:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x16, &(0x7f00000000c0)}) 16:01:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x4) [ 310.761663][ T8848] FAT-fs (loop1): bogus number of reserved sectors [ 310.789014][ T8848] FAT-fs (loop1): Can't find a valid FAT filesystem 16:01:24 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 16:01:24 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000300)={{0x77359400}}, 0x0) 16:01:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x141) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50}, 0x50) [ 310.965916][ T8848] FAT-fs (loop1): bogus number of reserved sectors [ 310.977433][ T8862] FAT-fs (loop5): bogus number of reserved sectors [ 310.996113][ T8848] FAT-fs (loop1): Can't find a valid FAT filesystem 16:01:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r1, 0x5) 16:01:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2284, &(0x7f00000000c0)=0x3) [ 311.036383][ T8862] FAT-fs (loop5): Can't find a valid FAT filesystem 16:01:24 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @random="607a749cd3da", @void, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "7f", "8db2f0"}}}}}}, 0x0) 16:01:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x5c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mount$overlay(0x40000a, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x20) write$P9_RREADDIR(r1, 0x0, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000200)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000280)) 16:01:24 executing program 2: sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe7f, 0x1002ca82a773bf68) 16:01:24 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001500)=[{&(0x7f0000000180)="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", 0xe81}], 0x0, 0x0) [ 311.151358][ T8862] FAT-fs (loop5): bogus number of reserved sectors [ 311.175670][ T8862] FAT-fs (loop5): Can't find a valid FAT filesystem 16:01:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x67, &(0x7f0000000500), 0x4) 16:01:24 executing program 4: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 16:01:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005940)={'syztnl1\x00', 0x0}) 16:01:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x5c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mount$overlay(0x40000a, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x20) write$P9_RREADDIR(r1, 0x0, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000200)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000280)) 16:01:24 executing program 0: syz_mount_image$squashfs(&(0x7f00000009c0)='squashfs\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x1, &(0x7f0000004380)=[{0x0}], 0x1000008, &(0x7f0000004440)={[{'euid'}, {'-}'}, {}, {}, {'$p,--$\\'}, {'FILE_CHECK'}], [{@pcr={'pcr', 0x3d, 0x27}}, {@subj_user={'subj_user', 0x3d, 'FILE_CHECK'}}, {@euid_eq={'euid'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'FILE_CHECK'}}]}) 16:01:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x8, 0x6, 0x5}, 0x14}}, 0x0) 16:01:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x27, &(0x7f00000000c0)=""/39}, &(0x7f0000000100)="fd768c58b1f2", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x5c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mount$overlay(0x40000a, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x20) write$P9_RREADDIR(r1, 0x0, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000200)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000280)) 16:01:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x400, 0x0, 0x5}) 16:01:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @sack_perm, @window, @sack_perm], 0x4) 16:01:24 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 311.765743][ T8915] squashfs: Unknown parameter 'euid' [ 311.821599][ T8915] squashfs: Unknown parameter 'euid' 16:01:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x2, &(0x7f0000000040)) 16:01:25 executing program 3: memfd_create(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) 16:01:25 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000096c0)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000009f00)={0x2020}, 0x2020) 16:01:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:01:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000d80)='vfat\x00', &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000003180)) 