Starting Permit User Sessions... Starting getty on tty2-tty6 if dbus and logind are not available... Starting OpenBSD Secure Shell server... [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.18' (ECDSA) to the list of known hosts. 2020/11/02 00:08:04 fuzzer started 2020/11/02 00:08:04 dialing manager at 10.128.0.26:40967 2020/11/02 00:08:04 syscalls: 3447 2020/11/02 00:08:04 code coverage: enabled 2020/11/02 00:08:04 comparison tracing: enabled 2020/11/02 00:08:04 extra coverage: enabled 2020/11/02 00:08:04 setuid sandbox: enabled 2020/11/02 00:08:04 namespace sandbox: enabled 2020/11/02 00:08:04 Android sandbox: enabled 2020/11/02 00:08:04 fault injection: enabled 2020/11/02 00:08:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/02 00:08:04 net packet injection: enabled 2020/11/02 00:08:04 net device setup: enabled 2020/11/02 00:08:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/02 00:08:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/02 00:08:04 USB emulation: enabled 2020/11/02 00:08:04 hci packet injection: enabled 2020/11/02 00:08:04 wifi device emulation: enabled 00:09:35 executing program 0: syzkaller login: [ 168.204350][ T35] audit: type=1400 audit(1604275775.579:8): avc: denied { execmem } for pid=8484 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:09:35 executing program 1: 00:09:36 executing program 2: 00:09:36 executing program 3: 00:09:36 executing program 4: 00:09:36 executing program 5: [ 169.505930][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 169.842609][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 169.845233][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 170.013118][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 170.083542][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.136899][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.160445][ T8485] device bridge_slave_0 entered promiscuous mode [ 170.203824][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.216743][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.224937][ T8485] device bridge_slave_1 entered promiscuous mode [ 170.298322][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.320166][ T8491] IPVS: ftp: loaded support on port[0] = 21 [ 170.328852][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.499478][ T8493] IPVS: ftp: loaded support on port[0] = 21 [ 170.542415][ T8485] team0: Port device team_slave_0 added [ 170.562192][ T8485] team0: Port device team_slave_1 added [ 170.734609][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 170.749461][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.756395][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.784355][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.796994][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 170.810308][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.818772][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.854641][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.001547][ T8562] IPVS: ftp: loaded support on port[0] = 21 [ 171.100718][ T8485] device hsr_slave_0 entered promiscuous mode [ 171.107985][ T8485] device hsr_slave_1 entered promiscuous mode [ 171.241269][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.249030][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.256963][ T8487] device bridge_slave_0 entered promiscuous mode [ 171.312030][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.321436][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.330392][ T8489] device bridge_slave_0 entered promiscuous mode [ 171.349148][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.356237][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.366598][ T8487] device bridge_slave_1 entered promiscuous mode [ 171.429047][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.436159][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.447762][ T8489] device bridge_slave_1 entered promiscuous mode [ 171.467232][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 171.531016][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 171.576246][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.611291][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.623476][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 171.640150][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.664754][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.696922][ T3843] Bluetooth: hci1: command 0x0409 tx timeout [ 171.731701][ T8487] team0: Port device team_slave_0 added [ 171.772884][ T8489] team0: Port device team_slave_0 added [ 171.795650][ T8487] team0: Port device team_slave_1 added [ 171.815763][ T8489] team0: Port device team_slave_1 added [ 171.931639][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.939135][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 171.954796][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.981471][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.015484][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.022877][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.035286][ T8491] device bridge_slave_0 entered promiscuous mode [ 172.045478][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.053223][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.079669][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.105366][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.116774][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.144016][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.170523][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.176938][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 172.180306][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.192443][ T8491] device bridge_slave_1 entered promiscuous mode [ 172.200777][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.208036][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.234099][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.250414][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.257740][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.265886][ T8493] device bridge_slave_0 entered promiscuous mode [ 172.304681][ T8562] chnl_net:caif_netlink_parms(): no params data found [ 172.319650][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.328038][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.335879][ T8493] device bridge_slave_1 entered promiscuous mode [ 172.382839][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.413117][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.426724][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 172.430520][ T8487] device hsr_slave_0 entered promiscuous mode [ 172.441221][ T8487] device hsr_slave_1 entered promiscuous mode [ 172.449089][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.457789][ T8487] Cannot create hsr debugfs directory [ 172.487454][ T8489] device hsr_slave_0 entered promiscuous mode [ 172.496021][ T8489] device hsr_slave_1 entered promiscuous mode [ 172.503368][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.511083][ T8489] Cannot create hsr debugfs directory [ 172.545869][ T8491] team0: Port device team_slave_0 added [ 172.557904][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.574357][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.595995][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.618020][ T8491] team0: Port device team_slave_1 added [ 172.664691][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.702460][ T8493] team0: Port device team_slave_0 added [ 172.725007][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.749482][ T8493] team0: Port device team_slave_1 added [ 172.760715][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.768932][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.796231][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.816842][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.853091][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.861155][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.897197][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 172.898170][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.987288][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.994261][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.022715][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.070352][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.083763][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.095185][ T8562] device bridge_slave_0 entered promiscuous mode [ 173.104164][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.111828][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.153203][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.188873][ T8491] device hsr_slave_0 entered promiscuous mode [ 173.197638][ T8491] device hsr_slave_1 entered promiscuous mode [ 173.205066][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.212700][ T8491] Cannot create hsr debugfs directory [ 173.226297][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.234658][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.243693][ T8562] device bridge_slave_1 entered promiscuous mode [ 173.304662][ T8562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.374064][ T8493] device hsr_slave_0 entered promiscuous mode [ 173.388410][ T8493] device hsr_slave_1 entered promiscuous mode [ 173.396329][ T8493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.410662][ T8493] Cannot create hsr debugfs directory [ 173.418246][ T8562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.536900][ T3843] Bluetooth: hci0: command 0x041b tx timeout [ 173.569260][ T8562] team0: Port device team_slave_0 added [ 173.585540][ T8487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.619547][ T8562] team0: Port device team_slave_1 added [ 173.626496][ T8487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.672937][ T8487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.722233][ T8487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.763330][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.773992][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.807143][ T8562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.807301][ T3843] Bluetooth: hci1: command 0x041b tx timeout [ 173.822082][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.831987][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.859644][ T8562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.942289][ T8489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.973986][ T8489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.009051][ T8489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.016962][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 174.034529][ T8489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.091833][ T8562] device hsr_slave_0 entered promiscuous mode [ 174.099936][ T8562] device hsr_slave_1 entered promiscuous mode [ 174.106483][ T8562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.114820][ T8562] Cannot create hsr debugfs directory [ 174.181043][ T8493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.256699][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 174.264288][ T8493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.314534][ T8493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.382220][ T8493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.413558][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.482054][ T8491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.497763][ T3146] Bluetooth: hci4: command 0x041b tx timeout [ 174.525607][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.541164][ T8491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.561908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.571678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.583359][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.597052][ T8491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.636124][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.650767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.659496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.675039][ T8491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.718055][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.728679][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.738911][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.746071][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.756132][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.765429][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.774103][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.781241][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.791062][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.819628][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.833089][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.843054][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.850194][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.860154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.878534][ T8562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.888887][ T8562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.921281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.930305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.941487][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.948627][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.956894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.965863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.979564][ T3843] Bluetooth: hci5: command 0x041b tx timeout [ 174.983675][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.005744][ T8562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.023712][ T8562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.079081][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.089555][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.097932][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.109346][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.132561][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.151851][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.161553][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.171957][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.181766][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.196174][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.243229][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.251593][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.260475][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.270059][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.279679][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.289279][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.298537][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.305619][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.314042][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.322774][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.331536][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.340957][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.349926][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.357084][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.364726][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.373837][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.383864][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.432943][ T8487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.444079][ T8487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.462811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.471515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.480857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.491894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.500364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.509398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.518948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.527872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.536073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.545230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.554799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.571887][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.610150][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.620224][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.629471][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.642098][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.652012][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.660699][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.669676][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.678751][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.694115][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.701169][ T2989] Bluetooth: hci0: command 0x040f tx timeout [ 175.723192][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.740923][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.752810][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.763212][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.776250][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.783425][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.838145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.846168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.857625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.865608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.875433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.884266][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.892295][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.900438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.911793][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 175.930548][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.988240][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.002685][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.027896][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.036402][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.045958][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.065518][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.107101][ T2989] Bluetooth: hci2: command 0x040f tx timeout [ 176.110236][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.124779][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.135257][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.143817][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.153219][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.162281][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.171191][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.198712][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.225391][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.258068][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.275692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.285083][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.300200][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.321562][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.338776][ T3843] Bluetooth: hci3: command 0x040f tx timeout [ 176.341514][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.391979][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.401631][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.411228][ T3146] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.418480][ T3146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.427612][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.436153][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.445450][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.456358][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.500285][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.514234][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.524356][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.548282][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.582011][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 176.586159][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.597601][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.606108][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.614094][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.622164][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.632401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.642190][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.649341][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.657783][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.665784][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.677682][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.685643][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.699342][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.711579][ T8562] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.721642][ T8487] device veth0_vlan entered promiscuous mode [ 176.734475][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.745812][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.757040][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.766541][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.775078][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.792414][ T8489] device veth0_vlan entered promiscuous mode [ 176.803602][ T8485] device veth0_vlan entered promiscuous mode [ 176.808112][ T9793] modprobe (9793) used greatest stack depth: 23096 bytes left [ 176.842804][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.853570][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.862690][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.869864][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.878117][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.886431][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.895046][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.904788][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.913771][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.931100][ T8487] device veth1_vlan entered promiscuous mode [ 