[ OK ] Started Getty on tty1. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. 2020/09/07 12:34:13 fuzzer started 2020/09/07 12:34:13 dialing manager at 10.128.0.26:45095 2020/09/07 12:34:14 syscalls: 3333 2020/09/07 12:34:14 code coverage: enabled 2020/09/07 12:34:14 comparison tracing: enabled 2020/09/07 12:34:14 extra coverage: enabled 2020/09/07 12:34:14 setuid sandbox: enabled 2020/09/07 12:34:14 namespace sandbox: enabled 2020/09/07 12:34:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/07 12:34:14 fault injection: enabled 2020/09/07 12:34:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/07 12:34:14 net packet injection: enabled 2020/09/07 12:34:14 net device setup: enabled 2020/09/07 12:34:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/07 12:34:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/07 12:34:14 USB emulation: enabled 2020/09/07 12:34:14 hci packet injection: enabled 12:36:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bfdbb4dde984510c82dc2b9381b72bf40c0682fd0a0c4ac106b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858837458a4ca037604007600b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02cc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864487367d6d7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab530388eb1f43d4abbfc59d6d1b18fe380df4bf024f120bd715d82033f2fb7d8fc9e0d77b294e097e293db7f002c0024ab2fd8e5e7fb178f047ba32548b4d32972cba6f49051cec1bf6f16231bbb90a2d201a5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde2480ae40d6156edc4cf81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f81074192c48c63c7d8e94a27a06a4e3d9acee835fd63384f52b8eeb70571e5bbb3e6d2b5eba505000000968981811f832d064048c0e0bbe46984f1f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f0889f4ee8964875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c809d116b059a718351620b846e31ce0b8ef953de70ea8b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e36a9e19686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85a41cdcee736fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a35adbf0b9352be92986d63263b1aa5264cb4a82cf080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e9851e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb463c407f87dafd6199f9ddd1f62da58c00020000000000009aa38a05e70591d5cdab1c268ef3c1984c7c0a566cfc2ab6e6fbc99ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8ad62edc65828fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11dcfc96dd1cb951642f1433f65b4e170a62a5f7a8d0f9d5cef0d17289c43d4aee2127f7a343899434594cc23e1c864164e130754b337e520f285dc670a31241bfb43ac62fc7f97a85586168483427072a535f2cac81ec261c0000000000f725de74e48d9a86f7d4a5d28d56ce6d571661dccad7ca6d961f525f799b4517141fc98af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f29c661d322ba21c65badf55d1859ea7eabc5717a781f83292a3337d4dddc97f31390bb87adc96c755278fe2addd4581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04db8b6536123b24be2ef80eb06b2db900fb30596c1574bda31fd2d61ccfd58080d2330bb91603e250eeedc7d65675bca9037426f643797be3e93da96b5643d3feed0b7c885d247c6b830d7cbf3152f27522f5142dcc84a9e48a07518f01"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61301926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a210da2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040), 0x14) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) 12:36:57 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000040000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a30000000000800034000000004"], 0x1}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:36:57 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 12:36:58 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x1}]) 12:36:58 executing program 4: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() r3 = gettid() tkill(r3, 0x14) ptrace(0x4206, r2) ptrace$cont(0x20, r3, 0x0, 0x0) 12:36:58 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) syzkaller login: [ 225.465869][ T6884] IPVS: ftp: loaded support on port[0] = 21 [ 225.641378][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 225.769166][ T6886] IPVS: ftp: loaded support on port[0] = 21 [ 225.791976][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.805164][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.814354][ T6884] device bridge_slave_0 entered promiscuous mode [ 225.826147][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.833919][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.842517][ T6884] device bridge_slave_1 entered promiscuous mode [ 225.872919][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.888390][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.956964][ T6888] IPVS: ftp: loaded support on port[0] = 21 [ 226.036837][ T6884] team0: Port device team_slave_0 added [ 226.114164][ T6884] team0: Port device team_slave_1 added [ 226.174797][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 226.189082][ T6890] IPVS: ftp: loaded support on port[0] = 21 [ 226.251620][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.258624][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.305139][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.380896][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.387880][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.418683][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.509084][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 226.533997][ T6884] device hsr_slave_0 entered promiscuous mode [ 226.542428][ T6884] device hsr_slave_1 entered promiscuous mode [ 226.614559][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 226.676878][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.685128][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.693611][ T6886] device bridge_slave_0 entered promiscuous mode [ 226.706011][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.714144][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.722227][ T6886] device bridge_slave_1 entered promiscuous mode [ 226.776635][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 226.857394][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.894695][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.958013][ T6886] team0: Port device team_slave_0 added [ 226.966922][ T6886] team0: Port device team_slave_1 added [ 227.028586][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.036078][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.044773][ T6888] device bridge_slave_0 entered promiscuous mode [ 227.081668][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.088656][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.115976][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.131001][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.137959][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.164132][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.176414][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.186691][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.194835][ T6888] device bridge_slave_1 entered promiscuous mode [ 227.307535][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 227.380927][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.407267][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 227.435560][ T6886] device hsr_slave_0 entered promiscuous mode [ 227.443222][ T6886] device hsr_slave_1 entered promiscuous mode [ 227.452080][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.460509][ T6886] Cannot create hsr debugfs directory [ 227.472114][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.480015][ T2644] Bluetooth: hci0: command 0x0409 tx timeout [ 227.507424][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 227.543335][ T6884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.590723][ T6888] team0: Port device team_slave_0 added [ 227.608933][ T6888] team0: Port device team_slave_1 added [ 227.617226][ T6884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.666063][ T6884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.686155][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.699098][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.721140][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 227.727178][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.743159][ T6884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.776494][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.783678][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.812313][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.859619][ T6888] device hsr_slave_0 entered promiscuous mode [ 227.866335][ T6888] device hsr_slave_1 entered promiscuous mode [ 227.873214][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.881658][ T6888] Cannot create hsr debugfs directory [ 227.938892][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.946288][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.955035][ T6892] device bridge_slave_0 entered promiscuous mode [ 227.969821][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 227.996902][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.010448][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.018135][ T6890] device bridge_slave_0 entered promiscuous mode [ 228.026558][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.034605][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.042748][ T6892] device bridge_slave_1 entered promiscuous mode [ 228.081285][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.088495][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.099938][ T6890] device bridge_slave_1 entered promiscuous mode [ 228.119593][ T7364] Bluetooth: hci3: command 0x0409 tx timeout [ 228.167573][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.176451][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.193321][ T6894] device bridge_slave_0 entered promiscuous mode [ 228.209115][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.217324][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.225741][ T6894] device bridge_slave_1 entered promiscuous mode [ 228.246236][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.313120][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.324262][ T6890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.338716][ T6890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.349460][ T6886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.362594][ T6886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.369412][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 228.385355][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.421171][ T6892] team0: Port device team_slave_0 added [ 228.431440][ T6892] team0: Port device team_slave_1 added [ 228.447371][ T6886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.452437][ T2644] Bluetooth: hci5: command 0x0409 tx timeout [ 228.465553][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.513114][ T6886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.551859][ T6890] team0: Port device team_slave_0 added [ 228.567016][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.574412][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.603545][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.633023][ T6890] team0: Port device team_slave_1 added [ 228.659950][ T6894] team0: Port device team_slave_0 added [ 228.666370][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.679741][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.707477][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.744961][ T6894] team0: Port device team_slave_1 added [ 228.794147][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.802920][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.835217][ T6890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.859669][ T6890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.866626][ T6890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.897723][ T6890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.951658][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.958628][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.986244][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.999595][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.006805][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.033752][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.056899][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.068166][ T6892] device hsr_slave_0 entered promiscuous mode [ 229.089554][ T6892] device hsr_slave_1 entered promiscuous mode [ 229.096131][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.104980][ T6892] Cannot create hsr debugfs directory [ 229.169950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.178382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.215677][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.233610][ T6888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.255798][ T6890] device hsr_slave_0 entered promiscuous mode [ 229.262627][ T6890] device hsr_slave_1 entered promiscuous mode [ 229.275569][ T6890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.283435][ T6890] Cannot create hsr debugfs directory [ 229.295283][ T6894] device hsr_slave_0 entered promiscuous mode [ 229.302525][ T6894] device hsr_slave_1 entered promiscuous mode [ 229.310194][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.317757][ T6894] Cannot create hsr debugfs directory [ 229.332621][ T6888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.353804][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.402036][ T6888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.416395][ T6888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.450480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.460574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.468972][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.476606][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.487676][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.496275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.508085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.539854][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.557798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.569695][ T7364] Bluetooth: hci0: command 0x041b tx timeout [ 229.573837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.584678][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.591799][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.670645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.680162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.692007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.701674][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.709369][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.716944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.727028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.773747][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.784461][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.794103][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.799384][ T2466] Bluetooth: hci1: command 0x041b tx timeout [ 229.801229][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.815688][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.825105][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.833760][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.842563][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.853714][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.862278][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.871598][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.949349][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.977617][ T6884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.992216][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.018894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.028070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.039712][ T2644] Bluetooth: hci2: command 0x041b tx timeout [ 230.075647][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.091597][ T6892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.108766][ T6892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.125133][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.149908][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.157388][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.167579][ T6892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.186294][ T6892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.199565][ T7364] Bluetooth: hci3: command 0x041b tx timeout [ 230.207093][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.241962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.252873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.266002][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.292749][ T6890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.308609][ T6890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.331917][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.349421][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.357175][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.367486][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.376451][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.388237][ T6890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.438234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.447108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.449449][ T7364] Bluetooth: hci4: command 0x041b tx timeout [ 230.458303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.469998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.478483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.487232][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.495873][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.502987][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.519729][ T6886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.530893][ T2466] Bluetooth: hci5: command 0x041b tx timeout [ 230.540995][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.548699][ T6890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.575767][ T6894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.587572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.596600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.606819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.615649][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.623653][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.632070][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.641043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.652325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.683245][ T6894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.719539][ T6894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.733088][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.745585][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.754671][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.769044][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.776928][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.793330][ T6884] device veth0_vlan entered promiscuous mode [ 230.816034][ T6884] device veth1_vlan entered promiscuous mode [ 230.826393][ T6894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.850414][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.858359][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.868262][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.877539][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.885718][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.899163][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.942339][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.950644][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.958377][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.967732][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.976604][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.985739][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.994535][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.005612][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.051414][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.102607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.111742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.120681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.129930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.162918][ T6884] device veth0_macvtap entered promiscuous mode [ 231.188167][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.196685][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.204357][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.223011][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.238267][ T6884] device veth1_macvtap entered promiscuous mode [ 231.257789][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.274602][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.289031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.296996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.313024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.339740][ T6886] device veth0_vlan entered promiscuous mode [ 231.363096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.372741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.381157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.389510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.407983][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.423962][ T6890] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.440546][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.448516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.461853][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.473183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.488625][ T6886] device veth1_vlan entered promiscuous mode [ 231.511340][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.539755][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.547734][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.560454][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.571320][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.578398][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.587921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.617271][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.645831][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.647700][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 231.656968][ T6884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.668147][ T6884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.677668][ T6884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.687368][ T6884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.732818][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.741668][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.756527][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.765736][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.774932][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.782698][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.790960][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.800947][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.809717][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.816880][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.824745][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.834313][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.843404][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.852237][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.861211][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.868269][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.876442][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.885991][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.889348][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 231.895701][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.910080][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.918278][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.936019][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.963154][ T6886] device veth0_macvtap entered promiscuous mode [ 231.971964][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.982484][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.991170][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.999451][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.007152][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.032873][ T6888] device veth0_vlan entered promiscuous mode [ 232.043731][ T6886] device veth1_macvtap entered promiscuous mode [ 232.061136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.075748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.085400][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.104394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.115982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.125569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.135543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.148982][ T2660] Bluetooth: hci2: command 0x040f tx timeout [ 232.166061][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.196946][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.206203][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.216064][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.227118][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.236056][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.244362][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.252701][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.261467][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.270182][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.278977][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.292587][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 232.307612][ T6890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.337775][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.367957][ T6892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.393867][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.417881][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.437391][ C0] hrtimer: interrupt took 35528 ns [ 232.438037][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.472178][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.488886][ T6888] device veth1_vlan entered promiscuous mode [ 232.509815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.527115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.549919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.565199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.576066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.593180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.630139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.661251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.690164][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 232.713614][ T2660] Bluetooth: hci5: command 0x040f tx timeout [ 232.728367][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.747335][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.769688][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 12:37:06 executing program 0: mq_open(&(0x7f0000000040)='smackfsdef', 0x40, 0x0, &(0x7f0000000340)={0x3, 0x1, 0x4d956f42, 0xfff}) [ 232.801853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.812522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.831059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 12:37:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f00000001c0)={{{@in=@remote, @in=@empty}}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0xe8) 