16:01:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440)=0x7fb7, 0x4) sendto$inet(r0, &(0x7f00000001c0)="9a", 0x1, 0x0, 0x0, 0x0) close(r0) [ 312.153539][ T8942] FAT-fs (loop2): bogus number of reserved sectors [ 312.193307][ T8942] FAT-fs (loop2): Can't find a valid FAT filesystem 16:01:25 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8941, 0x0) [ 312.207449][ T8948] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:01:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000004c0)) 16:01:25 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f0000009d40)=[{&(0x7f0000009b80)='?', 0x1}, {&(0x7f0000009c40)="ad", 0x1}, {&(0x7f0000009d00)="e6", 0x1}], 0x0, 0x0) 16:01:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000001c0)) [ 312.265010][ T8942] FAT-fs (loop2): bogus number of reserved sectors [ 312.272144][ T8942] FAT-fs (loop2): Can't find a valid FAT filesystem 16:01:25 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000004980)=[{&(0x7f00000047c0)="c0", 0x1}, {&(0x7f0000004880)='!', 0x1, 0xffffffff}], 0x0, 0x0) 16:01:25 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000a40)="c2", 0x20000a41) 16:01:25 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, &(0x7f0000000000)=0x1, 0x200) 16:01:25 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') 16:01:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1260, &(0x7f0000000040)) 16:01:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) 16:01:25 executing program 5: syz_open_dev$vcsa(&(0x7f0000001280)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x40141) 16:01:25 executing program 3: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 16:01:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x401070cd, 0x0) 16:01:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={0x0, 0x1}, 0x1870, 0x0, 0x400, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 312.759273][ T8982] fuse: Bad value for 'fd' [ 312.765863][ T8982] fuse: Bad value for 'fd' 16:01:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001340)={0x2a, "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"}) 16:01:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 16:01:26 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 16:01:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x9, 0x14}) 16:01:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00') 16:01:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 313.050676][ T5] ================================================================== [ 313.050884][ T5] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x44b/0xa30 [ 313.050897][ T5] Read of size 9 at addr ffff8880a92a6d30 by task kworker/0:0/5 [ 313.050902][ T5] [ 313.050918][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.9.0-rc8-syzkaller #0 [ 313.050927][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.050942][ T5] Workqueue: events_power_efficient fb_flashcursor [ 313.050981][ T5] Call Trace: [ 313.051030][ T5] dump_stack+0x198/0x1fd [ 313.051050][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051065][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051084][ T5] print_address_description.constprop.0.cold+0xae/0x497 [ 313.051103][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051151][ T5] ? lockdep_hardirqs_off+0x96/0xd0 [ 313.051169][ T5] ? vprintk_func+0x95/0x1d4 [ 313.051188][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051210][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051224][ T5] kasan_report.cold+0x1f/0x37 [ 313.051243][ T5] ? soft_cursor+0x180/0xa30 [ 313.051258][ T5] ? soft_cursor+0x44b/0xa30 [ 313.051278][ T5] check_memory_region+0x13d/0x180 [ 313.051294][ T5] memcpy+0x20/0x60 [ 313.051312][ T5] soft_cursor+0x44b/0xa30 [ 313.051336][ T5] ? lockdep_hardirqs_on+0x53/0x100 [ 313.051365][ T5] bit_cursor+0xcfe/0x1720 [ 313.051395][ T5] ? kmalloc_array.constprop.0+0x20/0x20 [ 313.051422][ T5] ? __down_trylock_console_sem+0x179/0x1d0 [ 313.051466][ T5] ? check_preemption_disabled+0x50/0x130 [ 313.051480][ T5] ? fb_get_color_depth+0x11a/0x240 [ 313.051497][ T5] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 313.051512][ T5] ? get_color+0x20e/0x410 [ 313.051531][ T5] ? kmalloc_array.constprop.0+0x20/0x20 [ 313.051549][ T5] fb_flashcursor+0x38b/0x430 [ 313.051572][ T5] process_one_work+0x94c/0x1670 [ 313.051598][ T5] ? lock_release+0x8f0/0x8f0 [ 313.051616][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 