176.950168][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.967709][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.975699][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.985108][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.993458][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.013296][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.022716][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.032025][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.039186][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.047813][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.057647][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.071203][ T8489] device veth1_vlan entered promiscuous mode [ 177.077535][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 177.089676][ T8485] device veth1_vlan entered promiscuous mode [ 177.129135][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.153606][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.165307][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.173881][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.182595][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.191343][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.209710][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.218446][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.227765][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.236223][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.268720][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.284303][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.294367][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.316152][ T8491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.346962][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.355531][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.365210][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.374336][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.383418][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.435050][ T8485] device veth0_macvtap entered promiscuous mode [ 177.462303][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.471341][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.482350][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.492338][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.506427][ T8562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.532204][ T8485] device veth1_macvtap entered promiscuous mode [ 177.545941][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.562026][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.570658][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.579678][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.588699][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.597946][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.607590][ T8489] device veth0_macvtap entered promiscuous mode [ 177.624600][ T8489] device veth1_macvtap entered promiscuous mode [ 177.636789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.645017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.655092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.663912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.683779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.693136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.707620][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.715419][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.743470][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.768045][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.776512][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.786287][ T2989] Bluetooth: hci0: command 0x0419 tx timeout [ 177.792496][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.792669][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.793221][ T8493] device veth0_vlan entered promiscuous mode [ 177.805577][ T8493] device veth1_vlan entered promiscuous mode [ 177.824441][ T8487] device veth0_macvtap entered promiscuous mode [ 177.845060][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.867331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.875541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.884938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.894498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.905813][ T8487] device veth1_macvtap entered promiscuous mode [ 177.924245][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.933785][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.945176][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.956226][ T3843] Bluetooth: hci1: command 0x0419 tx timeout [ 177.968418][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.010822][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.021465][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.030798][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.040342][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.049357][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.060417][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.072206][ T8489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.084191][ T8489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.093346][ T8489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.103683][ T8489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.130136][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.142076][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.158007][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.168007][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.180863][ T2989] Bluetooth: hci2: command 0x0419 tx timeout [ 178.189943][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.202402][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.213938][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.226083][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.238762][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.269156][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.279317][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.291704][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.301136][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.315282][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.324512][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.341922][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.364804][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.376166][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.387994][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.400706][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.417615][ T3843] Bluetooth: hci3: command 0x0419 tx timeout [ 178.432616][ T8485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.442094][ T8485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.458884][ T8485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.481389][ T8485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.501035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.517482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.526212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.537207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.547697][ T8493] device veth0_macvtap entered promiscuous mode [ 178.563008][ T8487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.573039][ T8487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.585918][ T8487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.599983][ T8487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.655042][ T8493] device veth1_macvtap entered promiscuous mode [ 178.662735][ T3843] Bluetooth: hci4: command 0x0419 tx timeout [ 178.676351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.686483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.697946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.785892][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.803428][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.813472][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.825540][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.838579][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.849588][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.861427][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.874334][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.883593][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.892570][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.903791][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.913872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.925641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.940659][ T8491] device veth0_vlan entered promiscuous mode [ 178.953358][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.996699][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.006553][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.017949][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.028542][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.039417][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.068579][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.115183][ T8562] device veth0_vlan entered promiscuous mode [ 179.138372][ T3843] Bluetooth: hci5: command 0x0419 tx timeout [ 179.161656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.177162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.186252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.210840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.230051][ T8493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.243885][ T8493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.253471][ T8493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.262979][ T8493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.280990][ T8491] device veth1_vlan entered promiscuous mode [ 179.302013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.316052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.337513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.403624][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.436668][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.444961][ T8562] device veth1_vlan entered promiscuous mode [ 179.509645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.528021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.536204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.546587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.580457][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.615248][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.624729][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.656266][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.674631][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.686110][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.694243][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.727732][ T8491] device veth0_macvtap entered promiscuous mode [ 179.735577][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.756559][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.816582][ T8491] device veth1_macvtap entered promiscuous mode [ 179.844978][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.867477][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.876126][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.897223][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.905243][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.932209][ T8562] device veth0_macvtap entered promiscuous mode [ 179.986458][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.999814][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.010652][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.013163][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.042153][ T8562] device veth1_macvtap entered promiscuous mode [ 180.068644][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.080631][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:09:47 executing program 2: [ 180.116766][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.137240][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.155492][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:09:47 executing program 2: [ 180.186640][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.206909][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.226950][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.248865][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.287330][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.309871][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.336158][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 00:09:47 executing program 2: [ 180.357487][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.411285][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.419409][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.419438][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.419451][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.419459][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.419469][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.419476][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.419489][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.419496][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.421639][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.477924][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:09:47 executing program 2: [ 180.566371][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.592707][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:09:48 executing program 0: [ 180.614527][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.639040][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:09:48 executing program 2: [ 180.659648][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.681464][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.696175][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:09:48 executing program 0: [ 180.718710][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.738614][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.776690][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.812067][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.851845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.860864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.888411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.899159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.910021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.933162][ T8491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.966790][ T8491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.977391][ T8491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.986112][ T8491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.033775][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.045272][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.055490][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.064785][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.096722][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.113637][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.125376][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.154421][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.171093][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.182968][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.193390][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.204448][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.219023][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.252536][ T8562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.263535][ T8562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.282217][ T8562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.297337][ T8562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.316074][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.324734][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.337419][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.378495][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:09:48 executing program 1: 00:09:48 executing program 2: [ 181.436689][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.472644][ T9786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.786864][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.794891][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.814371][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.835091][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.852763][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.868668][ T3146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.919258][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.940786][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.952866][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.959378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.984411][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.026291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:09:49 executing program 3: 00:09:49 executing program 0: 00:09:49 executing program 5: 00:09:49 executing program 2: 00:09:49 executing program 4: 00:09:49 executing program 1: 00:09:49 executing program 0: 00:09:49 executing program 1: 00:09:49 executing program 4: 00:09:49 executing program 3: 00:09:49 executing program 2: 00:09:49 executing program 5: 00:09:49 executing program 0: 00:09:49 executing program 1: 00:09:49 executing program 2: 00:09:49 executing program 3: 00:09:49 executing program 4: 00:09:49 executing program 5: 00:09:49 executing program 1: 00:09:50 executing program 0: 00:09:50 executing program 2: 00:09:50 executing program 3: 00:09:50 executing program 5: 00:09:50 executing program 4: 00:09:50 executing program 0: 00:09:50 executing program 1: 00:09:50 executing program 2: 00:09:50 executing program 3: 00:09:50 executing program 4: 00:09:50 executing program 5: 00:09:50 executing program 0: 00:09:50 executing program 1: 00:09:50 executing program 2: 00:09:50 executing program 3: 00:09:50 executing program 4: 00:09:50 executing program 5: 00:09:50 executing program 0: 00:09:50 executing program 2: 00:09:50 executing program 1: 00:09:50 executing program 3: 00:09:50 executing program 4: 00:09:50 executing program 5: 00:09:50 executing program 2: 00:09:50 executing program 3: 00:09:50 executing program 0: 00:09:50 executing program 1: 00:09:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f00000000c0)=""/202, 0x26, 0xca, 0x1}, 0x20) 00:09:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$alg(r0, 0x0, 0x0) 00:09:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() r2 = getpid() sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x60}, 0x0) 00:09:51 executing program 1: 00:09:51 executing program 0: 00:09:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8981, &(0x7f0000000040)={'batadv0\x00'}) 00:09:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) 00:09:51 executing program 3: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:09:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000200)=[@increfs, @clear_death, @dead_binder_done], 0x0, 0x0, 0x0}) 00:09:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:51 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/mnt\x00') 00:09:51 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:09:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f0000000040)={'batadv0\x00'}) 00:09:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000001480)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 00:09:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000300)=""/136, 0x2c, 0x88, 0x1}, 0x20) 00:09:51 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:09:51 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x467215cd, &(0x7f0000001480), 0x0, &(0x7f00000013c0)={[{@usrjquota_file='usrjquota=syz'}]}) 00:09:51 executing program 2: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x542) [ 184.121697][T10027] binder: 10024:10027 ioctl c0306201 0 returned -14 00:09:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 00:09:51 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 00:09:51 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) 00:09:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:09:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 00:09:51 executing program 5: bpf$MAP_CREATE(0x2, 0x0, 0x0) 00:09:51 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 00:09:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000000040)={'batadv0\x00'}) [ 184.498498][T10046] binder: 10044:10046 ioctl c0306201 0 returned -14 [ 184.551196][T10046] binder: 10044:10046 ioctl c0306201 0 returned -14 00:09:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x630c}], 0x0, 0x0, 0x0}) [ 184.765420][T10057] binder: 10056:10057 unknown command 0 [ 184.771332][T10057] binder: 10056:10057 ioctl c0306201 20000200 returned -22 00:09:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)="e5"}) 00:09:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x49, 0x0, 0x0) 00:09:52 executing program 2: getitimer(0x3, &(0x7f00000004c0)) 00:09:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x159c) 00:09:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000080)={0x30, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 00:09:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) 00:09:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8953, 0x0) 00:09:52 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0xee01, 0xee00}}) 00:09:52 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000f40)=""/92, 0x5c) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xec1) 00:09:52 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) 00:09:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x18, 0x0, 0x0) 00:09:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x5, 0x0, 0x0) [ 185.400578][ C0] hrtimer: interrupt took 43818 ns 00:09:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:09:53 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 00:09:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') write$P9_RSTAT(r0, 0x0, 0x2b) 00:09:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') read$alg(r0, 0x0, 0x0) 00:09:53 executing program 3: pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, 0x0) 00:09:53 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) 00:09:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') read$alg(r0, &(0x7f00000000c0)=""/40, 0x28) 00:09:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 