[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. 2020/04/08 10:57:06 fuzzer started 2020/04/08 10:57:08 dialing manager at 10.128.0.26:35445 2020/04/08 10:57:08 syscalls: 3028 2020/04/08 10:57:08 code coverage: enabled 2020/04/08 10:57:08 comparison tracing: enabled 2020/04/08 10:57:08 extra coverage: enabled 2020/04/08 10:57:08 setuid sandbox: enabled 2020/04/08 10:57:08 namespace sandbox: enabled 2020/04/08 10:57:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/08 10:57:08 fault injection: enabled 2020/04/08 10:57:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/08 10:57:08 net packet injection: enabled 2020/04/08 10:57:08 net device setup: enabled 2020/04/08 10:57:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/08 10:57:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/08 10:57:08 USB emulation: /dev/raw-gadget does not exist 10:58:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0, 0xc0010055]}) syzkaller login: [ 119.820980][ T7024] IPVS: ftp: loaded support on port[0] = 21 10:58:24 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 119.940965][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 120.019983][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.027560][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.049879][ T7024] device bridge_slave_0 entered promiscuous mode [ 120.070003][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.088883][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.096863][ T7024] device bridge_slave_1 entered promiscuous mode [ 120.137024][ T7154] IPVS: ftp: loaded support on port[0] = 21 [ 120.140621][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.173020][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:58:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca0899ee39576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000ee4e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) [ 120.224454][ T7024] team0: Port device team_slave_0 added [ 120.252112][ T7024] team0: Port device team_slave_1 added [ 120.298273][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.307124][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.336969][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.383385][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.390955][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.418973][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.487968][ T7154] chnl_net:caif_netlink_parms(): no params data found 10:58:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 120.553555][ T7024] device hsr_slave_0 entered promiscuous mode [ 120.610056][ T7024] device hsr_slave_1 entered promiscuous mode [ 120.705897][ T7289] IPVS: ftp: loaded support on port[0] = 21 [ 120.832520][ T7329] IPVS: ftp: loaded support on port[0] = 21 [ 120.849906][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.856994][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.868157][ T7154] device bridge_slave_0 entered promiscuous mode 10:58:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c001000080001"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 120.911878][ T7154] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.932333][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.940712][ T7154] device bridge_slave_1 entered promiscuous mode [ 121.060314][ T7154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.099910][ T7154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.119257][ T7024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.174156][ T7024] netdevsim netdevsim0 netdevsim1: renamed from eth1 10:58:25 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) [ 121.294891][ T7024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.327115][ T7154] team0: Port device team_slave_0 added [ 121.329839][ T7458] IPVS: ftp: loaded support on port[0] = 21 [ 121.380218][ T7024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.449748][ T7154] team0: Port device team_slave_1 added [ 121.458759][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 121.516252][ T7329] chnl_net:caif_netlink_parms(): no params data found [ 121.536831][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.545421][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.574595][ T7154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.602477][ T7545] IPVS: ftp: loaded support on port[0] = 21 [ 121.617166][ T7154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.624338][ T7154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.650821][ T7154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.686156][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.693344][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.701605][ T7289] device bridge_slave_0 entered promiscuous mode [ 121.727770][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.737713][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.747685][ T7289] device bridge_slave_1 entered promiscuous mode [ 121.767467][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.794373][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.901609][ T7154] device hsr_slave_0 entered promiscuous mode [ 121.929037][ T7154] device hsr_slave_1 entered promiscuous mode [ 121.978909][ T7154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.986672][ T7154] Cannot create hsr debugfs directory [ 122.005038][ T7289] team0: Port device team_slave_0 added [ 122.017392][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.024908][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.033297][ T7329] device bridge_slave_0 entered promiscuous mode [ 122.067662][ T7289] team0: Port device team_slave_1 added [ 122.094357][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.101889][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.110018][ T7329] device bridge_slave_1 entered promiscuous mode [ 122.136519][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.145232][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.172789][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.196464][ T7458] chnl_net:caif_netlink_parms(): no params data found [ 122.217179][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.225901][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.252013][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.265348][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.304781][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.322514][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.414780][ T7329] team0: Port device team_slave_0 added [ 122.461303][ T7289] device hsr_slave_0 entered promiscuous mode [ 122.509406][ T7289] device hsr_slave_1 entered promiscuous mode [ 122.548993][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.556554][ T7289] Cannot create hsr debugfs directory [ 122.576686][ T7329] team0: Port device team_slave_1 added [ 122.614362][ T7545] chnl_net:caif_netlink_parms(): no params data found [ 122.625028][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.632593][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.658646][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.679965][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.687059][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.696746][ T7458] device bridge_slave_0 entered promiscuous mode [ 122.708389][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.715571][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.724545][ T7458] device bridge_slave_1 entered promiscuous mode [ 122.734508][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.746110][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.759574][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.777667][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.787723][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.815933][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.881751][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.892350][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.902320][ T2707] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.909599][ T2707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.917741][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.926709][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.935174][ T2707] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.942291][ T2707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.951423][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.975002][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.021694][ T7329] device hsr_slave_0 entered promiscuous mode [ 123.039146][ T7329] device hsr_slave_1 entered promiscuous mode [ 123.078678][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.086255][ T7329] Cannot create hsr debugfs directory [ 123.109154][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.118266][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.166948][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.191341][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.198437][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.207390][ T7545] device bridge_slave_0 entered promiscuous mode [ 123.217526][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.225736][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.234099][ T7545] device bridge_slave_1 entered promiscuous mode [ 123.243570][ T7458] team0: Port device team_slave_0 added [ 123.277230][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.286820][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.299434][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.308009][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.318046][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.332203][ T7458] team0: Port device team_slave_1 added [ 123.345056][ T7154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.404754][ T7154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.460625][ T7154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.500318][ T7154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.562075][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.575351][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.603888][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.612305][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.641530][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.665243][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.673772][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.695693][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.703564][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.730105][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.752543][ T7024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.767185][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.784829][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.794558][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.806276][ T7545] team0: Port device team_slave_0 added [ 123.815259][ T7545] team0: Port device team_slave_1 added [ 123.834622][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.841741][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.871831][ T7545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.884563][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.891898][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.918408][ T7545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.930102][ T7289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.071668][ T7458] device hsr_slave_0 entered promiscuous mode [ 124.128807][ T7458] device hsr_slave_1 entered promiscuous mode [ 124.168637][ T7458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.176227][ T7458] Cannot create hsr debugfs directory [ 124.197534][ T7289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.250559][ T7289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.294676][ T7289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.391968][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.400680][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.413325][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.460674][ T7545] device hsr_slave_0 entered promiscuous mode [ 124.499431][ T7545] device hsr_slave_1 entered promiscuous mode [ 124.538593][ T7545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.546234][ T7545] Cannot create hsr debugfs directory [ 124.674241][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.683846][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.693259][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.702376][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.714829][ T7024] device veth0_vlan entered promiscuous mode [ 124.728006][ T7154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.742568][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.751369][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.781106][ T7024] device veth1_vlan entered promiscuous mode [ 124.804258][ T7329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.861210][ T7154] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.871973][ T7329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.898614][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.899157][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.915775][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.924042][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.952470][ T7329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.008225][ T7024] device veth0_macvtap entered promiscuous mode [ 125.028661][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.037960][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.047806][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.057527][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.066495][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.073621][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.081516][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.090552][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.099071][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.106125][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.114091][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.122619][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.133426][ T7329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.206849][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.215660][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.225776][ T7024] device veth1_macvtap entered promiscuous mode [ 125.265174][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.285425][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.297455][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.308055][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.320055][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.333434][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.350103][ T7458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.411379][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.419474][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.427718][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.449284][ T7458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.481736][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.494312][ T7154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.508753][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.523912][ T7458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.570530][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.579290][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.587872][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.596830][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.609099][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.635531][ T7458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.662667][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.672253][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.681731][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.692942][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.717423][ T7545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.757848][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.830470][ T7545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.902404][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.911163][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.920009][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.929329][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.937627][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.944841][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.953590][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.962358][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.971350][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.978499][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.987560][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.996911][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.005959][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.014735][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.023451][ T7545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.093388][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.155807][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.163871][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.173211][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.183239][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.192749][ T7545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.243377][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.312281][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.331997][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.341540][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.351784][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.362775][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.370775][ T8278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.388267][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.408548][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.418210][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 10:58:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000ff0f000000000500000010040000d8030000d8010000a8020000b800008ed797c60fba1f51007803000078030081e40300007803000005000000", @ANYPTR, @ANYBLOB="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"], 0x3) [ 126.457318][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.476163][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.489512][ T2801] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.496627][ T2801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.583868][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.595127][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.604999][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.614182][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.618397][ T8290] x_tables: ip_tables: osf match: only valid for protocol 6 [ 126.624717][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.642388][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.649612][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.667710][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 10:58:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) ioctl$FS_IOC_SETVERSION(r0, 0x6628, 0x0) [ 126.698363][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.705850][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.717554][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 10:58:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) ioctl$FS_IOC_SETVERSION(r0, 0x6628, 0x0) [ 126.777045][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.800050][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.809607][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.830454][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:58:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) ioctl$FS_IOC_SETVERSION(r0, 0x6628, 0x0) 10:58:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee01) ioctl$FS_IOC_SETVERSION(r0, 0x6628, 0x0) [ 126.898861][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.909883][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.936762][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:58:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$inet(0x2b, 0x801, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xd}]) [ 126.969171][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.978078][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.016265][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.035071][ T7329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.046881][ T7329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.078613][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.086267][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.095007][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.103765][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.113026][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.121811][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.130862][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.139404][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.147631][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.155714][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.163783][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.174009][ T7154] device veth0_vlan entered promiscuous mode [ 127.190606][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.219249][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.227227][ T7289] device veth0_vlan entered promiscuous mode 10:58:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$inet(0x2b, 0x801, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xd}]) [ 127.250206][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.264394][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.298592][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.318245][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.346050][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.356764][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.368042][ T7154] device veth1_vlan entered promiscuous mode [ 127.376587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.385367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.394525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.406954][ T7545] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.421061][ T7289] device veth1_vlan entered promiscuous mode [ 127.464869][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.481408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.501002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.512090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.521380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.528504][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.536483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.545244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.554021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.561148][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.568947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.577533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.585988][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.593099][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.626275][ T7154] device veth0_macvtap entered promiscuous mode [ 127.641292][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.649871][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.657669][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.671263][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.680403][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.687590][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.695838][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.704620][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.714143][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.722841][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.732605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.754208][ T7289] device veth0_macvtap entered promiscuous mode [ 127.772569][ T7154] device veth1_macvtap entered promiscuous mode [ 127.783344][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.792814][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.802190][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.811115][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.819856][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.828163][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.837154][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.845919][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.856267][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.864493][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.874909][ T7289] device veth1_macvtap