[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.220' (ECDSA) to the list of known hosts. 2020/05/24 10:34:50 fuzzer started 2020/05/24 10:34:50 dialing manager at 10.128.0.26:34283 2020/05/24 10:34:50 syscalls: 3055 2020/05/24 10:34:50 code coverage: enabled 2020/05/24 10:34:50 comparison tracing: enabled 2020/05/24 10:34:50 extra coverage: enabled 2020/05/24 10:34:50 setuid sandbox: enabled 2020/05/24 10:34:50 namespace sandbox: enabled 2020/05/24 10:34:50 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 10:34:50 fault injection: enabled 2020/05/24 10:34:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 10:34:50 net packet injection: enabled 2020/05/24 10:34:50 net device setup: enabled 2020/05/24 10:34:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 10:34:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 10:34:50 USB emulation: enabled 10:36:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x13, 0x0, 0x5, 0x0}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, 0x2, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) syzkaller login: [ 157.218320][ T6824] IPVS: ftp: loaded support on port[0] = 21 10:36:25 executing program 1: pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 157.391916][ T6824] chnl_net:caif_netlink_parms(): no params data found [ 157.494446][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.503771][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.513573][ T6824] device bridge_slave_0 entered promiscuous mode [ 157.525899][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.534706][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.546995][ T6824] device bridge_slave_1 entered promiscuous mode [ 157.601342][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.614044][ T6954] IPVS: ftp: loaded support on port[0] = 21 [ 157.626377][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:36:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r2, &(0x7f0000000140)=@l2={0x1f, 0xb6c, @any, 0x8000}, 0x80) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x13, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}) ioctl$KVM_SET_CPUID(r5, 0xae80, 0x0) [ 157.685838][ T6824] team0: Port device team_slave_0 added [ 157.715451][ T6824] team0: Port device team_slave_1 added [ 157.792106][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.800041][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.828586][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.861975][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.871003][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.898906][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.032682][ T6824] device hsr_slave_0 entered promiscuous mode 10:36:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x4000000) [ 158.079783][ T6824] device hsr_slave_1 entered promiscuous mode [ 158.194669][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 158.206380][ T7040] IPVS: ftp: loaded support on port[0] = 21 10:36:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, 0x0) socket(0x10, 0x80002, 0x0) add_key(&(0x7f0000001500)='encrypted\x00', 0x0, &(0x7f0000001580)="b64257e2b00c3f3ba2c17d86645472dadf94b51b37374e3f398a16a3fb624f28970bc9f5f16919eadb201285e43da8ce3257b67722e03abf4066c7", 0x3b, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc05812fe, &(0x7f00000004c0)={0x53, 0xfffffffe, 0x0, 0x40000, [0x8048004, 0x8048000, 0x1000000000000000, 0x2, 0x355, 0x5000000], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x32c145bbeb]}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000015c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x1) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000500), 0x37d, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000001c0)={0x26, 0x5, 0x0, 0xff, 0x8}) [ 158.441219][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.447524][ T7121] IPVS: ftp: loaded support on port[0] = 21 [ 158.448836][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.463988][ T6954] device bridge_slave_0 entered promiscuous mode [ 158.499032][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.507385][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.529340][ T6954] device bridge_slave_1 entered promiscuous mode [ 158.682868][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.723906][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.796297][ T6824] netdevsim netdevsim0 netdevsim0: renamed from eth0 10:36:26 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) [ 158.886857][ T6824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.965472][ T7206] IPVS: ftp: loaded support on port[0] = 21 [ 158.999926][ T6824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.034715][ T6954] team0: Port device team_slave_0 added [ 159.051454][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 159.066527][ T6824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.104448][ T6954] team0: Port device team_slave_1 added [ 159.175173][ T7294] IPVS: ftp: loaded support on port[0] = 21 [ 159.182529][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.196086][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.223386][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.271968][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.281015][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.307574][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.333694][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.341529][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.350311][ T7040] device bridge_slave_0 entered promiscuous mode [ 159.393269][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.401632][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.410324][ T7040] device bridge_slave_1 entered promiscuous mode [ 159.451330][ T6954] device hsr_slave_0 entered promiscuous mode [ 159.488937][ T6954] device hsr_slave_1 entered promiscuous mode [ 159.538558][ T6954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.546762][ T6954] Cannot create hsr debugfs directory [ 159.600841][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.613008][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.651437][ T7040] team0: Port device team_slave_0 added [ 159.664303][ T7040] team0: Port device team_slave_1 added [ 159.709582][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.716548][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.743990][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.759987][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 159.780407][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.787381][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.814376][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.013920][ T7040] device hsr_slave_0 entered promiscuous mode [ 160.059164][ T7040] device hsr_slave_1 entered promiscuous mode [ 160.108669][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.116267][ T7040] Cannot create hsr debugfs directory [ 160.127284][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 160.269339][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.277209][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.286532][ T7121] device bridge_slave_0 entered promiscuous mode [ 160.337563][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.346511][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.357263][ T7121] device bridge_slave_1 entered promiscuous mode [ 160.375154][ T7294] chnl_net:caif_netlink_parms(): no params data found [ 160.442650][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.450399][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.460013][ T7206] device bridge_slave_0 entered promiscuous mode [ 160.488078][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.498007][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.507613][ T7206] device bridge_slave_1 entered promiscuous mode [ 160.527426][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.543595][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.625248][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.653788][ T6954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.706472][ T6954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.762411][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.780764][ T7121] team0: Port device team_slave_0 added [ 