[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.186' (ECDSA) to the list of known hosts. 2020/06/17 18:10:37 fuzzer started 2020/06/17 18:10:37 dialing manager at 10.128.0.105:40489 2020/06/17 18:10:37 syscalls: 3085 2020/06/17 18:10:37 code coverage: enabled 2020/06/17 18:10:37 comparison tracing: enabled 2020/06/17 18:10:37 extra coverage: enabled 2020/06/17 18:10:37 setuid sandbox: enabled 2020/06/17 18:10:37 namespace sandbox: enabled 2020/06/17 18:10:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/17 18:10:37 fault injection: enabled 2020/06/17 18:10:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/17 18:10:37 net packet injection: enabled 2020/06/17 18:10:37 net device setup: enabled 2020/06/17 18:10:37 concurrency sanitizer: enabled 2020/06/17 18:10:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/17 18:10:37 USB emulation: enabled syzkaller login: [ 57.917655][ T8921] KCSAN: could not find function: 'poll_schedule_timeout' [ 58.878628][ T8921] KCSAN: could not find function: '_find_next_bit' 2020/06/17 18:10:43 suppressing KCSAN reports in functions: 'ep_poll' 'ext4_sync_file' 'mod_timer' 'kcm_rfree' 'do_syslog' 'tick_sched_do_timer' '__ext4_new_inode' 'generic_fillattr' '__rb_rotate_set_parents' '__x64_sys_ptrace' 'snd_seq_check_queue' 'dd_has_work' 'page_counter_charge' 'xas_find_marked' 'complete_signal' 'ext4_free_inodes_count' 'generic_write_end' 'do_nanosleep' 'vm_area_dup' 'audit_log_start' 'copy_process' 'pcpu_alloc' 'poll_schedule_timeout' 'blk_mq_sched_dispatch_requests' 'find_get_pages_range_tag' 'do_signal_stop' 'file_update_time' '_find_next_bit' 'tick_nohz_idle_stop_tick' 'n_tty_receive_buf_common' 'alloc_pid' '__writeback_single_inode' 'shmem_file_read_iter' 'run_timer_softirq' 'futex_wait_queue_me' 'blk_mq_dispatch_rq_list' '__delete_from_page_cache' 'xas_clear_mark' 'add_timer' 'ktime_get_real_seconds' 'ext4_mark_iloc_dirty' 18:14:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8, 0x2000000021d, 0x0, 0xffffffffffffffff}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/22, 0x16}, {0x0}], 0x4}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000006c0)={0x7fffffff, 0x20000000219}) [ 258.313829][ T8923] IPVS: ftp: loaded support on port[0] = 21 18:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r1}, &(0x7f0000000700)=""/250, 0xfa, 0x0) [ 258.412881][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 258.471891][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.488909][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.509742][ T8923] device bridge_slave_0 entered promiscuous mode [ 258.517897][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.538877][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.558915][ T8923] device bridge_slave_1 entered promiscuous mode [ 258.572849][ T9053] IPVS: ftp: loaded support on port[0] = 21 [ 258.592914][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.621295][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.656450][ T8923] team0: Port device team_slave_0 added [ 258.671645][ T8923] team0: Port device team_slave_1 added [ 258.721188][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.728245][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.768846][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.792226][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 18:14:02 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) [ 258.802397][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.829848][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.861566][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 258.920728][ T8923] device hsr_slave_0 entered promiscuous mode [ 258.969144][ T8923] device hsr_slave_1 entered promiscuous mode [ 259.027134][ T9194] IPVS: ftp: loaded support on port[0] = 21 18:14:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 259.092164][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.102718][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.111132][ T9053] device bridge_slave_0 entered promiscuous mode [ 259.142499][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.151029][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.158724][ T9053] device bridge_slave_1 entered promiscuous mode [ 259.248086][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.268958][ T8923] netdevsim netdevsim0 netdevsim0: renamed from eth0 18:14:02 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) close(0xffffffffffffffff) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) timerfd_gettime(r0, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r1) shmctl$SHM_UNLOCK(0x0, 0xc) [ 259.322243][ T8923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.419137][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.455737][ T9300] IPVS: ftp: loaded support on port[0] = 21 [ 259.464796][ T8923] netdevsim netdevsim0 netdevsim2: renamed from eth2 18:14:03 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000340)=""/229, 0xe5}, {0x0}], 0x3, 0x0) [ 259.581186][ T8923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.663919][ T9053] team0: Port device team_slave_0 added [ 259.666915][ T9335] IPVS: ftp: loaded support on port[0] = 21 [ 259.680356][ T9194] chnl_net:caif_netlink_parms(): no params data found [ 259.699085][ T9053] team0: Port device team_slave_1 added [ 259.742263][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.753205][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.780196][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.806919][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.814053][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.843207][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.920025][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.923784][ T9417] IPVS: ftp: loaded support on port[0] = 21 [ 259.927127][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.942102][ T9194] device bridge_slave_0 entered promiscuous mode [ 259.954276][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.961802][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.969920][ T9194] device bridge_slave_1 entered promiscuous mode [ 259.980747][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 260.040588][ T9053] device hsr_slave_0 entered promiscuous mode [ 260.109110][ T9053] device hsr_slave_1 entered promiscuous mode [ 260.148854][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.156529][ T9053] Cannot create hsr debugfs directory [ 260.197399][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.209273][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.260221][ T9194] team0: Port device team_slave_0 added [ 260.300420][ T9194] team0: Port device team_slave_1 added [ 260.334720][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 260.374280][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.382055][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.409595][ T9194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.425424][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.432837][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.459732][ T9194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.471243][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.478287][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.486706][ T9300] device bridge_slave_0 entered promiscuous mode [ 