12:37:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xffff, 0x1, 0x0, 0x0, @adapter={0x3, 0x7, 0x100000001, 0xfffffffe, 0x3}}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000064) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x800, 0x2, [0x0, 0x1c0]}, 0xc) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) [ 232.876477][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.883666][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.914997][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.927476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.943941][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.965251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.034381][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.041559][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.062312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 12:37:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa8863"], 0x12) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xdacde98a) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) [ 233.087406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.101585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.115625][ T6886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.139550][ T6886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.148307][ T6886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.178070][ T6886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.228452][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.242993][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.261377][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.276310][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.294251][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.305522][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.325400][ T2466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.363098][ T6888] device veth0_macvtap entered promiscuous mode [ 233.382914][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.392890][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.403201][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.410891][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.418410][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.427456][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.436393][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.444961][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.508685][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.517868][ T6894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.532576][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.545863][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.555393][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.570568][ T6888] device veth1_macvtap entered promiscuous mode [ 233.677825][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.705710][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.716430][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.728791][ T7364] Bluetooth: hci0: command 0x0419 tx timeout [ 233.740426][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.760659][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.789370][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.800707][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.820117][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.835027][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.844136][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.853333][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.861007][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.884276][ T8229] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.894613][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 233.911298][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.924008][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 233.937256][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.954638][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.965966][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.968934][ T2660] Bluetooth: hci1: command 0x0419 tx timeout [ 233.986709][ T6890] device veth0_vlan entered promiscuous mode [ 234.013279][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.027844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.040111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.048809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.057135][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.066022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.239419][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 234.293589][ T6888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.304265][ T6888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.316785][ T6888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.333208][ T6888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:37:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$netlbl_cipso(0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4050) [ 234.347104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.356226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.368803][ T2660] Bluetooth: hci3: command 0x0419 tx timeout [ 234.388051][ T6890] device veth1_vlan entered promiscuous mode [ 234.445359][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.460540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.484776][ T6892] device veth0_vlan entered promiscuous mode 12:37:07 executing program 1: ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 234.530855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.567124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.641846][ T6892] device veth1_vlan entered promiscuous mode [ 234.668502][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.702250][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.717403][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.759897][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 234.777835][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.782632][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 234.816983][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.826756][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.836918][ T6890] device veth0_macvtap entered promiscuous mode 12:37:08 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$vhost_msg(r0, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') acct(&(0x7f0000000040)='./bus/file0\x00') [ 234.865545][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.899225][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.907678][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.946742][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.964438][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.002149][ T6894] device veth0_vlan entered promiscuous mode 12:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x25, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 235.050989][ T6890] device veth1_macvtap entered promiscuous mode [ 235.060644][ T29] audit: type=1800 audit(1599482228.306:2): pid=8252 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=15738 res=0 errno=0 [ 235.109401][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.117707][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.137294][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.149038][ T6892] device veth0_macvtap entered promiscuous mode [ 235.157160][ T6894] device veth1_vlan entered promiscuous mode [ 235.186170][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.213305][ T6892] device veth1_macvtap entered promiscuous mode [ 235.255955][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.275470][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.286394][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.306001][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.328714][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.350015][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.387600][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.390533][ T8265] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 235.420865][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.435106][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.444849][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.458046][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.466536][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 12:37:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) [ 235.481487][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.501189][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.510764][ T8258] Process accounting resumed [ 235.516416][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.528130][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.541362][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.551996][ T6890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 235.563191][ T6890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.574938][ T6890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.591195][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.608750][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.620799][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.644656][ T6890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.665361][ T6890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.685963][ T6890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.703827][ T6890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.769849][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.783776][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.822087][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.841099][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.856560][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.870201][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.889780][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.904129][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.915135][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 235.925781][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.937664][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.948432][ T6894] device veth0_macvtap entered promiscuous mode [ 235.959134][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.967186][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.977140][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.004959][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.020279][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.032993][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.047169][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.057419][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.067976][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.077864][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.089020][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.100783][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.115642][ T6894] device veth1_macvtap entered promiscuous mode [ 236.140169][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.159093][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.182273][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.212432][ T6892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.227641][ T6892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.248789][ T6892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.257651][ T6892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.285278][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.296917][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.307955][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.319046][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.339230][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.356660][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.367163][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.378369][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.388940][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 236.399866][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.412519][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 12:37:09 executing program 3: mkdir(0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x18) [ 236.436399][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.446663][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.460352][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.474958][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.486752][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.497913][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.512148][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.535007][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.546368][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.563428][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.593648][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 236.607707][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.621666][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.649920][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.670172][ T2644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.683465][ T6894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.699534][ T6894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.711418][ T6894] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.724193][ T6894] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:37:10 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) lsetxattr$security_capability(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8820, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/166, 0xa6) 12:37:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x121402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 12:37:10 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x48) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={r4, r5/1000+60000}, 0x10) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x5, 0x181500) listen(r2, 0x0) sendto$isdn(r1, &(0x7f0000000500)={0x0, 0x6, "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"}, 0xc02, 0x4000857, &(0x7f0000000000)={0x22, 0x0, 0x6, 0x1, 0x7}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x24, @loopback, 0x400003}, {0xa, 0x0, 0xd3, @private0, 0xfffffffd}, 0xffffffffffffffff, 0x4}}, 0x48) 12:37:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/194, 0x3b, 0xc2, 0x1}, 0x20) [ 237.668296][ T8304] ptrace attach of "/root/syz-executor.4"[8289] was attempted by "/root/syz-executor.4"[8304] 12:37:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x67e6}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 12:37:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31a00, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005b0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 12:37:11 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xdd, 0x0) dup3(r0, r1, 0x0) 12:37:11 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)={0x9, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), &(0x7f0000000040)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000200)="e5", &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=@tcp6}, 0x20) [ 237.900850][ T8322] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 12:37:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x71, &(0x7f0000001280)=""/4107, &(0x7f0000000040)=0x100b) [ 237.982413][ T8327] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 238.005427][ T8327] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 12:37:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,nfs_export=on']) lsetxattr$security_capability(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x20a8820, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/166, 0xa6) 12:37:11 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1) close(r0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12:37:11 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 12:37:11 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffd20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d74900703b33dbdf2500"/20, @ANYRES32, @ANYBLOB="077dbad0dbdb01000b0000006f9cf956de9a4cb594cf9d049fed279f560f00000000d4000023a7e6c0d4a5ca8a50f24c1d19d66abcdd40cebca21ce1414dd3899a2fef3d32fa3e2b51b6a2ac6f2c9e354468259c4e8c887692400f55b174d9968c53515acf9056a4ca4c634d4517453283440c7082226d781bd5fadfed0b26d975b818d0647bc091feeb8ae4628885f5ca2dcae959630392e963fbe217b3475bfc315ad484aeabf5270d39f143d4befdd073b0ab25986845304702b51348abfb8f501568238fc6daf49e56b18b127404a461a502fbfb6257ffea15a0d8"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000051) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x5000}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) fchdir(0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) unshare(0x40000000) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 12:37:11 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 238.535275][ T8350] IPVS: ftp: loaded support on port[0] = 21 [ 239.376500][ T8350] IPVS: ftp: loaded support on port[0] = 21 [ 239.451566][ T150] tipc: TX() has been purged, node left! 12:37:14 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 12:37:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x0, 0x0) 12:37:14 executing program 5: clock_settime(0x0, &(0x7f0000000cc0)={0x200000000000004}) 12:37:14 executing program 4: timerfd_create(0x0, 0xc00) 12:37:14 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c05, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042044800000200", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 12:37:14 executing program 4: chdir(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x746, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) 12:37:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000b00)={{0x1b, 0x5b, 0x7, 0x7, 0x31, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 12:37:14 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) 12:37:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) socket$nl_sock_diag(0x10, 0x3, 0x4) chdir(&(0x7f0000000380)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:37:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000001040)=""/4096, 0x1000) 12:37:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x120, &(0x7f0000000180)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:37:14 