[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2020/05/19 14:47:16 fuzzer started 2020/05/19 14:47:16 dialing manager at 10.128.0.26:38255 2020/05/19 14:47:16 syscalls: 3005 2020/05/19 14:47:16 code coverage: enabled 2020/05/19 14:47:16 comparison tracing: enabled 2020/05/19 14:47:16 extra coverage: enabled 2020/05/19 14:47:16 setuid sandbox: enabled 2020/05/19 14:47:16 namespace sandbox: enabled 2020/05/19 14:47:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/19 14:47:16 fault injection: enabled 2020/05/19 14:47:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/19 14:47:16 net packet injection: enabled 2020/05/19 14:47:16 net device setup: enabled 2020/05/19 14:47:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/19 14:47:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/19 14:47:16 USB emulation: /dev/raw-gadget does not exist 14:49:56 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000000)="fd", 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) syzkaller login: [ 221.528091][ T7111] IPVS: ftp: loaded support on port[0] = 21 14:49:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x10, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="02010000"], &(0x7f0000000340)=0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$SIOCGSTAMP(r0, 0x80108906, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 221.760576][ T7111] chnl_net:caif_netlink_parms(): no params data found 14:49:56 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000000)) [ 221.900747][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.910601][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.921728][ T7111] device bridge_slave_0 entered promiscuous mode [ 221.934102][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.942121][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.950945][ T7223] IPVS: ftp: loaded support on port[0] = 21 [ 221.953294][ T7111] device bridge_slave_1 entered promiscuous mode [ 222.040650][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.078103][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.140818][ T7111] team0: Port device team_slave_0 added [ 222.162149][ T7111] team0: Port device team_slave_1 added 14:49:56 executing program 3: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0xae1d1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa032b071afe91957}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x0) sendto$inet(r1, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c100000", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf250100000005000c0010000800000000000000251bfe861b286922daac80f9e32bec49ff4a60289ec030e6fb6e68d19808999b27bf455b338ed46d4d2dab81e6082493d6231f60b276a20d4c4590d628ecbb57b96cd2c159ad14369ab11f91fa0e6e103cc71a4c58b9bd542be63577"], 0x3c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20004810) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x15, 0x5, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)="9ed444d37d4714b6e96da61da6e87f96ab16da4a7006d98711ef302d6a3364b08c4896804686c806e1b6e42ef51da009a4d3e5dc6f8a9ed62e866d51f7ebbbeb9aef2dd53b0a4ee62561ef256cde33c46202edc69a098fe849eeb934f292545b85ef454c9dabb9c40d21f384beec789be50710fc2246a122ed00bd2c4981403950d3ef42a30ed8de73fe3a570b70ecea5c337304f932bf868eb6e1a01eb8fca88f04c33fba6052b4b478069b73d351ea71808582881ab19e77ad8111db2206c78e7456a9b1ff88bdd096805ea5d0324a1ad84842"}, 0x20) mlock2(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000411000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 222.253485][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.261058][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.288814][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.306696][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.314507][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.318008][ T7280] IPVS: ftp: loaded support on port[0] = 21 [ 222.341989][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.513342][ T7111] device hsr_slave_0 entered promiscuous mode 14:49:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) chdir(&(0x7f00000002c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 222.600896][ T7111] device hsr_slave_1 entered promiscuous mode [ 222.710234][ T7223] chnl_net:caif_netlink_parms(): no params data found [ 222.755459][ T7375] IPVS: ftp: loaded support on port[0] = 21 14:49:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x1c0, 0x290, 0x290, 0x380, 0x380, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@dev, @local, [], [], 'syz_tun\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@broadcast}}}, {{@ipv6={@loopback, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@empty, @mcast2, [], [], 'ip6tnl0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) [ 222.977147][ T7425] IPVS: ftp: loaded support on port[0] = 21 [ 223.098271][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.116883][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.127071][ T7223] device bridge_slave_0 entered promiscuous mode [ 223.149001][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.156660][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.166516][ T7223] device bridge_slave_1 entered promiscuous mode [ 223.227793][ T7515] IPVS: ftp: loaded support on port[0] = 21 [ 223.252250][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 223.282620][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.332973][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.476346][ T7223] team0: Port device team_slave_0 added [ 223.491369][ T7223] team0: Port device team_slave_1 added [ 223.497504][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 223.593017][ T7111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.643234][ T7111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.730311][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.737277][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.764151][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.782112][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.789335][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.798079][ T7280] device bridge_slave_0 entered promiscuous mode [ 223.816187][ T7111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.881757][ T7111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.945430][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.952719][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.979678][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.996267][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.003534][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.013589][ T7280] device bridge_slave_1 entered promiscuous mode [ 224.097835][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 224.137948][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 224.180298][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.187384][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.196129][ T7375] device bridge_slave_0 entered promiscuous mode [ 224.207047][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.233546][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.254172][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.261463][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.271525][ T7375] device bridge_slave_1 entered promiscuous mode [ 224.305757][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.320567][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.391661][ T7223] device hsr_slave_0 entered promiscuous mode [ 224.429116][ T7223] device hsr_slave_1 entered promiscuous mode [ 224.468823][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.476668][ T7223] Cannot create hsr debugfs directory [ 224.515151][ T7280] team0: Port device team_slave_0 added [ 224.538024][ T7375] team0: Port device team_slave_0 added [ 224.566076][ T7280] team0: Port device team_slave_1 added [ 224.594805][ T7375] team0: Port device team_slave_1 added [ 224.602164][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.610011][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.617957][ T7515] device bridge_slave_0 entered promiscuous mode [ 224.627318][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.634978][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.643236][ T7515] device bridge_slave_1 entered promiscuous mode [ 224.696658][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.704569][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.731933][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.754710][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.762272][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.771793][ T7425] device bridge_slave_0 entered promiscuous mode [ 224.785720][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.793597][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.802988][ T7425] device bridge_slave_1 entered promiscuous mode [ 224.836888][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.846065][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.872476][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.895042][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.902221][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.929841][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.945811][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.959783][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.978965][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.986557][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.017663][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.040731][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.061524][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.161353][ T7280] device hsr_slave_0 entered promiscuous mode [ 225.199260][ T7280] device hsr_slave_1 entered promiscuous mode [ 225.248645][ T7280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.256227][ T7280] Cannot create hsr debugfs