00:09:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8934, 0x0) 00:09:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000004e00)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="e1", 0x1}], 0x1}], 0x1, 0x0) 00:09:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000000040)={'batadv0\x00'}) 00:09:53 executing program 4: bpf$MAP_CREATE(0xd, 0x0, 0x0) 00:09:53 executing program 1: bpf$MAP_CREATE(0x5, 0x0, 0x0) 00:09:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:09:53 executing program 5: 00:09:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) 00:09:54 executing program 0: pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, 0x0, 0xfffffcff) 00:09:54 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='timers\x00') 00:09:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, &(0x7f0000000040)={'batadv0\x00'}) 00:09:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) [ 186.771000][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:09:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x5000}, 0x0) 00:09:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x46, 0x0, 0x0) 00:09:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8904, 0x0) 00:09:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x33, 0x0, 0x0) 00:09:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 00:09:54 executing program 4: request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='net/sockstat6\x00', 0xfffffffffffffffb) 00:09:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8917, &(0x7f0000000040)={'batadv0\x00'}) 00:09:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x4c, 0x0, 0x0) 00:09:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$P9_RLERRORu(r0, 0x0, 0x0) 00:09:54 executing program 2: add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 00:09:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}}, 0x0) 00:09:54 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0x2, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0xee01, 0xee00}}) 00:09:54 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x5002, &(0x7f00000013c0)) 00:09:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:09:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{}]}]}}, &(0x7f0000000240)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 187.395663][T10176] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:54 executing program 0: socketpair(0x2, 0x3, 0x3f, &(0x7f0000000000)) [ 187.448233][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 00:09:55 executing program 0: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x30}, 0x0) 00:09:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) recvmsg(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001ac0)=""/124, 0x7c}], 0x1}, 0x2060) 00:09:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:09:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x3c, 0x0, 0x0) 00:09:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x2a, 0x0, 0x0) 00:09:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/67, 0x43}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x305}, 0x14}}, 0x0) 00:09:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, @generic={0x0, "36a9e52aabb3dd11a4865ec7ac0a"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @phonet}) 00:09:55 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0xfffffffa, 0x0, "a25dcb279c28fb5fe3e7743faf89accd110000af618fe1410392ea9764328200"}) 00:09:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8934, &(0x7f0000000040)={'batadv0\x00'}) 00:09:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x8}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 00:09:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8907, 0x0) 00:09:55 executing program 1: 00:09:55 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000027c0)='clear_refs\x00') write$P9_RGETLOCK(r0, 0x0, 0x0) 00:09:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) 00:09:55 executing program 3: 00:09:55 executing program 2: socketpair(0x25, 0x5, 0x1, &(0x7f0000000140)) 00:09:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000026c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xea8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48b418a66732dbc52128b8e5bd4dc161030a7442a0a6d9bb7f61ac9905b9244a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x290, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x268, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa1c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7d730f7c3554846df7e3563dff94973e1e9bd07545f336fd9d96395d16ee2b4"}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x454, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d5eed956782766d20b9ddb5a741f1948f5553585f4ea175c095dc9d66635303"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "be9337e4c293e092353cc0ea0a78622b9befd2289e17e888f6ac30a7c82053f0"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}]}]}, 0xec4}}, 0x0) 00:09:56 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:56 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 00:09:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nf_conntrack_expect\x00') read$alg(r0, 0x0, 0x0) 00:09:56 executing program 0: r0 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r0, &(0x7f0000000100), 0x10) 00:09:56 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0xb, 0x0) 00:09:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 00:09:56 executing program 1: socketpair(0x2c, 0x3, 0x3f, &(0x7f0000000000)) [ 188.867913][T10248] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x for -ocommit [ 188.867913][T10248] 00:09:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8915, &(0x7f0000000040)={'batadv0\x00'}) 00:09:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x10}}, 0x0) 00:09:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) 00:09:56 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 00:09:56 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x12162, 0x0, 0x0) [ 189.088122][T10248] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x for -ocommit [ 189.088122][T10248] 00:09:56 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xff0f0000, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 00:09:56 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000000100)={[{@errors_continue='errors=continue'}]}) 00:09:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') write$P9_RSTAT(r0, 0x0, 0x2b) 00:09:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x14, 0x0, 0x0) 00:09:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x35, 0x0, 0x0) 00:09:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') read$alg(r0, &(0x7f0000000100)=""/211, 0xd3) [ 189.377097][T10278] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 189.377097][T10278] 00:09:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='projid_map\x00') write$P9_RFLUSH(r0, 0x0, 0x0) 00:09:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x12142, 0x0, 0x0) 00:09:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000000040)={'batadv0\x00'}) 00:09:56 executing program 0: r0 = socket(0x1e, 0x4, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xffffffffffffff21, &(0x7f0000000180)={0x0}}, 0x0) [ 189.525130][T10288] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x for -ocommit [ 189.525130][T10288] [ 189.538312][T10278] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 189.538312][T10278] 00:09:57 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@commit={'commit'}, 0x64}]}) 00:09:57 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:57 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:09:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x80}, 0x40) 00:09:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8947, &(0x7f0000000040)={'batadv0\x00'}) 00:09:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/186, 0x2d, 0xba, 0x1}, 0x20) [ 189.882662][T10308] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 00:09:57 executing program 5: syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) [ 189.973771][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.981264][T10320] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x for -ocommit [ 189.981264][T10320] [ 189.999366][T10308] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 190.029341][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/10328 [ 190.038942][T10328] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 190.045457][T10328] CPU: 0 PID: 10328 Comm: syz-executor.5 Not tainted 5.10.0-rc1-syzkaller #0 [ 190.054216][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.064277][T10328] Call Trace: [ 190.067587][T10328] dump_stack+0x107/0x163 [ 190.071966][T10328] check_preemption_disabled+0x123/0x130 00:09:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 00:09:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x8, 0x0, 0x0) [ 190.077645][T10328] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 190.083376][T10328] trace_hardirqs_on+0x5b/0x1c0 [ 190.088244][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 190.090255][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.093549][T10328] do_user_addr_fault+0x7d7/0xb40 [ 190.093581][T10328] exc_page_fault+0x9e/0x180 [ 190.093600][T10328] ? asm_exc_page_fault+0x8/0x30 [ 190.093618][T10328] asm_exc_page_fault+0x1e/0x30 [ 190.093633][T10328] RIP: 0033:0x43c4f6 [ 190.093665][T10328] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 190.143758][T10328] RSP: 002b:00007ff16eaa2a88 EFLAGS: 00010293 [ 190.149839][T10328] RAX: 0000000000000000 RBX: 00007ff16eaa2b20 RCX: 0000000000000000 [ 190.157836][T10328] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 190.165813][T10328] RBP: 00007ff16eaa2ae0 R08: 0000000000000000 R09: 0000000000000000 [ 190.173788][T10328] R10: 00007ff16eaa39d0 R11: 0000000000000246 R12: 0000000020000040 [ 190.178567][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.181757][T10328] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 [ 190.182716][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/10328 [ 190.208271][T10328] caller is lockdep_hardirqs_on+0x38/0x110 [ 190.214087][T10328] CPU: 0 PID: 10328 Comm: syz-executor.5 Not tainted 5.10.0-rc1-syzkaller #0 [ 190.222844][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.232917][T10328] Call Trace: [ 190.236255][T10328] dump_stack+0x107/0x163 [ 190.240614][T10328] check_preemption_disabled+0x123/0x130 [ 190.246255][T10328] ? __bad_area_nosemaphore+0xc6/0x400 [ 190.251726][T10328] lockdep_hardirqs_on+0x38/0x110 [ 190.256764][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 190.262064][T10328] do_user_addr_fault+0x7d7/0xb40 [ 190.267096][T10328] exc_page_fault+0x9e/0x180 [ 190.271702][T10328] ? asm_exc_page_fault+0x8/0x30 [ 190.276638][T10328] asm_exc_page_fault+0x1e/0x30 [ 190.281486][T10328] RIP: 0033:0x43c4f6 [ 190.285393][T10328] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 190.304993][T10328] RSP: 002b:00007ff16eaa2a88 EFLAGS: 00010293 [ 190.311058][T10328] RAX: 0000000000000000 RBX: 00007ff16eaa2b20 RCX: 0000000000000000 [ 190.319122][T10328] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 190.327091][T10328] RBP: 00007ff16eaa2ae0 R08: 0000000000000000 R09: 0000000000000000 [ 190.335070][T10328] R10: 00007ff16eaa39d0 R11: 0000000000000246 R12: 