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000020c0), &(0x7f0000002100)=0x40) 12:37:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) close(r2) 12:37:14 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000000000010, 0x2, 0x0) write(r0, &(0x7f00000001c0)="240000005a000500f000f4159185b3a85c91fddf080001000201009f0800028001000000", 0x24) 12:37:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) 12:37:14 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040)=0xfff, 0x4) sendmmsg$inet6(r2, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000001240)='d', 0x1}], 0x1}}], 0x1, 0x4000040) 12:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0fae570d0deece85e5d4360f0ff3b63ef0fe4e00ba420066ed66b891d7e4700f23c00f21f8663503000a000f23f80f060f30", 0x32}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:37:14 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 241.627905][ T8470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:37:14 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) 12:37:15 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) [ 242.026570][ T150] tipc: TX() has been purged, node left! 12:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0xe7a035cf4856fee5, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}}, 0x0) 12:37:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 12:37:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6b8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000540)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') renameat2(r1, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) socket(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setuid(0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xa5ea28018b5a634c) 12:37:17 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/117, 0x14}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) 12:37:17 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:37:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000300)=""/137) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000805d) 12:37:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000e0014001400766574682e5f746f5f6272696467650008001b00"], 0x3c}}, 0x0) 12:37:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)) 12:37:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 12:37:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:37:17 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) [ 244.468723][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:37:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a347f1f6588b967480541ba7860ac5cf65ac618", 0x16, 0x20c49a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0) [ 244.601575][ T8533] ISOFS: Unable to identify CD-ROM format. [ 244.698430][ T8533] ISOFS: Unable to identify CD-ROM format. 12:37:18 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0xfef0, 0x4838, 0x1], [{}, {}, {}, {0x2, 0x3}]}) 12:37:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800050, 0x5) [ 244.841301][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:37:18 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 245.004008][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.022214][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:37:18 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:37:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x7150}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020100000000000000010000040000000200000000020000000b0000"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000100)="e361daf79631d5bb83f9403aad28dfeeb7eaced447c4e8c78791735f449055782bc86dd95961ea564b8fcb3f214c8e3f8c237c2c2ebed155819862bf26866ff5feb5a765c672176fd2c1fd089b4c69aacac1ed14f8159c66687dcf31709975d36fd598d9ad6f672404") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/181, 0xb5}], 0x5, &(0x7f0000001780)=""/122, 0x7a}, 0x65}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/5, 0x5}], 0x1, &(0x7f0000001880)=""/96, 0x60}, 0x9}, {{&(0x7f0000001900)=@tipc=@name, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000001a80)=""/115, 0x73}], 0x2}, 0x5}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001bc0)=""/35, 0x23}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/15, 0xf}, {&(0x7f0000001d40)=""/216, 0xd8}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/226, 0xe2}], 0x6}, 0xe37}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002fc0)=""/10, 0xa}, {&(0x7f0000003000)=""/223, 0xdf}, {&(0x7f0000003100)=""/60, 0x3c}, {&(0x7f0000003140)=""/111, 0x6f}], 0x4}, 0x26400000}], 0x5, 0x0, &(0x7f0000003380)={r2, r3+10000000}) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f00000033c0)="c122a73bf9ed0d93567e38999d6c714f9abb0db2d7ef0bc1773185351db90a02a21edc53e38dbb1b95460e06d5565667c3d54ee0cd7b962b68a68834d9670405c01db913fba4482865ccd5276972a58825f037620eddc7cdfc609b0d9e395360a9aa7ed4308ab1880c7583f82d420b689815f39ba0ba84c41b07a32ac46f29880fa3740c5ce98f04c4e08b2f266cdbc2d36d9a47e0e516c33c41926d2338cf0428172305f55e5a871ef5ae5f6c03558beaac4eeb9f65243bdc486b9922b5a226b76935a0ecc3a5e16b4225e14112b7c74a7a6b4fd92194404590fe2ef42c68577f06744a46f14b8782d08b416e700d0f9735a48202523b64ae2c8c", 0xfb) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000003740)={{&(0x7f00000036c0)={'Accelerator\x00', {}, {&(0x7f0000003640)={'GENERAL\x00', {&(0x7f0000003580)=@adf_dec={@format={'Dc', '1', 'RingAsymRx\x00'}, {0x1081}, {&(0x7f00000034c0)=@adf_dec={@format={'Dc', '4', 'RingSymRx\x00'}, {0x7}}}}}}}}}, 0xf9}) [ 245.234511][ T8552] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 245.237593][ T8561] BPF: (anon) type_id=2 bits_offset=11 [ 245.270751][ T8552] XFS (loop1): SB validate failed with error -5. [ 245.296225][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.325645][ T8571] BPF: (anon) type_id=2 bits_offset=11 [ 245.336346][ T8561] BPF: 12:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x29, 0x119, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 245.342400][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.345754][ T8571] BPF: [ 245.357256][ T8561] BPF:Member is not byte aligned [ 245.373754][ T8571] BPF:Member is not byte aligned [ 245.374709][ T8561] BPF: [ 245.374709][ T8561] [ 245.388975][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.411717][ T8571] BPF: [ 245.411717][ T8571] [ 245.419361][ T2456] blk_update_request: I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 12:37:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x800005, 0x7, 0x0, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 12:37:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000340)={@link_local, @random="643bedb4a105", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "07b71447dd9ccf0241d78e4efdb545885f7147c2bbf737ada633b7b143bf359f", "5fdd4a2191babcb7ea337b459a20a718", {"6b67adaa09cee6f1ce74498835942c79", "cdf2c11c2a45ab6736794cb16c50f593"}}}}}}}, 0x0) 12:37:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x7150}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020100000000000000010000040000000200000000020000000b0000"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000100)="e361daf79631d5bb83f9403aad28dfeeb7eaced447c4e8c78791735f449055782bc86dd95961ea564b8fcb3f214c8e3f8c237c2c2ebed155819862bf26866ff5feb5a765c672176fd2c1fd089b4c69aacac1ed14f8159c66687dcf31709975d36fd598d9ad6f672404") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) shutdown(r0, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/181, 0xb5}], 0x5, &(0x7f0000001780)=""/122, 0x7a}, 0x65}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/5, 0x5}], 0x1, &(0x7f0000001880)=""/96, 0x60}, 0x9}, {{&(0x7f0000001900)=@tipc=@name, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000001a80)=""/115, 0x73}], 0x2}, 0x5}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001bc0)=""/35, 0x23}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/15, 0xf}, {&(0x7f0000001d40)=""/216, 0xd8}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/226, 0xe2}], 0x6}, 0xe37}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002fc0)=""/10, 0xa}, {&(0x7f0000003000)=""/223, 0xdf}, {&(0x7f0000003100)=""/60, 0x3c}, {&(0x7f0000003140)=""/111, 0x6f}], 0x4}, 0x26400000}], 0x5, 0x0, &(0x7f0000003380)={r2, r3+10000000}) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f00000033c0)="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", 0xfb) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000003740)={{&(0x7f00000036c0)={'Accelerator\x00', {}, {&(0x7f0000003640)={'GENERAL\x00', {&(0x7f0000003580)=@adf_dec={@format={'Dc', '1', 'RingAsymRx\x00'}, {0x1081}, {&(0x7f00000034c0)=@adf_dec={@format={'Dc', '4', 'RingSymRx\x00'}, {0x7}}}}}}}}}, 0xf9}) 12:37:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4000) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x14) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x319) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendfile(r0, r1, 0x0, 0x1c500) 12:37:18 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d6662ac7266647e5d3d9f8a3cc8cfd3b226725d76436efc9a3b42d2b71587809b89367f6fddf0a4f2bc77341d1e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000280), &(0x7f0000048000), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 245.533111][ T8553] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 245.567882][ T8553] XFS (loop1): SB validate failed with error -5. [ 