Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. 2020/10/31 11:02:56 fuzzer started 2020/10/31 11:02:56 dialing manager at 10.128.0.105:41313 2020/10/31 11:02:57 syscalls: 3448 2020/10/31 11:02:57 code coverage: enabled 2020/10/31 11:02:57 comparison tracing: enabled 2020/10/31 11:02:57 extra coverage: enabled 2020/10/31 11:02:57 setuid sandbox: enabled 2020/10/31 11:02:57 namespace sandbox: enabled 2020/10/31 11:02:57 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/31 11:02:57 fault injection: enabled 2020/10/31 11:02:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/31 11:02:57 net packet injection: enabled 2020/10/31 11:02:57 net device setup: enabled 2020/10/31 11:02:57 concurrency sanitizer: enabled 2020/10/31 11:02:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/31 11:02:57 USB emulation: enabled 2020/10/31 11:02:57 hci packet injection: enabled 2020/10/31 11:02:57 wifi device emulation: enabled 2020/10/31 11:02:57 suppressing KCSAN reports in functions: 'ext4_free_inode' '__ext4_new_inode' 'expire_timers' 11:03:02 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="bf79caae0deef29fc6e336ed97c4a2e94560929d36d59e245f190659bb1b8a3bfbeed8edb743a613b4635ab61f44ec91c39778362d66ff92c7edffbd49b35f477d006da43d687c948a"]}]}, 0x64}}, 0x0) 11:03:02 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg$sock(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:03:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) syzkaller login: [ 36.529291][ T8478] IPVS: ftp: loaded support on port[0] = 21 [ 36.611099][ T8478] chnl_net:caif_netlink_parms(): no params data found [ 36.639759][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.646788][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.655411][ T8478] device bridge_slave_0 entered promiscuous mode [ 36.672667][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.683740][ T8480] IPVS: ftp: loaded support on port[0] = 21 [ 36.698544][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.712117][ T8478] device bridge_slave_1 entered promiscuous mode [ 36.728676][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.742783][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.768769][ T8478] team0: Port device team_slave_0 added [ 36.776367][ T8478] team0: Port device team_slave_1 added [ 36.793384][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.800578][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.826513][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.838827][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.846071][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.872075][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.932474][ T8482] IPVS: ftp: loaded support on port[0] = 21 [ 36.940516][ T8478] device hsr_slave_0 entered promiscuous mode [ 36.946944][ T8478] device hsr_slave_1 entered promiscuous mode [ 36.957237][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 37.035674][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.042830][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.050372][ T8480] device bridge_slave_0 entered promiscuous mode [ 37.058843][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.066237][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.073636][ T8480] device bridge_slave_1 entered promiscuous mode [ 37.103181][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.116984][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.137322][ T8480] team0: Port device team_slave_0 added [ 37.145371][ T8480] team0: Port device team_slave_1 added [ 37.174172][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.181372][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.207479][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.237997][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.249357][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.281585][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.293346][ T8478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.309179][ T8478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.324444][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 37.332060][ T8480] device hsr_slave_0 entered promiscuous mode [ 37.340390][ T8480] device hsr_slave_1 entered promiscuous mode [ 37.347786][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.355948][ T8480] Cannot create hsr debugfs directory [ 37.363226][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 37.378083][ T8478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.414037][ T8478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.466359][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.473458][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.481311][ T8482] device bridge_slave_0 entered promiscuous mode [ 37.503029][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.510180][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.517630][ T8482] device bridge_slave_1 entered promiscuous mode [ 37.537767][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 37.560777][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.567794][ T8478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.575185][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.582301][ T8478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.603176][ T8480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.612627][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.627619][ T8480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.637737][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.645417][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.657305][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.672294][ T8480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.695498][ T8480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.704515][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.715103][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.722987][ T8486] device bridge_slave_0 entered promiscuous mode [ 37.730518][ T8482] team0: Port device team_slave_0 added [ 37.736130][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.743580][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.751276][ T8486] device bridge_slave_1 entered promiscuous mode [ 37.767316][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.777473][ T8482] team0: Port device team_slave_1 added [ 37.796575][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.803576][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.830060][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.842032][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.857816][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.865009][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.892069][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.919344][ T8482] device hsr_slave_0 entered promiscuous mode [ 37.926191][ T8482] device hsr_slave_1 entered promiscuous mode [ 37.932988][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.940629][ T8482] Cannot create hsr debugfs directory [ 37.946670][ T8486] team0: Port device team_slave_0 added [ 37.957538][ T8486] team0: Port device team_slave_1 added [ 37.990378][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.997468][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.024014][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.041199][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.054425][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.061421][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.087552][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.117925][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.125720][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.133990][ T8478] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.155731][ T8486] device hsr_slave_0 entered promiscuous mode [ 38.162235][ T8486] device hsr_slave_1 entered promiscuous mode [ 38.168567][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.176725][ T8486] Cannot create hsr debugfs directory [ 38.186833][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.196039][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.204779][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.213322][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.220359][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.242670][ T8482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.251928][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.266110][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.274708][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.281800][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.289587][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.308592][ T8478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.319276][ T8478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.337664][ T8482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.346346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.355369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.364188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.372608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.381179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.389795][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.397934][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.406363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.414736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.423720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.431765][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.446029][ T8482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.460545][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.468103][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.478278][ T8482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.488219][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.504868][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.514336][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.522914][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.529970][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.538668][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.547310][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.556567][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.563603][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.572649][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.578871][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 38.580823][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.593399][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.610548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.619781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.628342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.637029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.645812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.654404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.663128][ T8486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.680405][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.687753][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.695964][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.704343][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.716637][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.727549][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.734778][ T3713] Bluetooth: hci1: command 0x0409 tx timeout [ 38.741055][ T8486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.755175][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.763564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.785766][ T8486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.794595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.803445][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.814374][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.823655][ T8486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.854960][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.863954][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.872480][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.880564][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.889017][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.896539][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.904289][ T9196] Bluetooth: hci2: command 0x0409 tx timeout [ 38.916218][ T8478] device veth0_vlan entered promiscuous mode [ 38.930600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.939229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.951379][ T8480] device veth0_vlan entered promiscuous mode [ 38.960398][ T8478] device veth1_vlan entered promiscuous mode [ 38.968131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.976911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.985152][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.993969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.001916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.012885][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.026855][ T8480] device veth1_vlan entered promiscuous mode [ 39.038430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.047154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.055327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.063157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.070863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.079798][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.089172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.097698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.106584][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.113660][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.131910][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.139836][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.148131][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.156530][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.163583][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.171385][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.180195][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.198729][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.207017][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.224854][ T8480] device veth0_macvtap entered promiscuous mode [ 39.234098][ T8480] device veth1_macvtap entered promiscuous mode [ 39.241454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.250597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.258205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.266950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.275579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.284308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.288773][ T9175] Bluetooth: hci4: command 0x0409 tx timeout [ 39.295055][ T8478] device veth0_macvtap entered promiscuous mode [ 39.307473][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.317184][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.325256][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.333297][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.341955][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.352136][ T8478] device veth1_macvtap entered promiscuous mode [ 39.368531][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.381610][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.392262][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.403123][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.410727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.418333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.427434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.435746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.444118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.452329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.461094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.469725][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.478108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.489707][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.500727][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.507947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.516361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.524496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.533215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.543207][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.553836][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.564781][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.576439][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.584258][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.593175][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.603906][ T8478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616220][ T8478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.628307][ T8478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637267][ T8478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.653549][ T8480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.663421][ T8480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.672143][ T8480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.681780][ T8480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.700693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.708079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.716439][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.726255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.734633][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.741688][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.751949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.759966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.768395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.777805][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.784839][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.797692][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.819309][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.827916][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.874812][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.885832][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.908837][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.916636][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.935281][ T8486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.946453][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.960832][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.970107][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.979266][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.987737][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.996142][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.005716][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.014513][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.022811][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.031449][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.040004][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.048301][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.056546][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.066405][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.074344][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.082164][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.090569][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.092128][ T8482] device veth0_vlan entered promiscuous mode [ 40.098595][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.115653][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.141714][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.147988][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.158210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.165946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.173709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.181062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.193795][ T8482] device veth1_vlan entered promiscuous mode [ 40.194245][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.213770][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.224213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.232760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.245246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.278596][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.298359][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.309508][ T8482] device veth0_macvtap entered promiscuous mode [ 40.324719][ T8482] device veth1_macvtap entered promiscuous mode [ 40.331337][ T9404] overlayfs: filesystem on './bus' not supported as upperdir 11:03:07 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) [ 40.367572][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.392367][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.403511][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.419242][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.429907][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.451993][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.460282][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.469890][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.478437][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.486922][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.497831][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.508411][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 11:03:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) [ 40.533877][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.558260][ T8482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.576322][ T8482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.600559][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.617187][ T8486] device veth0_vlan entered promiscuous mode 11:03:07 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) [ 40.630142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.642149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.648552][ T9175] Bluetooth: hci0: command 0x041b tx timeout [ 40.668857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.679373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.690355][ T8482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.706140][ T8482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728372][ T8482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.737047][ T8482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 11:03:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:07 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) [ 40.786577][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.808244][ T9175] Bluetooth: hci1: command 0x041b tx timeout [ 40.819177][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.838595][ T8486] device veth1_vlan entered promiscuous mode [ 40.898671][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.914862][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.925853][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.934421][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.944534][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.957807][ T8486] device veth0_macvtap entered promiscuous mode [ 40.968404][ T9175] Bluetooth: hci2: command 0x041b tx timeout [ 40.975793][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 11:03:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) [ 40.996716][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.007149][ T8486] device veth1_macvtap entered promiscuous mode [ 41.017605][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:03:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) [ 41.054984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.064143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.078821][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.091501][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.104921][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.119756][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.133671][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.145032][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.156735][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.169411][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.190503][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 11:03:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="bf79caae0deef29fc6e336ed97c4a2e94560929d36d59e245f190659bb1b8a3bfbeed8edb743a613b4635ab61f44ec91c39778362d66ff92c7edffbd49b35f477d006da43d687c948a"]}]}, 0x64}}, 0x0) [ 41.206504][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.240547][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.251612][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.278037][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.287870][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 11:03:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) [ 41.327088][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.346389][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.361864][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.368226][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 41.381735][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.419009][ T8486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.430653][ T8486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.456465][ T8486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.470099][ T8486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.536090][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.559522][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.568409][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.577369][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.586548][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.595146][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.728292][ T9337] Bluetooth: hci0: command 0x040f tx timeout [ 42.888625][ T9337] Bluetooth: hci1: command 0x040f tx timeout [ 43.049534][ T9337] Bluetooth: hci2: command 0x040f tx timeout [ 43.447713][ T9337] Bluetooth: hci4: command 0x040f tx timeout [ 44.807291][ T9337] Bluetooth: hci0: command 0x0419 tx timeout [ 44.967313][ T9337] Bluetooth: hci1: command 0x0419 tx timeout [ 45.127517][ T9337] Bluetooth: hci2: command 0x0419 tx timeout [ 45.528186][ T9337] Bluetooth: hci4: command 0x0419 tx timeout [ 49.709366][ T9523] IPVS: ftp: loaded support on port[0] = 21 [ 49.796885][ T9524] IPVS: ftp: loaded support on port[0] = 21 [ 49.815652][ T9523] chnl_net:caif_netlink_parms(): no params data found [ 49.851658][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.858791][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.866407][ T9523] device bridge_slave_0 entered promiscuous mode [ 49.874346][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.881773][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.889430][ T9523] device bridge_slave_1 entered promiscuous mode [ 49.907933][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.921961][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.944940][ T9523] team0: Port device team_slave_0 added [ 49.951887][ T9523] team0: Port device team_slave_1 added [ 49.966469][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.973500][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.999778][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.013355][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.020422][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.046551][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.088327][ T9523] device hsr_slave_0 entered promiscuous mode [ 50.094891][ T9523] device hsr_slave_1 entered promiscuous mode [ 50.101785][ T9523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.109765][ T9523] Cannot create hsr debugfs directory [ 50.117096][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 50.162239][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.170343][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.178716][ T9524] device bridge_slave_0 entered promiscuous mode [ 50.187370][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.194405][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.202127][ T9524] device bridge_slave_1 entered promiscuous mode [ 50.220163][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.232072][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.254076][ T9524] team0: Port device team_slave_0 added [ 50.262369][ T9524] team0: Port device team_slave_1 added [ 50.268722][ T9523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.279295][ T9523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.291141][ T9523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.302327][ T9523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.318194][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.325153][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.351653][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.363975][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.370966][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.396984][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.419301][ T9524] device hsr_slave_0 entered promiscuous mode [ 50.425898][ T9524] device hsr_slave_1 entered promiscuous mode [ 50.432396][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.440055][ T9524] Cannot create hsr debugfs directory [ 50.466912][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.473983][ T9523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.481233][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.488273][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.520829][ T9524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.529800][ T9524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.546225][ T9524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.554710][ T9524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.574231][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.581268][ T9524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.588510][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.595534][ T9524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.618989][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.633816][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.642174][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.650327][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.659158][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.668782][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.677706][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.689619][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.700813][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.709965][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.716994][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.728467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.736826][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.743864][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.762012][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.772010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.781190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.792102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.801691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.812123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.820320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.830529][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.838533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.847226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.861516][ T9523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.872300][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.880355][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.889055][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.897689][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.904694][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.912594][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.920969][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.929353][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.937941][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.946372][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.953390][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.965514][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.983995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.992797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.001362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.010116][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.017585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.025829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.033677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.042286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.053552][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.066278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.074431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.082960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.091295][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.102013][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.121891][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.129552][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.142025][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.159170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.167658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.182369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.191147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.212347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.223134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.234199][ T9523] device veth0_vlan entered promiscuous mode [ 51.242593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.250652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.258770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.266839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.276415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.284139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.292420][ T9524] device veth0_vlan entered promiscuous mode [ 51.304363][ T9523] device veth1_vlan entered promiscuous mode [ 51.312704][ T9524] device veth1_vlan entered promiscuous mode [ 51.334170][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.342642][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.351054][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.359180][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.367314][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.375663][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.387373][ T9523] device veth0_macvtap entered promiscuous mode [ 51.396804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.404652][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.413704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.423691][ T9523] device veth1_macvtap entered promiscuous mode [ 51.432242][ T9524] device veth0_macvtap entered promiscuous mode [ 51.443504][ T9524] device veth1_macvtap entered promiscuous mode [ 51.458005][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.468611][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.478947][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.489605][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.499954][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.510996][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.521042][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.531764][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.542644][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.551131][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.559734][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.567890][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.575576][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.584502][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.596415][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.607402][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.618100][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.628784][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.638890][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.649518][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.659508][ T9523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.670205][ T9523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.681187][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.689963][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.698868][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.708253][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.718727][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.728789][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.739675][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.749565][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.760249][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.770591][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.770999][ T9337] Bluetooth: hci3: command 0x0409 tx timeout [ 51.782755][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.796953][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.807407][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.818243][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.829003][ T9523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.837775][ T9523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.847407][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 51.856060][ T9523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.864753][ T9523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.877312][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.885699][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.896335][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.907305][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.917239][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.928721][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.939142][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.949634][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.959710][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.970246][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.980415][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.990939][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.001683][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.011347][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.020353][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.031182][ T9524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.040299][ T9524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.049623][ T9524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.058518][ T9524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.128491][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.136812][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.144685][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.170654][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.178628][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.192011][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.200653][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.207991][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.213883][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.225093][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.232846][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.240977][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 11:03:19 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="bf79caae0deef29fc6e336ed97c4a2e94560929d36d59e245f190659bb1b8a3bfbeed8edb743a613b4635ab61f44ec91c39778362d66ff92c7edffbd49b35f477d006da43d687c948a"]}]}, 0x64}}, 0x0) 11:03:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg$sock(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:03:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg$sock(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:03:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="bf79caae0deef29fc6e336ed97c4a2e94560929d36d59e245f190659bb1b8a3bfbeed8edb743a613b4635ab61f44ec91c39778362d66ff92c7edffbd49b35f477d006da43d687c948a"]}]}, 0x64}}, 0x0) 11:03:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg$sock(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:03:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:19 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:19 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:19 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:19 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:20 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) 11:03:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETSF2(r0, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "2803e24da18d1e5a6980fd356333d287ff767a"}) [ 53.846847][ T17] Bluetooth: hci3: command 0x041b tx timeout 11:03:20 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:20 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:20 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) [ 53.925720][ T17] Bluetooth: hci5: command 0x041b tx timeout 11:03:21 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:21 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:03:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:21 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x8000000, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RLERROR(r3, 0x0, 0x0) 11:03:22 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) 11:03:22 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:22 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) [ 55.838812][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:03:22 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) [ 55.894466][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:03:22 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 