entered promiscuous mode [ 127.909736][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.918007][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.930881][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.940134][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.949393][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.957853][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.967319][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.993895][ T7154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.005488][ T7154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.019017][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.026359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.036088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.044798][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.053545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.062301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.071220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.086820][ T7329] device veth0_vlan entered promiscuous mode [ 128.098846][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.113989][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.124357][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.134846][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.145855][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.155055][ T7458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.168924][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.177034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.185906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.194648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.203315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.212329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.221257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.229751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.238161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.247707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.256373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.278516][ T7154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.292988][ T7154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.304862][ T7154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.321963][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.333719][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.345460][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.356346][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.367366][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.379818][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.391801][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.401183][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.414464][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.422867][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.432080][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.445125][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.459003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.466408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.478758][ T7329] device veth1_vlan entered promiscuous mode [ 128.540203][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.708805][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.717510][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.725557][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.742357][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.751348][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.873971][ T7329] device veth0_macvtap entered promiscuous mode [ 128.941634][ T7329] device veth1_macvtap entered promiscuous mode [ 128.953536][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.969122][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.983085][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 10:58:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$inet(0x2b, 0x801, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xd}]) 10:58:33 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 129.013423][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.067322][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.100294][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.111875][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.125716][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.137163][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.149410][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.161506][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.185269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.197925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.229487][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.262859][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.288245][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.299513][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.314340][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.325136][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.336330][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.346439][ T7458] device veth0_vlan entered promiscuous mode [ 129.354496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.363821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.372562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.381624][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.406184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.414230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.422213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.431495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.505515][ T7458] device veth1_vlan entered promiscuous mode [ 129.516248][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.652477][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.679724][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.706728][ T7545] device veth0_vlan entered promiscuous mode [ 129.708233][ T2634] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.730464][ T8348] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096) [ 129.731561][ T7545] device veth1_vlan entered promiscuous mode [ 129.755194][ T2634] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.778292][ T8348] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096) [ 129.790411][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.797956][ T8348] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 129.803539][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.829165][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.851917][ T7458] device veth0_macvtap entered promiscuous mode [ 129.876101][ T7458] device veth1_macvtap entered promiscuous mode [ 129.912499][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.923610][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.946841][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.956834][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.977289][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.987905][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.998030][ T8353] REISERFS warning (device loop3): reiserfs_fill_super: Cannot allocate commit workqueue 10:58:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 130.010511][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.024281][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.048191][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.066800][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.076742][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.100765][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.116001][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.127805][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.137454][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.148571][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.162115][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.170419][ T2634] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.170845][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.188542][ T8363] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096) [ 130.208557][ T7545] device veth0_macvtap entered promiscuous mode [ 130.212737][ T2634] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.234001][ T8363] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096) [ 130.238500][ T7545] device veth1_macvtap entered promiscuous mode [ 130.245765][ T8363] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 130.274971][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.286231][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.296140][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.308241][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.324538][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.351045][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.368152][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.395406][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.407343][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.429139][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.450085][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.457930][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.480364][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.496217][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.514807][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.525494][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.536205][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.546589][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.557097][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.567139][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.577629][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.589910][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.601006][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.614140][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.660781][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.669475][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.680349][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.691469][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.701750][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.713425][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.724541][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.735251][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.745294][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.756783][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.766974][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.777574][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.790043][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.799912][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.809378][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:58:36 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c001000080001"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:58:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) 10:58:36 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:58:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$inet(0x2b, 0x801, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xd}]) 10:58:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 10:58:36 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) [ 131.833991][ T2634] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.845353][ T8389] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096) [ 131.859568][ T2634] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 10:58:36 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:58:36 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) [ 131.878153][ T8389] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096) [ 131.907526][ C0] hrtimer: interrupt took 47307 ns 10:58:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 10:58:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) [ 131.960914][ T8389] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 10:58:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 132.045473][ T2633] blk_update_request: I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.056966][ T8403] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 2, size 4096) 10:58:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d05000000e590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r3 = socket(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x4}}, 0x10) bind(r2, 0x0, 0x0) [ 132.197252][ T2633] blk_update_request: I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.208999][ T8403] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 16, size 4096) [ 132.220654][ T8403] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 132.256225][ T2634] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.269224][ T8413] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096) [ 132.306657][ T2634] blk_update_request: I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.319544][ T8413] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096) [ 132.344868][ T8413] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 10:58:37 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c001000080001"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:58:37 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000003c0)={0x9, 0x1, "03"}, 0x0) 10:58:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) 10:58:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 10:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d05000000e590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r3 = socket(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x4}}, 0x10) bind(r2, 0x0, 0x0) 10:58:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18a41}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) [ 132.713556][ T8433] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 2, size 4096) 10:58:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) [ 132.762163][ T8433] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 16, size 4096) 10:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d05000000e590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r3 = socket(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x4}}, 0x10) bind(r2, 0x0, 0x0) 10:58:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x3, r2, 0x6558, 0xf}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) [ 132.859482][ T8433] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:58:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000001e005f0014f9f407faac4700020000000000000000000800", 0x1c) 10:58:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone3(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 10:58:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18a41}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) [ 132.995925][ T8454] bridge_slave_0: FDB only supports static addresses [ 133.053954][ T8457] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 2, size 4096) [ 133.105104][ T8457] REISERFS warning (device loop0): sh-2006 read_super_block: bread failed (dev loop0, block 16, size 4096) [ 133.166059][ T8457] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:58:38 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000040000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c001000080001"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:58:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000001e005f0014f9f407faac4700020000000000000000000800", 0x1c) 10:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d05000000e590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r3 = socket(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x4}}, 0x10) bind(r2, 0x0, 0x0) 10:58:38 executing program 5: unshare(0xa000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 10:58:38 executing program 0: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 10:58:38 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18a41}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) 10:58:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000001e005f0014f9f407faac4700020000000000000000000800", 0x1c) 10:58:38 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400008000000000040004800900020087797a30000000000900010073797a3000000000080003400000000022000200b76312c4110dd9b17379031b000000000000002a5c47129304800000040006140004800900010059797a30000000000000140000001100645a6dc4cf345d2c0d9623000000000000c6fb9e8efafad7e7580e6ae4358d8f9509000000dc6e3af5cf3ed7aa68b191fea46766e9a1b3b4c9b075f74c1447e73a8d55db70574ea4b16f981f804453898a0b8f9d081ef6437d4051a31effff784421e478a6e04e0f3469ef95f289ff35a24334ba0d5ac037028b665900"/314], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 