160.802206][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.811028][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.820390][ T7294] device bridge_slave_0 entered promiscuous mode [ 160.827843][ T6954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.862105][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.876453][ T7121] team0: Port device team_slave_1 added [ 160.885805][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.893351][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.902132][ T7294] device bridge_slave_1 entered promiscuous mode [ 160.919284][ T6954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.000276][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.030852][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.048142][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.059616][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.070218][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.096424][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.104506][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.133899][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.148305][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.156050][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.184461][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.210208][ T7206] team0: Port device team_slave_0 added [ 161.252472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.263496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.275775][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.283041][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.294147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.313016][ T7206] team0: Port device team_slave_1 added [ 161.392784][ T7121] device hsr_slave_0 entered promiscuous mode [ 161.449371][ T7121] device hsr_slave_1 entered promiscuous mode [ 161.489082][ T7121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.496762][ T7121] Cannot create hsr debugfs directory [ 161.517738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.527080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.541254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.548350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.565951][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.573433][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.607543][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.622081][ T7294] team0: Port device team_slave_0 added [ 161.628531][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.636467][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.663296][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.693739][ T7040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.734540][ T7294] team0: Port device team_slave_1 added [ 161.763788][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.776487][ T7040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.817736][ T7040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.884189][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.891562][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.918638][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.933325][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.941252][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.972067][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.984158][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.996528][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.006397][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.024545][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.033123][ T7040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.151900][ T7206] device hsr_slave_0 entered promiscuous mode [ 162.189564][ T7206] device hsr_slave_1 entered promiscuous mode [ 162.229160][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.236731][ T7206] Cannot create hsr debugfs directory [ 162.251201][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.262545][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.325202][ T7294] device hsr_slave_0 entered promiscuous mode [ 162.380255][ T7294] device hsr_slave_1 entered promiscuous mode [ 162.419126][ T7294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.426797][ T7294] Cannot create hsr debugfs directory [ 162.500828][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.511608][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.613721][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.622684][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.674477][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.777027][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.842172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.851048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.858574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.880960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.894943][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.916911][ T7121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.953098][ T7121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.024337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.035297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.046214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.053712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.062444][ T7121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.107760][ T7121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.164886][ T6824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.179028][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.188491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.197859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.207337][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.214468][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.241441][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.258876][ T7294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.291594][ T7294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.364362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.374165][ T7294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.451983][ T7294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.517825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.533016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.543861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.553811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.564851][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.590610][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.619519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.628358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.637819][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.648167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.657197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.666361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.702638][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.724473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.732446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.741083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.750509][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.758815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.767254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.783179][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.799057][ T7206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.848153][ T7206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.902220][ T7206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.982259][ T6824] device veth0_vlan entered promiscuous mode [ 163.990837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.000788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.010094][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.017616][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.044851][ T7206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.092426][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.103974][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.112432][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.120873][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.130591][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.139241][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.146386][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.154813][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.180945][ T6824] device veth1_vlan entered promiscuous mode [ 164.195977][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.214782][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.241774][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.250915][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.260608][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.272054][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.281246][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.359824][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.368858][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.390535][ T6824] device veth0_macvtap entered promiscuous mode [ 164.425894][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.435683][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.445882][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.455015][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.464145][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.473293][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.483236][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.496037][ T6824] device veth1_macvtap entered promiscuous mode [ 164.517964][ T6954] device veth0_vlan entered promiscuous mode [ 164.527626][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.537930][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.546602][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.555298][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.565866][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.574427][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.605374][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.627354][ T6954] device veth1_vlan entered promiscuous mode [ 164.674910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.683406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.696530][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.706199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.733137][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.746522][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.764871][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.773477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.781828][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.794583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.804993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.823633][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.851321][ T6954] device veth0_macvtap entered promiscuous mode [ 164.871156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.888028][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.896999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.910902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.919392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.932798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.942233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.949676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.981302][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.992144][ T6954] device veth1_macvtap entered promiscuous mode [ 165.009708][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.020515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.028584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.038137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.047930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.057087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.064279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.073001][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.162946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.175898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.187261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.198634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.208410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.216767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.227084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.236462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.267934][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.286996][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.298087][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.311702][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.319118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.332012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.344831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.355396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.367816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.378971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.471928][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.492700][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.505232][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.516923][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.525605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.534972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.543783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.552318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.562137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.571637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.580761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.589305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.677976][ T7040] device veth0_vlan entered promiscuous mode [ 165.726706][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.735788][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.746259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.764842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 10:36:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x149082) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) [ 165.773889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.783828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.794130][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.801306][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.810787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.832854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.851241][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.858336][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.880170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.892856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:36:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00010001f000"}) [ 165.939968][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.962678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.977142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.988168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.006442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.015789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.022936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.032954][ T7040] device veth1_vlan entered promiscuous mode [ 166.102551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.112807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.122024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.131408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.141249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 10:36:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) [ 166.151185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.158392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.166941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.176446][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.250118][ T28] audit: type=1326 audit(1590316594.134:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8091 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 