[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 51.154316][ T4846] systemd-udevd (4846) used greatest stack depth: 22672 bytes left [ 51.172284][ T4882] systemd-udevd (4882) used greatest stack depth: 21840 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. 2020/06/23 14:14:02 fuzzer started 2020/06/23 14:14:02 dialing manager at 10.128.0.26:40211 2020/06/23 14:14:02 syscalls: 3105 2020/06/23 14:14:02 code coverage: enabled 2020/06/23 14:14:02 comparison tracing: enabled 2020/06/23 14:14:02 extra coverage: enabled 2020/06/23 14:14:02 setuid sandbox: enabled 2020/06/23 14:14:02 namespace sandbox: enabled 2020/06/23 14:14:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/23 14:14:02 fault injection: enabled 2020/06/23 14:14:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/23 14:14:02 net packet injection: enabled 2020/06/23 14:14:02 net device setup: enabled 2020/06/23 14:14:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/23 14:14:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/23 14:14:02 USB emulation: enabled 14:15:10 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) syzkaller login: [ 125.881107][ T6821] IPVS: ftp: loaded support on port[0] = 21 14:15:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 126.031835][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 126.152886][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.160932][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.170791][ T6821] device bridge_slave_0 entered promiscuous mode [ 126.182150][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.190928][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.199168][ T6821] device bridge_slave_1 entered promiscuous mode [ 126.231634][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.245262][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.292257][ T6821] team0: Port device team_slave_0 added [ 126.311775][ T6821] team0: Port device team_slave_1 added [ 126.314422][ T6961] IPVS: ftp: loaded support on port[0] = 21 [ 126.365051][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.379458][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.408611][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.424207][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.431967][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:15:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) [ 126.459213][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.593561][ T6821] device hsr_slave_0 entered promiscuous mode [ 126.662005][ T6821] device hsr_slave_1 entered promiscuous mode 14:15:11 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) [ 126.816395][ T7007] IPVS: ftp: loaded support on port[0] = 21 [ 127.051819][ T6961] chnl_net:caif_netlink_parms(): no params data found 14:15:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1b0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="2e000000030000003e7aa3a3740267bb7efdf7858bb59643d4079fa3f2b477859942d5bbd6c1bc2c1600000000a35ce15e0024d203a57c35f5e570b0311afc857547ac53f01fef87f4795d7fd22aa938ccd209fc91add286d5d7ac4f9e879d2ba9ceafec26ea2801b5471bf5f461064d9c2a2c9f541cfe6668e8151caa4379d5a5aaff89a4a8c6a6e2fcd667ebdc6f2d421aa8cd853bc94b9a8ec5ad46c85522b4ebc893e16ff15d7442e84ffad6da72351fc15687d6a97e76b879bc4934177769152fe3795bbf516b079d648f77ad4a38117e20f44201755e49a477caa706eaf0b8086a5e353a1e5121805c5d9d9335aa0cb8510a73a47a1daceceb1e0e8a682fc2378e65326b8eee836ba29dbd4bcfa6e4ddcb8cf2a1e30d6c882e8f4bce25e0ca11233406135abf3bd6bb515b37257f0b67860918495bc7b42642b6bdcca05f3c6dd609c6b500edbf1b54261a373b9f6ea5e91e593031e2199f195b9b28f5f674023f1a43312da772542785ba2116147cbcc743b9d3d0a9127090c92538275a43a390a8e89d9f9d9e52f5d2197fac964cfda55587f6ed466032a630f341a6ec52e2e6416e5b8cb35a1b43bf9b00b0160445d2cb5a15c3755a59976c692446ddfd6a3e3d95cfeda70238fedbc6b1d87b58f61462054f701d23cab0f1f90b226e95008c1b3a64ffdc89b2f73271f4a0c2fef760d4978e2f1d58dbca636cb376863c9e8deced91daf542575d1be6c2eb1eb51c8d4dc527e9e0ca27d404ae5667f708036147e8bb671a9ed0a3a0e81d46f165e6112f2eced1f9709c70dd614e92f47991ce00e54e2daaf9d44d01ac6668de70a50a096e6579cd871343759b8df07a3b590f152d11af91ace01cb5baa907f223af11e071801c31a378358847a4e05564afb62e444219dacbe9da4541791917de6a0956d904e634fe"], 0x20000) [ 127.245227][ T7142] IPVS: ftp: loaded support on port[0] = 21 [ 127.416825][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.432886][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.451086][ T6961] device bridge_slave_0 entered promiscuous mode [ 127.495987][ T6821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.543339][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.551445][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.563776][ T6961] device bridge_slave_1 entered promiscuous mode [ 127.581895][ T6821] netdevsim netdevsim0 netdevsim1: renamed from eth1 14:15:12 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) [ 127.684173][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 127.709154][ T6821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.709314][ T7235] IPVS: ftp: loaded support on port[0] = 21 [ 127.769042][ T6821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.846807][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.863001][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.903323][ T7301] IPVS: ftp: loaded support on port[0] = 21 [ 127.989867][ T6961] team0: Port device team_slave_0 added [ 127.998110][ T6961] team0: Port device team_slave_1 added [ 128.037443][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.045495][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.054870][ T7007] device bridge_slave_0 entered promiscuous mode [ 128.069852][ T7142] chnl_net:caif_netlink_parms(): no params data found [ 128.089556][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.098104][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.124918][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.144220][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.152545][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.161845][ T7007] device bridge_slave_1 entered promiscuous mode [ 128.187755][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.195109][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.226997][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.303385][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.373215][ T6961] device hsr_slave_0 entered promiscuous mode [ 128.420245][ T6961] device hsr_slave_1 entered promiscuous mode [ 128.470528][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.478615][ T6961] Cannot create hsr debugfs directory [ 128.494892][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.537491][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.546699][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.555243][ T7142] device bridge_slave_0 entered promiscuous mode [ 128.582193][ T7007] team0: Port device team_slave_0 added [ 128.601736][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.608909][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.618043][ T7142] device bridge_slave_1 entered promiscuous mode [ 128.636076][ T7007] team0: Port device team_slave_1 added [ 128.691961][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.698958][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.725960][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.742805][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.758531][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.795748][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.803912][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.830822][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.915360][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 128.955091][ T7142] team0: Port device team_slave_0 added [ 128.997790][ T7142] team0: Port device team_slave_1 added [ 129.086196][ T7007] device hsr_slave_0 entered promiscuous mode [ 129.131119][ T7007] device hsr_slave_1 entered promiscuous mode [ 