directory [ 225.283945][ T7515] team0: Port device team_slave_0 added [ 225.341014][ T7375] device hsr_slave_0 entered promiscuous mode [ 225.369905][ T7375] device hsr_slave_1 entered promiscuous mode [ 225.428825][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.436422][ T7375] Cannot create hsr debugfs directory [ 225.449584][ T7425] team0: Port device team_slave_0 added [ 225.463366][ T7515] team0: Port device team_slave_1 added [ 225.497374][ T7425] team0: Port device team_slave_1 added [ 225.567758][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.578124][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.606019][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.627557][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.635351][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.665636][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.695851][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.704784][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.732924][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.745205][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.756450][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.782824][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.807725][ T7223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.905640][ T7223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.942676][ T7223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.001783][ T7223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.082574][ T7515] device hsr_slave_0 entered promiscuous mode [ 226.138966][ T7515] device hsr_slave_1 entered promiscuous mode [ 226.178585][ T7515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.186163][ T7515] Cannot create hsr debugfs directory [ 226.240789][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.282126][ T7425] device hsr_slave_0 entered promiscuous mode [ 226.328885][ T7425] device hsr_slave_1 entered promiscuous mode [ 226.378584][ T7425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.386304][ T7425] Cannot create hsr debugfs directory [ 226.476906][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.488528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.502981][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.603688][ T7375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.653415][ T7375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.704676][ T7375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.751166][ T7375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.826693][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.835978][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.847610][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.854872][ T2791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.895119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.903331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.912559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.921747][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.928893][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.999882][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.020049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.030661][ T7280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.070705][ T7280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.146911][ T7280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.204798][ T7280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.277662][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.287264][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.300809][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.312298][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.324090][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.397219][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.420514][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.451480][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.460665][ T7515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.494851][ T7111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.506929][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.515186][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.525668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.576316][ T7515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.601530][ T7515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.674832][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.682940][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.692417][ T7425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.746232][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.754271][ T7515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.826451][ T7425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.890601][ T7425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.970246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.980664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.992374][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.999554][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.007283][ T7425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.056797][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.076802][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.087700][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.107030][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.116085][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.123215][ T2791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.158673][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.167493][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.181761][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.190944][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.235154][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.254732][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.263935][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.275024][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.284439][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.293517][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.302338][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.325523][ T7223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.339902][ T7223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.362396][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.378854][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.387068][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.401546][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.412490][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.422564][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.464539][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.495752][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.503684][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.511299][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.520980][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.530225][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.537276][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.545637][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.555552][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.564734][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.571870][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.580240][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.589304][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.604313][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.635544][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.651384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.659526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.669878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.677664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.711585][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.745498][ T7111] device veth0_vlan entered promiscuous mode [ 228.757650][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.767545][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.776487][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.783646][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.792943][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.802868][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.811625][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.820886][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.830038][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.838498][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.848533][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.856552][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.865273][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.874690][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.883510][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.893388][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.902685][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.909820][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.945417][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.960002][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.969225][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.977635][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.996643][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.018935][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.027775][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.044793][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.054201][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.065962][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.077718][ T7111] device veth1_vlan entered promiscuous mode [ 229.091917][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.125807][ T7223] device veth0_vlan entered promiscuous mode [ 229.147663][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.156942][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.165774][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.175571][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.183947][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.212814][ T7223] device veth1_vlan entered promiscuous mode [ 229.221811][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.233239][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.242682][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.253299][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.262969][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.273305][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.282395][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.290899][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.332284][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.342333][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.354226][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.362448][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.371933][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.380963][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.389037][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.396460][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.405709][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.420551][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.450748][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.470892][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.480602][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.491269][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.498444][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.507714][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.522291][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.536919][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.560667][ T7223] device veth0_macvtap entered promiscuous mode [ 229.571299][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.581320][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.591084][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.600267][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.610031][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.621327][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.633076][ T7111] device veth0_macvtap entered promiscuous mode [ 229.654038][ T7111] device veth1_macvtap entered promiscuous mode [ 229.666291][ T7223] device veth1_macvtap entered promiscuous mode [ 229.679060][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.687209][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.697108][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.705944][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.714915][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.723640][ T2777] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.730822][ T2777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.740127][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.750104][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.759202][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.766279][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.822788][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.832226][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.842690][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.852525][ T2777] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.859680][ T2777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.867759][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.876180][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.883824][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.892967][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.901972][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.911152][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.920140][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.929292][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.944271][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.972280][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.982297][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.993337][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.002502][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.011692][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.038860][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 230.054549][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.066806][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.081432][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.102576][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.110528][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.124832][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.134085][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.147492][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.157171][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.170232][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.179423][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.188692][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.205930][ T7375] device veth0_vlan entered promiscuous mode [ 230.253013][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.262544][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.275796][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.284706][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.297342][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.306357][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.315932][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.326730][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.336025][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.345645][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.355353][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.377258][ T7375] device veth1_vlan entered promiscuous mode [ 230.398745][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 230.409890][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.422872][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.430890][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.441949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.452313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.463653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.473985][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.486389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.496623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.509852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.521616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.537356][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.565396][ T7280] device veth0_vlan entered promiscuous mode [ 230.572530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.581634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.591384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.601010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.620769][ T7425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.695238][ T7280] device veth1_vlan entered promiscuous mode [ 230.820859][ T7375] device veth0_macvtap entered promiscuous mode [ 230.913966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.923609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.932998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.942417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.960213][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.974723][ T7375] device veth1_macvtap entered promiscuous mode [ 231.078686][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.086829][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.150059][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.157342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.168697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.202154][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 231.225511][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:50:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xc49f, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0x8200) [ 231.247020][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 231.263809][ T8374] encrypted_key: insufficient parameters specified [ 231.266597][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.330631][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.384047][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.414489][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.446764][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.466876][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.493862][ T7280] device veth0_macvtap entered promiscuous mode [ 231.511140][ T7280] device veth1_macvtap entered promiscuous mode [ 231.556240][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 231.594776][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.606184][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 231.619254][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.633397][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.649766][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.659359][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.671144][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.682129][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.699697][ T8389] attempt to access beyond end of device [ 231.720458][ T8389] loop0: rw=2049, want=130, limit=98 [ 231.762014][ T8389] Buffer I/O error on dev loop0, logical block 129, lost async page write 14:50:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 