10:58:38 executing program 0: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 10:58:38 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x300, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18a41}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) 10:58:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000001e005f0014f9f407faac4700020000000000000000000800", 0x1c) [ 133.688490][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:38 executing program 0: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) [ 133.837706][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.902986][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:38 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400008000000000040004800900020087797a30000000000900010073797a3000000000080003400000000022000200b76312c4110dd9b17379031b000000000000002a5c47129304800000040006140004800900010059797a30000000000000140000001100645a6dc4cf345d2c0d9623000000000000c6fb9e8efafad7e7580e6ae4358d8f9509000000dc6e3af5cf3ed7aa68b191fea46766e9a1b3b4c9b075f74c1447e73a8d55db70574ea4b16f981f804453898a0b8f9d081ef6437d4051a31effff784421e478a6e04e0f3469ef95f289ff35a24334ba0d5ac037028b665900"/314], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 10:58:38 executing program 5: unshare(0xa000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 10:58:38 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x0, 0x98, 0x98, 0x0, 0x140, 0x140, 0x114, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) 10:58:38 executing program 0: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 10:58:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 10:58:38 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) [ 134.399312][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.411447][ T8525] Cannot find add_set index 0 as target [ 134.426409][ T8528] binder: 8523:8528 ioctl c018620c 20000000 returned -22 10:58:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 10:58:39 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 10:58:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) [ 134.444901][ T8533] Cannot find add_set index 0 as target 10:58:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x0, 0x98, 0x98, 0x0, 0x140, 0x140, 0x114, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) 10:58:39 executing program 5: unshare(0xa000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 10:58:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) [ 134.510652][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.554246][ T8540] binder: 8536:8540 ioctl c018620c 20000000 returned -22 10:58:39 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/314], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 10:58:39 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 10:58:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 10:58:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x0, 0x98, 0x98, 0x0, 0x140, 0x140, 0x114, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) [ 134.599141][ T8548] binder: 8541:8548 ioctl c018620c 20000000 returned -22 [ 134.599745][ T8549] Cannot find add_set index 0 as target 10:58:39 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 10:58:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) [ 134.663678][ T8555] binder: 8554:8555 ioctl c018620c 20000000 returned -22 10:58:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}], 0x0, 0x8126000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) [ 134.710804][ T8560] binder: 8557:8560 ioctl c018620c 20000000 returned -22 [ 134.740109][ T8561] Cannot find add_set index 0 as target [ 134.747674][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:39 executing program 5: unshare(0xa000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) [ 134.751214][ T8568] binder: 8564:8568 ioctl c018620c 20000000 returned -22 10:58:39 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x0, 0x98, 0x98, 0x0, 0x140, 0x140, 0x114, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) 10:58:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) 10:58:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2403, 0x0) 10:58:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000000000000080001", 0x5e4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 134.808509][ T8573] binder: 8571:8573 ioctl c018620c 20000000 returned -22 [ 134.874388][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.890904][ T8581] Cannot find add_set index 0 as target 10:58:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2403, 0x0) 10:58:39 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400008000000000040004800900020087797a30000000000900010073797a3000000000080003400000000022000200b76312c4110dd9b17379031b000000000000002a5c47129304800000040006140004800900010059797a30000000000000140000001100645a6dc4cf345d2c0d9623000000000000c6fb9e8efafad7e7580e6ae4358d8f9509000000dc6e3af5cf3ed7aa68b191fea46766e9a1b3b4c9b075f74c1447e73a8d55db70574ea4b16f981f804453898a0b8f9d081ef6437d4051a31effff784421e478a6e04e0f3469ef95f289ff35a24334ba0d5ac037028b665900"/314], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 10:58:39 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) fdatasync(r0) 10:58:39 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 10:58:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000000000000080001", 0x5e4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:58:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) 10:58:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2403, 0x0) [ 135.063047][ T8599] encrypted_key: keyword 'new' not allowed when called from .update method [ 135.069435][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000000000000080001", 0x5e4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:58:39 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) fdatasync(r0) 10:58:39 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 10:58:39 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000000000000080001", 0x5e4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:58:39 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x2403, 0x0) [ 135.199246][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:39 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 10:58:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772ec3b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000140)="aa1d484e24002000a84d47d54a1e120755272bb736be94d9fc56c9953fbd80632900097704a78d62539e2b", 0x2b}], 0x2) 10:58:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) 10:58:40 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x8) 10:58:40 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) fdatasync(r0) 10:58:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = getpid() pidfd_open(r1, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:58:40 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) [ 135.456563][ T8625] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 135.456563][ T8625] program syz-executor.0 not setting count and/or reply_len properly [ 135.482812][ T8634] [ 135.485433][ T8634] ===================================================== [ 135.492449][ T8634] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 135.500004][ T8634] 5.6.0-syzkaller #0 Not tainted 10:58:40 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x8) [ 135.505016][ T8634] ----------------------------------------------------- [ 135.511948][ T8634] syz-executor.3/8634 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 135.519998][ T8634] ffff888088202548 (&pid->wait_pidfd){+.+.}-{2:2}, at: io_submit_one+0x10f5/0x1a80 [ 135.529286][ T8634] [ 135.529286][ T8634] and this task is already holding: [ 135.536643][ T8634] ffff888049b2dc98 (&ctx->ctx_lock){..-.}-{2:2}, at: io_submit_one+0x10cb/0x1a80 [ 135.545755][ T8634] which would create a new lock dependency: 10:58:40 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x8) [ 135.551644][ T8634] (&ctx->ctx_lock){..-.}-{2:2} -> (&pid->wait_pidfd){+.+.}-{2:2} [ 135.559453][ T8634] [ 135.559453][ T8634] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 135.568889][ T8634] (&ctx->ctx_lock){..-.