245.656839][ T8589] BPF: (anon) type_id=2 bits_offset=11 [ 245.696737][ T8589] BPF: 12:37:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) [ 245.739014][ T2456] blk_update_request: I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 245.748294][ T8589] BPF:Member is not byte aligned 12:37:19 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x6) listen(0xffffffffffffffff, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) [ 245.810604][ T29] audit: type=1804 audit(1599482239.067:3): pid=8595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir424772768/syzkaller.ZXMOiP/13/file1/file0" dev="loop4" ino=3 res=1 errno=0 [ 245.818634][ T8589] BPF: [ 245.818634][ T8589] 12:37:19 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 12:37:19 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:37:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5433, 0x0) 12:37:19 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x6) listen(0xffffffffffffffff, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) 12:37:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x7, 0xa, 0x101}, 0x14}}, 0x0) [ 246.552520][ T8594] 9pnet: Could not find request transport: fb¬rfd~]=ŸŠ<ÈÏÓ²&r]vCnüš;BÒ·‡€›‰6oÝð¤ò¼w40x0000000000000004 12:37:19 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 12:37:19 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x6) listen(0xffffffffffffffff, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) 12:37:19 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) prctl$PR_CAPBSET_DROP(0x18, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 246.700466][ T8626] 9pnet: Could not find request transport: fb¬rfd~]=ŸŠ<ÈÏÓ²&r]vCnüš;BÒ·‡€›‰6oÝð¤ò¼w40x0000000000000004 12:37:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x8}]}}}]}, 0x3c}}, 0x0) 12:37:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x80086601, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/4096) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 12:37:20 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x6) listen(0xffffffffffffffff, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) 12:37:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='\r^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81807, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 12:37:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000011c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) [ 247.128751][ T8649] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 12:37:20 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:20 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x5, 0x10007f, 0x446], [], 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 12:37:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3e, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0xfffffffffffffd4c) 12:37:20 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x110, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 247.459470][ T8665] device geneve2 entered promiscuous mode [ 247.546299][ T8665] syz-executor.0 (8665) used greatest stack depth: 23472 bytes left 12:37:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 12:37:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) 12:37:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)) 12:37:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x8000000000000000, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="0272", 0x2}], 0x2}], 0x1, 0x0) 12:37:21 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:21 executing program 5: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 12:37:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r0}, 0x10) 12:37:21 executing program 2: clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x2c0, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x382, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 12:37:21 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d499b05357e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd56769cfa6c3a468eaff2f", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:37:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto(0xffffffffffffffff, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000540)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x4000}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$netlink(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="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"], 0x4c}, 0x1, 0xa00000000000000}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 12:37:23 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f00000005c0)={{0x3}}) 12:37:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0xfffffffffffffffd, 0x38) 12:37:23 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 12:37:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 12:37:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) 12:37:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x50, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 12:37:23 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x400448c9, &(0x7f00000000c0)={0x0, 0x0, "eced00"}) [ 250.733215][ T8770] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.743842][ T8771] new mount options do not match the existing superblock, will be ignored [ 250.763854][ T8770] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:37:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) [ 251.014226][ T8774] new mount options do not match the existing superblock, will be ignored 12:37:24 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) creat(&(0x7f0000000100)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r1 = gettid() tkill(r1, 0x1000000000016) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x90, 0x14000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) pselect6(0x40, &(0x7f0000000180)={0x6, 0x9, 0x0, 0x8001, 0x0, 0xffff, 0x7f, 0x800}, &(0x7f00000001c0)={0x621, 0x1, 0xc3ed, 0x5, 0x100000001, 0x4, 0xfffffffffffffffd, 0x100000000}, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000340)={&(0x7f00000002c0)={[0x10]}, 0x8}) 12:37:24 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x1018c2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) 12:37:24 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:24 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 12:37:24 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40042, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:37:24 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 251.636480][ T8801] Process accounting resumed [ 251.774425][ T8801] Process accounting resumed 12:37:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}, {}, {}]}, 0x44, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 12:37:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x0) tkill(0x0, 0x16) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') sendfile(r0, r1, 0x0, 0xa808) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100007, r2, 0x9}) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$update(0x2, r4, 0x0, 0x0) 12:37:26 executing program 1: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 12:37:26 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5420, 0x800d2c) 12:37:26 executing program 5: capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000300)) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) [ 253.056622][ T8833] overlayfs: conflicting lowerdir path [ 253.070914][ T8835] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 253.095574][ T8836] overlayfs: workdir and upperdir must reside under the same mount 12:37:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 12:37:26 executing program 5: r0 = socket(0x2, 0x3, 0xef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000240)) 12:37:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}}, 0x40040) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe4) socket(0x10, 0x0, 0x0) 12:37:26 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 253.270998][ T29] audit: type=1804 audit(1599482246.528:4): pid=8838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir688218756/syzkaller.WPShq1/24/file0" dev="sda1" ino=15837 res=1 errno=0 12:37:26 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) close(r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 12:37:26 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x20402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000200040000011900000000000000a4000000000000000000", 0xffffffe5}], 0x2) [ 253.421619][ T29] audit: type=1804 audit(1599482246.528:5): pid=8838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir688218756/syzkaller.WPShq1/24/bus" dev="sda1" ino=15865 res=1 errno=0 12:37:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) [ 253.540969][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 12:37:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f00000000c0)={r4}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) 12:37:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) stat(&(0x7f0000000040)='./file0/file0\x00', 0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x100000e, 0x400002172, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000)=0x50000000, 0x0) 12:37:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x801, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = socket$packet(0x11, 