0000000020000040 [ 190.343045][T10328] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 00:09:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000000)={'batadv0\x00'}) 00:09:57 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000f40)) 00:09:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x38, 0x0, 0x0) [ 190.522236][T10334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.524643][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/10328 [ 190.539344][T10328] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 190.545390][T10334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.545852][T10328] CPU: 0 PID: 10328 Comm: syz-executor.5 Not tainted 5.10.0-rc1-syzkaller #0 [ 190.545869][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.572020][T10328] Call Trace: [ 190.575332][T10328] dump_stack+0x107/0x163 [ 190.579678][T10328] check_preemption_disabled+0x123/0x130 [ 190.585339][T10328] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 190.585955][T10334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.591062][T10328] trace_hardirqs_on+0x5b/0x1c0 [ 190.591079][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 190.591110][T10328] do_user_addr_fault+0x7d7/0xb40 [ 190.591135][T10328] exc_page_fault+0x9e/0x180 [ 190.591152][T10328] ? asm_exc_page_fault+0x8/0x30 [ 190.591168][T10328] asm_exc_page_fault+0x1e/0x30 [ 190.591182][T10328] RIP: 0033:0x43c4f6 [ 190.591199][T10328] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 190.591209][T10328] RSP: 002b:00007ff16eaa2a88 EFLAGS: 00010293 [ 190.591225][T10328] RAX: 0000000000000000 RBX: 00007ff16eaa2b20 RCX: 0000000000000000 [ 190.591235][T10328] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 190.591245][T10328] RBP: 00007ff16eaa2ae0 R08: 0000000000000000 R09: 0000000000000000 [ 190.591254][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 190.591262][T10328] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 [ 190.591340][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/10328 [ 190.707177][T10328] caller is lockdep_hardirqs_on+0x38/0x110 [ 190.713016][T10328] CPU: 0 PID: 10328 Comm: syz-executor.5 Not tainted 5.10.0-rc1-syzkaller #0 00:09:58 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 190.722040][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.732100][T10328] Call Trace: [ 190.735408][T10328] dump_stack+0x107/0x163 [ 190.739753][T10328] check_preemption_disabled+0x123/0x130 [ 190.745397][T10328] ? __bad_area_nosemaphore+0xc6/0x400 [ 190.750870][T10328] lockdep_hardirqs_on+0x38/0x110 [ 190.755907][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 190.761210][T10328] do_user_addr_fault+0x7d7/0xb40 [ 190.766251][T10328] exc_page_fault+0x9e/0x180 [ 190.770865][T10328] ? asm_exc_page_fault+0x8/0x30 [ 190.775799][T10328] asm_exc_page_fault+0x1e/0x30 [ 190.780645][T10328] RIP: 0033:0x43c4f6 [ 190.784547][T10328] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 190.804189][T10328] RSP: 002b:00007ff16eaa2a88 EFLAGS: 00010293 [ 190.810247][T10328] RAX: 0000000000000000 RBX: 00007ff16eaa2b20 RCX: 0000000000000000 [ 190.818223][T10328] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 190.826177][T10328] RBP: 00007ff16eaa2ae0 R08: 0000000000000000 R09: 0000000000000000 [ 190.834130][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 190.842086][T10328] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 00:09:58 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x6}]}) 00:09:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/sockcreate\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000400)={0x7, 0x8}, 0x10) 00:09:58 executing program 1: pipe2$9p(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000001840)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) write$P9_RSTAT(r0, 0x0, 0x7ffffffff000) [ 191.222749][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:09:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"83d0fa40fbbece4e368551697ed820ca"}}}}, 0xa0) 00:09:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') [ 191.342716][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.382422][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.407438][T10356] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x for -ocommit [ 191.407438][T10356] [ 191.438549][ T35] audit: type=1326 audit(1604275798.819:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10348 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x0 00:09:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:09:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$P9_RVERSION(r0, 0x0, 0x15) 00:09:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x16, 0x0, 0x0) 00:09:59 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)="cd", 0x1}, {&(0x7f0000000180)="1c", 0x1}, {&(0x7f0000000240)="a5", 0x1}], 0x3, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x38}, 0x200400d4) 00:09:59 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7a5279d2"}, 0x0, 0x0, @userptr}) [ 191.785412][T10377] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10377 [ 191.795180][T10377] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 191.801822][T10377] CPU: 1 PID: 10377 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 191.810591][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.820654][T10377] Call Trace: [ 191.823962][T10377] dump_stack+0x107/0x163 [ 191.828316][T10377] check_preemption_disabled+0x123/0x130 [ 191.833974][T10377] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 191.839702][T10377] trace_hardirqs_on+0x5b/0x1c0 [ 191.844560][T10377] __bad_area_nosemaphore+0xc6/0x400 [ 191.849853][T10377] do_user_addr_fault+0x7d7/0xb40 [ 191.854884][T10377] exc_page_fault+0x9e/0x180 [ 191.859480][T10377] ? asm_exc_page_fault+0x8/0x30 [ 191.864419][T10377] asm_exc_page_fault+0x1e/0x30 [ 191.869268][T10377] RIP: 0033:0x4067a6 [ 191.873338][T10377] Code: 00 48 3d e0 00 00 00 0f 87 67 01 00 00 4c 89 fe 48 89 df ba e0 00 00 00 e8 a7 9b ff ff bf 77 0c 4d 00 b9 08 00 00 00 4c 89 e6 a6 0f 85 ea 00 00 00 48 8b 44 24 10 48 83 c8 01 48 89 44 24 10 [ 191.892947][T10377] RSP: 002b:00007f85fdb77a90 EFLAGS: 00010206 [ 191.899027][T10377] RAX: 00007f85fdb77b20 RBX: 00007f85fdb77b20 RCX: 0000000000000008 [ 191.906994][T10377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004d0c77 [ 191.915050][T10377] RBP: 00007f85fdb77ae0 R08: 0000000000000000 R09: 0000000000000000 [ 191.923101][T10377] R10: 00007f85fdb77adc R11: 000000000051e020 R12: 0000000000000000 [ 191.931064][T10377] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000020001580 [ 191.939189][T10377] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10377 [ 191.948620][T10377] caller is lockdep_hardirqs_on+0x38/0x110 [ 191.954467][T10377] CPU: 1 PID: 10377 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 191.963357][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.973418][T10377] Call Trace: [ 191.976718][T10377] dump_stack+0x107/0x163 [ 191.981281][T10377] check_preemption_disabled+0x123/0x130 [ 191.986928][T10377] ? __bad_area_nosemaphore+0xc6/0x400 [ 191.992396][T10377] lockdep_hardirqs_on+0x38/0x110 [ 191.997429][T10377] __bad_area_nosemaphore+0xc6/0x400 [ 192.002729][T10377] do_user_addr_fault+0x7d7/0xb40 [ 192.007770][T10377] exc_page_fault+0x9e/0x180 [ 192.012394][T10377] ? asm_exc_page_fault+0x8/0x30 [ 192.017348][T10377] asm_exc_page_fault+0x1e/0x30 [ 192.022207][T10377] RIP: 0033:0x4067a6 [ 192.026132][T10377] Code: 00 48 3d e0 00 00 00 0f 87 67 01 00 00 4c 89 fe 48 89 df ba e0 00 00 00 e8 a7 9b ff ff bf 77 0c 4d 00 b9 08 00 00 00 4c 89 e6 a6 0f 85 ea 00 00 00 48 8b 44 24 10 48 83 c8 01 48 89 44 24 10 [ 192.045756][T10377] RSP: 002b:00007f85fdb77a90 EFLAGS: 00010206 [ 192.051861][T10377] RAX: 00007f85fdb77b20 RBX: 00007f85fdb77b20 RCX: 0000000000000008 [ 192.059955][T10377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004d0c77 [ 192.067932][T10377] RBP: 00007f85fdb77ae0 R08: 0000000000000000 R09: 0000000000000000 [ 192.075922][T10377] R10: 00007f85fdb77adc R11: 000000000051e020 R12: 0000000000000000 [ 192.083910][T10377] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000020001580 00:09:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 00:09:59 executing program 4: request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0) 00:09:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') read$alg(r0, 0x0, 0x0) 00:09:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:09:59 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB='barrier=']) 00:09:59 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0xee01, 0xee00}}) 00:09:59 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:09:59 executing program 0: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x20181) [ 192.354505][T10393] REISERFS warning (device loop5): super-6506 reiserfs_getopt: empty argument for "barrier" [ 192.354505][T10393] 00:09:59 executing program 4: socketpair(0xa, 0x3, 0x5, &(0x7f0000000080)) 00:09:59 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@commit={'commit'}}]}) 00:09:59 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0) [ 192.541660][T10403] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10403 [ 192.551381][T10403] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.557976][T10403] CPU: 0 PID: 10403 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 192.566771][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.577007][T10403] Call Trace: [ 192.580321][T10403] dump_stack+0x107/0x163 [ 192.584687][T10403] check_preemption_disabled+0x123/0x130 [ 192.590338][T10403] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 192.596064][T10403] trace_hardirqs_on+0x5b/0x1c0 [ 192.600925][T10403] __bad_area_nosemaphore+0xc6/0x400 [ 192.606327][T10403] do_user_addr_fault+0x7d7/0xb40 [ 192.611377][T10403] exc_page_fault+0x9e/0x180 [ 192.615977][T10403] ? asm_exc_page_fault+0x8/0x30 [ 192.620936][T10403] asm_exc_page_fault+0x1e/0x30 [ 192.625795][T10403] RIP: 0033:0x4067a6 00:10:00 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 192.629701][T10403] Code: 00 48 3d e0 00 00 00 0f 87 67 01 00 00 4c 89 fe 48 89 df ba e0 00 00 00 e8 a7 9b ff ff bf 77 0c 4d 00 b9 08 00 00 00 4c 89 e6 a6 0f 85 ea 00 00 00 48 8b 44 24 10 48 83 c8 01 48 89 44 24 10 [ 192.649325][T10403] RSP: 002b:00007f85fdb77a90 EFLAGS: 00010206 [ 192.655412][T10403] RAX: 00007f85fdb77b20 RBX: 00007f85fdb77b20 RCX: 0000000000000008 [ 192.663398][T10403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004d0c77 [ 192.671383][T10403] RBP: 00007f85fdb77ae0 R08: 0000000000000000 R09: 0000000000000000 [ 192.679367][T10403] R10: 00007f85fdb77adc R11: 000000000051e020 R12: 0000000000000000 [ 192.687362][T10403] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000020001580 [ 192.695464][T10403] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10403 [ 192.704886][T10403] caller is lockdep_hardirqs_on+0x38/0x110 [ 192.710763][T10403] CPU: 0 PID: 10403 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 192.719631][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.729696][T10403] Call Trace: [ 192.733003][T10403] dump_stack+0x107/0x163 [ 192.737347][T10403] check_preemption_disabled+0x123/0x130 [ 192.742993][T10403] ? __bad_area_nosemaphore+0xc6/0x400 [ 192.748488][T10403] lockdep_hardirqs_on+0x38/0x110 [ 192.753546][T10403] __bad_area_nosemaphore+0xc6/0x400 [ 192.758852][T10403] do_user_addr_fault+0x7d7/0xb40 [ 192.763894][T10403] exc_page_fault+0x9e/0x180 [ 192.768495][T10403] ? asm_exc_page_fault+0x8/0x30 [ 192.773443][T10403] asm_exc_page_fault+0x1e/0x30 [ 192.778322][T10403] RIP: 0033:0x4067a6 [ 192.782224][T10403] Code: 00 48 3d e0 00 00 00 0f 87 67 01 00 00 4c 89 fe 48 89 df ba e0 00 00 00 e8 a7 9b ff ff bf 77 0c 4d 00 b9 08 00 00 00 4c 89 e6 a6 0f 85 ea 00 00 00 48 8b 44 24 10 48 83 c8 01 48 89 44 24 10 [ 192.801835][T10403] RSP: 002b:00007f85fdb77a90 EFLAGS: 00010206 [ 192.807915][T10403] RAX: 00007f85fdb77b20 RBX: 00007f85fdb77b20 RCX: 0000000000000008 [ 192.815910][T10403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004d0c77 [ 192.823885][T10403] RBP: 00007f85fdb77ae0 R08: 0000000000000000 R09: 0000000000000000 [ 192.831891][T10403] R10: 00007f85fdb77adc R11: 000000000051e020 R12: 0000000000000000 00:10:00 executing program 4: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/4096) [ 192.839871][T10403] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000020001580 00:10:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000300)=""/136, 0x2a, 0x88, 0x1}, 0x20) [ 192.881130][T10413] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" [ 192.898044][T10393] REISERFS warning (device loop5): super-6506 reiserfs_getopt: empty argument for "barrier" [ 192.898044][T10393] [ 192.922468][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:10:00 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000000080), 0x40) 00:10:00 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') 00:10:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf}, 0x0) 00:10:00 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r0, 0x0, 0x11, 0x0) 00:10:00 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001c00)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0, 0x0, &(0x7f0000001b40)=""/181, 0xb5}, 0x22) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x38, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x0) 00:10:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2}, 0x40) 00:10:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a4000000040000000200000000000002"], &(0x7f0000001400)=""/220, 0xc0, 0xdc, 0x1}, 0x20) 00:10:00 executing program 5: r0 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:10:00 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x3, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0xee01, 0xee00}}) [ 193.521910][T10452] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10452 [ 193.531544][T10452] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.538161][T10452] CPU: 0 PID: 10452 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 193.546955][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.557042][T10452] Call Trace: [ 193.560382][T10452] dump_stack+0x107/0x163 [ 193.564733][T10452] check_preemption_disabled+0x123/0x130 [ 193.570389][T10452] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 193.576129][T10452] trace_hardirqs_on+0x5b/0x1c0 [ 193.581525][T10452] __bad_area_nosemaphore+0xc6/0x400 [ 193.586845][T10452] do_user_addr_fault+0x7d7/0xb40 [ 193.591895][T10452] exc_page_fault+0x9e/0x180 [ 193.596518][T10452] ? asm_exc_page_fault+0x8/0x30 [ 193.601477][T10452] asm_exc_page_fault+0x1e/0x30 [ 193.606349][T10452] RIP: 0033:0x4067a6 [ 193.610263][T10452] Code: 00 48 3d e0 00 00 00 0f 87 67 01 00 00 4c 89 fe 48 89 df ba e0 00 00 00 e8 a7 9b ff ff bf 77 0c 4d 00 b9 08 00 00 00 4c 89 e6 a6 0f 85 ea 00 00 00 48 8b 44 24 10 48 83 c8 01 48 89 44 24 10 [ 193.629887][T10452] RSP: 002b:00007f85fdb77a90 EFLAGS: 00010206 [ 193.635982][T10452] RAX: 00007f85fdb77b20 RBX: 00007f85fdb77b20 RCX: 0000000000000008 [ 193.643975][T10452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004d0c77 [ 193.651958][T10452] RBP: 00007f85fdb77ae0 R08: 0000000000000000 R09: 0000000000000000 [ 193.659942][T10452] R10: 00007f85fdb77adc R11: 000000000051e020 R12: 0000000000000000 00:10:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x8}, 0x40) [ 193.667926][T10452] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000020001580 00:10:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb01001800000000000000cc00000063"], &(0x7f00000001c0)=""/155, 0xeb, 0x9b, 0x1}, 0x20) 00:10:01 executing program 5: mq_open(&(0x7f0000003800)='.&.!\x00', 0x0, 0x0, 0x0) 00:10:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0) 00:10:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000f40)=""/92, 0x5c) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x0, 0x0, 0x0, 0x0, "4c05c1279296b1221dd645838fc45e78bc73040a77c6875b5e88ddb4fdbce0a686c3ec54de33d3ee7984e02735675f6c5d559cd274b68fd3fcda829082148dfddd6eefc0e77207e48e78742c"}, 0x5c) [ 193.920638][T10469] binder: 10468:10469 ioctl 10 0 returned -22 00:10:01 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000004680)='net/ip6_flowlabel\x00') read$alg(r0, 0x0, 0x0) 00:10:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:10:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8981, 0x0) 00:10:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r0, &(0x7f0000000f40)=""/92, 0x5c) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x0, 0x0, 0x0, 0x0, "4c05c1279296b1221dd645838fc45e78bc73040a77c6875b5e88ddb4fdbce0a686c3ec54de33d3ee7984e02735675f6c5d559cd274b68fd3fcda829082148dfddd6eefc0e77207e48e78742c"}, 0x5c) 00:10:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8931, &(0x7f0000000040)={'batadv0\x00'}) 00:10:01 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 00:10:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:10:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @tipc=@id, @ax25={0x3, @null}, @ipx={0x4, 0x0, 0x0, "a1f1a7e12da4", 0xf6}}) 00:10:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:10:01 executing program 0: r0 = socket(0x1e, 0x4, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/44, 0x2c, 0x0, 0x0, 0x0) 00:10:01 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:01 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0xce881, 0x0) 00:10:01 executing program 5: syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000040, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 00:10:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = geteuid() sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="0000000014"], 0x38}, 0x0) 00:10:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c", 0x1}], 0x1}, 0x0) 00:10:01 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) [ 194.643453][T10512] fuse: Bad value for 'fd' 00:10:02 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') [ 194.668168][T10512] fuse: Bad value for 'fd' 00:10:02 executing program 1: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/101) 00:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 00:10:02 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, &(0x7f00000014c0), 0x0, &(0x7f0000001580)={[{@commit={'commit'}}]}) 00:10:02 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:02 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) 00:10:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1}]}}, &(0x7f0000000240)=""/4096, 0xfe4f, 0x1000, 0x1}, 0x20) 00:10:02 executing program 2: r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:10:02 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 00:10:02 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x305, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 00:10:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x305, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 00:10:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8942, &(0x7f0000000040)={'batadv0\x00'}) 00:10:02 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='commit=0x']) 00:10:02 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/zero\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) 00:10:03 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x3) 00:10:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8914, &(0x7f0000000040)={'batadv0\x00'}) 00:10:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2}, 0x40) 00:10:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x11, 0x0, 0x0) 00:10:03 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "e5b9442e9a0e8c72eaf1b1d0255d41dc4a9b47c11c9e72de"}) 00:10:03 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 00:10:03 executing program 1: bpf$MAP_CREATE(0x6, 0x0, 0x0) [ 196.006545][T10572] check_preemption_disabled: 3 callbacks suppressed [ 196.013387][T10572] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10572 [ 196.022943][T10572] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 196.029642][T10572] CPU: 1 PID: 10572 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 196.038413][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.048480][T10572] Call Trace: [ 196.051805][T10572] dump_stack+0x107/0x163 [ 196.056165][T10572] check_preemption_disabled+0x123/0x130 [ 196.061855][T10572] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 196.069875][T10572] trace_hardirqs_on+0x5b/0x1c0 [ 196.074770][T10572] __bad_area_nosemaphore+0xc6/0x400 [ 196.080084][T10572] do_user_addr_fault+0x7d7/0xb40 [ 196.085130][T10572] exc_page_fault+0x9e/0x180 [ 196.089740][T10572] ? asm_exc_page_fault+0x8/0x30 [ 196.094709][T10572] asm_exc_page_fault+0x1e/0x30 [ 196.099575][T10572] RIP: 0033:0x43c4f6 [ 196.103492][T10572] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 196.123115][T10572] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 196.129205][T10572] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 196.137215][T10572] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 [ 196.145206][T10572] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 [ 196.153188][T10572] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 196.161199][T10572] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 [ 196.170314][T10572] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10572 [ 196.181028][T10572] caller is lockdep_hardirqs_on+0x38/0x110 [ 196.187104][T10572] CPU: 1 PID: 10572 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 196.195871][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.205946][T10572] Call Trace: [ 196.209346][T10572] dump_stack+0x107/0x163 [ 196.213726][T10572] check_preemption_disabled+0x123/0x130 [ 196.219397][T10572] ? __bad_area_nosemaphore+0xc6/0x400 [ 196.224867][T10572] lockdep_hardirqs_on+0x38/0x110 [ 196.229899][T10572] __bad_area_nosemaphore+0xc6/0x400 [ 196.235388][T10572] do_user_addr_fault+0x7d7/0xb40 [ 196.240438][T10572] exc_page_fault+0x9e/0x180 [ 196.245039][T10572] ? asm_exc_page_fault+0x8/0x30 [ 196.249985][T10572] asm_exc_page_fault+0x1e/0x30 [ 196.254925][T10572] RIP: 0033:0x43c4f6 [ 196.258827][T10572] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 196.278443][T10572] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 196.284530][T10572] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 196.292515][T10572] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 00:10:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x48, 0x0, 0x0) 00:10:03 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x101d0) 00:10:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8906, 0x0) 