166.288127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.310508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.319404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.350192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.359472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.368612][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.378137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.387036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.395851][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.404675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.413386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.421943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.436263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.445725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.454721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.466074][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.476691][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.490235][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.550316][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.563258][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.629214][ T7206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.656707][ C0] hrtimer: interrupt took 42117 ns [ 166.722881][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.732228][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.743479][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.753973][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.754617][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.774507][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.797182][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.808966][ T7040] device veth0_macvtap entered promiscuous mode [ 166.830029][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.839365][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.849467][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.860330][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.871588][ T8093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.899709][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.908900][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.927399][ T7040] device veth1_macvtap entered promiscuous mode [ 166.954813][ T7121] device veth0_vlan entered promiscuous mode [ 166.977351][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.018185][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.036806][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:36:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB="340000000306010300000000000000000000008105000100070000000900020073787a30000000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24044844) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/250, 0xfa}], 0x3, &(0x7f0000000900)=""/170, 0xaa}, 0x1}, {{&(0x7f0000000840)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000000b40)=""/133, 0x85}], 0x2, &(0x7f0000000c40)=""/152, 0x98}, 0x8}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001000)=""/60, 0x3c}, {&(0x7f0000001040)=""/127, 0x7f}, {0x0}], 0x7, &(0x7f0000001200)=""/69, 0x45}, 0xea54f5e}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f00000014c0)=""/134, 0x86}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001740)=""/135, 0x87}], 0x6, &(0x7f0000001880)=""/210, 0xd2}}, {{&(0x7f0000001980)=@ax25={{0x3, @netrom}, [@rose, @bcast, @null, @netrom, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/237, 0xed}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x3, &(0x7f0000001d00)=""/67, 0x43}, 0x2}], 0x5, 0x40010020, &(0x7f0000001f40)={r3, r4+10000000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000002080)=0xe8) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x54) [ 167.051640][ T28] audit: type=1326 audit(1590316594.944:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8091 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 167.056418][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 167.093066][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.112114][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.151250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.166581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.192117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.218465][ T7121] device veth1_vlan entered promiscuous mode [ 167.252344][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.274978][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.287089][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.299613][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.313877][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.335133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.369220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.378418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:36:35 executing program 1: pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 167.424150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.436409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.498440][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.526520][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 10:36:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB="340000000306010300000000000000000000008105000100070000000900020073787a30000000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24044844) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/250, 0xfa}], 0x3, &(0x7f0000000900)=""/170, 0xaa}, 0x1}, {{&(0x7f0000000840)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000000b40)=""/133, 0x85}], 0x2, &(0x7f0000000c40)=""/152, 0x98}, 0x8}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001000)=""/60, 0x3c}, {&(0x7f0000001040)=""/127, 0x7f}, {0x0}], 0x7, &(0x7f0000001200)=""/69, 0x45}, 0xea54f5e}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f00000014c0)=""/134, 0x86}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001740)=""/135, 0x87}], 0x6, &(0x7f0000001880)=""/210, 0xd2}}, {{&(0x7f0000001980)=@ax25={{0x3, @netrom}, [@rose, @bcast, @null, @netrom, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/237, 0xed}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x3, &(0x7f0000001d00)=""/67, 0x43}, 0x2}], 0x5, 0x40010020, &(0x7f0000001f40)={r3, r4+10000000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000002080)=0xe8) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x54) [ 167.685290][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.716055][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.735600][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.749458][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.781711][ T7294] device veth0_vlan entered promiscuous mode [ 167.789806][ T7121] device veth0_macvtap entered promiscuous mode [ 167.817502][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.834493][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.854686][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.863545][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.875243][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 10:36:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB="340000000306010300000000000000000000008105000100070000000900020073787a30000000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24044844) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/250, 0xfa}], 0x3, &(0x7f0000000900)=""/170, 0xaa}, 0x1}, {{&(0x7f0000000840)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000000b40)=""/133, 0x85}], 0x2, &(0x7f0000000c40)=""/152, 0x98}, 0x8}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)}, {0x0}, {&(0x7f0000001000)=""/60, 0x3c}, {&(0x7f0000001040)=""/127, 0x7f}, {0x0}], 0x7, &(0x7f0000001200)=""/69, 0x45}, 0xea54f5e}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f00000014c0)=""/134, 0x86}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001740)=""/135, 0x87}], 0x6, &(0x7f0000001880)=""/210, 0xd2}}, {{&(0x7f0000001980)=@ax25={{0x3, @netrom}, [@rose, @bcast, @null, @netrom, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/237, 0xed}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x3, &(0x7f0000001d00)=""/67, 0x43}, 0x2}], 0x5, 0x40010020, &(0x7f0000001f40)={r3, r4+10000000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000002080)=0xe8) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000000c0)=0x54) [ 167.885913][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.894175][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.916823][ T7121] device veth1_macvtap entered promiscuous mode [ 167.955180][ T7206] device veth0_vlan entered promiscuous mode [ 167.978728][ T7294] device