Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. 2020/10/16 08:09:09 fuzzer started 2020/10/16 08:09:10 dialing manager at 10.128.0.26:45693 2020/10/16 08:09:10 syscalls: 3450 2020/10/16 08:09:10 code coverage: enabled 2020/10/16 08:09:10 comparison tracing: enabled 2020/10/16 08:09:10 extra coverage: enabled 2020/10/16 08:09:10 setuid sandbox: enabled 2020/10/16 08:09:10 namespace sandbox: enabled 2020/10/16 08:09:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/16 08:09:10 fault injection: enabled 2020/10/16 08:09:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/16 08:09:10 net packet injection: enabled 2020/10/16 08:09:10 net device setup: enabled 2020/10/16 08:09:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/16 08:09:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/16 08:09:10 USB emulation: enabled 2020/10/16 08:09:10 hci packet injection: enabled 2020/10/16 08:09:10 wifi device emulation: enabled 08:09:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup2(r3, r2) 08:09:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 08:09:48 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) 08:09:48 executing program 3: unshare(0x2020200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x0) 08:09:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2812, r0, 0x0) 08:09:48 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30, 0x2d]}}}, 0x30}], [], 0x2c}) syzkaller login: [ 102.930028][ T6903] IPVS: ftp: loaded support on port[0] = 21 [ 103.208781][ T6905] IPVS: ftp: loaded support on port[0] = 21 [ 103.293496][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 103.400992][ T6907] IPVS: ftp: loaded support on port[0] = 21 [ 103.558349][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.567185][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.577609][ T6903] device bridge_slave_0 entered promiscuous mode [ 103.612289][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.628758][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.638694][ T6903] device bridge_slave_1 entered promiscuous mode [ 103.739817][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.749658][ T6905] chnl_net:caif_netlink_parms(): no params data found [ 103.789374][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.831739][ T6909] IPVS: ftp: loaded support on port[0] = 21 [ 103.932815][ T6903] team0: Port device team_slave_0 added [ 103.980916][ T6903] team0: Port device team_slave_1 added [ 103.993993][ T6911] IPVS: ftp: loaded support on port[0] = 21 [ 104.041954][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.049974][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.060346][ T6905] device bridge_slave_0 entered promiscuous mode [ 104.071358][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.080697][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.089373][ T6905] device bridge_slave_1 entered promiscuous mode [ 104.129670][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.137557][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.165198][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.207079][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.215052][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.241293][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.256772][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.289217][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.299148][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 104.457132][ T6903] device hsr_slave_0 entered promiscuous mode [ 104.466169][ T6903] device hsr_slave_1 entered promiscuous mode [ 104.497235][ T6905] team0: Port device team_slave_0 added [ 104.530477][ T7028] IPVS: ftp: loaded support on port[0] = 21 [ 104.551523][ T6905] team0: Port device team_slave_1 added [ 104.632411][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.642750][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.651513][ T6907] device bridge_slave_0 entered promiscuous mode [ 104.712660][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.728428][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.756905][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.768647][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.776106][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.786032][ T6907] device bridge_slave_1 entered promiscuous mode [ 104.815491][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.822541][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.850747][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.917203][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 104.934114][ T34] Bluetooth: hci0: command 0x0409 tx timeout [ 104.937794][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.959458][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.002980][ T6905] device hsr_slave_0 entered promiscuous mode [ 105.020061][ T6905] device hsr_slave_1 entered promiscuous mode [ 105.027488][ T6905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.036212][ T6905] Cannot create hsr debugfs directory [ 105.097398][ T6907] team0: Port device team_slave_0 added [ 105.112539][ T6907] team0: Port device team_slave_1 added [ 105.160049][ T6911] chnl_net:caif_netlink_parms(): no params data found [ 105.193356][ T34] Bluetooth: hci1: command 0x0409 tx timeout [ 105.292141][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.299988][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.326947][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.398945][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.413155][ T34] Bluetooth: hci2: command 0x0409 tx timeout [ 105.423646][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.450730][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.472968][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.484831][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.492557][ T6909] device bridge_slave_0 entered promiscuous mode [ 105.527174][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.542447][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.551030][ T6909] device bridge_slave_1 entered promiscuous mode [ 105.604886][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 105.630495][ T6907] device hsr_slave_0 entered promiscuous mode [ 105.639144][ T6907] device hsr_slave_1 entered promiscuous mode [ 105.646289][ T6907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.653256][ T7419] Bluetooth: hci3: command 0x0409 tx timeout [ 105.662936][ T6907] Cannot create hsr debugfs directory [ 105.677359][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.760132][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.785169][ T6903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.809941][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.831367][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.840837][ T6911] device bridge_slave_0 entered promiscuous mode [ 105.868611][ T6903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.893081][ T3942] Bluetooth: hci4: command 0x0409 tx timeout [ 105.909880][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.918094][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.926502][ T6911] device bridge_slave_1 entered promiscuous mode [ 105.942498][ T6903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.962108][ T6903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.975584][ T6909] team0: Port device team_slave_0 added [ 106.053535][ T6909] team0: Port device team_slave_1 added [ 106.099994][ T6911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.114463][ T6911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.138727][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.148324][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.157336][ T7028] device bridge_slave_0 entered promiscuous mode [ 106.172515][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.180144][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.188782][ T7028] device bridge_slave_1 entered promiscuous mode [ 106.225417][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.232392][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.258714][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.273395][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.280404][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.306817][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.336469][ T6905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.360400][ T6905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.383946][ T6911] team0: Port device team_slave_0 added [ 106.390074][ T6905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.409044][ T6905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.434317][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.456027][ T6911] team0: Port device team_slave_1 added [ 106.466716][ T34] Bluetooth: hci5: command 0x0409 tx timeout [ 106.503538][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.531856][ T6909] device hsr_slave_0 entered promiscuous mode [ 106.541600][ T6909] device hsr_slave_1 entered promiscuous mode [ 106.548855][ T6909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.557064][ T6909] Cannot create hsr debugfs directory [ 106.625031][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.632002][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.659381][ T6911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.674468][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.681428][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.715897][ T6911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.727548][ T6907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.741095][ T7028] team0: Port device team_slave_0 added [ 106.767996][ T6907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.783340][ T7028] team0: Port device team_slave_1 added [ 106.821842][ T6907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.871027][ T6911] device hsr_slave_0 entered promiscuous mode [ 106.878742][ T6911] device hsr_slave_1 entered promiscuous mode [ 106.887314][ T6911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.896222][ T6911] Cannot create hsr debugfs directory [ 106.909990][ T6907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.934629][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.941600][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.972107][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.988071][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.995476][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.022403][ T3942] Bluetooth: hci0: command 0x041b tx timeout [ 107.029090][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.187137][ T7028] device hsr_slave_0 entered promiscuous mode [ 107.195663][ T7028] device hsr_slave_1 entered promiscuous mode [ 107.202248][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.211618][ T7028] Cannot create hsr debugfs directory [ 107.253398][ T3942] Bluetooth: hci1: command 0x041b tx timeout [ 107.269704][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.327436][ T6909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.387366][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.400382][ T6909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.429819][ T6905] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.444477][ T6909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.468925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.478409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.493306][ T34] Bluetooth: hci2: command 0x041b tx timeout [ 107.500376][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.510663][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.528519][ T6909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.559034][ T6903] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.594489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.608557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.617618][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.625050][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.699826][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.707802][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.718819][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.728337][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.735461][ T8159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.742998][ T34] Bluetooth: hci3: command 0x041b tx timeout [ 107.744793][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.758064][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.767323][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.776210][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.783344][ T8159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.790915][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.799748][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.808433][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.815600][ T8159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.869654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.878132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.887500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.904813][ T6911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.958473][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.967560][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.977502][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.985963][ T34] Bluetooth: hci4: command 0x041b tx timeout [ 108.008429][ T6911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.017974][ T6911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.048992][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.058915][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.068650][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.079012][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.088535][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.097609][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.106443][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.115997][ T6911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.162621][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.186227][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.200338][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.209177][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.218164][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.236931][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.256057][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.282202][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.293183][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.302166][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.311366][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.348891][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.364515][ T7028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.396243][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.411489][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.435637][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.442535][ T7028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.500141][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.509547][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.517956][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.527419][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.536559][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.543717][ T8159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.551725][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.560974][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.569891][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.577036][ T8159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.585177][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.592587][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.600259][ T7028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.601357][ T8159] Bluetooth: hci5: command 0x041b tx timeout [ 108.622165][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.644468][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.658577][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.666872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.676909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.685980][ T7028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.740321][ T6907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.750875][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.771423][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.781469][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.790613][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.799637][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.808761][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.818028][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.826958][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.836061][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.847764][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.866868][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.875296][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.898180][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.932008][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.941552][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.007698][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.022013][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.029921][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.044449][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.057766][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.067216][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.080692][ T3942] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.087813][ T3942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.101891][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.103011][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 109.110731][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.158771][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.175235][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.191369][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.200404][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.209134][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.218559][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.227198][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.234338][ T2647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.244901][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.252983][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.260884][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.307046][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.316132][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.327065][ T6905] device veth0_vlan entered promiscuous mode [ 109.333020][ T34] Bluetooth: hci1: command 0x040f tx timeout [ 109.365164][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.383692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.392014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.401683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.411754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.420867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.429587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.437729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.446956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.455969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.464517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.472300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.527200][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.537541][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.574055][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.592844][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.601403][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.623331][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.632089][ T2647] Bluetooth: hci2: command 0x040f tx timeout [ 109.638621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.654750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.674335][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.681376][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.694211][ T6905] device veth1_vlan entered promiscuous mode [ 109.704231][ T6903] device veth0_vlan entered promiscuous mode [ 109.716090][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.744742][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.758098][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.767675][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.811037][ T6907] device veth0_vlan entered promiscuous mode [ 109.817592][ T3942] Bluetooth: hci3: command 0x040f tx timeout [ 109.833491][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.843513][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.851213][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.862188][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.871618][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.878753][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.886836][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.897031][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.909371][ T6903] device veth1_vlan entered promiscuous mode [ 109.927459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.937965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.960284][ T6905] device veth0_macvtap entered promiscuous mode [ 109.979327][ T6905] device veth1_macvtap entered promiscuous mode [ 109.998979][ T6907] device veth1_vlan entered promiscuous mode [ 110.011564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.020402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.028763][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.037300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.047225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.053042][ T3942] Bluetooth: hci4: command 0x040f tx timeout [ 110.057594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.070854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.081840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.089453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.098779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.141023][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.155180][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.164809][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.174075][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.182318][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.194817][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.211236][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.255026][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.267932][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.277921][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.287318][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.296763][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.312210][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.328321][ T6907] device veth0_macvtap entered promiscuous mode [ 110.342331][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.356826][ T6905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.367315][ T6905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.377176][ T6905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.386252][ T6905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.412217][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.422075][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.433572][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.445844][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.455581][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.465115][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.474324][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.498010][ T6907] device veth1_macvtap entered promiscuous mode [ 110.522929][ T6903] device veth0_macvtap entered promiscuous mode [ 110.536387][ T6903] device veth1_macvtap entered promiscuous mode [ 110.547054][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.556765][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.566016][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.574903][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.583267][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.613092][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.630569][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.638291][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.657183][ T6909] device veth0_vlan entered promiscuous mode [ 110.683742][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.691997][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.706081][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.715361][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.724269][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.731327][ T2647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.739994][ T2647] Bluetooth: hci5: command 0x040f tx timeout [ 110.747023][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.760606][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.772631][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.788094][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.813165][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.820929][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.836237][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.847368][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.859315][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.868384][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.878571][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.887513][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.894653][ T2647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.903085][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.912581][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.944055][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.957569][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 110.968113][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.981345][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.991315][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.003014][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.016527][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.029263][ T6909] device veth1_vlan entered promiscuous mode [ 111.047048][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.066414][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.080251][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.091215][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.100983][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.112046][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.126641][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.136639][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.147515][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.158929][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.172825][ T34] Bluetooth: hci0: command 0x0419 tx timeout [ 111.176504][ T6903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.188926][ T6903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.199785][ T6903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.211963][ T6903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.230779][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.259653][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.281601][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.299531][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.355451][ T6907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.368922][ T6907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.378461][ T6907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.387302][ T6907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.398184][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.411857][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.412841][ T34] Bluetooth: hci1: command 0x0419 tx timeout [ 111.429023][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.465703][ T6909] device veth0_macvtap entered promiscuous mode [ 111.508195][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.521921][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.540574][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.551615][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.569753][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.591534][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.623023][ T6909] device veth1_macvtap entered promiscuous mode [ 111.663593][ T3942] Bluetooth: hci2: command 0x0419 tx timeout [ 111.676123][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.687307][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.696129][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.707181][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.748234][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.781931][ T7028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.795611][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.806432][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.857973][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.874146][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.888357][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.909963][ T6911] device veth0_vlan entered promiscuous mode [ 111.916996][ T2647] Bluetooth: hci3: command 0x0419 tx timeout [ 111.964574][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.973752][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.986137][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.995154][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.004196][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.020227][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.030658][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.047638][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.058355][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.068931][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.080934][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.103763][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.118513][ T6911] device veth1_vlan entered promiscuous mode [ 112.133360][ T34] Bluetooth: hci4: command 0x0419 tx timeout [ 112.140091][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.154259][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.161981][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.172540][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.180508][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.189293][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.198227][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.207260][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.219550][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.237318][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.247542][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.258094][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.268077][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 112.278550][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.290133][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.312456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.321144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.356560][ T6909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.397705][ T6909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.422549][ T6909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.431283][ T6909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.455135][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.484724][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 112.607614][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.634697][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.663178][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.671922][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.714510][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.721282][ T6911] device veth0_macvtap entered promiscuous mode 08:09:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 112.759804][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.766435][ T6911] device veth1_macvtap entered promiscuous mode [ 112.775087][ T3942] Bluetooth: hci5: command 0x0419 tx timeout [ 112.799050][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.812744][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.821680][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.848474][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.881893][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.906164][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.919280][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.930059][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.941722][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.953722][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.966874][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:09:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 112.977760][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.989463][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.015220][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.085560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.098427][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.128436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.171148][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 08:09:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 113.212016][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.242155][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.268755][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.279547][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.294187][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.304492][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 