55.935677][ T17] Bluetooth: hci3: command 0x040f tx timeout 11:03:22 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) 11:03:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 56.017206][ T17] Bluetooth: hci5: command 0x040f tx timeout 11:03:23 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 56.082969][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:03:23 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:23 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x30000f0, &(0x7f0000000840)) 11:03:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) 11:03:23 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) 11:03:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 56.216158][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:03:23 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 56.337953][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:03:23 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) 11:03:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 11:03:23 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:03:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) [ 56.506476][T10271] binder: 10266:10271 ioctl c018620c 0 returned -14 [ 56.535128][T10271] binder: 10266:10271 ioctl c018620c 0 returned -14 11:03:23 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) 11:03:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:03:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 11:03:23 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) 11:03:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, &(0x7f0000012ffc)=0x4f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="eed18e4e3c57ab0e46e1db7b4e798d33", 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 11:03:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:03:23 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) [ 56.690888][T10294] binder: 10291:10294 ioctl c018620c 0 returned -14 11:03:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) [ 56.789590][T10304] binder: 10303:10304 ioctl c018620c 0 returned -14 [ 57.005137][ T34] audit: type=1800 audit(1604142203.909:2): pid=10273 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_user" dev="sda1" ino=15793 res=0 errno=0 11:03:24 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 11:03:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:03:24 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) 11:03:24 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x3, 0x8000003}) 11:03:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) [ 57.146390][T10319] binder: 10312:10319 ioctl c018620c 0 returned -14 11:03:24 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) [ 57.187146][T10322] binder: 10316:10322 ioctl c018620c 0 returned -14 11:03:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) 11:03:24 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) [ 57.347765][T10340] binder: 10335:10340 ioctl c018620c 0 returned -14 11:03:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000003100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046207, 0x0) [ 57.548630][T10351] binder: 10349:10351 ioctl c018620c 0 returned -14 11:03:24 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:24 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) [ 58.015289][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 58.095241][ T17] Bluetooth: hci5: command 0x0419 tx timeout 11:03:25 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:25 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:25 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:25 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:25 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:26 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 11:03:26 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r1, 0x0, 0x7fffffff) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) [ 59.659219][T10415] ================================================================== [ 59.667323][T10415] BUG: KCSAN: data-race in generic_file_buffered_read / generic_write_end [ 59.675800][T10415] [ 59.678122][T10415] write to 0xffff88810da90ad0 of 8 bytes by task 10414 on cpu 0: [ 59.685823][T10415] generic_write_end+0x98/0x250 [ 59.690691][T10415] ext4_da_write_end+0x59b/0x760 [ 59.695646][T10415] generic_perform_write+0x23e/0x3a0 [ 59.700952][T10415] ext4_buffered_write_iter+0x2e5/0x3d0 [ 59.706489][T10415] ext4_file_write_iter+0x45e/0x1090 [ 59.711762][T10415] vfs_write+0x617/0x690 [ 59.715995][T10415] ksys_write+0xce/0x180 [ 59.720229][T10415] __x64_sys_write+0x3e/0x50 [ 59.724804][T10415] do_syscall_64+0x39/0x80 [ 59.729227][T10415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.735102][T10415] [ 59.737443][T10415] read to 0xffff88810da90ad0 of 8 bytes by task 10415 on cpu 1: [ 59.745065][T10415] generic_file_buffered_read+0x13df/0x2110 [ 59.750960][T10415] generic_file_read_iter+0x80/0x3d0 [ 59.756263][T10415] ext4_file_read_iter+0x2d0/0x420 [ 59.761365][T10415] generic_file_splice_read+0x22a/0x310 [ 59.766954][T10415] splice_direct_to_actor+0x2aa/0x650 [ 59.772315][T10415] do_splice_direct+0xf5/0x170 [ 59.777070][T10415] do_sendfile+0x574/0xb70 [ 59.781510][T10415] __x64_sys_sendfile64+0xf2/0x130 [ 59.786613][T10415] do_syscall_64+0x39/0x80 [ 59.791023][T10415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.796896][T10415] [ 59.799210][T10415] Reported by Kernel Concurrency Sanitizer on: [ 59.805355][T10415] CPU: 1 PID: 10415 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 59.814117][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.824173][T10415] ================================================================== [ 59.832219][T10415] Kernel panic - not syncing: panic_on_warn set ... [ 59.838800][T10415] CPU: 1 PID: 10415 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 59.847721][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.862540][T10415] Call Trace: [ 59.865833][T10415] dump_stack+0x116/0x15d [ 59.870159][T10415] panic+0x1e7/0x5fa [ 59.874055][T10415] ? vprintk_emit+0x2f2/0x370 [ 59.878749][T10415] kcsan_report+0x67b/0x680 [ 59.883250][T10415] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 59.888792][T10415] ? generic_file_buffered_read+0x13df/0x2110 [ 59.894852][T10415] ? generic_file_read_iter+0x80/0x3d0 [ 59.900333][T10415] ? ext4_file_read_iter+0x2d0/0x420 [ 59.905611][T10415] ? generic_file_splice_read+0x22a/0x310 [ 59.911321][T10415] ? splice_direct_to_actor+0x2aa/0x650 [ 59.916858][T10415] ? do_splice_direct+0xf5/0x170 [ 59.921819][T10415] ? do_sendfile+0x574/0xb70 [ 59.926402][T10415] ? __x64_sys_sendfile64+0xf2/0x130 [ 59.931770][T10415] ? do_syscall_64+0x39/0x80 [ 59.936352][T10415] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.942451][T10415] ? sock_alloc_send_pskb+0x3de/0x470 [ 59.947819][T10415] ? __rcu_read_unlock+0x51/0x220 [ 59.952832][T10415] ? xas_load+0x340/0x360 [ 59.957176][T10415] ? find_get_entry+0x316/0x350 [ 59.962020][T10415] kcsan_setup_watchpoint+0x46a/0x4d0 [ 59.967390][T10415] generic_file_buffered_read+0x13df/0x2110 [ 59.973288][T10415] ? sock_sendpage+0x5a/0x70 [ 59.977876][T10415] generic_file_read_iter+0x80/0x3d0 [ 59.983152][T10415] ? aa_file_perm+0x132/0xdb0 [ 59.987823][T10415] ? __splice_from_pipe+0x49b/0x4d0 [ 59.993025][T10415] ext4_file_read_iter+0x2d0/0x420 [ 59.998132][T10415] generic_file_splice_read+0x22a/0x310 [ 60.003671][T10415] ? splice_shrink_spd+0x60/0x60 [ 60.008605][T10415] splice_direct_to_actor+0x2aa/0x650 [ 60.013971][T10415] ? do_splice_direct+0x170/0x170 [ 60.018990][T10415] do_splice_direct+0xf5/0x170 [ 60.023759][T10415] do_sendfile+0x574/0xb70 [ 60.028205][T10415] __x64_sys_sendfile64+0xf2/0x130 [ 60.033316][T10415] do_syscall_64+0x39/0x80 [ 60.037734][T10415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.043616][T10415] RIP: 0033:0x45deb9 [ 60.047506][T10415] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.067109][T10415] RSP: 002b:00007fb5cd1fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.075518][T10415] RAX: ffffffffffffffda RBX: 0000000000027f40 RCX: 000000000045deb9 [ 60.083480][T10415] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 60.091446][T10415] RBP: 000000000118c010 R08: 0000000000000000 R09: 0000000000000000 [ 60.099409][T10415] R10: 000000007fffffff R11: 0000000000000246 R12: 000000000118bfd4 [ 60.107401][T10415] R13: 00007ffcd1297bdf R14: 00007fb5cd1fe9c0 R15: 000000000118bfd4 [ 60.115917][T10415] Kernel Offset: disabled [ 60.120290][T10415] Rebooting in 86400 seconds..