00:10:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="1c", 0x1}], 0x2}, 0x0) [ 196.300671][T10572] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 [ 196.308765][T10572] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 196.316781][T10572] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 00:10:03 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)) 00:10:03 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000100)=""/186, 0x26, 0xba, 0x1}, 0x20) 00:10:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x4, 0x0, 0x0) 00:10:03 executing program 5: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:10:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8971, &(0x7f0000000040)={'batadv0\x00'}) 00:10:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100090000000000000009000000080004000000000010"], 0x30}}, 0x0) [ 196.724529][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.761944][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:10:04 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 00:10:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000240)="a5", 0x1}], 0x3}, 0x0) 00:10:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) 00:10:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8921, &(0x7f0000000040)={'batadv0\x00'}) 00:10:04 executing program 0: socket(0x29, 0x80002, 0xff) 00:10:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) 00:10:04 executing program 2: bpf$MAP_CREATE(0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:10:04 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 00:10:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f00000002c0)={'batadv0\x00'}) 00:10:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 00:10:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0xf, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x0) [ 197.108373][T10613] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10613 [ 197.118503][T10613] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 197.125023][T10613] CPU: 0 PID: 10613 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 197.133815][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.143863][T10613] Call Trace: [ 197.147156][T10613] dump_stack+0x107/0x163 [ 197.151526][T10613] check_preemption_disabled+0x123/0x130 [ 197.157190][T10613] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 197.162917][T10613] trace_hardirqs_on+0x5b/0x1c0 [ 197.167779][T10613] __bad_area_nosemaphore+0xc6/0x400 [ 197.173084][T10613] do_user_addr_fault+0x7d7/0xb40 [ 197.178132][T10613] exc_page_fault+0x9e/0x180 [ 197.182735][T10613] ? asm_exc_page_fault+0x8/0x30 [ 197.187686][T10613] asm_exc_page_fault+0x1e/0x30 [ 197.192553][T10613] RIP: 0033:0x43c4f6 [ 197.196528][T10613] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 197.216238][T10613] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 197.222312][T10613] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 197.230292][T10613] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 [ 197.238258][T10613] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 [ 197.246249][T10613] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 197.254577][T10613] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 [ 197.262659][T10613] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10613 [ 197.272079][T10613] caller is lockdep_hardirqs_on+0x38/0x110 [ 197.277953][T10613] CPU: 0 PID: 10613 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 197.286716][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.296779][T10613] Call Trace: [ 197.300087][T10613] dump_stack+0x107/0x163 [ 197.304439][T10613] check_preemption_disabled+0x123/0x130 [ 197.310088][T10613] ? __bad_area_nosemaphore+0xc6/0x400 [ 197.315556][T10613] lockdep_hardirqs_on+0x38/0x110 [ 197.320592][T10613] __bad_area_nosemaphore+0xc6/0x400 [ 197.325987][T10613] do_user_addr_fault+0x7d7/0xb40 [ 197.331033][T10613] exc_page_fault+0x9e/0x180 [ 197.335637][T10613] ? asm_exc_page_fault+0x8/0x30 [ 197.340589][T10613] asm_exc_page_fault+0x1e/0x30 [ 197.345444][T10613] RIP: 0033:0x43c4f6 [ 197.349348][T10613] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 197.368964][T10613] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 197.375046][T10613] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 197.383023][T10613] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 [ 197.391001][T10613] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 [ 197.399065][T10613] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 197.407045][T10613] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 00:10:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r1}}, 0x128) 00:10:05 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 00:10:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7ff}]}) 00:10:05 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 00:10:05 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000004e00)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)="e1", 0x1}], 0x2}], 0x1, 0x0) 00:10:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') write$P9_RSTAT(r0, 0x0, 0x0) 00:10:05 executing program 0: socket(0x29, 0x80002, 0x0) 00:10:05 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:10:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000080)=""/255, 0x26, 0xff, 0x1}, 0x20) 00:10:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xfff}, 0x40) 00:10:05 executing program 5: add_key(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000100)=']', 0x1, 0xffffffffffffffff) [ 198.233122][ T35] audit: type=1326 audit(1604275805.609:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x0 [ 198.273455][T10642] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10642 [ 198.283049][T10642] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 198.289692][T10642] CPU: 0 PID: 10642 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 198.298461][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.308544][T10642] Call Trace: [ 198.311860][T10642] dump_stack+0x107/0x163 [ 198.316213][T10642] check_preemption_disabled+0x123/0x130 [ 198.321867][T10642] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 198.327606][T10642] trace_hardirqs_on+0x5b/0x1c0 [ 198.332473][T10642] __bad_area_nosemaphore+0xc6/0x400 [ 198.337790][T10642] do_user_addr_fault+0x7d7/0xb40 [ 198.343463][T10642] exc_page_fault+0x9e/0x180 [ 198.348068][T10642] ? asm_exc_page_fault+0x8/0x30 [ 198.353029][T10642] asm_exc_page_fault+0x1e/0x30 [ 198.357891][T10642] RIP: 0033:0x43c4f6 [ 198.361806][T10642] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 198.381448][T10642] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 198.387538][T10642] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 198.395692][T10642] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 [ 198.403758][T10642] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 [ 198.411735][T10642] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 198.419716][T10642] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 [ 198.429002][T10642] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/10642 [ 198.438694][T10642] caller is lockdep_hardirqs_on+0x38/0x110 [ 198.444517][T10642] CPU: 0 PID: 10642 Comm: syz-executor.3 Not tainted 5.10.0-rc1-syzkaller #0 [ 198.453275][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.463332][T10642] Call Trace: [ 198.466636][T10642] dump_stack+0x107/0x163 [ 198.471074][T10642] check_preemption_disabled+0x123/0x130 [ 198.476726][T10642] ? __bad_area_nosemaphore+0xc6/0x400 [ 198.482196][T10642] lockdep_hardirqs_on+0x38/0x110 [ 198.487235][T10642] __bad_area_nosemaphore+0xc6/0x400 [ 198.495581][T10642] do_user_addr_fault+0x7d7/0xb40 [ 198.500631][T10642] exc_page_fault+0x9e/0x180 [ 198.505235][T10642] ? asm_exc_page_fault+0x8/0x30 [ 198.510277][T10642] asm_exc_page_fault+0x1e/0x30 [ 198.515137][T10642] RIP: 0033:0x43c4f6 [ 198.519044][T10642] Code: 00 0f 1f 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 198.538663][T10642] RSP: 002b:00007f85fdb77a88 EFLAGS: 00010293 [ 198.544744][T10642] RAX: 0000000000000000 RBX: 00007f85fdb77b20 RCX: 0000000000000000 [ 198.552722][T10642] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000000000000 [ 198.560717][T10642] RBP: 00007f85fdb77ae0 R08: 00007f85fdb77ad8 R09: 0000000000000000 00:10:05 executing program 4: r0 = socket(0x23, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 198.568718][T10642] R10: 00007f85fdb77adc R11: 0000000000000213 R12: 0000000020000000 [ 198.576695][T10642] R13: 0000000020000040 R14: 00000000200014c0 R15: 0000000000000000 00:10:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 198.893590][ T35] audit: type=1326 audit(1604275806.269:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x0 00:10:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}}, 0x0) 00:10:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x1000, 0x40000000}, 0x40) 00:10:06 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[]) 00:10:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc0000000710"], &(0x7f00000001c0)=""/155, 0xeb, 0x9b, 0x1}, 0x20) 00:10:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000040)={'batadv0\x00'}) 00:10:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x8}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 00:10:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000040)={'batadv0\x00'}) 00:10:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x3}, 0x40) 00:10:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x5421, &(0x7f0000001000)=@buf={0xfdfdffff}) 00:10:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 199.383397][T10676] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:10:06 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:10:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000040)={'batadv0\x00'}) 00:10:06 executing program 2: socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}], 0x50}, 0x0) 00:10:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/4088, 0x2b, 0xff8, 0x1}, 0x20) 00:10:07 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[]) 00:10:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:07 executing program 4: socket$pptp(0x18, 0x1, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f0000000180), 0x0) 00:10:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000040)={'batadv0\x00'}) 00:10:07 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000)=0x200, 0x4) 00:10:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000240)="d98d2c8c7144a74deb3b36a3fa0afc92af6edbdd12e680bbdd72b65fae9c0d8d9b2b0038a647e3a320151b08ef41a17ec99c6dcda815088e81c94de0ca8fbc37a7ef1545ddf72325c8dd82d20604abe3e784812115c379d2bc029edfbfbfdb21ec"}) 00:10:07 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 199.778774][T10704] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:10:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:10:07 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001580)=ANY=[]) 00:10:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb010018000007"], &(0x7f00000001c0)=""/155, 0xeb, 0x9b, 0x1}, 0x20) [ 199.965543][T10719] binder: 10713:10719 ioctl c0306201 0 returned -14 00:10:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:10:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000040)={'batadv0\x00'})