260.515403][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.525087][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.532994][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.541072][ T9300] device bridge_slave_1 entered promiscuous mode [ 260.589601][ T9417] chnl_net:caif_netlink_parms(): no params data found [ 260.609093][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.623505][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.630594][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.638238][ T9335] device bridge_slave_0 entered promiscuous mode [ 260.648130][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.655691][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.663799][ T9335] device bridge_slave_1 entered promiscuous mode [ 260.740834][ T9194] device hsr_slave_0 entered promiscuous mode [ 260.769046][ T9194] device hsr_slave_1 entered promiscuous mode [ 260.818879][ T9194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.826574][ T9194] Cannot create hsr debugfs directory [ 260.839281][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.868677][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.885553][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.908567][ T9300] team0: Port device team_slave_0 added [ 260.929615][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.937249][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.946196][ T9335] team0: Port device team_slave_0 added [ 260.954183][ T9053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.011241][ T9300] team0: Port device team_slave_1 added [ 261.016962][ T9053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.086126][ T9335] team0: Port device team_slave_1 added [ 261.095136][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.106408][ T9053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.152438][ T9053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.221502][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.228540][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.236767][ T9417] device bridge_slave_0 entered promiscuous mode [ 261.248005][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.255381][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.263303][ T9417] device bridge_slave_1 entered promiscuous mode [ 261.301140][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.308217][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.336403][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.352873][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.360046][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.386530][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.410032][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.419718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.428261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.435362][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.443260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.452459][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.459964][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.486611][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.499571][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.506639][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.535008][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.547707][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.569052][ T9194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.671447][ T9300] device hsr_slave_0 entered promiscuous mode [ 261.699802][ T9300] device hsr_slave_1 entered promiscuous mode [ 261.748939][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.756496][ T9300] Cannot create hsr debugfs directory [ 261.763643][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.772926][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.781478][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.788596][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.800116][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.814824][ T9194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.873667][ T9194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.934630][ T9194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.994346][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.005801][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.029230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.038183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.047377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.056442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.065196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.074058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.082569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.090931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.110065][ T9417] team0: Port device team_slave_0 added [ 262.141973][ T9335] device hsr_slave_0 entered promiscuous mode [ 262.199386][ T9335] device hsr_slave_1 entered promiscuous mode [ 262.238816][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.246408][ T9335] Cannot create hsr debugfs directory [ 262.255940][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.270015][ T9417] team0: Port device team_slave_1 added [ 262.280501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.346494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.354678][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.364117][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.372160][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.398393][ T9417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.410750][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.437041][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.444217][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.470501][ T9417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.560968][ T9417] device hsr_slave_0 entered promiscuous mode [ 262.609142][ T9417] device hsr_slave_1 entered promiscuous mode [ 262.648883][ T9417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.656449][ T9417] Cannot create hsr debugfs directory [ 262.694701][ T9300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.733144][ T9300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.783211][ T9300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.852025][ T9300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.919912][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.930736][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.948222][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.976525][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.003380][ T9335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.056453][ T8923] device veth0_vlan entered promiscuous mode [ 263.082689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.091675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.103231][ T9335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.171867][ T9335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.235467][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.242553][ T9417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.290651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.299190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.307214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.317303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.325697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.335236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.348254][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.357037][ T9335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.392218][ T8923] device veth1_vlan entered promiscuous mode [ 263.400054][ T9417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.452190][ T9417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.523909][ T9417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.595211][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.604292][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.612858][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.622063][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.630958][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.638027][ T9550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.646144][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.655260][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.663909][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.671054][ T9550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.680034][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.687988][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.720549][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.731776][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.740527][ T4111] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.747582][ T4111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.758186][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.767643][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.776463][ T4111] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.783576][ T4111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.791434][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.823252][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.831956][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.852376][ T8923] device veth0_macvtap entered promiscuous mode [ 263.863508][ T8923] device veth1_macvtap entered promiscuous mode [ 263.882845][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.891059][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.901896][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.910647][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.921512][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.930766][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.939490][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.948167][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.956908][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.966839][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.991669][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.999322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.007969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.018155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.027113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.036299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.058845][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.067563][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.079736][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.088335][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.104363][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.115533][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.130089][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.147710][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.157769][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.167030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.175742][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.184642][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.203393][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.220240][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.229442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.237805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.246895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.255740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.276323][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.340971][ T9194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.348763][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.356398][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.364368][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.372569][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.381689][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.389466][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.399509][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.408981][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.570141][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.579946][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.588272][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.595379][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.604259][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.613562][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.622754][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.629911][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.640725][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.650203][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.659715][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.666748][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.676497][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.694295][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.724915][ C1] hrtimer: interrupt took 24368 ns [ 264.738221][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.759492][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.767462][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.776621][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.785057][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.794940][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.807194][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.814300][T10014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.826285][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.834598][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.845189][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.854862][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.866873][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.891473][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.902686][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.913013][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.925132][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.934735][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.946274][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.957163][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.968444][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.988482][ T9194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.005797][ T9335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.029585][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.039248][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.047816][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.057257][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.066550][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.075746][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.082924][T10014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.130157][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.142788][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.152987][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.165755][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.175054][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.187194][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.196227][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.207836][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.215024][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.227108][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.236771][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.249524][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.262300][ T9053] device veth0_vlan entered promiscuous mode [ 265.305280][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.317832][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.327354][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.341144][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.351851][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.361595][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.374144][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.384079][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.395227][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.405438][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.425946][ T9053] device veth1_vlan entered promiscuous mode [ 265.447065][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:14:08 executing program 0: [ 265.466130][ T9194] device veth0_vlan entered promiscuous mode [ 265.485075][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.493034][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.504062][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.512802][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.523775][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.541461][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.558760][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 18:14:09 executing program 0: [ 265.578024][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.596340][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.614188][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 18:14:09 executing program 0: [ 265.633262][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.650500][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.671142][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.681567][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.704465][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.717858][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.731015][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:14:09 executing program 0: [ 265.755586][ T9194] device veth1_vlan entered promiscuous mode [ 265.784360][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.803943][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.825914][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.837283][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 18:14:09 executing program 0: [ 265.856158][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.879993][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.887476][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.916860][ T9053] device veth0_macvtap entered promiscuous mode [ 265.947642][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.957448][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:14:09 executing program 0: [ 265.972296][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.980279][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.991507][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.003232][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.037515][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.063398][ T9053] device veth1_macvtap entered promiscuous mode 18:14:09 executing program 0: [ 266.091256][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.112051][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.131415][ T9194] device veth0_macvtap entered promiscuous mode [ 266.175211][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.184145][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.193962][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.212691][ T9194] device veth1_macvtap entered promiscuous mode [ 266.223794][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.236061][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.247643][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.263866][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.272240][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.283445][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.292340][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.302987][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.314642][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.325796][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.337731][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.353447][ T9300] device veth0_vlan entered promiscuous mode [ 266.364808][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.373729][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.382583][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.391191][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.400078][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.408160][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.435142][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.443092][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.456604][ T9417] device veth0_vlan entered promiscuous mode [ 266.469985][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.480654][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.490714][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.501161][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.512340][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.523292][ T9300] device veth1_vlan entered promiscuous mode [ 266.530885][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.540226][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.548371][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.558192][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.568218][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.673513][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.684426][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.695029][ T9194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.705721][ T9194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.717371][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.730654][ T9417] device veth1_vlan entered promiscuous mode [ 