129.180014][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.187633][ T7007] Cannot create hsr debugfs directory [ 129.205282][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.262999][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.276467][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.306602][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.366421][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.375098][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.402904][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.438152][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.445775][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.456565][ T7235] device bridge_slave_0 entered promiscuous mode [ 129.466412][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.473926][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.482721][ T7235] device bridge_slave_1 entered promiscuous mode [ 129.489984][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 129.559676][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.613928][ T7142] device hsr_slave_0 entered promiscuous mode [ 129.670992][ T7142] device hsr_slave_1 entered promiscuous mode [ 129.710182][ T7142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.718408][ T7142] Cannot create hsr debugfs directory [ 129.747376][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.756798][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.767723][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.817483][ T6961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.864096][ T6961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.914207][ T7235] team0: Port device team_slave_0 added [ 129.926334][ T7235] team0: Port device team_slave_1 added [ 129.946271][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.957020][ T6961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.043085][ T6961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.126056][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.137058][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.165253][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.178135][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.188374][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.197690][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.204959][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.217209][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.259213][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.267426][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.294692][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.319855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.331227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.339653][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.346817][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.394938][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.402996][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.414695][ T7301] device bridge_slave_0 entered promiscuous mode [ 130.427405][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.436418][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.445365][ T7301] device bridge_slave_1 entered promiscuous mode [ 130.453561][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.533992][ T7235] device hsr_slave_0 entered promiscuous mode [ 130.590804][ T7235] device hsr_slave_1 entered promiscuous mode [ 130.630290][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.637891][ T7235] Cannot create hsr debugfs directory [ 130.649149][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.702967][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.712905][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.731848][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.752710][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.765856][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.774896][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.799300][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.848040][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.865847][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.878314][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.887982][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.908172][ T7007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.963617][ T7007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.024522][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.052895][ T7007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.114595][ T7301] team0: Port device team_slave_0 added [ 131.126332][ T7301] team0: Port device team_slave_1 added [ 131.147524][ T7007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.217403][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.224944][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.252192][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.265866][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.274171][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.301716][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.394438][ T7301] device hsr_slave_0 entered promiscuous mode [ 131.451219][ T7301] device hsr_slave_1 entered promiscuous mode [ 131.510926][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.518699][ T7301] Cannot create hsr debugfs directory [ 131.564330][ T7142] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.663381][ T7142] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.717828][ T7142] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.815944][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.825338][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.842574][ T7142] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.922190][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.944236][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.010522][ T7235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.050534][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.058679][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.104514][ T7235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.172905][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.179833][ T7235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.253781][ T7235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.317465][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.326640][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.336451][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.345920][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.354789][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.362060][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.369936][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.379457][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.388459][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.395655][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.405820][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.495104][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.507813][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.519103][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.536904][ T6821] device veth0_vlan entered promiscuous mode [ 132.555479][ T7301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.628215][ T7301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.689195][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.699073][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.707750][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.736952][ T6821] device veth1_vlan entered promiscuous mode [ 132.746748][ T7301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.793938][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.807080][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.817164][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.826376][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.835591][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.844670][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.879141][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.889082][ T7301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.932037][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.940147][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.949252][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.989775][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.011555][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.022248][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.039905][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.056556][ T6821] device veth0_macvtap entered promiscuous mode [ 133.098067][ T7142] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.106678][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.117138][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.125821][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.134579][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.142951][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.152635][ T6821] device veth1_macvtap entered promiscuous mode [ 133.186883][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.214937][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.229053][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.238896][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.248557][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.258672][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.266110][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.275042][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.283762][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.293011][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.318098][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.333090][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.348258][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.355591][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.364207][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.404714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.416262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.426283][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.434930][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.443667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.452644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.461621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.470182][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.477611][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.486275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.512777][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.526583][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.539404][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.553802][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.562983][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.572831][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.585593][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.595864][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.605457][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.614644][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.623904][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.633438][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.642919][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.653366][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.674032][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.684117][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.694339][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.704094][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.715098][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.754189][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.763982][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.775801][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.785327][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.811111][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.819673][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.936412][ T7142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.955440][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.973191][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.990886][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.999386][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.009248][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.018259][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.026905][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.036503][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.045684][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.054943][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.066648][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.128180][ T6961] device veth0_vlan entered promiscuous mode [ 134.142501][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.162735][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.178088][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.186614][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.202165][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.250419][ T6961] device veth1_vlan entered promiscuous mode [ 134.277503][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.289979][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.311803][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.331961][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.347803][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.355255][ T3791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.388782][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.414442][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.420641][ C0] hrtimer: interrupt took 63277 ns [ 134.436102][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.443364][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state 14:15:19 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) [ 134.521375][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.543282][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.566374][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.599743][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.641449][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.649062][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:15:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 134.736632][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.758984][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.766749][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:15:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 134.798885][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.819805][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.828722][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.845595][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.865331][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.880275][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.890814][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.900141][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.909783][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.916994][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.937827][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 14:15:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 134.958768][ T6961] device veth0_macvtap entered promiscuous mode [ 135.006920][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.015934][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.030359][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 14:15:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 