08:09:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 113.315276][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.337400][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.405875][ T7028] device veth0_vlan entered promiscuous mode [ 113.424320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.467864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.503543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.512035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.537179][ T6911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.556408][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.565357][ T6911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.586878][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.594805][ T8301] [ 113.597159][ T8301] ============================= [ 113.602009][ T8301] WARNING: suspicious RCU usage [ 113.611973][ T6911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.627649][ T8301] 5.9.0-next-20201016-syzkaller #0 Not tainted [ 113.643580][ T8301] ----------------------------- [ 113.650166][ T6911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.686886][ T8301] include/linux/cgroup.h:494 suspicious rcu_dereference_check() usage! 08:09:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 113.746804][ T8301] [ 113.746804][ T8301] other info that might help us debug this: [ 113.746804][ T8301] [ 113.759746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.781974][ T8301] [ 113.781974][ T8301] rcu_scheduler_active = 2, debug_locks = 1 [ 113.785959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.815793][ T8301] no locks held by syz-executor.0/8301. [ 113.826921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.828846][ T8301] [ 113.828846][ T8301] stack backtrace: [ 113.876555][ T7028] device veth1_vlan entered promiscuous mode [ 113.884762][ T8301] CPU: 0 PID: 8301 Comm: syz-executor.0 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 113.894240][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.904311][ T8301] Call Trace: [ 113.907619][ T8301] dump_stack+0x198/0x1fb [ 113.912056][ T8301] io_init_identity+0x3a9/0x450 [ 113.916922][ T8301] io_uring_alloc_task_context+0x176/0x250 [ 113.922751][ T8301] io_uring_add_task_file+0x10d/0x180 [ 113.928140][ T8301] io_uring_setup+0x2727/0x3660 [ 113.933016][ T8301] ? io_sq_thread+0x1400/0x1400 [ 113.937874][ T8301] ? io_issue_sqe+0x3d80/0x3d80 [ 113.942733][ T8301] ? io_uring_poll+0x2a0/0x2a0 [ 113.947512][ T8301] ? put_timespec64+0xcb/0x120 [ 113.952289][ T8301] ? ns_to_timespec64+0xc0/0xc0 [ 113.957163][ T8301] ? check_preemption_disabled+0x50/0x130 [ 113.962893][ T8301] ? syscall_enter_from_user_mode+0x1d/0x60 [ 113.968792][ T8301] do_syscall_64+0x2d/0x70 [ 113.973219][ T8301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 113.979114][ T8301] RIP: 0033:0x45de59 [ 113.983010][ T8301] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 114.002618][ T8301] RSP: 002b:00007f7e11fe1bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 114.011042][ T8301] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045de59 [ 114.019050][ T8301] RDX: 00000000206d4000 RSI: 0000000020000080 RDI: 0000000000000087 [ 114.027064][ T8301] RBP: 000000000118c020 R08: 0000000020000040 R09: 0000000020000040 [ 114.035048][ T8301] R10: 0000000020000000 R11: 0000000000000206 R12: 00000000206d4000 [ 114.043138][ T8301] R13: 0000000020ee7000 R14: 0000000020000040 R15: 0000000020000000 [ 114.116548][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.130552][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.147376][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.152179][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:10:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) 08:10:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/249, 0x28, 0xf9, 0x8}, 0x20) 08:10:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) [ 114.170774][ T7028] device veth0_macvtap entered promiscuous mode [ 114.242344][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.250605][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.351369][ T7028] device veth1_macvtap entered promiscuous mode [ 114.381273][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.404672][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.429725][ T8351] BPF:[1] FUNC _ [ 114.441872][ T8352] BPF:[1] FUNC _ [ 114.457149][ T8351] BPF:type_id=2 [ 114.463562][ T8352] BPF:type_id=2 [ 114.471611][ T8351] BPF: [ 114.472635][ T8352] BPF: [ 114.495227][ T8352] BPF:Invalid type_id [ 114.499683][ T8351] BPF:Invalid type_id [ 114.504172][ T8351] BPF: [ 114.504172][ T8351] [ 114.521468][ T8352] BPF: [ 114.521468][ T8352] [ 114.542414][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.550650][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.571213][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.585076][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.605458][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.627962][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.639246][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.650252][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.660878][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.680122][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.693371][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.706160][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.717090][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.729797][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.743007][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.752947][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.761016][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.793491][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.836572][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.873818][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.895901][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.953145][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.972385][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.991608][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.033134][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.077988][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.100600][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.129111][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.141530][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.165056][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.176206][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.190763][ T7028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.200449][ T7028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.210184][ T7028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 08:10:01 executing program 3: unshare(0x2020200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x0) [ 115.224746][ T7028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.241267][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.264704][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.297462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.390506][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.414316][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:10:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2812, r0, 0x0) [ 115.465882][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.534924][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.547493][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.575612][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:10:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30, 0x2d]}}}, 0x30}], [], 0x2c}) 08:10:01 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) 08:10:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 08:10:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/249, 0x28, 0xf9, 0x8}, 0x20) 08:10:01 executing program 3: unshare(0x2020200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x0) 08:10:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2812, r0, 0x0) [ 115.758368][ T8408] BPF:[1] FUNC _ [ 115.781447][ T8408] BPF:type_id=2 08:10:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/249, 0x28, 0xf9, 0x8}, 0x20) 08:10:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x2812, r0, 0x0) 08:10:01 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) [ 115.804940][ T8408] BPF: [ 115.824077][ T8408] BPF:Invalid type_id [ 115.845060][ T8408] BPF: [ 115.845060][ T8408] 08:10:01 executing program 3: unshare(0x2020200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x0) 08:10:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 08:10:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30, 0x2d]}}}, 0x30}], [], 0x2c}) [ 116.014185][ T8423] BPF:[1] FUNC _ [ 116.035127][ T8423] BPF:type_id=2 [ 116.053249][ T8423] BPF: [ 116.068275][ T8423] BPF:Invalid type_id 08:10:02 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 116.085202][ T8423] BPF: [ 116.085202][ T8423] 08:10:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000040)=""/249, 0x28, 0xf9, 0x8}, 0x20) 08:10:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:10:02 executing program 4: socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') 08:10:02 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@anchor={'anchor', 0x3d, 0x4}}, {@novrs='novrs'}]}) [ 116.233555][ T8433] BPF:[1] FUNC _ 08:10:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x30, 0x2d]}}}, 0x30}], [], 0x2c}) [ 116.255639][ T8433] BPF:type_id=2 [ 116.277803][ T8433] BPF: [ 116.293487][ T8433] BPF:Invalid type_id [ 116.314525][ T8433] BPF: [ 116.314525][ T8433] [ 116.315752][ C0] hrtimer: interrupt took 50213 ns 08:10:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c000000240007dd0000000029fde6d97345e7a9", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c000200080005000000000008000500000000003800030005"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xc, &(0x7f0000000100)}], 0x492492492492642, 0x0) 08:10:02 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:10:02 executing program 4: socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') 08:10:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c000000240007dd0000000029fde6d97345e7a9", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c000200080005000000000008000500000000003800030005"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xc, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 116.405162][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 116.471948][ T8444] UDF-fs: Scanning with blocksize 512 failed [ 116.546165][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found 08:10:02 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:10:02 executing program 4: socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') [ 116.597488][ T8444] UDF-fs: Scanning with blocksize 1024 failed 08:10:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c000000240007dd0000000029fde6d97345e7a9", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c000200080005000000000008000500000000003800030005"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xc, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 116.682186][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 116.689860][ T8444] UDF-fs: Scanning with blocksize 2048 failed 08:10:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 116.785681][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found 08:10:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 116.839882][ T8444] UDF-fs: Scanning with blocksize 4096 failed 08:10:03 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 116.885258][ T8444] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 117.027105][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.136340][ T8444] UDF-fs: Scanning with blocksize 512 failed [ 117.183790][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.192789][ T8444] UDF-fs: Scanning with blocksize 1024 failed [ 117.215535][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.230328][ T8444] UDF-fs: Scanning with blocksize 2048 failed [ 117.237920][ T8444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.246046][ T8444] UDF-fs: Scanning with blocksize 4096 failed [ 117.264401][ T8444] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:10:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c000000240007dd0000000029fde6d97345e7a9", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c000200080005000000000008000500000000003800030005"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xc, &(0x7f0000000100)}], 0x492492492492642, 0x0) 08:10:03 executing program 4: socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') 08:10:03 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:10:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:10:03 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@anchor={'anchor', 0x3d, 0x4}}, {@novrs='novrs'}]}) 08:10:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 117.537416][ T8504] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8504 [ 117.547093][ T8504] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 117.553765][ T8504] CPU: 0 PID: 8504 Comm: syz-executor.3 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 117.563229][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.573295][ T8504] Call Trace: [ 117.576602][ T8504] dump_stack+0x198/0x1fb [ 117.580960][ T8504] check_preemption_disabled+0x128/0x130 08:10:03 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 117.586613][ T8504] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 117.592351][ T8504] trace_hardirqs_on+0x5b/0x1c0 [ 117.597253][ T8504] __bad_area_nosemaphore+0xc6/0x4f0 [ 117.602560][ T8504] do_user_addr_fault+0x852/0xbf0 [ 117.607605][ T8504] exc_page_fault+0xa8/0x190 [ 117.612209][ T8504] ? asm_exc_page_fault+0x8/0x30 [ 117.617161][ T8504] asm_exc_page_fault+0x1e/0x30 [ 117.622018][ T8504] RIP: 0033:0x4450c7 [ 117.625940][ T8504] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 117.645557][ T8504] RSP: 002b:00007feb984e4c68 EFLAGS: 00010202 [ 117.651650][ T8504] RAX: 0000000000000040 RBX: 000000000118bfc8 RCX: 000000000000307e [ 117.659632][ T8504] RDX: 0000000000000004 RSI: 0000000020000140 RDI: 0000000000000040 [ 117.667616][ T8504] RBP: 000000000118c018 R08: 0000000000000004 R09: 0000000000000000 [ 117.675603][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 117.683590][ T8504] R13: 00007fff0c235c2f R14: 00007feb984e59c0 R15: 000000000118bfd4 [ 117.693007][ T8504] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8504 [ 117.703722][ T8504] caller is lockdep_hardirqs_on+0x34/0x110 [ 117.709573][ T8504] CPU: 0 PID: 8504 Comm: syz-executor.3 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 117.719029][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.729090][ T8504] Call Trace: [ 117.732395][ T8504] dump_stack+0x198/0x1fb 08:10:03 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 117.736744][ T8504] check_preemption_disabled+0x128/0x130 [ 117.742390][ T8504] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 117.747865][ T8504] lockdep_hardirqs_on+0x34/0x110 [ 117.752907][ T8504] __bad_area_nosemaphore+0xc6/0x4f0 [ 117.758218][ T8504] do_user_addr_fault+0x852/0xbf0 [ 117.763257][ T8504] exc_page_fault+0xa8/0x190 [ 117.767840][ T8504] ? asm_exc_page_fault+0x8/0x30 [ 117.772762][ T8504] asm_exc_page_fault+0x1e/0x30 [ 117.777594][ T8504] RIP: 0033:0x4450c7 [ 117.781484][ T8504] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 117.801069][ T8504] RSP: 002b:00007feb984e4c68 EFLAGS: 00010202 [ 117.807134][ T8504] RAX: 0000000000000040 RBX: 000000000118bfc8 RCX: 000000000000307e [ 117.815087][ T8504] RDX: 0000000000000004 RSI: 0000000020000140 RDI: 0000000000000040 [ 117.823056][ T8504] RBP: 000000000118c018 R08: 0000000000000004 R09: 0000000000000000 08:10:03 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:10:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r0, 0x89f2, 0x7fffffffefff) [ 117.831008][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 117.838963][ T8504] R13: 00007fff0c235c2f R14: 00007feb984e59c0 R15: 000000000118bfd4 [ 117.934716][ T8514] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.961263][ T8514] UDF-fs: Scanning with blocksize 512 failed [ 117.969940][ T8514] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.981452][ T8514] UDF-fs: Scanning with blocksize 1024 failed [ 117.989682][ T8514] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.998159][ T8514] UDF-fs: Scanning with blocksize 2048 failed [ 118.006204][ T8514] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 118.014537][ T8514] UDF-fs: Scanning with blocksize 4096 failed [ 118.020777][ T8514] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:10:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:10:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) capget(&(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) 08:10:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:10:04 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@anchor={'anchor', 0x3d, 