313.051638][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 313.051655][ T5] ? lockdep_hardirqs_off+0x96/0xd0 [ 313.051680][ T5] worker_thread+0x64c/0x1120 [ 313.051714][ T5] ? process_one_work+0x1670/0x1670 [ 313.051732][ T5] kthread+0x3b5/0x4a0 [ 313.051747][ T5] ? __kthread_bind_mask+0xc0/0xc0 [ 313.051768][ T5] ret_from_fork+0x1f/0x30 [ 313.051795][ T5] [ 313.051829][ T5] Allocated by task 8671: [ 313.051843][ T5] kasan_save_stack+0x1b/0x40 [ 313.051856][ T5] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 313.051868][ T5] __kmalloc+0x1b0/0x360 [ 313.051881][ T5] fbcon_set_font+0x363/0x9b0 [ 313.051925][ T5] con_font_op+0xd26/0x1140 [ 313.051968][ T5] vt_ioctl+0x1ce7/0x2e90 [ 313.052013][ T5] tty_ioctl+0x1019/0x15f0 [ 313.052030][ T5] __x64_sys_ioctl+0x193/0x200 [ 313.052043][ T5] do_syscall_64+0x2d/0x70 [ 313.052080][ T5] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 313.052086][ T5] [ 313.052097][ T5] The buggy address belongs to the object at ffff8880a92a6c00 [ 313.052097][ T5] which belongs to the cache kmalloc-512 of size 512 [ 313.052110][ T5] The buggy address is located 304 bytes inside of [ 313.052110][ T5] 512-byte region [ffff8880a92a6c00, ffff8880a92a6e00) [ 313.052115][ T5] The buggy address belongs to the page: [ 313.052131][ T5] page:0000000062180eef refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa92a6 [ 313.052142][ T5] flags: 0xfffe0000000200(slab) [ 313.052163][ T5] raw: 00fffe0000000200 ffffea000244c4c8 ffffea0002a47788 ffff8880aa040600 [ 313.052179][ T5] raw: 0000000000000000 ffff8880a92a6000 0000000100000004 0000000000000000 [ 313.052186][ T5] page dumped because: kasan: bad access detected [ 313.052190][ T5] [ 313.052196][ T5] Memory state around the buggy address: [ 313.052208][ T5] ffff8880a92a6c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.052220][ T5] ffff8880a92a6c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.052232][ T5] >ffff8880a92a6d00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.052239][ T5] ^ [ 313.052251][ T5] ffff8880a92a6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.052262][ T5] ffff8880a92a6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.052269][ T5] ================================================================== [ 313.052274][ T5] Disabling lock debugging due to kernel taint [ 313.052323][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 313.052337][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 313.052351][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.052363][ T5] Workqueue: events_power_efficient fb_flashcursor [ 313.052369][ T5] Call Trace: [ 313.052385][ T5] dump_stack+0x198/0x1fd [ 313.052400][ T5] ? soft_cursor+0x380/0xa30 [ 313.052413][ T5] panic+0x382/0x7fb [ 313.052427][ T5] ? __warn_printk+0xf3/0xf3 [ 313.052440][ T5] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 313.052456][ T5] ? trace_hardirqs_on+0x55/0x220 [ 313.052471][ T5] ? soft_cursor+0x44b/0xa30 [ 313.052484][ T5] ? soft_cursor+0x44b/0xa30 [ 313.052496][ T5] end_report+0x4d/0x53 [ 313.052508][ T5] kasan_report.cold+0xd/0x37 [ 313.052523][ T5] ? soft_cursor+0x180/0xa30 [ 313.052536][ T5] ? soft_cursor+0x44b/0xa30 [ 313.052550][ T5] check_memory_region+0x13d/0x180 [ 313.052560][ T5] memcpy+0x20/0x60 [ 313.052573][ T5] soft_cursor+0x44b/0xa30 [ 313.052589][ T5] ? lockdep_hardirqs_on+0x53/0x100 [ 313.052604][ T5] bit_cursor+0xcfe/0x1720 [ 313.052620][ T5] ? kmalloc_array.constprop.0+0x20/0x20 [ 313.052636][ T5] ? __down_trylock_console_sem+0x179/0x1d0 [ 313.052650][ T5] ? check_preemption_disabled+0x50/0x130 [ 313.052662][ T5] ? fb_get_color_depth+0x11a/0x240 [ 313.052674][ T5] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 313.052686][ T5] ? get_color+0x20e/0x410 [ 313.052701][ T5] ? kmalloc_array.constprop.0+0x20/0x20 [ 313.052713][ T5] fb_flashcursor+0x38b/0x430 [ 313.052728][ T5] process_one_work+0x94c/0x1670 [ 313.052744][ T5] ? lock_release+0x8f0/0x8f0 [ 313.052757][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 313.052771][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 313.052785][ T5] ? lockdep_hardirqs_off+0x96/0xd0 [ 313.052801][ T5] worker_thread+0x64c/0x1120 [ 313.052819][ T5] ? process_one_work+0x1670/0x1670 [ 313.052832][ T5] kthread+0x3b5/0x4a0 [ 313.052844][ T5] ? __kthread_bind_mask+0xc0/0xc0 [ 313.052857][ T5] ret_from_fork+0x1f/0x30 [ 313.054112][ T5] Kernel Offset: disabled [ 313.685950][ T5] Rebooting in 86400 seconds..