veth1_vlan entered promiscuous mode [ 168.046595][ T7206] device veth1_vlan entered promiscuous mode [ 168.099691][ T8138] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 168.205570][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 10:36:36 executing program 1: pipe(&(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 168.277275][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.324421][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.360903][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.394891][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.414435][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.447660][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.485134][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.501721][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.513823][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.540498][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.548841][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.558337][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.569542][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.579473][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.591227][ T2558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.622668][ T7294] device veth0_macvtap entered promiscuous mode [ 168.634612][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.647383][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.660068][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.671974][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.683092][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.694610][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.708744][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.729222][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.746753][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.759128][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.769065][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.779117][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.791717][ T7206] device veth0_macvtap entered promiscuous mode [ 168.803985][ T7294] device veth1_macvtap entered promiscuous mode 10:36:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) pipe(&(0x7f0000000340)) syz_genetlink_get_family_id$batadv(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=ANY=[@ANYBLOB="340000000306010300000000000000000000008105000100070000000900020073787a30000000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24044844) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/222, 0xde}], 0x4, &(0x7f0000000900)=""/170, 0xaa}, 0x1}, {{&(0x7f0000000840)=@in={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=""/152, 0x98}, 0x8}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000dc0)=""/161, 0xa1}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/139, 0x8b}, {&(0x7f0000001000)=""/60, 0x3c}, {&(0x7f0000001040)=""/127, 0x7f}], 0x7, &(0x7f0000001200)=""/69, 0x45}, 0xea54f5e}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f0000001400)=""/179, 0xb3}, {&(0x7f00000014c0)=""/134, 0x86}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001740)=""/135, 0x87}], 0x7, &(0x7f0000001880)=""/210, 0xd2}, 0x101}, {{&(0x7f0000001980)=@ax25={{0x3, @netrom}, [@rose, @bcast, @null, @netrom, @default, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/237, 0xed}, {&(0x7f0000001bc0)=""/231, 0xe7}], 0x3, &(0x7f0000001d00)=""/67, 0x43}, 0x2}], 0x5, 0x40010020, &(0x7f0000001f40)={r2, r3+10000000}) [ 168.836369][ T7206] device veth1_macvtap entered promiscuous mode [ 168.907940][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.933037][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.952843][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.980653][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.010396][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.021912][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.039119][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.052302][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.068545][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.108436][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.117092][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.126154][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.135370][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.163690][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.183683][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.199992][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.226583][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.237125][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.254787][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.266984][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.286130][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.299397][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.312840][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.324304][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.337074][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.348815][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.360191][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.371763][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.382502][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.393888][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.405813][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.417128][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.430025][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.469365][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.483624][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.498685][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.516517][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.546881][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.571029][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.590399][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.618934][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.646430][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.678038][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.705420][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:36:37 executing program 3: [ 169.723761][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.738136][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.767465][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.789070][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.810986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.819796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:36:38 executing program 4: 10:36:38 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r1 = accept(0xffffffffffffffff, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa1e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000565000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000291000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f000013f000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:36:38 executing program 1: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000565000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000291000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f000013f000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:36:38 executing program 2: 10:36:38 executing program 3: 10:36:38 executing program 4: 10:36:38 executing program 4: 10:36:38 executing program 3: 10:36:39 executing program 2: 10:36:39 executing program 1: 10:36:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r1 = accept(0xffffffffffffffff, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa1e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000565000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000291000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f000013f000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:36:39 executing program 4: 10:36:39 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:39 executing program 3: 10:36:39 executing program 2: 10:36:39 executing program 1: 10:36:39 executing program 4: 10:36:39 executing program 0: 10:36:39 executing program 4: 10:36:39 executing program 2: 10:36:39 executing program 0: 10:36:40 executing program 3: 