0x2, 0x300) dup3(r3, r0, 0x0) [ 253.693621][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 253.793716][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 12:37:27 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) socket$kcm(0x11, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 253.899364][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 253.994743][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 254.143526][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 254.251825][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 254.307086][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 254.313885][ T8850] syz-executor.4 (8850) used greatest stack depth: 23024 bytes left [ 254.325589][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready 12:37:27 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 254.360654][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 254.396503][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 254.435980][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 254.467627][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready 12:37:27 executing program 0: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) [ 254.492560][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 12:37:27 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) r3 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000540)={'team_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x16, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 254.592116][ T3571] ion_buffer_destroy: buffer still mapped in the kernel 12:37:27 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$UHID_CREATE(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) 12:37:28 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r2, 0xb) 12:37:28 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047452, 0x7fffffffefff) 12:37:29 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) [ 255.921006][ T12] [ 255.923414][ T12] ====================================================== [ 255.930427][ T12] WARNING: possible circular locking dependency detected [ 255.937438][ T12] 5.9.0-rc3-next-20200903-syzkaller #0 Not tainted [ 255.943909][ T12] ------------------------------------------------------ [ 255.951170][ T12] kworker/0:1/12 is trying to acquire lock: [ 255.957139][ T12] ffff888085572210 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 255.967255][ T12] [ 255.967255][ T12] but task is already holding lock: [ 255.974613][ T12] ffffc90000d2fda8 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 255.984806][ T12] [ 255.984806][ T12] which lock already depends on the new lock. [ 255.984806][ T12] [ 255.995191][ T12] [ 255.995191][ T12] the existing dependency chain (in reverse order) is: [ 256.004182][ T12] [ 256.004182][ T12] -> #3 ((delayed_fput_work).work){+.+.}-{0:0}: [ 256.012591][ T12] process_one_work+0x8bb/0x1670 [ 256.018049][ T12] worker_thread+0x64c/0x1120 [ 256.023220][ T12] kthread+0x3b5/0x4a0 [ 256.027790][ T12] ret_from_fork+0x1f/0x30 [ 256.032702][ T12] [ 256.032702][ T12] -> #2 ((wq_completion)events){+.+.}-{0:0}: [ 256.040849][ T12] flush_workqueue+0x110/0x13e0 [ 256.046253][ T12] tipc_exit_net+0x47/0x2a0 [ 256.051286][ T12] ops_exit_list+0xb0/0x160 [ 256.056298][ T12] cleanup_net+0x4ea/0xb10 [ 256.061211][ T12] process_one_work+0x94c/0x1670 [ 256.066656][ T12] worker_thread+0x64c/0x1120 [ 256.071835][ T12] kthread+0x3b5/0x4a0 [ 256.076411][ T12] ret_from_fork+0x1f/0x30 [ 256.081315][ T12] [ 256.081315][ T12] -> #1 (pernet_ops_rwsem){++++}-{3:3}: [ 256.089064][ T12] down_write+0x8d/0x150 [ 256.093842][ T12] unregister_netdevice_notifier+0x1e/0x170 [ 256.100285][ T12] raw_release+0x58/0x890 [ 256.105127][ T12] __sock_release+0xcd/0x280 [ 256.110241][ T12] sock_close+0x18/0x20 [ 256.114907][ T12] __fput+0x285/0x920 [ 256.119386][ T12] task_work_run+0xdd/0x190 [ 256.124384][ T12] exit_to_user_mode_prepare+0x1e1/0x200 [ 256.130523][ T12] syscall_exit_to_user_mode+0x7e/0x2e0 [ 256.136564][ T12] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 256.142945][ T12] [ 256.142945][ T12] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 256.151623][ T12] __lock_acquire+0x29bb/0x5570 [ 256.156982][ T12] lock_acquire+0x1f3/0xae0 [ 256.161990][ T12] down_write+0x8d/0x150 [ 256.166727][ T12] __sock_release+0x86/0x280 [ 256.171816][ T12] sock_close+0x18/0x20 [ 256.176476][ T12] __fput+0x285/0x920 [ 256.180954][ T12] delayed_fput+0x56/0x70 [ 256.185800][ T12] process_one_work+0x94c/0x1670 [ 256.191246][ T12] worker_thread+0x64c/0x1120 [ 256.196418][ T12] kthread+0x3b5/0x4a0 [ 256.201009][ T12] ret_from_fork+0x1f/0x30 [ 256.205930][ T12] [ 256.205930][ T12] other info that might help us debug this: [ 256.205930][ T12] [ 256.216139][ T12] Chain exists of: [ 256.216139][ T12] &sb->s_type->i_mutex_key#12 --> (wq_completion)events --> (delayed_fput_work).work [ 256.216139][ T12] [ 256.231500][ T12] Possible unsafe locking scenario: [ 256.231500][ T12] [ 256.238934][ T12] CPU0 CPU1 [ 256.244283][ T12] ---- ---- [ 256.249626][ T12] lock((delayed_fput_work).work); [ 256.254801][ T12] lock((wq_completion)events); [ 256.262232][ T12] lock((delayed_fput_work).work); [ 256.269925][ T12] lock(&sb->s_type->i_mutex_key#12); [ 256.275361][ T12] [ 256.275361][ T12] *** DEADLOCK *** [ 256.275361][ T12] [ 256.283489][ T12] 2 locks held by kworker/0:1/12: [ 256.288497][ T12] #0: ffff8880aa063d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 256.298835][ T12] #1: ffffc90000d2fda8 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 256.309417][ T12] [ 256.309417][ T12] stack backtrace: [ 256.315381][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 256.324732][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.334771][ T12] Workqueue: events delayed_fput [ 256.339680][ T12] Call Trace: [ 256.342959][ T12] dump_stack+0x198/0x1fd [ 256.347282][ T12] check_noncircular+0x324/0x3e0 [ 256.352197][ T12] ? print_circular_bug+0x3a0/0x3a0 [ 256.358423][ T12] ? lock_repin_lock+0x460/0x460 [ 256.363342][ T12] ? mark_lock+0xbc/0x1710 [ 256.367735][ T12] __lock_acquire+0x29bb/0x5570 [ 256.372569][ T12] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 256.378523][ T12] ? get_max_files+0x10/0x10 [ 256.383090][ T12] lock_acquire+0x1f3/0xae0 [ 256.387569][ T12] ? __sock_release+0x86/0x280 [ 256.392308][ T12] ? lock_release+0x8f0/0x8f0 [ 256.396965][ T12] ? mark_held_locks+0x9f/0xe0 [ 256.401716][ T12] ? check_preemption_disabled+0x50/0x130 [ 256.407422][ T12] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 256.413201][ T12] ? lock_is_held_type+0xbb/0xf0 [ 256.418140][ T12] down_write+0x8d/0x150 [ 256.422358][ T12] ? __sock_release+0x86/0x280 [ 256.427095][ T12] ? down_write_killable+0x170/0x170 [ 256.432441][ T12] ? locks_remove_file+0x319/0x580 [ 256.437540][ T12] ? fcntl_setlk+0xf60/0xf60 [ 256.442104][ T12] __sock_release+0x86/0x280 [ 256.446693][ T12] sock_close+0x18/0x20 [ 256.450833][ T12] __fput+0x285/0x920 [ 256.454802][ T12] ? __sock_release+0x280/0x280 [ 256.459639][ T12] delayed_fput+0x56/0x70 [ 256.463946][ T12] process_one_work+0x94c/0x1670 [ 256.468862][ T12] ? lock_release+0x8f0/0x8f0 [ 256.473706][ T12] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 256.479063][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 256.483985][ T12] ? lockdep_hardirqs_off+0x96/0xd0 [ 256.489162][ T12] worker_thread+0x64c/0x1120 [ 256.493821][ T12] ? process_one_work+0x1670/0x1670 [ 256.498992][ T12] kthread+0x3b5/0x4a0 [ 256.503038][ T12] ? __kthread_bind_mask+0xc0/0xc0 [ 256.508129][ T12] ret_from_fork+0x1f/0x30 12:37:29 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid'}}], [], 0x6b}}) 12:37:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0189436) fanotify_init(0x10, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 12:37:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) 12:37:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 12:37:29 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x31, &(0x7f0000000580)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) 12:37:29 executing program 0: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) [ 256.666701][ T8929] block nbd2: shutting down sockets [ 256.679291][ T8941] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 12:37:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local}}) [ 256.737874][ T8947] new mount options do not match the existing superblock, will be ignored 12:37:30 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 12:37:30 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000048c0)={'syz_tun\x00', &(0x7f0000003700)=@ethtool_sset_info={0xe}}) [ 256.787256][ T8952] cgroup: Unknown subsys name 'trans' [ 256.823147][ T8947] new mount options do not match the existing superblock, will be ignored [ 256.834428][ T8952] cgroup: Unknown subsys name 'trans' 12:37:30 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@codepage={'codepage', 0x3d, 'none'}}]}) 12:37:30 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x80287010, 0x0) [ 256.977618][ T8971] hfs: unable to load codepage "none" [ 256.983090][ T8971] hfs: unable to parse mount options [ 257.064353][ T8971] hfs: unable to load codepage "none" [ 257.070488][ T8971] hfs: unable to parse mount options