}-{2:2} [ 135.568901][ T8634] [ 135.568901][ T8634] ... which became SOFTIRQ-irq-safe at: [ 135.581478][ T8634] lock_acquire+0x169/0x480 [ 135.586068][ T8634] _raw_spin_lock_irq+0x67/0x80 [ 135.591004][ T8634] free_ioctx_users+0x30/0x1c0 [ 135.595856][ T8634] percpu_ref_put+0x18d/0x1a0 [ 135.600614][ T8634] rcu_core+0x816/0x1120 10:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772ec3b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000140)="aa1d484e24002000a84d47d54a1e120755272bb736be94d9fc56c9953fbd80632900097704a78d62539e2b", 0x2b}], 0x2) [ 135.604957][ T8634] __do_softirq+0x268/0x80c [ 135.609562][ T8634] do_softirq_own_stack+0x2a/0x40 [ 135.614667][ T8634] do_softirq+0xf9/0x190 [ 135.618986][ T8634] __local_bh_enable_ip+0x18b/0x230 [ 135.624266][ T8634] batadv_nc_purge_paths+0x36f/0x400 [ 135.629645][ T8634] batadv_nc_worker+0x2f3/0x5e0 [ 135.634576][ T8634] process_one_work+0x76e/0xfd0 [ 135.639511][ T8634] worker_thread+0xa7f/0x1450 [ 135.644272][ T8634] kthread+0x353/0x380 [ 135.648428][ T8634] ret_from_fork+0x24/0x30 [ 135.652925][ T8634] 10:58:40 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x8) [ 135.652925][ T8634] to a SOFTIRQ-irq-unsafe lock: [ 135.659930][ T8634] (&pid->wait_pidfd){+.+.}-{2:2} [ 135.659942][ T8634] [ 135.659942][ T8634] ... which became SOFTIRQ-irq-unsafe at: [ 135.661448][ T8644] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 135.661448][ T8644] program syz-executor.0 not setting count and/or reply_len properly [ 135.665120][ T8634] ... [ 135.665132][ T8634] lock_acquire+0x169/0x480 [ 135.665142][ T8634] _raw_spin_lock+0x2a/0x40 [ 135.665151][ T8634] proc_pid_make_inode+0x187/0x2d0 [ 135.665159][ T8634] proc_pid_instantiate+0x4b/0x1a0 [ 135.665176][ T8634] proc_pid_lookup+0x218/0x2f0 [ 135.717308][ T8634] proc_root_lookup+0x1b/0x50 [ 135.722082][ T8634] __lookup_slow+0x240/0x370 [ 135.726891][ T8634] walk_component+0x442/0x680 [ 135.731651][ T8634] link_path_walk+0x66d/0xba0 [ 135.736412][ T8634] path_openat+0x21d/0x38b0 [ 135.740996][ T8634] do_filp_open+0x191/0x3a0 [ 135.745584][ T8634] do_sys_openat2+0x463/0x770 [ 135.750342][ T8634] __x64_sys_open+0x1af/0x1e0 [ 135.755225][ T8634] do_syscall_64+0xf3/0x1b0 [ 135.759807][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 135.765775][ T8634] [ 135.765775][ T8634] other info that might help us debug this: [ 135.765775][ T8634] [ 135.775999][ T8634] Possible interrupt unsafe locking scenario: [ 135.775999][ T8634] [ 135.784514][ T8634] CPU0 CPU1 [ 135.789369][ T8651] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 135.789369][ T8651] program syz-executor.0 not setting count and/or reply_len properly [ 135.789871][ T8634] ---- ---- [ 135.789873][ T8634] lock(&pid->wait_pidfd); [ 135.789880][ T8634] local_irq_disable(); [ 135.789882][ T8634] lock(&ctx->ctx_lock); [ 135.789888][ T8634] lock(&pid->wait_pidfd); [ 135.789893][ T8634] [ 135.789894][ T8634] lock(&ctx->ctx_lock); [ 135.789908][ T8634] [ 135.789908][ T8634] *** DEADLOCK *** [ 135.789908][ T8634] [ 135.854522][ T8634] 1 lock held by syz-executor.3/8634: [ 135.859881][ T8634] #0: ffff888049b2dc98 (&ctx->ctx_lock){..-.}-{2:2}, at: io_submit_one+0x10cb/0x1a80 [ 135.869441][ T8634] [ 135.869441][ T8634] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 135.879854][ T8634] -> (&ctx->ctx_lock){..-.}-{2:2} { [ 135.885076][ T8634] IN-SOFTIRQ-W at: [ 135.889071][ T8634] lock_acquire+0x169/0x480 [ 135.895228][ T8634] _raw_spin_lock_irq+0x67/0x80 [ 135.901726][ T8634] free_ioctx_users+0x30/0x1c0 [ 135.908147][ T8634] percpu_ref_put+0x18d/0x1a0 [ 135.912528][ T8657] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 135.912528][ T8657] program syz-executor.0 not setting count and/or reply_len properly [ 135.914467][ T8634] rcu_core+0x816/0x1120 [ 135.914476][ T8634] __do_softirq+0x268/0x80c [ 135.914485][ T8634] do_softirq_own_stack+0x2a/0x40 [ 135.914501][ T8634] do_softirq+0xf9/0x190 [ 135.956306][ T8634] __local_bh_enable_ip+0x18b/0x230 [ 135.963163][ T8634] batadv_nc_purge_paths+0x36f/0x400 [ 135.970271][ T8634] batadv_nc_worker+0x2f3/0x5e0 [ 135.976767][ T8634] process_one_work+0x76e/0xfd0 [ 135.983276][ T8634] worker_thread+0xa7f/0x1450 [ 135.989600][ T8634] kthread+0x353/0x380 [ 135.995319][ T8634] ret_from_fork+0x24/0x30 [ 136.001375][ T8634] INITIAL USE at: [ 136.005269][ T8634] lock_acquire+0x169/0x480 [ 136.011337][ T8634] _raw_spin_lock_irq+0x67/0x80 [ 136.017832][ T8634] free_ioctx_users+0x30/0x1c0 [ 136.024936][ T8634] percpu_ref_put+0x18d/0x1a0 [ 136.031173][ T8634] rcu_core+0x816/0x1120 [ 136.036979][ T8634] __do_softirq+0x268/0x80c [ 136.043044][ T8634] do_softirq_own_stack+0x2a/0x40 [ 136.049634][ T8634] do_softirq+0xf9/0x190 [ 136.055433][ T8634] __local_bh_enable_ip+0x18b/0x230 [ 136.062193][ T8634] batadv_nc_purge_paths+0x36f/0x400 [ 136.069035][ T8634] batadv_nc_worker+0x2f3/0x5e0 [ 136.075444][ T8634] process_one_work+0x76e/0xfd0 [ 136.081853][ T8634] worker_thread+0xa7f/0x1450 [ 136.088173][ T8634] kthread+0x353/0x380 [ 136.093806][ T8634] ret_from_fork+0x24/0x30 [ 136.100901][ T8634] } [ 136.103405][ T8634] ... key at: [] ioctx_alloc.__key+0x0/0x10 [ 136.111365][ T8634] ... acquired at: [ 136.115171][ T8634] lock_acquire+0x169/0x480 [ 136.119846][ T8634] _raw_spin_lock+0x2a/0x40 [ 136.124517][ T8634] io_submit_one+0x10f5/0x1a80 [ 136.129452][ T8634] __se_sys_io_submit+0x117/0x220 [ 136.134644][ T8634] do_syscall_64+0xf3/0x1b0 [ 136.139322][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 136.145475][ T8634] [ 136.147794][ T8634] [ 136.147794][ T8634] the dependencies between the lock to be acquired [ 136.147798][ T8634] and SOFTIRQ-irq-unsafe lock: [ 136.161291][ T8634] -> (&pid->wait_pidfd){+.+.}-{2:2} { [ 136.166663][ T8634] HARDIRQ-ON-W at: [ 136.170650][ T8634] lock_acquire+0x169/0x480 [ 136.176801][ T8634] _raw_spin_lock+0x2a/0x40 [ 136.182962][ T8634] proc_pid_make_inode+0x187/0x2d0 [ 136.189719][ T8634] proc_pid_instantiate+0x4b/0x1a0 [ 136.196509][ T8634] proc_pid_lookup+0x218/0x2f0 [ 136.202917][ T8634] proc_root_lookup+0x1b/0x50 [ 136.209241][ T8634] __lookup_slow+0x240/0x370 [ 136.216603][ T8634] walk_component+0x442/0x680 [ 136.222926][ T8634] link_path_walk+0x66d/0xba0 [ 136.229249][ T8634] path_openat+0x21d/0x38b0 [ 136.235395][ T8634] do_filp_open+0x191/0x3a0 [ 136.241559][ T8634] do_sys_openat2+0x463/0x770 [ 136.247880][ T8634] __x64_sys_open+0x1af/0x1e0 [ 136.254201][ T8634] do_syscall_64+0xf3/0x1b0 [ 136.260351][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 136.267913][ T8634] SOFTIRQ-ON-W at: [ 136.271891][ T8634] lock_acquire+0x169/0x480 [ 136.278046][ T8634] _raw_spin_lock+0x2a/0x40 [ 136.284199][ T8634] proc_pid_make_inode+0x187/0x2d0 [ 136.291900][ T8634] proc_pid_instantiate+0x4b/0x1a0 [ 136.298636][ T8634] proc_pid_lookup+0x218/0x2f0 [ 136.305082][ T8634] proc_root_lookup+0x1b/0x50 [ 136.317551][ T8634] __lookup_slow+0x240/0x370 [ 136.323767][ T8634] walk_component+0x442/0x680 [ 136.330117][ T8634] link_path_walk+0x66d/0xba0 [ 136.336413][ T8634] path_openat+0x21d/0x38b0 [ 136.342579][ T8634] do_filp_open+0x191/0x3a0 [ 136.348713][ T8634] do_sys_openat2+0x463/0x770 [ 136.355051][ T8634] __x64_sys_open+0x1af/0x1e0 [ 136.361374][ T8634] do_syscall_64+0xf3/0x1b0 [ 136.367522][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 136.375032][ T8634] INITIAL USE at: [ 136.378902][ T8634] lock_acquire+0x169/0x480 [ 136.384940][ T8634] _raw_spin_lock_irqsave+0x9e/0xc0 [ 136.391688][ T8634] __wake_up+0xb8/0x150 [ 136.397385][ T8634] do_notify_parent+0x167/0xce0 [ 136.403776][ T8634] do_exit+0x12c5/0x1f80 [ 136.409567][ T8634] call_usermodehelper_exec_async+0x47c/0x480 [ 136.417174][ T8634] ret_from_fork+0x24/0x30 [ 136.423120][ T8634] } [ 136.425602][ T8634] ... key at: [] alloc_pid.__key+0x0/0x10 [ 136.433374][ T8634] ... acquired at: [ 136.437154][ T8634] lock_acquire+0x169/0x480 [ 136.441817][ T8634] _raw_spin_lock+0x2a/0x40 [ 136.446490][ T8634] io_submit_one+0x10f5/0x1a80 [ 136.451399][ T8634] __se_sys_io_submit+0x117/0x220 [ 136.456580][ T8634] do_syscall_64+0xf3/0x1b0 [ 136.461248][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 136.467403][ T8634] [ 136.469772][ T8634] [ 136.469772][ T8634] stack backtrace: [ 136.475640][ T8634] CPU: 1 PID: 8634 Comm: syz-executor.3 Not tainted 5.6.0-syzkaller #0 [ 136.483956][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.493991][ T8634] Call Trace: [ 136.497263][ T8634] dump_stack+0x1e9/0x30e [ 136.501574][ T8634] validate_chain+0x8479/0x8920 [ 136.506402][ T8634] ? mark_lock+0x102/0x1b00 [ 136.510878][ T8634] ? register_lock_class+0x97/0x10d0 [ 136.516137][ T8634] __lock_acquire+0x116c/0x2b90 [ 136.520980][ T8634] ? lock_acquire+0x169/0x480 [ 136.525630][ T8634] lock_acquire+0x169/0x480 [ 136.530107][ T8634] ? io_submit_one+0x10f5/0x1a80 [ 136.535016][ T8634] ? do_raw_spin_lock+0xfe/0x800 [ 136.539929][ T8634] _raw_spin_lock+0x2a/0x40 [ 136.544404][ T8634] ? io_submit_one+0x10f5/0x1a80 [ 136.549314][ T8634] io_submit_one+0x10f5/0x1a80 [ 136.554053][ T8634] ? aio_poll_complete_work+0x490/0x490 [ 136.563668][ T8634] __se_sys_io_submit+0x117/0x220 [ 136.568665][ T8634] ? 