10:36:40 executing program 1: 10:36:40 executing program 4: 10:36:40 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:40 executing program 0: 10:36:40 executing program 2: 10:36:40 executing program 3: 10:36:40 executing program 1: 10:36:40 executing program 4: 10:36:40 executing program 3: 10:36:40 executing program 2: 10:36:40 executing program 0: 10:36:40 executing program 4: 10:36:40 executing program 1: 10:36:41 executing program 4: 10:36:41 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:41 executing program 2: 10:36:41 executing program 3: 10:36:41 executing program 0: 10:36:41 executing program 1: 10:36:41 executing program 4: 10:36:41 executing program 3: 10:36:41 executing program 1: 10:36:41 executing program 2: 10:36:41 executing program 4: 10:36:41 executing program 0: 10:36:41 executing program 1: 10:36:42 executing program 2: 10:36:42 executing program 3: 10:36:42 executing program 4: 10:36:42 executing program 0: 10:36:42 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:42 executing program 1: 10:36:42 executing program 2: 10:36:42 executing program 3: 10:36:42 executing program 1: 10:36:42 executing program 0: 10:36:42 executing program 4: 10:36:42 executing program 1: 10:36:42 executing program 3: 10:36:42 executing program 2: 10:36:42 executing program 0: 10:36:42 executing program 4: 10:36:43 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:43 executing program 1: 10:36:43 executing program 3: 10:36:43 executing program 2: 10:36:43 executing program 0: 10:36:43 executing program 4: 10:36:43 executing program 0: 10:36:43 executing program 1: 10:36:43 executing program 3: 10:36:43 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:43 executing program 2: 10:36:43 executing program 2: 10:36:44 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:44 executing program 0: 10:36:44 executing program 1: 10:36:44 executing program 3: 10:36:44 executing program 2: 10:36:44 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:44 executing program 3: 10:36:44 executing program 2: 10:36:44 executing program 0: 10:36:44 executing program 1: 10:36:44 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:44 executing program 2: 10:36:45 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:45 executing program 3: 10:36:45 executing program 0: 10:36:45 executing program 1: 10:36:45 executing program 2: 10:36:45 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:45 executing program 3: 10:36:45 executing program 2: 10:36:45 executing program 1: 10:36:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') accept(0xffffffffffffffff, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000565000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000291000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f000013f000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:36:45 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:45 executing program 3: 10:36:46 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:46 executing program 2: 10:36:46 executing program 1: 10:36:46 executing program 3: 10:36:46 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') accept(0xffffffffffffffff, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000565000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000291000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f000013f000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:36:46 executing program 2: 10:36:46 executing program 1: 10:36:46 executing program 3: 10:36:46 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:46 executing program 1: 10:36:46 executing program 2: 10:36:47 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:47 executing program 3: 10:36:47 executing program 2: 10:36:47 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:47 executing program 1: 10:36:47 executing program 0: 10:36:47 executing program 2: 10:36:47 executing program 0: 10:36:47 executing program 1: 10:36:47 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:47 executing program 3: r0 = socket$unix(0x1, 0x104000000000001, 0x0) bind$unix(r0, &(0x7f0000000380)=@abs={0x1}, 0x5d) 10:36:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) r3 = open(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x20048000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(r0, &(0x7f00000000c0)=""/182, 0xb6, 0x2001, &(0x7f0000000040)={0x11, 0xf5, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/101, 0x65, 0x0, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x40000000000101) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)={0x1b, 0x8001, "58bfebee236a4050ebb8b32806753cabd454b2"}, 0x9c5) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 10:36:48 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000012c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 10:36:48 executing program 3: mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='udf\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 10:36:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x4d8}], 0x1) fchdir(0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x40000) clock_gettime(0x0, &(0x7f0000001680)) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0xfff}, {{&(0x7f0000000540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/241, 0xf1}, {0x0}, {0x0}, {&(0x7f0000000840)=""/253, 0xfd}, {&(0x7f0000000800)=""/17, 0x11}], 0x5}}, {{&(0x7f0000000ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001100), 0x0, &(0x7f00000002c0)=""/95, 0x5f}, 0xffffffff}, {{&(0x7f0000000980)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/21, 0x15}], 0x1, &(0x7f0000000a80)=""/81, 0x51}}], 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x8288, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) ustat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x4c) fallocate(r1, 0x0, 0xfffffffffffffffd, 0x8400403) 10:36:48 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:48 executing program 0: unshare(0x600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000080)=""/253) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f0000000800)=""/246) ioctl$PPPIOCSPASS(r3, 0x4004743c, 0x0) [ 180.346378][ T2426] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.364258][ T2426] blk_update_request: I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.376902][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 10:36:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) r3 = open(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x20048000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(r0, &(0x7f00000000c0)=""/182, 0xb6, 0x2001, &(0x7f0000000040)={0x11, 0xf5, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/101, 0x65, 0x0, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x40000000000101) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)={0x1b, 0x8001, "58bfebee236a4050ebb8b32806753cabd454b2"}, 0x9c5) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 10:36:48 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 180.456965][ T2426] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.470559][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 180.481617][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 180.502302][ T8508] UDF-fs: Scanning with blocksize 512 failed [ 180.510252][ T2426] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.524849][ T2426] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.536520][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 10:36:48 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) [ 180.549070][ T2426] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.560472][ T8520] syz-executor.0 (8520) used obsolete PPPIOCDETACH ioctl [ 180.570240][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 180.581499][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 180.591052][ T8508] UDF-fs: Scanning with blocksize 1024 failed [ 180.600429][ T2426] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.612469][ T2426] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.624186][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 180.635773][ T2426] blk_update_request: I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 10:36:48 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x1db) syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 180.649577][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 