135.060051][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.091148][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.099812][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:15:20 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 135.125407][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.161552][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.170213][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.177408][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.206935][ T6961] device veth1_macvtap entered promiscuous mode 14:15:20 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 135.219127][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.265980][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.281854][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.292705][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.301900][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.382760][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.403286][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.413047][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.423136][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.441836][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.488642][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.507645][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.521950][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.540688][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.554412][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.565767][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.574922][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.588345][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.597440][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.609220][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.618273][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.626174][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.658878][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.672229][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.684979][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.715653][ T7301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.736354][ T7301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.752302][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.765040][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.773540][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.786637][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.795497][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.808390][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.818073][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.827012][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.835647][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.844146][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.852887][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.861091][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.868890][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.876992][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.885300][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.902052][ T7142] device veth0_vlan entered promiscuous mode [ 135.911975][ T7007] device veth0_vlan entered promiscuous mode [ 135.960216][ T7007] device veth1_vlan entered promiscuous mode [ 135.985020][ T7142] device veth1_vlan entered promiscuous mode [ 136.094527][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.108584][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.127553][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.250652][ T7007] device veth0_macvtap entered promiscuous mode [ 136.287888][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.308339][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.338552][ T7007] device veth1_macvtap entered promiscuous mode [ 136.376902][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.386245][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.403477][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.414351][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.424196][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.434242][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.448108][ T7142] device veth0_macvtap entered promiscuous mode [ 136.475629][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.484432][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.494368][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.505424][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.514991][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.528049][ T7142] device veth1_macvtap entered promiscuous mode [ 136.543264][ T7235] device veth0_vlan entered promiscuous mode [ 136.592697][ T7235] device veth1_vlan entered promiscuous mode [ 136.600825][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.614264][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.624120][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.633937][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.646650][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.664849][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.676515][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.700768][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.717811][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.728335][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.741559][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.752491][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.764494][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.775430][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.786100][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.797785][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.811794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.820645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.835120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.845333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.874671][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.890323][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.903152][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.915091][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.927281][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.955931][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.968042][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.979920][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 136.992425][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.002884][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.014778][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.030173][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.038981][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.049127][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.058669][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.068121][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.116677][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.125170][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.141728][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.156376][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.283503][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.294330][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.309438][ T7235] device veth0_macvtap entered promiscuous mode [ 137.373391][ T7301] device veth0_vlan entered promiscuous mode [ 137.438019][ T7235] device veth1_macvtap entered promiscuous mode [ 137.521835][ T7301] device veth1_vlan entered promiscuous mode [ 