266.739033][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.746765][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.755505][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.763904][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.772384][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.781157][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.789990][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.799176][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.806993][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.836096][ T9335] device veth0_vlan entered promiscuous mode [ 267.006901][ T9335] device veth1_vlan entered promiscuous mode [ 267.051634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.066484][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.089367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.097590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.119394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.229915][ T9300] device veth0_macvtap entered promiscuous mode [ 267.247106][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.276318][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.312240][ T9417] device veth0_macvtap entered promiscuous mode [ 267.326242][ T9300] device veth1_macvtap entered promiscuous mode [ 267.353681][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.365256][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.387464][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.413384][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.423725][T10215] ntfs: (device loop2): parse_options(): The errors option requires an argument. [ 267.446138][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.476201][ T9417] device veth1_macvtap entered promiscuous mode [ 267.503153][ T9335] device veth0_macvtap entered promiscuous mode [ 267.515506][T10215] ntfs: (device loop2): parse_options(): The errors option requires an argument. [ 267.542784][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.567634][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.580958][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.592918][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.605867][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.617604][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.632806][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.644408][ T9335] device veth1_macvtap entered promiscuous mode [ 267.658597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.666838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.702854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.724320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.750142][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.790480][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.806478][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.830778][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:14:11 executing program 1: 18:14:11 executing program 0: [ 267.856370][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.866905][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.896080][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.930713][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.945007][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.014471][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.027414][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.037424][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.047869][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.057938][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.068508][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.078320][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.089356][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.100528][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.109291][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.123580][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.133875][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.147963][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.158217][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.173220][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.198538][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.227583][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.241340][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.252891][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.267282][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.289825][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.299279][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.309710][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.319128][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.331485][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.347610][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.358368][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.369320][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.379455][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.389907][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.400382][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.411152][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.422153][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.434039][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.447286][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.457596][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.468400][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.478379][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.489703][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.499588][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.510116][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.519997][ T9417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.530471][ T9417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.542204][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.557005][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.567444][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.577225][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.588075][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.923656][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.935121][T10238] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.947336][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.009985][T10238] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 18:14:12 executing program 3: [ 269.215163][T10242] IPVS: ftp: loaded support on port[0] = 21 18:14:12 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) close(0xffffffffffffffff) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) timerfd_gettime(r0, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r1) shmctl$SHM_UNLOCK(0x0, 0xc) 18:14:12 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:12 executing program 0: [ 269.411106][T10256] IPVS: ftp: loaded support on port[0] = 21 18:14:12 executing program 3: 18:14:12 executing program 1: 18:14:12 executing program 5: 18:14:13 executing program 1: 18:14:13 executing program 0: 18:14:13 executing program 5: [ 269.554288][T10297] ntfs: (device loop2): parse_options(): The errors option requires an argument. 