231.809320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.824365][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.835439][ T8389] attempt to access beyond end of device [ 231.852912][ T8389] loop0: rw=2049, want=131, limit=98 [ 231.886335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.895701][ T8389] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 231.914054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.926360][ T8389] attempt to access beyond end of device [ 231.940332][ T8389] loop0: rw=2049, want=132, limit=98 [ 231.966879][ T8389] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 231.983852][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.003675][ T8389] attempt to access beyond end of device [ 232.013176][ T8389] loop0: rw=2049, want=133, limit=98 [ 232.019040][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.022146][ T8389] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 232.045407][ T8389] attempt to access beyond end of device [ 232.052280][ T8389] loop0: rw=2049, want=142, limit=98 [ 232.052958][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.064197][ T8389] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 232.088950][ T8389] attempt to access beyond end of device [ 232.094717][ T8389] loop0: rw=2049, want=143, limit=98 [ 232.107907][ T8389] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 232.116879][ T8389] attempt to access beyond end of device [ 232.130027][ T8389] loop0: rw=2049, want=144, limit=98 [ 232.136069][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.156926][ T8389] Buffer I/O error on dev loop0, logical block 143, lost async page write 14:50:06 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x125000) [ 232.165990][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 232.177321][ T8389] attempt to access beyond end of device [ 232.183454][ T8389] loop0: rw=2049, want=145, limit=98 [ 232.190366][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.201203][ T8389] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 232.225727][ T8389] attempt to access beyond end of device [ 232.239405][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.255575][ T8389] loop0: rw=2049, want=194, limit=98 [ 232.291002][ T27] audit: type=1804 audit(1589899806.946:2): pid=8384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir079408069/syzkaller.xW1wWl/1/file0/file0" dev="loop0" ino=22 res=1 [ 232.293188][ T8399] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.341043][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.354569][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.372370][ T27] audit: type=1800 audit(1589899806.946:3): pid=8384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=22 res=0 14:50:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000780)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x8}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) [ 232.383018][ T8399] FAT-fs (loop0): Filesystem has been set read-only [ 232.396694][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.413864][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.441251][ T27] audit: type=1804 audit(1589899806.946:4): pid=8399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir079408069/syzkaller.xW1wWl/1/file0/file0" dev="loop0" ino=22 res=1 [ 232.455423][ T7515] device veth0_vlan entered promiscuous mode 14:50:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 232.505567][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.518926][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.549371][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.565872][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.576152][ T7280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 232.586672][ T7280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.610190][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.625319][ T7425] device veth0_vlan entered promiscuous mode [ 232.634628][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.643689][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.658447][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.667320][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.695570][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 14:50:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 232.704697][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.722621][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.731441][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 14:50:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 232.958795][ C0] hrtimer: interrupt took 36288 ns [ 233.049310][ T8422] mmap: syz-executor.3 (8422) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 233.092988][ T7515] device veth1_vlan entered promiscuous mode [ 233.397135][ T7425] device veth1_vlan entered promiscuous mode [ 233.561728][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.570721][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.642612][ T7515] device veth0_macvtap entered promiscuous mode [ 233.652861][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.663284][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.672952][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.701929][ T7425] device veth0_macvtap entered promiscuous mode [ 233.730408][ T7515] device veth1_macvtap entered promiscuous mode 14:50:08 executing program 2: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0xae1d1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa032b071afe91957}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x0) sendto$inet(r1, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c100000", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf250100000005000c0010000800000000000000251bfe861b286922daac80f9e32bec49ff4a60289ec030e6fb6e68d19808999b27bf455b338ed46d4d2dab81e6082493d6231f60b276a20d4c4590d628ecbb57b96cd2c159ad14369ab11f91fa0e6e103cc71a4c58b9bd542be63577"], 0x3c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20004810) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x15, 0x5, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)="9ed444d37d4714b6e96da61da6e87f96ab16da4a7006d98711ef302d6a3364b08c4896804686c806e1b6e42ef51da009a4d3e5dc6f8a9ed62e866d51f7ebbbeb9aef2dd53b0a4ee62561ef256cde33c46202edc69a098fe849eeb934f292545b85ef454c9dabb9c40d21f384beec789be50710fc2246a122ed00bd2c4981403950d3ef42a30ed8de73fe3a570b70ecea5c337304f932bf868eb6e1a01eb8fca88f04c33fba6052b4b478069b73d351ea71808582881ab19e77ad8111db2206c78e7456a9b1ff88bdd096805ea5d0324a1ad84842"}, 0x20) mlock2(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000411000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:50:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 233.754322][ T7425] device veth1_macvtap entered promiscuous mode [ 233.791885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.804572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.831730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.942247][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.953882][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.965087][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 233.983704][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.005083][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.028474][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.040176][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.051797][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.065449][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.085942][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.098985][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.120654][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.138710][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.159177][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.177555][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.192690][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.209554][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.219489][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.230600][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.240498][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 234.251038][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.262926][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.272924][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.286963][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.301327][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.318101][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.328047][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.338567][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.348595][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.359162][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.371546][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.380077][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.390707][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.400336][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.410124][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.429124][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.441750][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.452011][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.463798][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.476951][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.494278][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.504226][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.521467][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.534681][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 234.558432][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.577667][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.601584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.610415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.084115][ T8458] overlayfs: overlapping lowerdir path 14:50:09 executing program 4: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa032b071afe91957}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24004810) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000640)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) openat$full(0xffffffffffffff9c, 0x0, 0x250c01, 0x0) 14:50:09 executing program 3: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0xae1d1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa032b071afe91957}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create1(0x0) sendto$inet(r1, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c100000", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf250100000005000c0010000800000000000000251bfe861b286922daac80f9e32bec49ff4a60289ec030e6fb6e68d19808999b27bf455b338ed46d4d2dab81e6082493d6231f60b276a20d4c4590d628ecbb57b96cd2c159ad14369ab11f91fa0e6e103cc71a4c58b9bd542be63577"], 0x3c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20004810) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x15, 0x5, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000380)="9ed444d37d4714b6e96da61da6e87f96ab16da4a7006d98711ef302d6a3364b08c4896804686c806e1b6e42ef51da009a4d3e5dc6f8a9ed62e866d51f7ebbbeb9aef2dd53b0a4ee62561ef256cde33c46202edc69a098fe849eeb934f292545b85ef454c9dabb9c40d21f384beec789be50710fc2246a122ed00bd2c4981403950d3ef42a30ed8de73fe3a570b70ecea5c337304f932bf868eb6e1a01eb8fca88f04c33fba6052b4b478069b73d351ea71808582881ab19e77ad8111db2206c78e7456a9b1ff88bdd096805ea5d0324a1ad84842"}, 0x20) mlock2(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000411000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:50:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syz_tun\x00'}) 14:50:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r1, r0) 14:50:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000100)="e8"}) 14:50:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:10 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x2}, [], {}, [], {}, {0x2}}, 0x24, 0x0) 14:50:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r1, r0) 14:50:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r1, r0) 14:50:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14:50:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:10 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="0200ee7e00ff1fffffff", 0xa, 0x1c0}]) 14:50:10 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 14:50:10 executing program 3: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x1, 0x6d61cbb2}, {0x0, 0x3}}, 0x0) 14:50:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40284504, &(0x7f0000000040)=[0x2ff]) 14:50:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='0', 0x1}], 0x1) 14:50:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 236.140124][ T8500] Dev loop4: unable to read RDB block 1 [ 236.155209][ T8500] loop4: AHDI p1 14:50:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x200c9, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 236.199331][ T8500] loop4: partition table partially beyond EOD, truncated 14:50:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x1) 14:50:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getpeername(r1, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000007c0)=0x80) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x2, 0x0, 0x3}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="c06ede98a753052fff7c0ab560b9f678f67429633ba01d567a481cb9a11bd461918ec3eb706c27de1e8b61d905e09a32dd2002e66fb3b94807add6894bfd9ce3a270e410486d9f9628a0eca74ce2db5cd463f00647c30ea786a76114941b81c1c69b327a3d374fd58be0b06678a7cc819c7e5fbf4dea29e8488739dcc1167083a8f353c762288a73c6ce2e94bc6f0c4f13bcc056923f278dc1175151a1ed0ffc0b0565829dc29cf8083d8a67a6caa86c01f07c0da070db9d744bdba412eee8b7ff72d3a1de35d8e34465b88bd3a2554607cf6c5746b92338d3", 0xd9}, {&(0x7f00000003c0)="c6c699fda3abaa43d5564826912f52ae45cc7a0ba4f62195bae2a847", 0x1c}, {&(0x7f0000000400)="fd6e68ac584d9499a15446813a752f7140309fab968ea90de4c824ebc878602f1f92f4ee2043d8123e16a61759db27e7444d506eb16620bfaa64faca48c7b69bbe081237f8cb8ed3db576aadb3619a0522a462c0153f9beaa16cc94421cd232528bd09939d93a8cbca49dc129149832dbc3fc077e4479b94e2ae99fc969a9420173580871db62d1227139dbeaffe64351a2450d8e05a3e5812ac334d5531468843b216b10da9097427c7dd87aa0e8f237546ecb49506c43c49ebd8b4c32641b42b1e96889c", 0xc5}, {&(0x7f0000000500)="738b68be94c84ebe987aefbeb697833d66a659f6d0f86f5f8bb444361ca2361a5304b91cd583677470b29fd03e2994a41976df3b75f2f568f34b537579f33df488a8bca25da0c349fb6546c0fb6a7fbd26e41149ae90da8f55d4c2ecf014f4f678fb9f95ae8ec3a95413ddb13362bacb2d44bcbab441e85d14fb0ed8dd59dc86d2cfbb9868875b3cda131c05d9f7650f00d4ff097f4c12d66d68e23c81831e3492f472f8439ed7d885e1b3828911bd0c066b66338dda653dced7142208730a87054ed6771a22fc6e26f7", 0xca}], 0x4, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3db9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3b9e}}], 0x90}, 0xc0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0xfffffd6d) 14:50:11 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80020) 14:50:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 236.327739][ T8500] Dev loop4: unable to read RDB block 1 14:50:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="0200ee7e00ff1fffffff", 0xa, 0x1c0}]) 14:50:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001b4, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342586c000000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}], 0x0, 0x0) [ 236.368166][ T8500] loop4: AHDI p1 [ 236.376363][ T8500] loop4: partition table partially beyond EOD, truncated 14:50:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 236.531596][ T27] audit: type=1800 audit(1589899811.187:5): pid=8531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15800 res=0 14:50:11 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x57) [ 236.603730][ T8535] overlayfs: './bus' not a directory 14:50:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 236.629353][ T8538] Dev loop4: unable to read RDB block 1 [ 236.643525][ T8538] loop4: AHDI p1 [ 236.643957][ T8544] overlayfs: './bus' not a directory [ 236.659498][ T8538] loop4: partition table partially beyond EOD, truncated [ 236.670365][ T3516] XFS (loop3): SB sanity check failed 14:50:11 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b05000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa985503f8f45bfb4e9240b985dda11bde27881f17233d3ad01f2177b1a53e51397d581d1549a05c1955f5d2a27a54f154dfab0a4d6a66872083c12fb816fc83d2a0f56c7b308972c13e068508685eb082db85be8bcf0074dd91f31c0bc042060d", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf130000ad203bd736a956945b0f66f933a31733392547e20febfc8d209cbf74cd6243bf2406fae4ddbe02d390fffad64b012deb14b92f020729e51b3e84a45b530300000053b3531c693655564c9a8ddb7d983a19eb11b0803dced96346ee580ea4a890f90a69b44067df0949c216f3b291122bcd89a0777619426cacf7375a6648df71ec826739c1c3426fd6a699fa182a54d519f3000000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 236.679622][ T3516] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x391/0x480, xfs_sb block 0xffffffffffffffff [ 236.702100][ T3516] XFS (loop3): Unmount and run xfs_repair [ 236.708406][ T3516] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 236.715803][ T3516] 00000000: 58 46 53 42 58 6c 00 00 00 00 00 00 00 00 10 00 XFSBXl.......... [ 236.724783][ T3516] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.739225][ T3516] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 236.748518][ T3516] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 236.766873][ T3516] 00000040: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a ................ [ 236.775760][ T3516] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 236.789142][ T3516] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00 ...Z.$.......... [ 236.798342][ T3516] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 02 00 00 00 00 ................ [ 236.807435][ T8534] XFS (loop3): SB validate failed with error -117. 14:50:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) 14:50:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="0200ee7e00ff1fffffff", 0xa, 0x1c0}]) [ 236.886559][ T8561] device vxlan0 entered promiscuous mode 14:50:11 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x57) [ 237.167365][ T8571] Dev loop4: unable to read RDB block 1 [ 237.172963][ T8571] loop4: AHDI p1 [ 237.176606][ T8571] loop4: partition table partially beyond EOD, truncated 14:50:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="b52300000000000000000c01000008000300", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 14:50:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) 14:50:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="0200ee7e00ff1fffffff", 0xa, 0x1c0}]) 14:50:12 executing program 5: perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x3, 0x4a, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 14:50:12 executing program 1: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') socket$inet6(0xa, 0x0, 0x0) symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000008c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 237.586856][ T8592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:50:12 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0) lsetxattr$security_ima(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.ima\x00', &(0x7f0000000680)=@ng={0x4, 0x5, "c9c2789a463d34fa02fa223e54beca4c4f"}, 0x13, 0x2) r2 = dup2(0xffffffffffffffff, r1) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e00030040fe00ff050005001201", 0x2e}], 0x1}, 0x0) 14:50:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) [ 237.636099][ T8592] syz-executor.5 (8592) used greatest stack depth: 23008 bytes left [ 237.658428][ T8593] Dev loop4: unable to read RDB block 1 [ 237.664022][ T8593] loop4: AHDI p1 [ 237.673065][ T8593] loop4: partition table partially beyond EOD, truncated 14:50:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 237.727644][ T8602] device vxlan0 entered promiscuous mode [ 238.819143][ T8617] @þ: renamed from team0 [ 238.860707][ T8617] 8021q: adding VLAN 0 to HW filter on device @þ 14:50:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) dup2(r3, r4) 14:50:13 executing program 1: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') socket$inet6(0xa, 0x0, 0x0) symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000008c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 14:50:13 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 14:50:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:50:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:13 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 14:50:13 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0), 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000080)=[{0x0}], 0x18c102, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3, 0x4}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum}) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) 14:50:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 239.413489][ T8657] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.633655][ T8626] 8021q: adding VLAN 0 to HW filter on device @þ 14:50:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147441, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14:50:14 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 14:50:14 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 14:50:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) dup2(r3, r4) 14:50:14 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) 14:50:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 14:50:14 executing program 5: r0 = socket(0x200040000000015, 0x805, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0x0, 0x3}}, 0x10) 14:50:14 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x6}}) epoll_create1(0x0) timerfd_create(0x0, 0x0) 14:50:14 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 14:50:14 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x6}}) epoll_create1(0x0) timerfd_create(0x0, 0x0) 14:50:14 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) 14:50:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:50:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 14:50:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r2, 0x0, 0x82, &(0x7f0000000300)=""/195, &(0x7f0000000100)=0xc3) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r3) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0x0) 14:50:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f00000002c0)=0xc) 14:50:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 14:50:15 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) 14:50:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 14:50:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000003, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x9, @raw_data="0a4ff61e35428ccd343232505efb2a3064856ad9056d9ac6bc0bcd980ce99f039c00761ab371a71d9e5ed44f80006291eb454d6d720d74b812c2e05f668f8fd92b04602292c3e4f50e3b0b4bbb0daaff7cc809d03492133a77bf49f2497cb8410f316291518ddc3329acf406b7a8596f5adb89c4e8c024f3557b03f683b3e28eee6c20cf8a3a00e80b7f946df70ffef192eb0b8e9dedef706a02b1f2bac8378311eeb109306c279ac1bff9d74c7efd17fa003d166861a073e1881831d9580a7b66077aad5eff6b05"}) 14:50:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1c0}]) 14:50:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 14:50:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000300)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000ac0)=0x5c5064) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x0) [ 240.911520][ T8760] Dev loop4: unable to read RDB block 1 [ 240.918453][ T8760] loop4: unable to read partition table [ 240.937724][ T8760] loop4: partition table beyond EOD, truncated [ 240.993213][ T8760] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 14:50:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) 14:50:18 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 14:50:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 14:50:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1c0}]) 14:50:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000052000500d25a80648c63940d0a00fc000e0002400200a06d053582c137153e370900018003000000d1bd", 0x2e}], 0x1}, 0x0) 14:50:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:18 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SNDCTL_DSP_CHANNELS(r1, 0x8010500d, &(0x7f0000000040)) [ 243.540529][ T8799] Dev loop4: unable to read RDB block 1 [ 243.549911][ T8799] loop4: unable to read partition table [ 243.557451][ T8799] loop4: partition table beyond EOD, truncated [ 243.564153][ T8799] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 14:50:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) 14:50:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1c0}]) 14:50:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 243.699775][ T8816] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 243.708195][ T8816] team0: Cannot enslave team device to itself 14:50:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) 14:50:18 executing program 1: syz_open_dev$radio(0x0, 0x3, 0x2) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) open(0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)) getpid() [ 243.847664][ T8821] Dev loop4: unable to read RDB block 1 [ 243.853276][ T8821] loop4: unable to read partition table [ 243.914172][ T8821] loop4: partition table beyond EOD, truncated [ 243.947566][ T8821] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 14:50:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000003c0)) 14:50:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 14:50:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) 14:50:19 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 14:50:19 executing program 1: syz_open_dev$radio(0x0, 0x3, 0x2) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) open(0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)) getpid() [ 244.486525][ T8851] Dev loop4: unable to read RDB block 1 [ 244.493461][ T8851] loop4: unable to read partition table [ 244.505120][ T8851] loop4: partition table beyond EOD, truncated 14:50:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x81}, 0x3c) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r0, &(0x7f0000001500), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 244.532936][ T8851] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 391.175148][ T1167] INFO: task syz-executor.0:7111 blocked for more than 143 seconds. [ 391.183334][ T1167] Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 391.204977][ T1167] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.213665][ T1167] syz-executor.0 D23184 7111 7110 0x00000000 [ 391.244978][ T1167] Call Trace: [ 391.248459][ T1167] ? __schedule+0x937/0x1ff0 [ 391.253057][ T1167] ? __sched_text_start+0x8/0x8 [ 391.275097][ T1167] schedule+0xd0/0x2a0 [ 391.279210][ T1167] schedule_preempt_disabled+0xf/0x20 [ 391.284839][ T1167] __mutex_lock+0x7ab/0x13c0 [ 391.295109][ T1167] ? __blkdev_get+0x179/0x1530 [ 391.299905][ T1167] ? mutex_trylock+0x2c0/0x2c0 [ 391.304797][ T1167] ? up_read+0x1a8/0x750 [ 391.343105][ T1167] ? kobj_lookup+0x36d/0x460 [ 391.347837][ T1167] ? __blkdev_get+0x179/0x1530 [ 391.352614][ T1167] __blkdev_get+0x179/0x1530 [ 391.382159][ T1167] ? find_held_lock+0x2d/0x110 [ 391.387061][ T1167] ? fsnotify_parent+0xbf/0x2d0 [ 391.391948][ T1167] ? __blkdev_put+0x690/0x690 [ 391.425075][ T1167] ? do_raw_spin_lock+0x129/0x2e0 [ 391.430138][ T1167] ? rwlock_bug.part.0+0x90/0x90 [ 391.444981][ T1167] blkdev_get+0x41/0x2b0 [ 391.449253][ T1167] ? _raw_spin_unlock+0x24/0x40 [ 391.454103][ T1167] blkdev_open+0x21d/0x2b0 [ 391.475115][ T1167] do_dentry_open+0x4b6/0x12a0 [ 391.479923][ T1167] ? bd_acquire+0x2c0/0x2c0 [ 391.484452][ T1167] ? chown_common+0x550/0x550 [ 391.505052][ T1167] ? inode_permission+0xab/0x500 [ 391.510062][ T1167] path_openat+0x1e70/0x27f0 [ 391.514663][ T1167] ? path_lookupat.isra.0+0x530/0x530 [ 391.535049][ T1167] ? lock_acquire+0x1f2/0x8f0 [ 391.539777][ T1167] do_filp_open+0x192/0x260 [ 391.544294][ T1167] ? may_open_dev+0xf0/0xf0 [ 391.584973][ T1167] ? do_raw_spin_lock+0x129/0x2e0 [ 391.590058][ T1167] ? _raw_spin_unlock+0x24/0x40 [ 391.615077][ T1167] ? __alloc_fd+0x46d/0x600 [ 391.619616][ T1167] do_sys_openat2+0x585/0x7d0 [ 391.624290][ T1167] ? file_open_root+0x400/0x400 [ 391.650863][ T1167] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 391.658930][ T1167] do_sys_open+0xc3/0x140 [ 391.663278][ T1167] ? filp_open+0x70/0x70 [ 391.692001][ T1167] ? switch_fpu_return+0x1db/0x4b0 [ 391.697256][ T1167] ? trace_hardirqs_off_caller+0x55/0x230 [ 391.703043][ T1167] do_syscall_64+0xf6/0x7d0 [ 391.735225][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 391.741143][ T1167] RIP: 0033:0x416800 [ 391.746502][ T1167] Code: Bad RIP value. [ 391.750578][ T1167] RSP: 002b:00007ffce5b18f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 391.775012][ T1167] RAX: ffffffffffffffda RBX: 000000000003bbaf RCX: 0000000000416800 [ 391.783039][ T1167] RDX: 00007ffce5b18fba RSI: 0000000000000002 RDI: 00007ffce5b18fb0 [ 391.833361][ T1167] RBP: 0000000000000046 R08: 0000000000000000 R09: 000000000000000a [ 391.841454][ T1167] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 391.871274][ T1167] R13: 00007ffce5b18f60 R14: 000000000003bb87 R15: 00007ffce5b18f70 [ 391.895122][ T1167] INFO: task syz-executor.3:8815 can't die for more than 144 seconds. [ 391.903287][ T1167] syz-executor.3 D26512 8815 7375 0x00004004 [ 391.934953][ T1167] Call Trace: [ 391.938279][ T1167] ? __schedule+0x937/0x1ff0 [ 391.942874][ T1167] ? __sched_text_start+0x8/0x8 [ 391.964985][ T1167] ? mark_held_locks+0xe0/0xe0 [ 391.969789][ T1167] schedule+0xd0/0x2a0 [ 391.973856][ T1167] schedule_timeout+0x55b/0x850 [ 391.994970][ T1167] ? find_held_lock+0x2d/0x110 [ 391.999763][ T1167] ? usleep_range+0x160/0x160 [ 392.004435][ T1167] ? wait_for_completion+0x162/0x270 [ 392.024943][ T1167] ? lock_downgrade+0x840/0x840 [ 392.029834][ T1167] ? do_raw_spin_lock+0x129/0x2e0 [ 392.034853][ T1167] ? rwlock_bug.part.0+0x90/0x90 [ 392.054976][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 392.060207][ T1167] wait_for_completion+0x16a/0x270 [ 392.074984][ T1167] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 392.081581][ T1167] ? get_pwq.isra.0+0x9a/0x160 [ 392.094968][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 392.100197][ T1167] __flush_work+0x4fd/0xa80 [ 392.104717][ T1167] ? queue_delayed_work_on+0x210/0x210 [ 392.144942][ T1167] ? flush_workqueue_prep_pwqs+0x4e0/0x4e0 [ 392.150790][ T1167] ? __flush_work+0x511/0xa80 [ 392.174946][ T1167] ? trace_hardirqs_off+0x50/0x220 [ 392.180098][ T1167] __cancel_work_timer+0x3a2/0x500 [ 392.194974][ T1167] ? mod_delayed_work_on+0x1f0/0x1f0 [ 392.200278][ T1167] ? rwlock_bug.part.0+0x90/0x90 [ 392.215124][ T1167] ? lock_downgrade+0x840/0x840 [ 392.220005][ T1167] ? _raw_spin_lock_irqsave+0x94/0xbf [ 392.234961][ T1167] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 392.240869][ T1167] p9_fd_close+0x29c/0x520 [ 392.255029][ T1167] p9_client_create+0x99b/0x1440 [ 392.260011][ T1167] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 392.285006][ T1167] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 392.290840][ T1167] ? __kmalloc_track_caller+0x622/0x7a0 [ 392.304973][ T1167] ? lockdep_init_map_waits+0x26a/0x890 [ 392.310694][ T1167] ? v9fs_session_init+0x1e7/0x18c0 [ 392.324955][ T1167] v9fs_session_init+0x1e7/0x18c0 [ 392.330016][ T1167] ? find_held_lock+0x2d/0x110 [ 392.334828][ T1167] ? fs_reclaim_release+0xa/0x20 [ 392.372013][ T1167] ? v9fs_show_options+0x7e0/0x7e0 [ 392.391999][ T1167] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 392.397652][ T1167] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 392.403646][ T1167] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 392.444939][ T1167] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 392.450605][ T1167] ? apparmor_cred_prepare+0x760/0x760 [ 392.464946][ T1167] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 392.470524][ T1167] ? lockdep_init_map_waits+0x26a/0x890 [ 392.484966][ T1167] v9fs_mount+0x79/0x970 [ 392.489248][ T1167] ? v9fs_write_inode+0x60/0x60 [ 392.494149][ T1167] legacy_get_tree+0x105/0x220 [ 392.515024][ T1167] ? ns_capable_common+0xe2/0x100 [ 392.520092][ T1167] vfs_get_tree+0x89/0x2f0 [ 392.524531][ T1167] do_mount+0x1306/0x1b30 [ 392.544926][ T1167] ? copy_mount_string+0x40/0x40 [ 392.549980][ T1167] ? _copy_from_user+0x13c/0x1a0 [ 392.564951][ T1167] __x64_sys_mount+0x18f/0x230 [ 392.569750][ T1167] do_syscall_64+0xf6/0x7d0 [ 392.574256][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 392.604937][ T1167] RIP: 0033:0x45ca29 [ 392.608894][ T1167] Code: Bad RIP value. [ 392.612958][ T1167] RSP: 002b:00007f028eb73c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.634932][ T1167] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 392.642933][ T1167] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 392.682050][ T1167] RBP: 000000000078bf00 R08: 0000000020000100 R09: 0000000000000000 [ 392.714988][ T1167] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 392.723010][ T1167] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f028eb746d4 [ 392.748587][ T1167] INFO: task syz-executor.3:8815 blocked for more than 144 seconds. [ 392.774946][ T1167] Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 392.782007][ T1167] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.814890][ T1167] syz-executor.3 D26512 8815 7375 0x00004004 [ 392.821258][ T1167] Call Trace: [ 392.824557][ T1167] ? __schedule+0x937/0x1ff0 [ 392.844935][ T1167] ? __sched_text_start+0x8/0x8 [ 392.849806][ T1167] ? mark_held_locks+0xe0/0xe0 [ 392.854577][ T1167] schedule+0xd0/0x2a0 [ 392.874958][ T1167] schedule_timeout+0x55b/0x850 [ 392.879849][ T1167] ? find_held_lock+0x2d/0x110 [ 392.884613][ T1167] ? usleep_range+0x160/0x160 [ 392.904893][ T1167] ? wait_for_completion+0x162/0x270 [ 392.910216][ T1167] ? lock_downgrade+0x840/0x840 [ 392.924895][ T1167] ? do_raw_spin_lock+0x129/0x2e0 [ 392.929942][ T1167] ? rwlock_bug.part.0+0x90/0x90 [ 392.944938][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 392.950172][ T1167] wait_for_completion+0x16a/0x270 [ 392.964931][ T1167] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 392.971456][ T1167] ? get_pwq.isra.0+0x9a/0x160 [ 392.994895][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 393.000130][ T1167] __flush_work+0x4fd/0xa80 [ 393.004634][ T1167] ? queue_delayed_work_on+0x210/0x210 [ 393.029595][ T1167] ? flush_workqueue_prep_pwqs+0x4e0/0x4e0 [ 393.049798][ T1167] ? __flush_work+0x511/0xa80 [ 393.054508][ T1167] ? trace_hardirqs_off+0x50/0x220 [ 393.077273][ T1167] __cancel_work_timer+0x3a2/0x500 [ 393.082417][ T1167] ? mod_delayed_work_on+0x1f0/0x1f0 [ 393.113247][ T1167] ? rwlock_bug.part.0+0x90/0x90 [ 393.131886][ T1167] ? lock_downgrade+0x840/0x840 [ 393.136890][ T1167] ? _raw_spin_lock_irqsave+0x94/0xbf [ 393.142268][ T1167] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 393.180480][ T1167] p9_fd_close+0x29c/0x520 [ 393.185062][ T1167] p9_client_create+0x99b/0x1440 [ 393.190023][ T1167] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 393.227375][ T1167] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 393.237765][ T1167] ? __kmalloc_track_caller+0x622/0x7a0 [ 393.243334][ T1167] ? lockdep_init_map_waits+0x26a/0x890 [ 393.264904][ T1167] ? v9fs_session_init+0x1e7/0x18c0 [ 393.270157][ T1167] v9fs_session_init+0x1e7/0x18c0 [ 393.284917][ T1167] ? find_held_lock+0x2d/0x110 [ 393.289718][ T1167] ? fs_reclaim_release+0xa/0x20 [ 393.294686][ T1167] ? v9fs_show_options+0x7e0/0x7e0 [ 393.314930][ T1167] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 393.320514][ T1167] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 393.362174][ T1167] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 393.368108][ T1167] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 393.373686][ T1167] ? apparmor_cred_prepare+0x760/0x760 [ 393.415003][ T1167] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 393.420610][ T1167] ? lockdep_init_map_waits+0x26a/0x890 [ 393.426241][ T1167] v9fs_mount+0x79/0x970 [ 393.430503][ T1167] ? v9fs_write_inode+0x60/0x60 [ 393.444910][ T1167] legacy_get_tree+0x105/0x220 [ 393.449752][ T1167] ? ns_capable_common+0xe2/0x100 [ 393.454783][ T1167] vfs_get_tree+0x89/0x2f0 [ 393.474934][ T1167] do_mount+0x1306/0x1b30 [ 393.494979][ T1167] ? copy_mount_string+0x40/0x40 [ 393.499954][ T1167] ? _copy_from_user+0x13c/0x1a0 [ 393.505013][ T1167] __x64_sys_mount+0x18f/0x230 [ 393.509792][ T1167] do_syscall_64+0xf6/0x7d0 [ 393.514306][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 393.534915][ T1167] RIP: 0033:0x45ca29 [ 393.538842][ T1167] Code: 48 8d 3d 32 36 23 01 e8 f5 22 00 00 eb 98 48 8d 3d 2c 36 23 01 e8 e7 22 00 00 e9 70 ff ff ff 48 8d 3d 3b 36 23 01 e8 d6 22 00 <00> e9 44 ff ff ff 48 8d 3d 22 36 23 01 e8 c5 22 00 00 e9 18 ff ff [ 393.611834][ T1167] RSP: 002b:00007f028eb73c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.621339][ T1167] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 393.648494][ T1167] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000000000000 [ 393.684895][ T1167] RBP: 000000000078bf00 R08: 0000000020000100 R09: 0000000000000000 [ 393.692912][ T1167] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 393.714866][ T1167] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f028eb746d4 [ 393.734932][ T1167] INFO: task syz-executor.4:8851 can't die for more than 145 seconds. [ 393.743190][ T1167] syz-executor.4 D26976 8851 7425 0x00004004 [ 393.764850][ T1167] Call Trace: [ 393.768184][ T1167] ? __schedule+0x937/0x1ff0 [ 393.772892][ T1167] ? __sched_text_start+0x8/0x8 [ 393.784878][ T1167] ? mark_held_locks+0xe0/0xe0 [ 393.789686][ T1167] schedule+0xd0/0x2a0 [ 393.793786][ T1167] schedule_timeout+0x55b/0x850 [ 393.816374][ T1167] ? mark_lock+0x12b/0xf10 [ 393.820914][ T1167] ? find_held_lock+0x2d/0x110 [ 393.852095][ T1167] ? usleep_range+0x160/0x160 [ 393.872444][ T1167] ? wait_for_completion+0x162/0x270 [ 393.884940][ T1167] ? print_usage_bug+0x240/0x240 [ 393.889900][ T1167] ? lock_downgrade+0x840/0x840 [ 393.894768][ T1167] ? mark_held_locks+0x9f/0xe0 [ 393.924860][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 393.930104][ T1167] wait_for_completion+0x16a/0x270 [ 393.951767][ T1167] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 393.974909][ T1167] ? mark_held_locks+0x9f/0xe0 [ 393.979707][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 393.985018][ T1167] __flush_work+0x4fd/0xa80 [ 393.989628][ T1167] ? queue_delayed_work_on+0x210/0x210 [ 394.004851][ T1167] ? mark_lock+0x12b/0xf10 [ 394.009294][ T1167] ? flush_workqueue_prep_pwqs+0x4e0/0x4e0 [ 394.024869][ T1167] ? mark_held_locks+0x9f/0xe0 [ 394.029714][ T1167] ? smp_call_function_many_cond+0x1a3/0x980 [ 394.054856][ T1167] ? queue_work_on+0xe6/0x200 [ 394.059562][ T1167] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 394.074949][ T1167] lru_add_drain_all+0x3ee/0x5b0 [ 394.079920][ T1167] ? on_each_cpu_cond_mask+0x40/0x290 [ 394.094866][ T1167] invalidate_bdev+0x96/0xd0 [ 394.099535][ T1167] __loop_clr_fd+0x38a/0xd80 [ 394.104220][ T1167] lo_ioctl+0x2b4/0x1410 [ 394.124851][ T1167] ? loop_set_fd+0x13f0/0x13f0 [ 394.129721][ T1167] blkdev_ioctl+0x25b/0x660 [ 394.134228][ T1167] ? blkdev_common_ioctl+0x1770/0x1770 [ 394.154853][ T1167] ? do_dup2+0x520/0x520 [ 394.159138][ T1167] block_ioctl+0xf9/0x140 [ 394.163903][ T1167] ? blkdev_fallocate+0x3f0/0x3f0 [ 394.184852][ T1167] ksys_ioctl+0x11a/0x180 [ 394.189212][ T1167] __x64_sys_ioctl+0x6f/0xb0 [ 394.193911][ T1167] ? lockdep_hardirqs_on+0x463/0x620 [ 394.214910][ T1167] do_syscall_64+0xf6/0x7d0 [ 394.219453][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 394.225438][ T1167] RIP: 0033:0x45c8f7 [ 394.229345][ T1167] Code: 00 e9 6d fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 5e 01 00 00 48 83 ec 20 <48> 89 6c 24 18 48 8d 6c 24 18 48 b8 00 00 00 00 00 00 f0 7f 48 89 [ 394.274814][ T1167] RSP: 002b:00007facf19fa9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.283251][ T1167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045c8f7 [ 394.314865][ T1167] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 [ 394.322874][ T1167] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000c [ 394.344816][ T1167] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000000 [ 394.364825][ T1167] R13: 0000000000000c29 R14: 00000000004c1b55 R15: 00007facf19fb6d4 [ 394.372853][ T1167] INFO: task syz-executor.4:8851 blocked for more than 146 seconds. [ 394.394821][ T1167] Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 394.401861][ T1167] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.424819][ T1167] syz-executor.4 D26976 8851 7425 0x00004004 [ 394.431184][ T1167] Call Trace: [ 394.434495][ T1167] ? __schedule+0x937/0x1ff0 [ 394.454836][ T1167] ? __sched_text_start+0x8/0x8 [ 394.459719][ T1167] ? mark_held_locks+0xe0/0xe0 [ 394.464499][ T1167] schedule+0xd0/0x2a0 [ 394.484850][ T1167] schedule_timeout+0x55b/0x850 [ 394.489748][ T1167] ? mark_lock+0x12b/0xf10 [ 394.494161][ T1167] ? find_held_lock+0x2d/0x110 [ 394.514813][ T1167] ? usleep_range+0x160/0x160 [ 394.519526][ T1167] ? wait_for_completion+0x162/0x270 [ 394.534821][ T1167] ? print_usage_bug+0x240/0x240 [ 394.540754][ T1167] ? lock_downgrade+0x840/0x840 [ 394.554824][ T1167] ? mark_held_locks+0x9f/0xe0 [ 394.559616][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 394.574842][ T1167] wait_for_completion+0x16a/0x270 [ 394.579994][ T1167] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 394.604826][ T1167] ? mark_held_locks+0x9f/0xe0 [ 394.609623][ T1167] ? _raw_spin_unlock_irq+0x1f/0x80 [ 394.624836][ T1167] __flush_work+0x4fd/0xa80 [ 394.630342][ T1167] ? queue_delayed_work_on+0x210/0x210 [ 394.644830][ T1167] ? mark_lock+0x12b/0xf10 [ 394.649278][ T1167] ? flush_workqueue_prep_pwqs+0x4e0/0x4e0 [ 394.664835][ T1167] ? mark_held_locks+0x9f/0xe0 [ 394.669627][ T1167] ? smp_call_function_many_cond+0x1a3/0x980 [ 394.684849][ T1167] ? queue_work_on+0xe6/0x200 [ 394.689549][ T1167] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 394.704813][ T1167] lru_add_drain_all+0x3ee/0x5b0 [ 394.709778][ T1167] ? on_each_cpu_cond_mask+0x40/0x290 [ 394.724815][ T1167] invalidate_bdev+0x96/0xd0 [ 394.729465][ T1167] __loop_clr_fd+0x38a/0xd80 [ 394.734062][ T1167] lo_ioctl+0x2b4/0x1410 [ 394.754838][ T1167] ? loop_set_fd+0x13f0/0x13f0 [ 394.759635][ T1167] blkdev_ioctl+0x25b/0x660 [ 394.764138][ T1167] ? blkdev_common_ioctl+0x1770/0x1770 [ 394.784812][ T1167] ? do_dup2+0x520/0x520 [ 394.789099][ T1167] block_ioctl+0xf9/0x140 [ 394.793426][ T1167] ? blkdev_fallocate+0x3f0/0x3f0 [ 394.814807][ T1167] ksys_ioctl+0x11a/0x180 [ 394.819182][ T1167] __x64_sys_ioctl+0x6f/0xb0 [ 394.823870][ T1167] ? lockdep_hardirqs_on+0x463/0x620 [ 394.844813][ T1167] do_syscall_64+0xf6/0x7d0 [ 394.849354][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 394.864795][ T1167] RIP: 0033:0x45c8f7 [ 394.868721][ T1167] Code: Bad RIP value. [ 394.872780][ T1167] RSP: 002b:00007facf19fa9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.894803][ T1167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045c8f7 [ 394.902799][ T1167] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 [ 394.924781][ T1167] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000c [ 394.932781][ T1167] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000000 [ 394.964789][ T1167] R13: 0000000000000c29 R14: 00000000004c1b55 R15: 00007facf19fb6d4 [ 394.983392][ T1167] [ 394.983392][ T1167] Showing all locks held in the system: [ 395.014975][ T1167] 3 locks held by kworker/1:0/17: [ 395.020023][ T1167] 1 lock held by khungtaskd/1167: [ 395.044875][ T1167] #0: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 395.064821][ T1167] 2 locks held by kworker/0:3/2751: [ 395.070070][ T1167] 2 locks held by systemd-udevd/4142: [ 395.084819][ T1167] #0: ffff8880a16ec880 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x179/0x1530 [ 395.094340][ T1167] #1: ffffffff8a08d7a8 (loop_ctl_mutex){+.+.}-{3:3}, at: lo_open+0x19/0xd0 [ 395.124786][ T1167] 1 lock held by in:imklog/6775: [ 395.129756][ T1167] #0: ffff8880974c3df0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 395.154882][ T1167] 1 lock held by syz-executor.0/7111: [ 395.160275][ T1167] #0: ffff8880a16ec880 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x179/0x1530 [ 395.194858][ T1167] 2 locks held by syz-executor.2/7280: [ 395.200377][ T1167] #0: ffff88808a561280 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x179/0x1530 [ 395.224773][ T1167] #1: ffffffff8a08d7a8 (loop_ctl_mutex){+.+.}-{3:3}, at: lo_open+0x19/0xd0 [ 395.233573][ T1167] 2 locks held by syz-executor.5/7515: [ 395.255128][ T1167] #0: ffff88808a563900 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x179/0x1530 [ 395.264641][ T1167] #1: ffffffff8a08d7a8 (loop_ctl_mutex){+.+.}-{3:3}, at: lo_open+0x19/0xd0 [ 395.314910][ T1167] 2 locks held by syz-executor.4/8851: [ 395.320398][ T1167] #0: ffffffff8a08d7a8 (loop_ctl_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0x86/0xd80 [ 395.348639][ T1167] #1: ffffffff89a3f3e8 (lock#7){+.+.}-{3:3}, at: lru_add_drain_all+0x59/0x5b0 [ 395.374878][ T1167] [ 395.377244][ T1167] ============================================= [ 395.377244][ T1167] [ 395.394872][ T1167] NMI backtrace for cpu 1 [ 395.399230][ T1167] CPU: 1 PID: 1167 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 395.408674][ T1167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.418719][ T1167] Call Trace: [ 395.422061][ T1167] dump_stack+0x188/0x20d [ 395.426428][ T1167] nmi_cpu_backtrace.cold+0x70/0xb1 [ 395.431682][ T1167] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 395.437313][ T1167] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 395.443327][ T1167] watchdog+0xde3/0x14e0 [ 395.447572][ T1167] ? reset_hung_task_detector+0x30/0x30 [ 395.453151][ T1167] kthread+0x388/0x470 [ 395.464431][ T1167] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 395.470151][ T1167] ret_from_fork+0x24/0x30 [ 395.474959][ T1167] Sending NMI from CPU 1 to CPUs 0: [ 395.480601][ C0] NMI backtrace for cpu 0 [ 395.480608][ C0] CPU: 0 PID: 592 Comm: kworker/u4:4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 395.480614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.480618][ C0] Workqueue: bat_events batadv_nc_worker [ 395.480624][ C0] RIP: 0010:__lock_acquire+0x77f/0x4c50 [ 395.480635][ C0] Code: 20 66 81 e2 ff 1f 0f b7 ea be 08 00 00 00 48 89 e8 48 c1 f8 06 48 8d 3c c5 e0 39 31 8c e8 e9 03 58 00 48 0f a3 2d d1 13 d8 0a <0f> 82 36 ff ff ff 48 c7 c0 60 11 69 8c 48 c1 e8 03 42 0f b6 14 38 [ 395.480638][ C0] RSP: 0018:ffffc900024e7a68 EFLAGS: 00000047 [ 395.480646][ C0] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff81592607 [ 395.480651][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8c313aa0 [ 395.480655][ C0] RBP: 0000000000000627 R08: 0000000000000000 R09: fffffbfff1862755 [ 395.480660][ C0] R10: ffffffff8c313aa7 R11: fffffbfff1862754 R12: ffff8880a7e28500 [ 395.480665][ C0] R13: 000000000000002c R14: 0000000000000001 R15: dffffc0000000000 [ 395.480670][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 395.480674][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.480679][ C0] CR2: 000000000045c8cd CR3: 00000000a7147000 CR4: 00000000001406f0 [ 395.480684][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.480689][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.480691][ C0] Call Trace: [ 395.480694][ C0] ? check_irq_usage+0x71/0xbe0 [ 395.480698][ C0] ? mark_held_locks+0xe0/0xe0 [ 395.480701][ C0] ? debug_object_deactivate+0x1dd/0x320 [ 395.480704][ C0] ? mark_held_locks+0xe0/0xe0 [ 395.480708][ C0] lock_acquire+0x1f2/0x8f0 [ 395.480711][ C0] ? batadv_nc_worker+0xe0/0x760 [ 395.480719][ C0] ? lock_release+0x800/0x800 [ 395.480723][ C0] ? process_one_work+0x878/0x16a0 [ 395.480726][ C0] ? lock_downgrade+0x840/0x840 [ 395.480729][ C0] batadv_nc_worker+0x114/0x760 [ 395.480733][ C0] ? batadv_nc_worker+0xe0/0x760 [ 395.480736][ C0] process_one_work+0x965/0x16a0 [ 395.480740][ C0] ? lock_release+0x800/0x800 [ 395.480743][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 395.480747][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 395.480750][ C0] worker_thread+0x96/0xe20 [ 395.480753][ C0] ? process_one_work+0x16a0/0x16a0 [ 395.480756][ C0] kthread+0x388/0x470 [ 395.480760][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 395.480763][ C0] ret_from_fork+0x24/0x30 [ 395.574903][ T1167] Kernel panic - not syncing: hung_task: blocked tasks [ 395.728728][ T1167] CPU: 1 PID: 1167 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 395.738185][ T1167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.748248][ T1167] Call Trace: [ 395.751541][ T1167] dump_stack+0x188/0x20d [ 395.755942][ T1167] panic+0x2e3/0x75c [ 395.759839][ T1167] ? add_taint.cold+0x16/0x16 [ 395.764516][ T1167] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 395.770145][ T1167] ? preempt_schedule_thunk+0x16/0x18 [ 395.775512][ T1167] ? watchdog+0xde3/0x14e0 [ 395.779931][ T1167] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 395.786082][ T1167] watchdog+0xdf4/0x14e0 [ 395.790331][ T1167] ? reset_hung_task_detector+0x30/0x30 [ 395.795871][ T1167] kthread+0x388/0x470 [ 395.799935][ T1167] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 395.805651][ T1167] ret_from_fork+0x24/0x30 [ 395.811683][ T1167] Kernel Offset: disabled [ 395.816189][ T1167] Rebooting in 86400 seconds..