137.649289][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.703754][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.726227][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.749661][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.781112][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.792497][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.811302][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.844528][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.866471][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.888913][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.904488][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.922003][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.930252][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.954489][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.963499][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.976921][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.991820][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.002629][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.014011][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.024972][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.036790][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.047361][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.059029][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.071046][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.088588][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.097775][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.107551][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.116847][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.130470][ T7301] device veth0_macvtap entered promiscuous mode [ 138.196025][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.213388][ T7301] device veth1_macvtap entered promiscuous mode [ 138.398650][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.422769][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.434572][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.445431][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.456906][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.468210][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.478738][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.489443][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.501617][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.517914][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.544301][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.565684][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.578604][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.589212][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.599988][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.612145][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.636188][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.661812][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.674536][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.685197][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.696749][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.709236][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.718874][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.728758][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.738181][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.747358][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.757035][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:15:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:24 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:24 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 14:15:24 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14:15:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 14:15:24 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 14:15:24 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1107000000000000000009000000080003006e"], 0x24}}, 0x0) 14:15:24 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:24 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 14:15:27 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) 14:15:27 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:27 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) 14:15:27 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) [ 142.523116][ T8198] XFS (loop5): Invalid superblock magic number 14:15:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) [ 142.799522][ T8198] XFS (loop5): Invalid superblock magic number 14:15:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:30 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) 14:15:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) 14:15:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:30 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) [ 145.582315][ T8261] XFS (loop5): Invalid superblock magic number 14:15:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:30 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 14:15:30 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:33 executing program 2: timer_create(0x0, 0x0, 0x0) timer_delete(0x0) 14:15:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) 14:15:33 executing program 2: timer_create(0x0, 0x0, 0x0) timer_delete(0x0) 14:15:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:33 executing program 2: timer_create(0x0, 0x0, 0x0) timer_delete(0x0) 14:15:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 148.676115][ T8306] XFS (loop5): Invalid superblock magic number 14:15:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:33 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) getgid() 14:15:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1, 0x0) 14:15:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 148.818839][ T8327] hfs: can't find a HFS filesystem on dev loop2 14:15:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 148.914316][ T8327] hfs: can't find a HFS filesystem on dev loop2 14:15:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) [ 149.128264][ T8350] XFS (loop5): Invalid superblock magic number 14:15:34 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) 14:15:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x0) 14:15:34 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) getgid() 14:15:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 14:15:34 executing program 5: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x0) [ 149.729118][ T8373] hfs: can't find a HFS filesystem on dev loop2 [ 149.806446][ T29] audit: type=1804 audit(1592921734.700:2): pid=8379 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir698450175/syzkaller.NP2FeF/6/bus" dev="sda1" ino=15805 res=1 [ 150.365960][ T29] audit: type=1800 audit(1592921735.260:3): pid=8379 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15805 res=0 14:15:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x0) 14:15:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 14:15:36 executing program 5: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:36 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) getgid() 14:15:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f00000002c0)="5814a859a2bba6dc87135fa6c5d1a53d3b061d1c4fcf538bc8eaa3bb682659b7ec8f4396a23e8dbb3f42e5083352e8189b3439d3f65c3d5ffe7211a2a27aac1f3817a18387", 0x45, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 151.846909][ T8401] hfs: can't find a HFS filesystem on dev loop2 14:15:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580), 0x0, 0x0) 14:15:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:36 executing program 5: syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:36 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) getgid() 14:15:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580), 0x0, 0x0) 14:15:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 152.273295][ T8426] hfs: can't find a HFS filesystem on dev loop2 14:15:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580), 0x0, 0x0) 14:15:39 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) 14:15:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f00000002c0)="5814a859a2bba6dc87135fa6c5d1a53d3b061d1c4fcf538bc8eaa3bb682659b7ec8f4396a23e8dbb3f42e5083352e8189b3439d3f65c3d5ffe7211a2a27aac1f3817a18387", 