0x4}}, {@novrs='novrs'}]}) [ 118.328355][ T8529] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8529 [ 118.337815][ T8529] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 118.344454][ T8529] CPU: 1 PID: 8529 Comm: syz-executor.2 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 118.353920][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.363976][ T8529] Call Trace: [ 118.367276][ T8529] dump_stack+0x198/0x1fb [ 118.371620][ T8529] check_preemption_disabled+0x128/0x130 [ 118.377262][ T8529] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 118.382990][ T8529] trace_hardirqs_on+0x5b/0x1c0 [ 118.387850][ T8529] __bad_area_nosemaphore+0xc6/0x4f0 [ 118.393149][ T8529] bad_area_access_error+0x29c/0x3b0 [ 118.398448][ T8529] do_user_addr_fault+0x69f/0xbf0 [ 118.403491][ T8529] exc_page_fault+0xa8/0x190 [ 118.407312][ T8535] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8535 [ 118.408105][ T8529] ? asm_exc_page_fault+0x8/0x30 [ 118.408122][ T8529] asm_exc_page_fault+0x1e/0x30 [ 118.408134][ T8529] RIP: 0033:0x400604 [ 118.408155][ T8529] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 f1 67 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 118.421877][ T8535] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 118.426750][ T8529] RSP: 002b:00007ffc45dfbba0 EFLAGS: 00010202 [ 118.467571][ T8529] RAX: 0000000000000000 RBX: 0000000001190318 RCX: 0000000000000000 [ 118.475529][ T8529] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 118.483501][ T8529] RBP: 0000000001190320 R08: 0000000000000000 R09: 0000000000000000 [ 118.491463][ T8529] R10: 00007ffc45dfbcb0 R11: 0000000000000246 R12: fffffffffffffffe [ 118.499423][ T8529] R13: 000000000001ce3d R14: 00000000000003e8 R15: 000000000118bf2c [ 118.507410][ T8535] CPU: 0 PID: 8535 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 118.509906][ T8529] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8529 [ 118.516860][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.516866][ T8535] Call Trace: [ 118.516886][ T8535] dump_stack+0x198/0x1fb [ 118.516910][ T8535] check_preemption_disabled+0x128/0x130 [ 118.516931][ T8535] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 118.516950][ T8535] trace_hardirqs_on+0x5b/0x1c0 [ 118.516969][ T8535] __bad_area_nosemaphore+0xc6/0x4f0 [ 118.516990][ T8535] do_user_addr_fault+0x852/0xbf0 [ 118.517012][ T8535] exc_page_fault+0xa8/0x190 [ 118.517026][ T8535] ? asm_exc_page_fault+0x8/0x30 [ 118.517039][ T8535] asm_exc_page_fault+0x1e/0x30 [ 118.517050][ T8535] RIP: 0033:0x4450c7 [ 118.517068][ T8535] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 118.517078][ T8535] RSP: 002b:00007f3a9659ec68 EFLAGS: 00010202 [ 118.517093][ T8535] RAX: 0000000000000040 RBX: 000000000118bfc8 RCX: 000000000000307e [ 118.517102][ T8535] RDX: 0000000000000004 RSI: 0000000020000140 RDI: 0000000000000040 [ 118.517111][ T8535] RBP: 000000000118c018 R08: 0000000000000004 R09: 0000000000000000 [ 118.517120][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 118.517130][ T8535] R13: 00007ffe9bf3173f R14: 00007f3a9659f9c0 R15: 000000000118bfd4 [ 118.517197][ T8535] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8535 [ 118.517213][ T8535] caller is lockdep_hardirqs_on+0x34/0x110 [ 118.517231][ T8535] CPU: 0 PID: 8535 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 118.517240][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.517245][ T8535] Call Trace: [ 118.517261][ T8535] dump_stack+0x198/0x1fb [ 118.517283][ T8535] check_preemption_disabled+0x128/0x130 [ 118.517300][ T8535] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 118.517318][ T8535] lockdep_hardirqs_on+0x34/0x110 [ 118.517337][ T8535] __bad_area_nosemaphore+0xc6/0x4f0 [ 118.517361][ T8535] do_user_addr_fault+0x852/0xbf0 [ 118.517388][ T8535] exc_page_fault+0xa8/0x190 [ 118.526677][ T8529] caller is lockdep_hardirqs_on+0x34/0x110 [ 118.536766][ T8535] ? asm_exc_page_fault+0x8/0x30 [ 118.536782][ T8535] asm_exc_page_fault+0x1e/0x30 [ 118.536792][ T8535] RIP: 0033:0x4450c7 [ 118.536812][ T8535] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 118.766057][ T8535] RSP: 002b:00007f3a9659ec68 EFLAGS: 00010202 [ 118.772114][ T8535] RAX: 0000000000000040 RBX: 000000000118bfc8 RCX: 000000000000307e 08:10:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 118.780070][ T8535] RDX: 0000000000000004 RSI: 0000000020000140 RDI: 0000000000000040 [ 118.788025][ T8535] RBP: 000000000118c018 R08: 0000000000000004 R09: 0000000000000000 [ 118.795979][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 118.803934][ T8535] R13: 00007ffe9bf3173f R14: 00007f3a9659f9c0 R15: 000000000118bfd4 [ 118.811915][ T8529] CPU: 1 PID: 8529 Comm: syz-executor.2 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 118.821382][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.831442][ T8529] Call Trace: [ 118.834749][ T8529] dump_stack+0x198/0x1fb [ 118.839097][ T8529] check_preemption_disabled+0x128/0x130 [ 118.844743][ T8529] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 118.850226][ T8529] lockdep_hardirqs_on+0x34/0x110 [ 118.855159][ T8536] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8536 [ 118.855281][ T8529] __bad_area_nosemaphore+0xc6/0x4f0 [ 118.864634][ T8536] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 118.869819][ T8529] bad_area_access_error+0x29c/0x3b0 [ 118.869841][ T8529] do_user_addr_fault+0x69f/0xbf0 [ 118.869868][ T8529] exc_page_fault+0xa8/0x190 [ 118.891222][ T8529] ? asm_exc_page_fault+0x8/0x30 [ 118.896153][ T8529] asm_exc_page_fault+0x1e/0x30 [ 118.900992][ T8529] RIP: 0033:0x400604 [ 118.904879][ T8529] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 f1 67 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 118.924482][ T8529] RSP: 002b:00007ffc45dfbba0 EFLAGS: 00010202 [ 118.930546][ T8529] RAX: 0000000000000000 RBX: 0000000001190318 RCX: 0000000000000000 [ 118.938508][ T8529] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 118.946469][ T8529] RBP: 0000000001190320 R08: 0000000000000000 R09: 0000000000000000 [ 118.954425][ T8529] R10: 00007ffc45dfbcb0 R11: 0000000000000246 R12: fffffffffffffffe [ 118.962383][ T8529] R13: 000000000001ce3d R14: 00000000000003e8 R15: 000000000118bf2c [ 118.970361][ T8536] CPU: 0 PID: 8536 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 118.979821][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.989881][ T8536] Call Trace: [ 118.993186][ T8536] dump_stack+0x198/0x1fb [ 118.997541][ T8536] check_preemption_disabled+0x128/0x130 [ 119.003196][ T8536] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 119.008935][ T8536] trace_hardirqs_on+0x5b/0x1c0 [ 119.013803][ T8536] __bad_area_nosemaphore+0xc6/0x4f0 [ 119.019105][ T8536] do_user_addr_fault+0x852/0xbf0 [ 119.024152][ T8536] exc_page_fault+0xa8/0x190 [ 119.028754][ T8536] ? asm_exc_page_fault+0x8/0x30 [ 119.033702][ T8536] asm_exc_page_fault+0x1e/0x30 [ 119.038555][ T8536] RIP: 0033:0x402d28 [ 119.042458][ T8536] Code: 00 00 48 89 7c 24 f8 48 89 74 24 f0 48 89 54 24 e8 48 89 4c 24 e0 48 8b 74 24 f8 4c 8b 4c 24 f0 48 8b 4c 24 e8 48 8b 54 24 e0 <8b> 86 0c 01 00 00 44 8b 86 08 01 00 00 c1 e0 04 8d b8 7f 01 00 00 [ 119.062068][ T8536] RSP: 002b:00007f3a9657dc68 EFLAGS: 00010216 [ 119.068144][ T8536] RAX: 0000000000402d00 RBX: 000000000118c070 RCX: 0000000020000200 [ 119.076123][ T8536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.084103][ T8536] RBP: 000000000118c0b8 R08: 0000000000000000 R09: 0000000000000000 [ 119.092085][ T8536] R10: 00007f3a9657e9d0 R11: 0000000000000246 R12: 000000000118c07c [ 119.100067][ T8536] R13: 00007ffe9bf3173f R14: 00007f3a9657e9c0 R15: 000000000118c07c [ 119.108306][ T8536] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8536 [ 119.117644][ T8536] caller is lockdep_hardirqs_on+0x34/0x110 [ 119.123500][ T8536] CPU: 0 PID: 8536 Comm: syz-executor.5 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 119.132954][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.143026][ T8536] Call Trace: [ 119.146325][ T8536] dump_stack+0x198/0x1fb [ 119.150676][ T8536] check_preemption_disabled+0x128/0x130 [ 119.156319][ T8536] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 119.161788][ T8536] lockdep_hardirqs_on+0x34/0x110 [ 119.166822][ T8536] __bad_area_nosemaphore+0xc6/0x4f0 [ 119.172123][ T8536] do_user_addr_fault+0x852/0xbf0 [ 119.177174][ T8536] exc_page_fault+0xa8/0x190 [ 119.181787][ T8536] ? asm_exc_page_fault+0x8/0x30 [ 119.186736][ T8536] asm_exc_page_fault+0x1e/0x30 [ 119.191590][ T8536] RIP: 0033:0x402d28 [ 119.195491][ T8536] Code: 00 00 48 89 7c 24 f8 48 89 74 24 f0 48 89 54 24 e8 48 89 4c 24 e0 48 8b 