18:14:13 executing program 3: 18:14:13 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) [ 269.678635][ T572] tipc: TX() has been purged, node left! 18:14:13 executing program 1: [ 269.818443][ T572] tipc: TX() has been purged, node left! [ 269.823949][T10313] ntfs: (device loop2): parse_options(): The errors option requires an argument. 18:14:14 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) close(0xffffffffffffffff) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) timerfd_gettime(r0, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r1) shmctl$SHM_UNLOCK(0x0, 0xc) 18:14:14 executing program 3: 18:14:14 executing program 5: 18:14:14 executing program 0: 18:14:14 executing program 1: 18:14:14 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:14 executing program 3: 18:14:14 executing program 0: 18:14:14 executing program 5: 18:14:14 executing program 1: [ 271.225407][T10334] ntfs: (device loop2): parse_options(): The errors option requires an argument. [ 271.334796][T10338] IPVS: ftp: loaded support on port[0] = 21 18:14:14 executing program 5: 18:14:14 executing program 1: 18:14:15 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:15 executing program 0: 18:14:15 executing program 5: 18:14:15 executing program 3: 18:14:15 executing program 4: 18:14:15 executing program 1: 18:14:15 executing program 0: 18:14:15 executing program 4: 18:14:15 executing program 1: 18:14:15 executing program 0: 18:14:15 executing program 5: [ 271.839045][ T278] tipc: TX() has been purged, node left! 18:14:15 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:15 executing program 3: 18:14:15 executing program 4: 18:14:15 executing program 1: 18:14:15 executing program 5: 18:14:15 executing program 3: 18:14:15 executing program 0: 18:14:15 executing program 4: 18:14:15 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:15 executing program 5: 18:14:15 executing program 3: 18:14:15 executing program 1: 18:14:15 executing program 0: 18:14:15 executing program 4: 18:14:15 executing program 1: 18:14:15 executing program 5: 18:14:15 executing program 3: 18:14:15 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:15 executing program 0: 18:14:15 executing program 4: 18:14:16 executing program 1: 18:14:16 executing program 5: 18:14:16 executing program 0: 18:14:16 executing program 3: 18:14:16 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) 18:14:16 executing program 4: 18:14:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:14:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x0, 0xb0, 0xb0, 0xb0, 0x2b8, 0x1a8, 0x1a8, 0x2b8, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x78}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 18:14:16 executing program 0: 18:14:16 executing program 3: 18:14:16 executing program 4: 18:14:16 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_files=no,errors=']) [ 272.911579][T10434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:14:16 executing program 5: 18:14:16 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="d7", 0x1}], 0x0, 0x0) 18:14:16 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 18:14:16 executing program 4: mlockall(0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() 18:14:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) 18:14:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [ 273.169219][T10452] kAFS: unparsable volume name 18:14:16 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 273.257600][T10462] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 273.259300][T10461] kAFS: unparsable volume name 18:14:16 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x11, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/40, 0x2c}, {&(0x7f00000001c0)=""/56, 0x43}, {&(0x7f0000000240)=""/198, 0xd1}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000003c0)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/31, 0x2a}, {&(0x7f0000000a00)=""/68, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 18:14:16 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="d7", 0x1}], 0x0, 0x0) [ 273.418355][T10472] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 273.591514][T10481] kAFS: unparsable volume name 18:14:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:14:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:17 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="d7", 0x1}], 0x0, 0x0) 18:14:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) [ 273.879983][T10493] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 273.889395][T10494] atomic_op 000000007a774609 conn xmit_atomic 00000000d42fce10 [ 273.981224][T10500] kAFS: unparsable volume name 18:14:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 274.013037][T10505] atomic_op 00000000f756e2e1 conn xmit_atomic 00000000d42fce10 18:14:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 18:14:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x80000001}}]}) 18:14:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [ 274.272970][T10514] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 18:14:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) [ 274.402935][T10525] atomic_op 000000001fe1fad7 conn xmit_atomic 00000000d42fce10 [ 274.437525][T10524] hfs: session requires an argument [ 274.445569][T10524] hfs: unable to parse mount options 18:14:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) [ 274.486401][T10532] atomic_op 000000004f30bdfd conn xmit_atomic 00000000d42fce10 18:14:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(0x0, 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 274.553893][T10538] atomic_op 00000000369ebdf0 conn xmit_atomic 00000000d42fce10 18:14:18 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f00000001c0)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) getpgrp(r1) [ 274.668465][T10545] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 274.677939][T10547] atomic_op 00000000d1a155e6 conn xmit_atomic 00000000d42fce10 [ 274.703295][T10552] atomic_op 000000006cec9fe3 conn xmit_atomic 00000000d42fce10 18:14:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) [ 274.726104][T10551] atomic_op 000000004f30bdfd conn xmit_atomic 00000000d42fce10 18:14:18 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) [ 274.802784][T10559] atomic_op 000000006c1262a6 conn xmit_atomic 00000000d42fce10 [ 274.861955][T10564] atomic_op 000000007a4b627e conn xmit_atomic 00000000d42fce10 [ 274.869470][T10567] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 274.907023][ T27] audit: type=1804 audit(1592417658.341:2): pid=10569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir849030633/syzkaller.ytDJXA/25/bus" dev="sda1" ino=15813 res=1 18:14:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:14:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x2}, &(0x7f0000000680)=0x9, &(0x7f0000000800), 0x8, 0xfb95, 0x0, 0x0, 0x48, 0x3}}], 0x58}, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockname$netrom(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @bcast, @rose, @remote, @default, @default, @rose, @netrom]}, &(0x7f0000000640)=0x48) 18:14:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x0, 0xb0, 0xb0, 0xb0, 0x2b8, 0x1a8, 0x1a8, 0x2b8, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x4, 0x2, 0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 18:14:18 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 18:14:18 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18:14:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 