0x45, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 14:15:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0) [ 155.020620][ T8461] hfs: can't find a HFS filesystem on dev loop2 14:15:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uqnoenforce='uqnoenforce'}, {@wsync='wsync'}]}) 14:15:40 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) 14:15:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0) [ 155.610949][ T8489] XFS (loop5): Invalid superblock magic number 14:15:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0) 14:15:42 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) 14:15:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_to_team\x00', 0x10000}) [ 158.068116][ T8517] veth1_to_team: mtu greater than device maximum 14:15:43 executing program 4: sysfs$2(0x2, 0x80000000, 0x0) 14:15:43 executing program 3: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 14:15:43 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x1}], 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 14:15:43 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) [ 158.203896][ T8518] XFS (loop5): Invalid superblock magic number 14:15:43 executing program 4: sysfs$2(0x2, 0x80000000, 0x0) 14:15:43 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000002640)='./file1\x00', 0x143042, 0x0) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) [ 158.416517][ T8544] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 158.419451][ T29] audit: type=1804 audit(1592921743.309:4): pid=8544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir101649811/syzkaller.IzC5ma/30/file0" dev="sda1" ino=15894 res=1 [ 160.375707][ T0] NOHZ: local_softirq_pending 08 14:15:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x80}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:15:46 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) 14:15:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:15:46 executing program 4: perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 14:15:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:15:46 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 14:15:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 161.192426][ T8577] XFS (loop5): Invalid superblock magic number 14:15:46 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@file_umask={'file_umask'}}]}) [ 161.315567][ T8599] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN [ 161.327353][ T8599] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 161.335806][ T8599] CPU: 0 PID: 8599 Comm: syz-executor.3 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 161.345630][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.355712][ T8599] RIP: 0010:__tipc_sendstream+0xbc1/0x11d0 [ 161.361529][ T8599] Code: 00 00 00 00 48 39 5c 24 28 48 0f 44 d8 e8 87 1a cf f9 48 b8 00 00 00 00 00 fc ff df 48 8d bb c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 04 00 00 48 8b 9b c8 00 00 00 48 b8 00 00 00 [ 161.381255][ T8599] RSP: 0018:ffffc90017d2f808 EFLAGS: 00010202 [ 161.387412][ T8599] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fb94000 [ 161.395416][ T8599] RDX: 0000000000000019 RSI: ffffffff87a3e119 RDI: 00000000000000c8 [ 161.403574][ T8599] RBP: ffff888088e6b440 R08: ffff888090c64200 R09: 0000000000000001 14:15:46 executing program 4: perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) [ 161.411559][ T8599] R10: ffffffff8c588b37 R11: fffffbfff18b1166 R12: ffff888088e6b97e [ 161.419539][ T8599] R13: 0000000000000000 R14: ffff88805ccaa540 R15: 0000000000000000 [ 161.427526][ T8599] FS: 00007faae9a15700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 161.436464][ T8599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.443054][ T8599] CR2: 0000000020236fc8 CR3: 000000009fac4000 CR4: 00000000001406f0 [ 161.451049][ T8599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 14:15:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 161.459038][ T8599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.467012][ T8599] Call Trace: [ 161.470361][ T8599] ? tipc_connect+0xa70/0xa70 [ 161.475054][ T8599] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 161.480937][ T8599] ? __local_bh_enable_ip+0x159/0x270 [ 161.486332][ T8599] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 161.492346][ T8599] ? lock_sock_nested+0x94/0x110 [ 161.497671][ T8599] ? lock_sock_nested+0x94/0x110 [ 161.502666][ T8599] tipc_sendstream+0x4c/0x70 [ 161.507271][ T8599] tipc_send_packet+0x3c/0x60 [ 161.512056][ T8599] ? tipc_sendstream+0x70/0x70 [ 161.516867][ T8599] sock_sendmsg+0xcf/0x120 [ 161.521655][ T8599] ____sys_sendmsg+0x32f/0x810 [ 161.526438][ T8599] ? kernel_sendmsg+0x50/0x50 [ 161.531144][ T8599] ? __lock_acquire+0x2224/0x48b0 [ 161.536186][ T8599] ___sys_sendmsg+0x100/0x170 [ 161.540878][ T8599] ? sendmsg_copy_msghdr+0x70/0x70 [ 161.546044][ T8599] ? __fget_files+0x277/0x400 [ 161.550738][ T8599] ? find_held_lock+0x2d/0x110 [ 161.555514][ T8599] ? __might_fault+0x11f/0x1d0 [ 161.560291][ T8599] ? lock_downgrade+0x840/0x840 14:15:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 161.565168][ T8599] __sys_sendmmsg+0x195/0x480 [ 161.569860][ T8599] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 161.574901][ T8599] ? ktime_get_ts64+0x110/0x3e0 [ 161.579891][ T8599] ? _copy_to_user+0x126/0x160 [ 161.584764][ T8599] ? put_timespec64+0xcb/0x120 [ 161.589638][ T8599] ? ns_to_kernel_old_timeval+0x100/0x100 [ 161.595637][ T8599] ? check_preemption_disabled+0x38/0x220 [ 161.601413][ T8599] ? do_syscall_64+0x17/0xe0 [ 161.606103][ T8599] ? rcu_read_lock_sched_held+0x9c/0xd0 14:15:46 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0x40}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 161.612457][ T8599] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 161.618894][ T8599] __x64_sys_sendmmsg+0x99/0x100 [ 161.623840][ T8599] do_syscall_64+0x60/0xe0 [ 161.628267][ T8599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 161.634164][ T8599] RIP: 0033:0x45ca59 [ 161.638063][ T8599] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.657674][ T8599] RSP: 002b:00007faae9a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.666183][ T8599] RAX: ffffffffffffffda RBX: 00000000004fd380 RCX: 000000000045ca59 [ 161.674247][ T8599] RDX: 04924924924926c8 RSI: 0000000020236fc8 RDI: 0000000000000004 [ 161.682230][ T8599] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 161.690226][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 161.698315][ T8599] R13: 0000000000000900 R14: 00000000004cbcfa R15: 00007faae9a156d4 [ 161.706298][ T8599] Modules linked in: [ 161.752114][ T8599] ---[ end trace c60503f3ed301992 ]--- [ 161.757894][ T8599] RIP: 0010:__tipc_sendstream+0xbc1/0x11d0 [ 161.764183][ T8599] Code: 00 00 00 00 48 39 5c 24 28 48 0f 44 d8 e8 87 1a cf f9 48 b8 00 00 00 00 00 fc ff df 48 8d bb c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 04 00 00 48 8b 9b c8 00 00 00 48 b8 00 00 00 [ 161.784229][ T8599] RSP: 0018:ffffc90017d2f808 EFLAGS: 00010202 [ 161.794912][ T8599] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000fb94000 [ 161.834733][ T8599] RDX: 0000000000000019 RSI: ffffffff87a3e119 RDI: 00000000000000c8 [ 161.842950][ T8599] RBP: ffff888088e6b440 R08: ffff888090c64200 R09: 0000000000000001 [ 161.860051][ T8599] R10: ffffffff8c588b37 R11: fffffbfff18b1166 R12: ffff888088e6b97e [ 161.869362][ T8599] R13: 0000000000000000 R14: ffff88805ccaa540 R15: 0000000000000000 [ 161.880897][ T8599] FS: 00007faae9a15700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 161.890305][ T8599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.897906][ T8599] CR2: 0000555e72f3838f CR3: 000000009fac4000 CR4: 00000000001406e0 [ 161.906351][ T8599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.915043][ T8599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.923035][ T8599] Kernel panic - not syncing: Fatal exception [ 161.930416][ T8599] Kernel Offset: disabled [ 161.934747][ T8599] Rebooting in 86400 seconds..