180.702284][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 180.717087][ T8508] UDF-fs: Scanning with blocksize 2048 failed 10:36:48 executing program 0: futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x10000000) 10:36:48 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 180.744711][ T2426] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.756754][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 10:36:48 executing program 0: mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) [ 180.841054][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 180.886628][ T8542] FAT-fs (loop1): bogus number of FAT sectors [ 180.896464][ T8542] FAT-fs (loop1): Can't find a valid FAT filesystem [ 180.905468][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 180.914958][ T8508] UDF-fs: Scanning with blocksize 4096 failed [ 180.921403][ T8508] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 180.950046][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 180.961209][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 181.015757][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 181.042054][ T8508] UDF-fs: Scanning with blocksize 512 failed [ 181.072638][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 181.089476][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 181.100632][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 181.109226][ T8508] UDF-fs: Scanning with blocksize 1024 failed [ 181.120028][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 181.143440][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 181.164659][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 181.181374][ T8508] UDF-fs: Scanning with blocksize 2048 failed [ 181.196349][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 181.217953][ T8508] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 10:36:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375726974792ef940707071313a2d00"], 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c4) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) 10:36:49 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:49 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="5500000018007f7d00fe01b2a4a280930a600000fca84302910000003900090020000c0003", 0x25}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 181.258728][ T8508] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 181.271696][ T8508] UDF-fs: Scanning with blocksize 4096 failed [ 181.292270][ T8508] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 181.392135][ T8559] FAT-fs (loop3): bogus number of FAT sectors [ 181.398698][ T8559] FAT-fs (loop3): Can't find a valid FAT filesystem 10:36:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}, {0x0, 0x8}], 0x2) 10:36:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 10:36:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) [ 181.696564][ T8547] FAT-fs (loop1): bogus number of FAT sectors [ 181.703548][ T8547] FAT-fs (loop1): Can't find a valid FAT filesystem 10:36:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375726974792ef940707071313a"], 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x0, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r5, 0x0, 0x0) 10:36:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:49 executing program 2: mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) getitimer(0x0, &(0x7f0000000140)) 10:36:49 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 181.995826][ T8591] FAT-fs (loop1): bogus number of FAT sectors [ 182.016822][ T8591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 182.275718][ T8570] FAT-fs (loop3): bogus number of FAT sectors [ 182.292736][ T8570] FAT-fs (loop3): Can't find a valid FAT filesystem 10:36:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 10:36:50 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) 10:36:50 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:50 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x207) [ 182.624516][ T8610] FAT-fs (loop2): bogus number of FAT sectors [ 182.666017][ T8610] FAT-fs (loop2): Can't find a valid FAT filesystem 10:36:50 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x207) 10:36:50 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:50 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x207) [ 182.846581][ T8597] FAT-fs (loop1): bogus number of FAT sectors [ 182.883762][ T8597] FAT-fs (loop1): Can't find a valid FAT filesystem 10:36:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73656375726974792ef940707071313a"], 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x0, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b76795008000537287bb000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r5, 0x0, 0x0) 10:36:51 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:51 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x207) [ 183.268293][ T8640] FAT-fs (loop1): bogus number of FAT sectors [ 183.308218][ T8640] FAT-fs (loop1): Can't find a valid FAT filesystem 10:36:51 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 183.437517][ T8619] FAT-fs (loop2): bogus number of FAT sectors [ 183.452620][ T8619] FAT-fs (loop2): Can't find a valid FAT filesystem 10:36:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 10:36:51 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) 10:36:51 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x207) 10:36:51 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:51 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x207) 10:36:51 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x207) 10:36:51 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) [ 183.842174][ T8667] FAT-fs (loop2): bogus number of FAT sectors [ 183.869080][ T8667] FAT-fs (loop2): Can't find a valid FAT filesystem 10:36:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)={0x1e, 0x1f, "ae4bd9d256d8c6389555b73b2e16562f2d0065629162"}, 0x8a100) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xe0, 0xa0, 0x3, 0x1, 0x983c, 0x40, "7dd340df6f4f4a1ee21df288b7b7e31faf3d0dff0657c263484195131aaf6cf66c315804cea7c7349d1af3583375c11313e12017c91e3d5d031fb67ca1207db6b08fa12b2a6c14b0f820011aa131158337fede1d775830927aa474af706ff6832aaa5ff81221be9d749bd763379782ae12df77067716e2f13b3f1a0d592f7c5e54b0212a2966d5a4a72ee4ee53b151ce6735a7ea6a6acc72e5b795c05f5a5b5fe1432296c231e0d9bf2faaf407a570365649ddd8264861be78211141644a506da19b929d683598f4b893f7fadca84e16a51f87c18763d919fed3bd497ff9444a"}}, 0x1f8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000300)) 10:36:52 executing program 4: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 10:36:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x20060, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) 10:36:52 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x207) 10:36:52 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x207) 10:36:52 executing program 4: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 184.288018][ T8685] FAT-fs (loop3): bogus number of FAT sectors [ 184.347989][ T8685] FAT-fs (loop3): Can't find a valid FAT filesystem [ 184.428008][ T8689] input: syz1 as /devices/virtual/input/input5 [ 184.497908][ T8687] ================================================================== [ 184.506210][ T8687] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 184.513410][ T8687] Read of size 8 at addr ffff888089919158 by task syz-executor.1/8687 [ 184.521554][ T8687] [ 184.523890][ T8687] CPU: 0 PID: 8687 Comm: syz-executor.1 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 184.533772][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.544263][ T8687] Call Trace: [ 184.547562][ T8687] dump_stack+0x18f/0x20d [ 184.551906][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 184.556758][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 184.561617][ T8687] print_address_description.constprop.0.cold+0xd3/0x413 [ 184.568642][ T8687] ? cdev_device_del+0x69/0x80 [ 184.573417][ T8687] ? evdev_disconnect+0x3d/0xb0 [ 184.578282][ T8687] ? __input_unregister_device+0x1b0/0x430 [ 184.584096][ T8687] ? input_unregister_device+0xb4/0xf0 [ 184.589584][ T8687] ? uinput_destroy_device+0x1e2/0x240 [ 184.595055][ T8687] ? vprintk_func+0x97/0x1a6 [ 184.599654][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 184.604511][ T8687] kasan_report.cold+0x1f/0x37 [ 