275.334782][T10585] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 18:14:18 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) [ 275.506711][T10598] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 275.643093][ T27] audit: type=1804 audit(1592417659.081:3): pid=10606 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir275212465/syzkaller.kYyXQv/18/bus" dev="sda1" ino=15793 res=1 18:14:19 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 18:14:19 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) 18:14:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)) 18:14:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:14:19 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) [ 275.790754][T10614] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 18:14:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)) 18:14:19 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="0100030000210b6b7a0067cdf5"], 0x40}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x400) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/39) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000007c0)=""/4096) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:14:19 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]) 18:14:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)) 18:14:19 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_file']) 18:14:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r3, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @dev}, r4, 0x4}}, 0x48) dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) 18:14:20 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)) 18:14:20 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 18:14:20 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)) 18:14:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:14:20 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_file']) 18:14:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r3, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @dev}, r4, 0x4}}, 0x48) dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) 18:14:20 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)) 18:14:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:14:20 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='show_sys_file']) 18:14:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="0100030000210b6b7a0067cdf5"], 0x40}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x400) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/39) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000007c0)=""/4096) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18:14:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r3, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @dev}, r4, 0x4}}, 0x48) dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) [ 277.309266][T10685] ================================================================== [ 277.317430][T10685] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 277.325323][T10685] [ 277.327662][T10685] write to 0xffff8880b7554240 of 8 bytes by task 10687 on cpu 0: [ 277.335385][T10685] __mark_inode_dirty+0x5e6/0x940 [ 277.340422][T10685] generic_update_time+0x184/0x270 [ 277.345536][T10685] update_time+0x7d/0x90 [ 277.349781][T10685] file_update_time+0x205/0x2d0 [ 277.354629][T10685] file_modified+0x60/0x80 [ 277.359045][T10685] ext4_write_checks+0x4a/0x70 [ 277.363810][T10685] ext4_buffered_write_iter+0x87/0x280 [ 277.369270][T10685] ext4_file_write_iter+0xf4/0xd30 [ 277.374387][T10685] do_iter_readv_writev+0x4a7/0x5d0 [ 277.379589][T10685] do_iter_write+0x137/0x3a0 [ 277.384183][T10685] vfs_iter_write+0x56/0x80 [ 277.388699][T10685] iter_file_splice_write+0x530/0x830 [ 277.394089][T10685] direct_splice_actor+0x97/0xb0 [ 277.399037][T10685] splice_direct_to_actor+0x22f/0x540 [ 277.404420][T10685] do_splice_direct+0x152/0x1d0 [ 277.409288][T10685] do_sendfile+0x380/0x800 [ 277.413720][T10685] __x64_sys_sendfile64+0xb8/0x140 [ 277.418851][T10685] do_syscall_64+0xc7/0x3b0 [ 277.423388][T10685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.429271][T10685] [ 277.431645][T10685] read to 0xffff8880b7554240 of 8 bytes by task 10685 on cpu 1: [ 277.439294][T10685] __mark_inode_dirty+0xb6/0x940 [ 277.444343][T10685] generic_update_time+0x184/0x270 [ 277.449468][T10685] update_time+0x7d/0x90 [ 277.453727][T10685] touch_atime+0x13f/0x150 [ 277.458175][T10685] generic_file_read_iter+0x12fa/0x18c0 [ 277.463728][T10685] ext4_file_read_iter+0x103/0x360 [ 277.468858][T10685] generic_file_splice_read+0x2df/0x470 [ 277.474421][T10685] do_splice_to+0xc7/0x100 [ 277.478859][T10685] splice_direct_to_actor+0x1b9/0x540 [ 277.484248][T10685] do_splice_direct+0x152/0x1d0 [ 277.489111][T10685] do_sendfile+0x380/0x800 [ 277.493536][T10685] __x64_sys_sendfile64+0x121/0x140 [ 277.498751][T10685] do_syscall_64+0xc7/0x3b0 [ 277.503262][T10685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.509164][T10685] [ 277.511486][T10685] Reported by Kernel Concurrency Sanitizer on: [ 277.517753][T10685] CPU: 1 PID: 10685 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 277.526421][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.536481][T10685] ================================================================== [ 277.544571][T10685] Kernel panic - not syncing: panic_on_warn set ... [ 277.551170][T10685] CPU: 1 PID: 10685 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 277.559844][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.569900][T10685] Call Trace: [ 277.573235][T10685] dump_stack+0x11d/0x187 [ 277.577586][T10685] panic+0x210/0x640 [ 277.581495][T10685] ? vprintk_func+0x89/0x13a [ 277.586099][T10685] kcsan_report.cold+0xc/0x1a [ 277.590929][T10685] kcsan_setup_watchpoint+0x3fb/0x440 [ 277.596328][T10685] __mark_inode_dirty+0xb6/0x940 [ 277.601310][T10685] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 277.607250][T10685] generic_update_time+0x184/0x270 [ 277.612399][T10685] update_time+0x7d/0x90 [ 277.616661][T10685] touch_atime+0x13f/0x150 [ 277.621098][T10685] generic_file_read_iter+0x12fa/0x18c0 [ 277.626872][T10685] ext4_file_read_iter+0x103/0x360 [ 277.632032][T10685] generic_file_splice_read+0x2df/0x470 [ 277.637634][T10685] ? add_to_pipe+0x1b0/0x1b0 [ 277.642245][T10685] do_splice_to+0xc7/0x100 [ 277.646680][T10685] splice_direct_to_actor+0x1b9/0x540 [ 277.652200][T10685] ? generic_pipe_buf_nosteal+0x20/0x20 [ 277.657793][T10685] do_splice_direct+0x152/0x1d0 [ 277.662675][T10685] do_sendfile+0x380/0x800 [ 277.667115][T10685] __x64_sys_sendfile64+0x121/0x140 [ 277.672360][T10685] do_syscall_64+0xc7/0x3b0 [ 277.676955][T10685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.682853][T10685] RIP: 0033:0x45ca59 [ 277.686787][T10685] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.706404][T10685] RSP: 002b:00007f9b28b7fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 277.714830][T10685] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 277.722815][T10685] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007 [ 277.730799][T10685] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 277.738780][T10685] R10: 00008400fffffffb R11: 0000000000000246 R12: 00000000ffffffff [ 277.746764][T10685] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f9b28b806d4 [ 277.756070][T10685] Kernel Offset: disabled [ 277.760401][T10685] Rebooting in 86400 seconds..