74 24 f8 4c 8b 4c 24 f0 48 8b 4c 24 e8 48 8b 54 24 e0 <8b> 86 0c 01 00 00 44 8b 86 08 01 00 00 c1 e0 04 8d b8 7f 01 00 00 [ 119.215101][ T8536] RSP: 002b:00007f3a9657dc68 EFLAGS: 00010216 [ 119.221182][ T8536] RAX: 0000000000402d00 RBX: 000000000118c070 RCX: 0000000020000200 08:10:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:10:05 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"/1448], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3e8, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x200, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830a3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7000000000000000000"}, 0x28) [ 119.229169][ T8536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.237147][ T8536] RBP: 000000000118c0b8 R08: 0000000000000000 R09: 0000000000000000 [ 119.245129][ T8536] R10: 00007f3a9657e9d0 R11: 0000000000000246 R12: 000000000118c07c [ 119.253109][ T8536] R13: 00007ffe9bf3173f R14: 00007f3a9657e9c0 R15: 000000000118c07c [ 119.353288][ T8549] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 119.430015][ T8549] UDF-fs: Scanning with blocksize 512 failed [ 119.508237][ T8549] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 119.564248][ T8549] UDF-fs: Scanning with blocksize 1024 failed [ 119.612431][ T8549] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found 08:10:05 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 08:10:05 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 119.706044][ T8549] UDF-fs: Scanning with blocksize 2048 failed [ 119.764130][ T8549] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 119.801707][ T8549] UDF-fs: Scanning with blocksize 4096 failed [ 119.807815][ T8549] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:10:05 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 08:10:06 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:10:06 executing program 1: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@anchor={'anchor', 0x3d, 0x4}}, {@novrs='novrs'}]}) [ 120.118628][ T8573] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.134800][ T8573] UDF-fs: Scanning with blocksize 512 failed [ 120.154973][ T8573] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.225435][ T8573] UDF-fs: Scanning with blocksize 1024 failed [ 120.254158][ T8573] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.254567][ T8529] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8529 [ 120.271258][ T8529] caller is lockdep_hardirqs_on_prepare+0x5e/0x450 [ 120.277911][ T8529] CPU: 1 PID: 8529 Comm: syz-executor.2 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 120.279856][ T8573] UDF-fs: Scanning with blocksize 2048 failed [ 120.287364][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.287370][ T8529] Call Trace: [ 120.287391][ T8529] dump_stack+0x198/0x1fb [ 120.287416][ T8529] check_preemption_disabled+0x128/0x130 [ 120.287436][ T8529] lockdep_hardirqs_on_prepare+0x5e/0x450 [ 120.287455][ T8529] trace_hardirqs_on+0x5b/0x1c0 [ 120.287473][ T8529] __bad_area_nosemaphore+0xc6/0x4f0 [ 120.287494][ T8529] bad_area_access_error+0x29c/0x3b0 [ 120.287515][ T8529] do_user_addr_fault+0x69f/0xbf0 [ 120.287541][ T8529] exc_page_fault+0xa8/0x190 [ 120.287557][ T8529] ? asm_exc_page_fault+0x8/0x30 [ 120.287577][ T8529] asm_exc_page_fault+0x1e/0x30 [ 120.357278][ T8529] RIP: 0033:0x4450a1 [ 120.361182][ T8529] Code: 8d 15 43 cc 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 120.381663][ T8529] RSP: 002b:00007ffc45dfbbd8 EFLAGS: 00010202 [ 120.387747][ T8529] RAX: 0000000020000180 RBX: 0000000001190000 RCX: 000000000000002f [ 120.395729][ T8529] RDX: 0000000000000015 RSI: 0000000001190020 RDI: 0000000020000180 [ 120.403707][ T8529] RBP: 0000000001190008 R08: 0000000035193b6e R09: 0000000035193b72 [ 120.411684][ T8529] R10: 00007ffc45dfbcb0 R11: 0000000000000000 R12: fffffffffffffffe [ 120.419665][ T8529] R13: 000000000001d5c2 R14: 00000000000003e8 R15: 000000000118bf2c [ 120.431048][ T8529] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8529 [ 120.440703][ T8529] caller is lockdep_hardirqs_on+0x34/0x110 [ 120.446587][ T8529] CPU: 1 PID: 8529 Comm: syz-executor.2 Not tainted 5.9.0-next-20201016-syzkaller #0 [ 120.452365][ T8573] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.456027][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.456034][ T8529] Call Trace: [ 120.456055][ T8529] dump_stack+0x198/0x1fb [ 120.456080][ T8529] check_preemption_disabled+0x128/0x130 [ 120.456097][ T8529] ? __bad_area_nosemaphore+0xc6/0x4f0 [ 120.456119][ T8529] lockdep_hardirqs_on+0x34/0x110 [ 120.497412][ T8529] __bad_area_nosemaphore+0xc6/0x4f0 [ 120.502717][ T8529] bad_area_access_error+0x29c/0x3b0 [ 120.508019][ T8529] do_user_addr_fault+0x69f/0xbf0 [ 120.513059][ T8529] exc_page_fault+0xa8/0x190 [ 120.513751][ T8573] UDF-fs: Scanning with blocksize 4096 failed [ 120.517653][ T8529] ? asm_exc_page_fault+0x8/0x30 [ 120.517669][ T8529] asm_exc_page_fault+0x1e/0x30 [ 120.517683][ T8529] RIP: 0033:0x4450a1 [ 120.517700][ T8529] Code: 8d 15 43 cc 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 120.517717][ T8529] RSP: 002b:00007ffc45dfbbd8 EFLAGS: 00010202 [ 120.555898][ T8573] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 120.556963][ T8529] [ 120.556977][ T8529] RAX: 0000000020000180 RBX: 0000000001190000 RCX: 000000000000002f [ 120.556987][ T8529] RDX: 0000000000000015 RSI: 0000000001190020 RDI: 0000000020000180 [ 120.556998][ T8529] RBP: 0000000001190008 R08: 0000000035193b6e R09: 0000000035193b72 [ 120.557009][ T8529] R10: 00007ffc45dfbcb0 R11: 0000000000000000 R12: fffffffffffffffe [ 120.557019][ T8529] R13: 000000000001d5c2 R14: 00000000000003e8 R15: 000000000118bf2c 08:10:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) capget(&(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) 08:10:06 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 08:10:06 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:10:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0xff00}) 08:10:06 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:07 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 08:10:07 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:10:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0xff00}) 08:10:07 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 08:10:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) capget(&(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) 08:10:07 executing program 4: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x15, r0, 0x0, &(0x7f0000000100)={0x0}) 08:10:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0xff00}) 08:10:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 08:10:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) capget(&(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) 08:10:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0xff00}) 08:10:08 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 08:10:08 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 08:10:08 executing program 2: r0 = socket(0x11, 0x80a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 08:10:08 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:08 executing program 4: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x15, r0, 0x0, &(0x7f0000000100)={0x0}) 08:10:08 executing program 2: r0 = socket(0x11, 0x80a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 08:10:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 08:10:08 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 08:10:08 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019"], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 08:10:08 executing program 2: r0 = socket(0x11, 0x80a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 08:10:08 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 08:10:09 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:09 executing program 2: r0 = socket(0x11, 0x80a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 08:10:09 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 08:10:09 executing program 4: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x15, r0, 0x0, &(0x7f0000000100)={0x0}) 08:10:09 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="e6", 0x1}], 0x1, 0x0, 0x0, 0x12) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) lseek(r0, 0x0, 0x3) 08:10:09 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019"], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 08:10:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 08:10:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x11, &(0x7f00000001c0)=@assoc_value={r3}, 0x8)