184.609284][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 184.614157][ T8687] __mutex_lock+0x1033/0x13c0 [ 184.618842][ T8687] ? evdev_cleanup+0x21/0x190 [ 184.623521][ T8687] ? print_usage_bug+0x240/0x240 [ 184.628461][ T8687] ? trace_hardirqs_off+0x50/0x220 [ 184.633574][ T8687] ? mutex_trylock+0x2c0/0x2c0 [ 184.638406][ T8687] ? mark_held_locks+0x9f/0xe0 [ 184.643192][ T8687] ? kfree+0x1eb/0x2b0 [ 184.647264][ T8687] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 184.653268][ T8687] ? kfree_const+0x51/0x60 [ 184.657697][ T8687] ? evdev_cleanup+0x21/0x190 [ 184.662381][ T8687] evdev_cleanup+0x21/0x190 [ 184.666892][ T8687] evdev_disconnect+0x45/0xb0 [ 184.671574][ T8687] __input_unregister_device+0x1b0/0x430 [ 184.677218][ T8687] input_unregister_device+0xb4/0xf0 [ 184.682510][ T8687] uinput_destroy_device+0x1e2/0x240 [ 184.687803][ T8687] ? uinput_destroy_device+0x240/0x240 [ 184.693267][ T8687] uinput_release+0x37/0x50 [ 184.697984][ T8687] __fput+0x33e/0x880 [ 184.701965][ T8687] task_work_run+0xf4/0x1b0 [ 184.706477][ T8687] exit_to_usermode_loop+0x2fa/0x360 [ 184.711768][ T8687] do_syscall_64+0x6b1/0x7d0 [ 184.716365][ T8687] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 184.722261][ T8687] RIP: 0033:0x416621 [ 184.726243][ T8687] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 184.745951][ T8687] RSP: 002b:00007fff9e8d6630 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 184.754798][ T8687] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 184.762774][ T8687] RDX: 0000001b2c420000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 184.770746][ T8687] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 184.778836][ T8687] R10: 00007fff9e8d6720 R11: 0000000000000293 R12: 000000000078c900 [ 184.786807][ T8687] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 184.794794][ T8687] [ 184.797118][ T8687] Allocated by task 8689: [ 184.801452][ T8687] save_stack+0x1b/0x40 [ 184.805610][ T8687] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 184.811249][ T8687] kmem_cache_alloc_trace+0x153/0x7d0 [ 184.816625][ T8687] evdev_connect+0x80/0x4d0 [ 184.821127][ T8687] input_attach_handler+0x194/0x200 [ 184.826332][ T8687] input_register_device.cold+0xf5/0x246 [ 184.831967][ T8687] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 184.837978][ T8687] ksys_ioctl+0x11a/0x180 [ 184.842311][ T8687] __x64_sys_ioctl+0x6f/0xb0 [ 184.846900][ T8687] do_syscall_64+0xf6/0x7d0 [ 184.851403][ T8687] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 184.857287][ T8687] [ 184.859609][ T8687] Freed by task 8687: [ 184.863590][ T8687] save_stack+0x1b/0x40 [ 184.868006][ T8687] __kasan_slab_free+0xf7/0x140 [ 184.873028][ T8687] kfree+0x109/0x2b0 [ 184.876921][ T8687] device_release+0x71/0x200 [ 184.881507][ T8687] kobject_put+0x1c8/0x2f0 [ 184.885922][ T8687] cdev_device_del+0x69/0x80 [ 184.891210][ T8687] evdev_disconnect+0x3d/0xb0 [ 184.895976][ T8687] __input_unregister_device+0x1b0/0x430 [ 184.901613][ T8687] input_unregister_device+0xb4/0xf0 [ 184.906900][ T8687] uinput_destroy_device+0x1e2/0x240 [ 184.912199][ T8687] uinput_release+0x37/0x50 [ 184.916708][ T8687] __fput+0x33e/0x880 [ 184.920697][ T8687] task_work_run+0xf4/0x1b0 [ 184.925289][ T8687] exit_to_usermode_loop+0x2fa/0x360 [ 184.930577][ T8687] do_syscall_64+0x6b1/0x7d0 [ 184.935259][ T8687] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 184.941139][ T8687] [ 184.943468][ T8687] The buggy address belongs to the object at ffff888089919000 [ 184.943468][ T8687] which belongs to the cache kmalloc-2k of size 2048 [ 184.957612][ T8687] The buggy address is located 344 bytes inside of [ 184.957612][ T8687] 2048-byte region [ffff888089919000, ffff888089919800) [ 184.972355][ T8687] The buggy address belongs to the page: [ 184.978967][ T8687] page:ffffea0002264640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 184.988071][ T8687] flags: 0xfffe0000000200(slab) [ 184.992949][ T8687] raw: 00fffe0000000200 ffffea00023f7848 ffffea0002418a08 ffff8880aa000e00 [ 185.001544][ T8687] raw: 0000000000000000 ffff888089919000 0000000100000001 0000000000000000 [ 185.010290][ T8687] page dumped because: kasan: bad access detected [ 185.016703][ T8687] [ 185.019025][ T8687] Memory state around the buggy address: [ 185.024663][ T8687] ffff888089919000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.032734][ T8687] ffff888089919080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.040819][ T8687] >ffff888089919100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.048879][ T8687] ^ [ 185.055817][ T8687] ffff888089919180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.063881][ T8687] ffff888089919200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.072022][ T8687] ================================================================== [ 185.080163][ T8687] Disabling lock debugging due to kernel taint 10:36:53 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x44c942, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) 10:36:53 executing program 0: eventfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x207) 10:36:53 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socket(0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000340)=""/238, 0xee) 10:36:53 executing program 4: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0d4a7a81a0000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb202000008fd67c3c9313c6e0000000001020014bb004300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 185.211463][ T8687] Kernel panic - not syncing: panic_on_warn set ... [ 185.218084][ T8687] CPU: 1 PID: 8687 Comm: syz-executor.1 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 185.229871][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.239912][ T8687] Call Trace: [ 185.243193][ T8687] dump_stack+0x18f/0x20d [ 185.247524][ T8687] ? __mutex_lock+0xf50/0x13c0 [ 185.252285][ T8687] panic+0x2e3/0x75c [ 185.256181][ T8687] ? __warn_printk+0xf3/0xf3 [ 185.260857][ T8687] ? preempt_schedule_common+0x5e/0xc0 [ 185.266314][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 185.271210][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 185.276060][ T8687] ? preempt_schedule_thunk+0x16/0x18 [ 185.281451][ T8687] ? trace_hardirqs_on+0x55/0x230 [ 185.286563][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 185.291394][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 185.296238][ T8687] end_report+0x4d/0x53 [ 185.300394][ T8687] kasan_report.cold+0xd/0x37 [ 185.305054][ T8687] ? __mutex_lock+0x1033/0x13c0 [ 185.309878][ T8687] __mutex_lock+0x1033/0x13c0 [ 185.315143][ T8687] ? evdev_cleanup+0x21/0x190 [ 185.320329][ T8687] ? print_usage_bug+0x240/0x240 [ 185.325365][ T8687] ? trace_hardirqs_off+0x50/0x220 [ 185.330555][ T8687] ? mutex_trylock+0x2c0/0x2c0 [ 185.335314][ T8687] ? mark_held_locks+0x9f/0xe0 [ 185.340061][ T8687] ? kfree+0x1eb/0x2b0 [ 185.344110][ T8687] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 185.350168][ T8687] ? kfree_const+0x51/0x60 [ 185.354566][ T8687] ? evdev_cleanup+0x21/0x190 [ 185.359242][ T8687] evdev_cleanup+0x21/0x190 [ 185.363723][ T8687] evdev_disconnect+0x45/0xb0 [ 185.368390][ T8687] __input_unregister_device+0x1b0/0x430 [ 185.374000][ T8687] input_unregister_device+0xb4/0xf0 [ 185.379275][ T8687] uinput_destroy_device+0x1e2/0x240 [ 185.384536][ T8687] ? uinput_destroy_device+0x240/0x240 [ 185.389969][ T8687] uinput_release+0x37/0x50 [ 185.394447][ T8687] __fput+0x33e/0x880 [ 185.398503][ T8687] task_work_run+0xf4/0x1b0 [ 185.402983][ T8687] exit_to_usermode_loop+0x2fa/0x360 [ 185.408244][ T8687] do_syscall_64+0x6b1/0x7d0 [ 185.412813][ T8687] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 185.418781][ T8687] RIP: 0033:0x416621 [ 185.422665][ T8687] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 185.442248][ T8687] RSP: 002b:00007fff9e8d6630 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 185.450637][ T8687] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416621 [ 185.458588][ T8687] RDX: 0000001b2c420000 RSI: 00000000000000d0 RDI: 0000000000000003 [ 185.466547][ T8687] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 185.474581][ T8687] R10: 00007fff9e8d6720 R11: 0000000000000293 R12: 000000000078c900 [ 185.482529][ T8687] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 185.492044][ T8687] Kernel Offset: disabled [ 185.496381][ T8687] Rebooting in 86400 seconds..