0xffffffff81000000 [ 136.572806][ T8634] do_syscall_64+0xf3/0x1b0 [ 136.577397][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 136.583278][ T8634] RIP: 0033:0x45c889 [ 136.587155][ T8634] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772ec3b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000140)="aa1d484e24002000a84d47d54a1e120755272bb736be94d9fc56c9953fbd80632900097704a78d62539e2b", 0x2b}], 0x2) 10:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772ec3b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000140)="aa1d484e24002000a84d47d54a1e120755272bb736be94d9fc56c9953fbd80632900097704a78d62539e2b", 0x2b}], 0x2) 10:58:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) 10:58:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) 10:58:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 136.606790][ T8634] RSP: 002b:00007f569c8bac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 136.615194][ T8634] RAX: ffffffffffffffda RBX: 00007f569c8bb6d4 RCX: 000000000045c889 [ 136.623150][ T8634] RDX: 0000000020000040 RSI: 0000000020000103 RDI: 00007f569c89a000 [ 136.631103][ T8634] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 136.639061][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 136.647005][ T8634] R13: 00000000000001f9 R14: 00000000004c426b R15: 000000000076bf0c 10:58:41 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) fdatasync(r0) 10:58:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = getpid() pidfd_open(r1, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:58:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)="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"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000500)}], 0x3}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000300)=ANY=[]) 10:58:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 10:58:41 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) 10:58:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)="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"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000500)}], 0x3}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000300)=ANY=[]) 10:58:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = getpid() pidfd_open(r1, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:58:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 136.932501][ T8706] device bridge1 entered promiscuous mode 10:58:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = getpid() pidfd_open(r1, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:58:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) 10:58:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)="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"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000500)}], 0x3}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000300)=ANY=[]) 10:58:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 10:58:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)="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"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000500)}], 0x3}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_CPUID(r2, 0x4400ae8f, &(0x7f0000000300)=ANY=[]) [ 137.184417][ T8716] device bridge1 entered promiscuous mode [ 137.227915][ T8706] syz-executor.1 (8706) used greatest stack depth: 24528 bytes left 10:58:42 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) 10:58:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 10:58:42 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 137.573360][ T8785] device bridge1 entered promiscuous mode 10:58:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 137.744513][ T8802] device bridge1 entered promiscuous mode 10:58:42 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 138.120431][ T8846] device bridge1 entered promiscuous mode 10:58:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) [ 138.241230][ T8852] device bridge1 entered promiscuous mode 10:58:42 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000002000}) 10:58:43 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 10:58:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601, 0x0, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:58:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) [ 138.516381][ T8890] overlayfs: workdir and upperdir must be separate subtrees [ 138.532990][ T8886] device bridge1 entered promiscuous mode 10:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x33, 0x0, 0x0) [ 138.571647][ T8903] overlayfs: workdir and upperdir must be separate subtrees 10:58:43 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x84800) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="c521467fd2c7a8964d03e97ee0cff376cebb824cad705c1b3ae617b545bcd60d4edd138f4fed2dab7e09566f098831f39ffaa9f08516c80b039852810ce2c930e3177925ee8179c269a9e3487fdd311bdcfd797309e21b0ebe2b75cb02a2ad92b98b766cc432fc8f3d0791784cc96adbf010b16537cb8ec9d936a026d496a3aa4b091c7ca2e8175ee5914aaa91266dc21937269f20379fb9f4aa691b7f778586652b1edc72ae105bd1f5966afd4a3bfa29d83cc1ebd53e67", 0xb8, r0}, 0x68) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="050f3c121ed6a9fad85a6c699205661cdb20e16e2edef8a64c3ccf40e7a21521419447cc62304e2a4edfceb898e2218bc15979a2bc333100040000dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x4040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000580)={0x4bb6, 0x2, 0x9, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x4, 0x8}, 0xc) 10:58:43 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000002000}) 10:58:43 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000002000}) 10:58:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 10:58:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x3f}, 0x0, 0x0, 0x0, 0x0) [ 138.704275][ T8914] overlayfs: workdir and upperdir must be separate subtrees [ 138.717518][ T8913] device bridge1 entered promiscuous mode 10:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x33, 0x0, 0x0) 10:58:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 10:58:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x91}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 138.832780][ T8930] overlayfs: workdir and upperdir must be separate subtrees 10:58:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) r5 = dup3(r3, r1, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r4, 0x3f00, 0x1}) 10:58:43 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000002000}) 10:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x33, 0x0, 0x0) 10:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x33, 0x0, 0x0) [ 139.017165][ T8946] overlayfs: workdir and upperdir must be separate subtrees 10:58:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 10:58:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = semget$private(0x0, 0x6, 0x0) read(r0, &(0x7f00000004c0)=""/254, 0xfe) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0xd, 0x0, 0x0, &(0x7f00000007c0)}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000001c0)={0x0, 0xfe6f, 0xfffffffd, 0x0, 0x0, 0x3, 0x7}) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000000)=""/152) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x2, 0xffffffffffffffff, 0x0) getpgrp(r5) getpid() ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, 0xe, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) 10:58:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 10:58:43 executing program 5: unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="79f43791c98657920000000000000400"}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x83, &(0x7f0000000200)={r4}, &(0x7f0000001700)=0x14) 10:58:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)=